last executing test programs: 4.230508694s ago: executing program 3 (id=6628): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x2081100, 0x0, 0x39, 0x0, 0x0, 0x0) 3.762562119s ago: executing program 3 (id=6632): socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x3) gettid() (async) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r0, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x81, 0x0, 0x0, 0x0, 0x0, 0x20244, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffd, 0x1, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xa, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x81, 0x0, 0x0, 0x0, 0x0, 0x20244, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffd, 0x1, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc54) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 3.74666004s ago: executing program 2 (id=6633): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000110000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) 3.594820845s ago: executing program 1 (id=6635): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r0, 0x12) 3.588492155s ago: executing program 2 (id=6636): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000013c0)={0x0, &(0x7f0000000200)=""/120, &(0x7f0000000300)="3fdfeb7eca83e5e68421e0dfa6b016bae22ffb1d86ba01c6fa8a0323bb5c15264954af2a2974dae6972d2ee213108250626899061b2b82a870fb58aafb529963a24125909ce6fac6dd4d62f71705de6624db011aab1251784968aa24a8494ba012b2ef48f60bdc98b78c4fc23f291668fe67ea2b4ceda6381ca66a9938db7842e0282747865ebb9941979eefeacda33ceb98b084ea92a196", &(0x7f00000003c0)="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", 0x200, 0x1}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4e29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef44c94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75be4b09000000000000c00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cfd261be12697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22836dd4cab25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30c1d36e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338f181c7f10f5420f40fd0ec51690c9e8d8b6eda5aabc893d1653758fd43f5cabb9b821119bdcce3ddbfd6811800337992c3356eec5adba029b54778c026ad93102cce85ed403801deca385d4b493d4cdc770c00e3a50ab5ec88443dde28a2d0ef201f589a2d6e841eb753d4b96e0b110e868aed32e396ea07961e7dd9e31854235ae13564b24c1d2d615e4945480e39a5829c9417991c89e752579bad373cef6841be3360d938afcead4ede350d602fced5edf4e20892f960df47a6be843e54a10ba7432ca660458ce2fbdf9d2b7fc1fb31bb59ab653e3b9d1f69a7cbbbed40ac88e4e4587b72023e8790b8aff000000000000", 0x512}, {&(0x7f0000001b80)="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", 0x52b}], 0x2}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)}, {0x0}], 0x2, 0x0, 0x0, 0x40000}, 0x4c891) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e120800090000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a6909fb602fe36da3a6818953d146e9695bdc1ef91c0eaf0db4b5adf9da731153b165cfc65837ff9fd83d346067a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90324fc60100c0340", 0x18}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000ff000000000000002d5156a00400000000"], 0x0, 0x1a}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000140)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000280)=0x1ffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0xfffffffa, 0x2}, {0x200002, 0x3}]}, 0x94) 3.456038669s ago: executing program 4 (id=6637): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1861}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d000000000000000001000013040000007f4adfa0"], &(0x7f0000000c00)=""/253, 0x6a, 0xfd, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) socket$kcm(0x10, 0x7, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc8, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r10, 0x1f, 0x0, 0x400, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x4000000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x80, 0x5, 0xff, 0x3, 0x2, 0x0, 0x0, 0x1d000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xda4, 0x75db}, 0xe25, 0x3, 0xd, 0x0, 0x7, 0xffff0001, 0xf9c1, 0x0, 0x7ff, 0x0, 0x1}, r11, 0x2, 0xffffffffffffffff, 0x4) 3.381031831s ago: executing program 0 (id=6638): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xfdef) close(0x3) socket$kcm(0x1e, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xfdef) (async) close(0x3) (async) 3.282653154s ago: executing program 1 (id=6639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x2, 0x0, 0x2, 0xb, 0xb, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0xc4, &(0x7f0000000340)=""/196, 0x41100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1]}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}], 0x1}, 0x811) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x2d, 0x2}]}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000100)={r4}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='+-net \x00\x00\x00\x00\x00\x00\x00'], 0xd) 3.277615695s ago: executing program 3 (id=6640): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x8000}) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x5, 0x0, 0x2, 0x0, 0xadb, 0x20027, 0xf116824da5c4dc11, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x2800, 0x2122, 0x8001, 0x2, 0x1, 0x817, 0xff86, 0x0, 0x6, 0x0, 0x460}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x80{)#%\x00') (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r2) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000240)) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000280)=""/183) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000340)=0x67d) (async) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380), 0x4) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file1\x00', 0x0, 0x18, r0}, 0x18) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x7, 0x3, 0x0, 0x7, 0x5, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x4, 0xd1, &(0x7f0000000540)=""/209, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0x8, 0x3, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r0], &(0x7f00000006c0)=[{0x2, 0x4, 0x2, 0x5}, {0x0, 0x3, 0x0, 0xc}, {0x2, 0x3, 0xe, 0x7}, {0x5, 0x3, 0xb, 0x4}, {0x4, 0x5, 0x1, 0x9}, {0x5, 0x4, 0x9, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r3, r4, 0x4, r5}, 0x10) (async) unlink(&(0x7f0000000840)='./file0\x00') r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/40, 0x28}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/41, 0x29}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/163, 0xa3}, {&(0x7f0000000b40)=""/196, 0xc4}], 0x6, &(0x7f0000000cc0)=""/82, 0x52}, 0x40000043) (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e40)='syz1\x00', 0x200002, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000dc0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={&(0x7f0000000d80), 0x2}, 0x1, 0x100, 0xc94e, 0x8, 0x2, 0x6, 0xf6a9, 0x0, 0x9, 0x0, 0xffffffffffffff7f}, r7, 0x8, r0, 0x8) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e80)={[{0x6, 'io'}, {0x2d, 'cpuacct'}, {0x0, 'net'}, {0x2b, 'net'}]}, 0x17) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0xb, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x6}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @datasec={0x2, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x7, 0x4}, {0x3, 0x7127, 0x8}], "f325"}]}, {0x0, [0x2e, 0x71, 0x30, 0x2e, 0x0, 0x2e, 0x2e, 0x30, 0x30]}}, &(0x7f0000000f40)=""/51, 0x67, 0x33, 0x0, 0x5, 0x10000}, 0x28) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x1000, '\x00', 0x0, r9, 0x5, 0x1, 0x1}, 0x50) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x9, 0xc, 0x7, 0xca, 0x0, 0x2fdd9fe9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x1, 0x1}, 0x1000, 0x6, 0x1, 0x2, 0x4, 0x5, 0x8, 0x0, 0x310, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x3) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_lsm={0x1d, 0x1a, &(0x7f00000010c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x0, 0xb, 0x5, 0x5, 0x20, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x3, 0x1, 0x8, 0x1, 0xfffffffffffffffe, 0x10}, @jmp={0x5, 0x0, 0xc, 0x2, 0xa, 0x6, 0x4}, @generic={0x4, 0x0, 0x9, 0x1, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7bc8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000011c0)='syzkaller\x00', 0xfffffff8, 0xd1, &(0x7f0000001200)=""/209, 0x41100, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000001300)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0xd, 0x40, 0x401}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001380)=[r10], &(0x7f00000013c0)=[{0x0, 0x1, 0x0, 0x5}, {0x1, 0x1, 0x7, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r11, 0x0, 0x42, 0x53, &(0x7f00000014c0)="96f9d02f047cf2e2a0f6e68166966f90f8d08cfc40fdac50e0a6b082afc97aa468acb7407e2d95d1fc205fbbf44471941e3204847f668099f81d5d3a7aebe4964c51", &(0x7f0000001540)=""/83, 0x6, 0x0, 0xb7, 0x2b, &(0x7f00000015c0)="648653fa05d6f2ed06bf5086a4c06d303968f526d7efbad6a0aebd1d9dd19edb07ffbc84b2d5d694b66759eea7fe79235d23ebe967d9beee964331c5b11e4d2abb8eec52063f49ff7e9d00cb2cdee371be505df88e60942bb6196b55d869c61ef750ee7a4bf31c4d0cd0a5fc35ee38f709f1be3e35a3cda00dc3e5620170057cf77e79e49059dc5da35f1914a5385ff6e23e45e967676282dce876a7dad50e80db63a68f823540f43fae1424e13930444e4c7791bc6632", &(0x7f0000001680)="3d7d024b8295ab15b5c797e0f8ad56cbb46a30dcfbebcb223a845aacec1f7b5db3a92604cf431771f4cec4", 0x0, 0x0, 0x7}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x6, 0x0, r10, 0x80000001, '\x00', 0x0, r9, 0x0, 0x4}, 0x50) r12 = perf_event_open$cgroup(&(0x7f0000001800)={0x1, 0x80, 0x0, 0xbc, 0x8, 0xff, 0x0, 0xff, 0x8000, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000017c0), 0xa}, 0x100108, 0x100000000, 0x0, 0x4, 0x10000, 0x9, 0x4, 0x0, 0x2, 0x0, 0x100000000}, r7, 0xc, r8, 0x0) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x21, &(0x7f0000001880)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x8, 0x2, 0x2, 0x50, 0x4}, @generic={0x9a, 0xb, 0x9, 0xb64b, 0x101}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d770649}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xd, 0x8, 0x6, 0xe, 0xcf76}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x82c}}, @jmp={0x5, 0x0, 0x1, 0x0, 0x6, 0x56}, @exit, @alu={0x4, 0x0, 0xc, 0x3, 0x4, 0x2, 0x4}], &(0x7f00000019c0)='syzkaller\x00', 0x9, 0x21, &(0x7f0000001a00)=""/33, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001a80)=[r10, r2, r10, r10, r10, r10, r10], &(0x7f0000001ac0)=[{0x3, 0x5, 0xc, 0xb}, {0x3, 0x5, 0x8, 0x6}, {0x5, 0x2, 0x6, 0x4}, {0x4, 0x1, 0x8, 0x9}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) (async) syz_open_procfs$namespace(0x0, &(0x7f0000002c80)='ns/user\x00') 3.202243717s ago: executing program 2 (id=6641): r0 = socket$kcm(0x2c, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = socket$kcm(0xa, 0x3, 0x3a) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="17724b568c149730350c352f658c", 0x0, 0x800004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="896c0500", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x40800) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000b"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, &(0x7f0000000280), 0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, &(0x7f0000000040)=r1, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x2b, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@cgroup=r1, r2, 0x35, 0x4, r2, @void, @value=r1, @void, @void, r6}, 0x20) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b030231a6080c000af32cd6cfccdc03870adb02000f00e5aa000017d344486566e2765cb7e67f60bc24ea000007000000002756f475ce36c2d13b48df000000000000ecb9f6ec66c9f4d4938037e786a6d1000000e6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000005b000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a140e1e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b619a82c4706531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc80a7a56eeb25ed0adfb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x5}, 0x10}, 0x94) 3.188441157s ago: executing program 0 (id=6642): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x25, &(0x7f0000000180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x0, 0xe, 0x1, 0x6, 0x52a1230f}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}, @generic={0x5, 0x7, 0xd, 0x400, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x9e250fb, 0x0, 0x0, 0x40f00, 0x37, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x5, 0x4, 0x8, 0xb}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x1}, 0x94) write$cgroup_int(r0, &(0x7f0000000500)=0x4, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex=r2, 0x2f, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0]}, 0x40) write$cgroup_type(r0, &(0x7f0000000680), 0x9) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x2b, &(0x7f00000006c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x211f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x1, 0x6, 0xb, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x100}, @map_fd={0x18, 0x4}], &(0x7f0000000840)='GPL\x00', 0x6, 0xa, &(0x7f0000000880)=""/10, 0x40f00, 0xa, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x8e49, r0, 0x5, &(0x7f0000000900)=[r1, r1, r0], &(0x7f0000000940)=[{0x4, 0x1, 0x2, 0x8}, {0x0, 0x4, 0x1, 0xc}, {0x2, 0x1, 0x8, 0x7}, {0x4, 0x2, 0xe, 0x6}, {0x3, 0x5, 0x1, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000cc0)={&(0x7f0000000a80)="d8dadf41d1077a38254298ed8c84c18c7c8b16fe4332954a8e9cf10441e5ba8316665c20fbd2ef0fdaa243596fd21398314c6bf396f48e0927", &(0x7f0000000ac0)=""/27, &(0x7f0000000b00)="45f7909f67bff6309bd72dbf90d5c680f4df00d23dd340bf0ea66b57b837a1ee7e9e1cc91bcc1d0ab9927f477890a397726184c21631068a1d1cccc3fe7a0f5ef8ed0fa60f9fc9ba65d8bce21d03f727d8febe9df1a15b1834f50949cfb357ab82646f908e8feff149927e1128e39e658285b89e90d0e66e987b4622abf8b97ca0cb851415458c32bd33207284b8be2a32bdbab1fdeb179b560ac9f448ae2575e8dc08abac95d2f2bfc7d0", &(0x7f0000000bc0)="a3894d92fd0f2859e6aac13865981d48c9bd41f74f95ab1303b977204cbc0d24af3c77c27bf38d856a5cf1df540a59ade2c4f28bbc8f6698ee7ebe85c540d6fd132191fa29298df79ed93b9635346476d8ecda3ef15b212858ebb9f128f59feeb69c85222463e6aff782903e2ba3b6faa94326fee0ede4ff1d4c89889387275d4c1fc3b9ca98ac2d3cf3bdfaab8a0cfaad661d645b5f5b90741c5bf0318a08bb2eb9b8828fd24dfc79a857cc7afc02fb8b5acd7ffbbd356102d4d2c4f6dfabaf55e79be7fa283e824e5278a04a691c772b502a697ce773773a44", 0x2, r5}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000e40)=r3) r8 = syz_clone(0x40000, &(0x7f0000000e80)="e8fea3c5c2abf9d9a4c3ba5462d714ce3ab90efd7b090342e464474317919c0899c5c6e76918f5977f07cc4d83254de63d4bef755f026534ee2a2fa8d3d619303abc35bfb114df30169467db257a98c90c18cf362a15eb947e1d4bce603e05f9df0d459869cf4ef5501f7e4348174c6aa46773b14921f691432d157f858c0ad1c97c803acd5239907621107a3e1cae174c9dd385b7b015f55c8d07e5f7e8c2f9bf0f9eb1af2b9219790258602e5744681d3ca154c4ce52b8b14c5c098c27f0ca17176310502aedb82b30c44143c33116f2", 0xd1, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)="8b04c64026eb4d2ba32d967d747f59a5f1f5e71a836098ec1a64f66a9c2ab3") write$cgroup_pid(r0, &(0x7f0000001040)=r8, 0x12) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00'}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x101, '\x00', r6, r0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_val={0x18, 0xb, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x4, 0x0, 0xd, 0x5, 0xb, 0x2, 0x4}], &(0x7f0000001240)='GPL\x00', 0x1, 0x43, &(0x7f0000001280)=""/67, 0x40f00, 0x10, '\x00', r6, 0x1f, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x4, 0x4, 0x0, 0x2}, 0x10, 0x2d259, r0, 0x1, &(0x7f0000001340)=[r1], &(0x7f0000001380)=[{0x1, 0x2, 0x8, 0xc}], 0x10, 0x5}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x3ca, 0x7, 0x4, 0x21400, r1, 0x2, '\x00', r4, r0, 0x0, 0x5, 0x3, 0xe}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x1b, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x0, 0xc, 0xd, 0x6, 0x80, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffc0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001600)='syzkaller\x00', 0x6, 0xa7, &(0x7f0000001640)=""/167, 0x41100, 0x20, '\x00', r2, 0x25, r0, 0x8, &(0x7f0000001700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x5, 0x8, 0xe, 0x1c0}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001780)=[{0x4, 0x1, 0x10, 0x4}, {0x0, 0x3, 0x6, 0x8}, {0x0, 0x4, 0xc, 0x2}, {0x0, 0x5, 0x10, 0x6}, {0x5, 0x5, 0x3, 0x1}, {0x5, 0x1, 0x10, 0x7}]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x2, 0x1c020, r9, 0x796, '\x00', r2, r0, 0x3, 0x0, 0x2, 0x9, @value=r0, @void, @value=r0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0xffff75cf, 0x0, r9, 0x8, '\x00', r6, r0, 0x6e64, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r7, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000019c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001a00)=[0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000001a80)=[{}], 0x8, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0x89, 0x0, r12, 0xb40f, '\x00', r13, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r15 = openat$cgroup_ro(r0, &(0x7f0000001d40)='cpuacct.usage_percpu\x00', 0x0, 0x0) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x33, '\x00', 0x0, r15, 0x3, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x6dd17a42a924c173, 0x6, &(0x7f0000001d80)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3e7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001e40)={0x3, 0xf, 0xb, 0xfffffffb}, 0x10, r14, r7, 0x9, &(0x7f0000001f00)=[r12, r15, r0, r11, 0x1, r16], &(0x7f0000001f40)=[{0x2, 0x2, 0x6, 0x3}, {0x2, 0x1, 0xb, 0x2}, {0x4, 0x1, 0xb, 0x7}, {0x3, 0x1, 0x5, 0xc}, {0x5, 0x1, 0xb, 0xc}, {0x1, 0x2, 0xc, 0x2}, {0x3, 0x1, 0x7, 0x5}, {0x1, 0x1, 0x0, 0x8}, {0x3, 0x4, 0x8, 0x5}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002140)={{r15, 0xffffffffffffffff}, &(0x7f00000020c0), &(0x7f0000002100)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002b80)={0x1b, 0x16, &(0x7f0000002180)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa7}}, @call={0x85, 0x0, 0x0, 0x5}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @alu={0x7, 0x0, 0xa, 0x9, 0x1, 0x30, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xd, 0x4, 0x8, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000002240)='GPL\x00', 0x8, 0xde, &(0x7f0000002280)=""/222, 0x0, 0x4b, '\x00', r13, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000002380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000023c0)={0x5, 0x7, 0x1ff, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000002ac0)=[r12], &(0x7f0000002b00)=[{0x0, 0x1, 0xb, 0x6}, {0x4, 0x5, 0xa}, {0x3, 0x432, 0x8}, {0x2, 0x1, 0x1, 0x7}, {0x0, 0x2, 0xd, 0x3}, {0x1, 0x2, 0xd, 0x4}, {0x1, 0x5, 0x1, 0xa}], 0x10, 0x5}, 0x94) 3.050439182s ago: executing program 3 (id=6643): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c90180fa379c705f49abb5aecc4b31359a0f2c3efcd7da0723e62def624587764b5c518e30de73d55df8b3918d6db2f3aa9b24cca24489e1359e7eb2123767ca05f4b8c531e13d096651fe4eb5a73c598f41732d975b508aa7ae04b64caf023ce8fa5b31dfd2e3107bd88f8f7f176982544863fe3412ecc80214a98a2c708ef3c9ae578a0f09786c5fa93c8a330cc4e70a08256a2876f6a19a17ba3d86014816b2fb7501bcbb8b0a2cc48f5006f25b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x82d7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3.049605412s ago: executing program 4 (id=6644): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000300)=r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x7, 0x7fe2, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r8, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000040), &(0x7f0000000480)=""/146, 0x20000000000000}, 0x1d) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x3, 0x3, 0x1, 0x404, 0x1, 0x4c71, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xd}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%+9llu \x00'}, 0x20) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r13, &(0x7f0000000000), 0x2a979d) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x20, 0xa, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @alu={0x7, 0x0, 0x3, 0x4, 0x5, 0x18}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0x62, &(0x7f00000003c0)=""/98, 0x41000, 0x35, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x8, 0x4}, 0x10, r6, r0, 0x2, &(0x7f0000000c80)=[r7, r8, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000cc0)=[{0x4, 0x4, 0xe, 0xa}, {0x1, 0x1, 0x0, 0x8}], 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.004112643s ago: executing program 2 (id=6645): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x81, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0xfc, 0x70, 0x0, 0x4, 0x9560, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x5, 0xf, 0xb14, 0x2, 0x200, 0x0, 0x9, 0x0, 0x2}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001501000076000000bf91000000000000b5020000000000002800000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYBLOB="526ffd7087ae7a519f8d957cb6a7ac1050fe8977ffc2de8b23d365e3deb1f7be8ab3c33c3fc39f596bc8efd443b59d683cd7517019c5233ba4cccadd94ab83a17babfa63c6280528b4d401c92c"], 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYBLOB="073478083697cba14c260ce7de8c0cbbe34da3aefc96c6daec457f7e9667d7cbbcf42074d57c2b13fa7e679f5e2afdd8899ccb01f2f44ff2167973c999cefa603afcd9de94b602b063e8315690362f531c3c906ac23a33354e9d7c723fee933975a50a7f59eda6f844e890145d2b989e22cc091b923e6f719b42ca6e804664bb12631ffd3177906063e6eeb891956c880d2f16fbcf28b3e4022ffbd205", @ANYRES64=0x0, @ANYRESOCT], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffff7fc, 0x0, 0x1000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x10, 0x0, 0x0, 0x400, 0x56103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0x68c}, 0x40, 0x0, 0x0, 0x6, 0x7, 0x5, 0xffff, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x4, @local}, 0x80, 0x0}, 0x20004051) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB='0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000001f40)=[{}, {}], 0x10, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x1c, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffd4c}, [@jmp={0x5, 0x1, 0x2, 0x4, 0x5, 0xfffffffffffffffc, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x6a9ad74fd8f7d433, 0x5, 0x0, 0xf}]}, &(0x7f0000000b80)='GPL\x00', 0x10, 0x1000, &(0x7f0000000e80)=""/4096, 0x60600, 0x18, '\x00', r9, 0x25, r3, 0x8, &(0x7f0000002180)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000021c0)={0x0, 0xb, 0x8, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[r5, r3, r6], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r7, 0x6, 0xc, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fea0000000bf8600000000000007080000f8fffbffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x137, 0x137, 0xb, [@enum={0x4, 0xa, 0x0, 0x6, 0x4, [{0x2, 0x889}, {0xe, 0xd}, {0x4, 0xc}, {0xb, 0x3}, {0x10}, {0xa, 0xb}, {0xc, 0x2}, {0xb, 0xae50}, {0x4, 0x7f}, {0xc, 0x8}]}, @enum64={0x1, 0x4, 0x0, 0x13, 0x1, 0xc, [{0x10, 0x800, 0x3}, {0xf, 0x80, 0x6}, {0x4, 0xe1f, 0x9}, {0xf, 0x6, 0x5}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x3, 0x4}, {0x5, 0x14}]}, @datasec={0xe, 0x8, 0x0, 0xf, 0x3, [{0x5, 0xfffff000, 0x5}, {0x1, 0x5, 0x4}, {0x4, 0xd, 0xfffffff8}, {0x2, 0x3, 0x624}, {0x1, 0x9, 0x3}, {0x3, 0x744, 0x5}, {0x2, 0xb664, 0x1}, {0x4, 0x8, 0x4}], "5f21d8"}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x61, 0x30, 0x30, 0x30, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f0000000500)=""/173, 0x15b, 0xad, 0x1, 0x3}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r11 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f00000002c0)={&(0x7f0000000800)=""/218, 0xda, 0x0, &(0x7f0000000900)=""/232, 0xe8}}, 0x10) 1.694390456s ago: executing program 0 (id=6650): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=0x0, @ANYBLOB="2a7200000000000000ff7f03007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./cgroup/../file0/file0/file0\x00', 0x0, 0x0, r5}, 0x18) r10 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r5, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ce, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4040001) setsockopt$sock_attach_bpf(r12, 0x1, 0xa, &(0x7f0000000180), 0xfd66) recvmsg$unix(r12, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x18102) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup/../file0/file0/file0\x00', 0x0, 0x8, r10}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r11, r14, 0x0, r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYRES32=r4], &(0x7f00000007c0)=""/159, 0xc4, 0x9f, 0x0, 0x8, 0x10000, @value=r11}, 0x28) 1.678086146s ago: executing program 4 (id=6651): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60052fc569", 0x14}], 0x1}, 0x4084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xe, 0x4, 0x86, 0x2, 0x0, 0x80000001, 0x10000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0x101, 0x7fff}, 0x10c20, 0x9, 0xc4ae, 0x0, 0x6, 0x8000, 0xff, 0x0, 0x0, 0x0, 0x10001}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1.651649637s ago: executing program 3 (id=6652): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x2, 0xed, 0x0, 0x1}, 0xfffffe38) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x2249, 0x0, 0xc, 0x0, 0x4000004, 0x100, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.581862479s ago: executing program 2 (id=6653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/user\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010", 0x5}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000731131000000000085100000020000008500000005000000950000000000a2f65251a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x8, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x140, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33", 0x79}, {&(0x7f0000000000)="24e84b13d10b8197015df07dcf473260", 0x10}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r6}) 1.210441201s ago: executing program 1 (id=6654): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) socket$kcm(0x2, 0x3, 0x106) (async) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x100, @remote}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x29, 0xb, "31d70009b9"}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x6, 0x5, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x9, 0xff, 0x7, 0x0, 0x62, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffff15ed, 0x8}, 0x0, 0x0, 0x3, 0x0, 0x200000000081, 0x8005, 0xf, 0x0, 0x2cb, 0x0, 0x103}, 0x0, 0xe, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x9, 0xff, 0x7, 0x0, 0x62, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffffffffffff15ed, 0x8}, 0x0, 0x0, 0x3, 0x0, 0x200000000081, 0x8005, 0xf, 0x0, 0x2cb, 0x0, 0x103}, 0x0, 0xe, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc2be3c00}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182879e029dbaeeaa7caa23c54957f1", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 858.634683ms ago: executing program 4 (id=6655): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)}, 0x2000c004) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x4, 0x0, 0xfffffffa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="3800000018200000", @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="fad0438c4a46e23f03ca66546d0ab808b4e1b8ad0e9de9f8a3ff3e07ea364f7a3f52105a0000", @ANYRES64=r3], 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 470.562265ms ago: executing program 4 (id=6656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d40)="d80000001d00", 0x6}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000040000004a08000080600100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB="706079bb31ed5dcdeddd1122652253f66911eee75d654ec63da529ba99934e495635bac7e642dd1431741d8c16269ca2ad992ec4513403b7e94e1744f045b91ee5fbcb"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000017000000040000000100000000000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r4, &(0x7f0000000d40), 0x0}, 0x20) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000000000000010010000"], 0x28}, 0xfc40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r5, @ANYBLOB="ff0f00030000004ec224770100000000000000a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc7020000f900000019260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000900176bf9d6b041aaaaaaaaaa0dbbbbbbbbbbbbffffffffffff0000000013aaaaaaaaaabbda3dd43204b3bbbbbbbbbbbb"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) 296.227111ms ago: executing program 0 (id=6657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x6, [@random="3101050df3e0", @remote, @broadcast, @empty, @remote, @remote]}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) (async) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000200)="4c64f270", 0x4}, {&(0x7f0000000240)="c3101abd54ff723450ec2ec6dd8ec7644c6d0454caf752f64b86929c35ef", 0x1e}, {&(0x7f0000000280)="cb8c21d0a4df38699877bd1ae29c12a6fb1b224e8fd359ce2f07b394f07fabd6c092375dc9", 0x25}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x4004}, 0x55) (async) sendmsg$unix(r2, &(0x7f0000001340)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000200)="4c64f270", 0x4}, {&(0x7f0000000240)="c3101abd54ff723450ec2ec6dd8ec7644c6d0454caf752f64b86929c35ef", 0x1e}, {&(0x7f0000000280)="cb8c21d0a4df38699877bd1ae29c12a6fb1b224e8fd359ce2f07b394f07fabd6c092375dc9", 0x25}, {&(0x7f00000002c0)="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", 0x1000}], 0x4, &(0x7f0000001300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x4004}, 0x55) r3 = gettid() perf_event_open(&(0x7f00000013c0)={0x86935fcb004898aa, 0x80, 0x3, 0x7, 0x57, 0x4, 0x0, 0x0, 0x2042, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000001380), 0x8}, 0xa84, 0xff, 0x541, 0x8, 0x7ff, 0x7, 0x7, 0x0, 0x10, 0x0, 0x4}, r3, 0xa, r2, 0x1) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001440)) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f00000014c0)='io.pressure\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001540)=r2, 0x4) mkdirat$cgroup(r4, &(0x7f0000001580)='syz1\x00', 0x1ff) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_ext={0x1c, 0xe, &(0x7f00000015c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xa, 0x9, 0x9, 0xfffffffffffffff0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x1, 0x8, 0x1, 0xfffffffffffffffc}], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0x5, 0x9, 0x4}, 0x10, 0x16438, 0xffffffffffffffff, 0x6, &(0x7f0000001700)=[r2], &(0x7f0000001740)=[{0x1, 0x3, 0xa, 0x1}, {0x3, 0x1, 0xf, 0x4}, {0x1, 0x1, 0x10, 0x1}, {0x3, 0x1, 0x1}, {0x0, 0x3, 0x10, 0x3}, {0x3, 0x5, 0x0, 0xb}], 0x10, 0x1}, 0x94) openat$cgroup_pressure(r2, &(0x7f0000001880)='io.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000001880)='io.pressure\x00', 0x2, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r2}, 0x8) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000001900)) (async) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000001900)) mkdirat$cgroup(r4, &(0x7f0000001940)='syz1\x00', 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a80)={@map, 0x31, 0x0, 0x4, &(0x7f0000001980)=[0x0], 0x1, 0x0, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001ac0)={@fallback=r1, 0xffffffffffffffff, 0x20, 0x0, r6, @void, @value=r6, @void, @void, r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r2, 0x0, 0xee, 0x64, &(0x7f0000001b00)="155e5d41189a7642bdcb115ee2e8f559cd4dd9fba4d7e49ff33ecf6439dfe0df0d6f069a5041bb022afb837651285ef8e677f874a38bf428bda0c338a6e89d2507a9edcc9d14a3015c53354fad55158912187e49dbcabf5250ce925ad1a38d26e3f41180b6ba80ed0b3be7fa943635b67479d3e658d513a84751498bb251549eccf1878588b4516df85f9b58edce422010a5b95edff1d6a686894d7c4ede7955b866c6e0fce5add4284fda1fb668562b13c5283b354ade83d44fbd6ccdd1f50df032741267a1c14662fb32718fc77a2a00d31804beb08b2f4a2126159bce95bde70a49241daa9270ea762dd6d591", &(0x7f0000001c00)=""/100, 0x62, 0x0, 0x6f, 0xd3, &(0x7f0000001c80)="25dce5f16513fc59fde83bea82d58297603bfc68a69188839ac8a52028328b3d2154603545c4eec915e074baf68eba4a1859d630494fbeb6cfcd28985b2ecaf2affe702ab881bda86b24545cd78fe2284cf2a7350ebb9e0e4e9ea83813ca4cda20e676f38c91c4d754099d002df6b0", &(0x7f0000001d00)="40e18dbf5cc810b57e1ba324d3928ff149d36a5c02786635c33af138823ee0e078f0a9b4f039e26789383e75a149ea862af46c32dba2027ee5949037a923399de35b4346335785293cf3afaaac119b66cf9cce3c396b766b0e582f6598dbd692667885ea62e430f6aef5d0fac40bf46f4560bc517d99470299f12c6f745c63ba2e0f846a9ab4f3a5bec5a3b7ab2bbbbf5c61a68205b41de7935d903fcb28ef44a5afc7ee0e5b84ba2b8c5c15243a0d8dc3c843a6429a965b94a7d6480c8438565482a9803f74d84183aba48a67b809c979d85b", 0x4, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r2, 0x0, 0xee, 0x64, &(0x7f0000001b00)="155e5d41189a7642bdcb115ee2e8f559cd4dd9fba4d7e49ff33ecf6439dfe0df0d6f069a5041bb022afb837651285ef8e677f874a38bf428bda0c338a6e89d2507a9edcc9d14a3015c53354fad55158912187e49dbcabf5250ce925ad1a38d26e3f41180b6ba80ed0b3be7fa943635b67479d3e658d513a84751498bb251549eccf1878588b4516df85f9b58edce422010a5b95edff1d6a686894d7c4ede7955b866c6e0fce5add4284fda1fb668562b13c5283b354ade83d44fbd6ccdd1f50df032741267a1c14662fb32718fc77a2a00d31804beb08b2f4a2126159bce95bde70a49241daa9270ea762dd6d591", &(0x7f0000001c00)=""/100, 0x62, 0x0, 0x6f, 0xd3, &(0x7f0000001c80)="25dce5f16513fc59fde83bea82d58297603bfc68a69188839ac8a52028328b3d2154603545c4eec915e074baf68eba4a1859d630494fbeb6cfcd28985b2ecaf2affe702ab881bda86b24545cd78fe2284cf2a7350ebb9e0e4e9ea83813ca4cda20e676f38c91c4d754099d002df6b0", &(0x7f0000001d00)="40e18dbf5cc810b57e1ba324d3928ff149d36a5c02786635c33af138823ee0e078f0a9b4f039e26789383e75a149ea862af46c32dba2027ee5949037a923399de35b4346335785293cf3afaaac119b66cf9cce3c396b766b0e582f6598dbd692667885ea62e430f6aef5d0fac40bf46f4560bc517d99470299f12c6f745c63ba2e0f846a9ab4f3a5bec5a3b7ab2bbbbf5c61a68205b41de7935d903fcb28ef44a5afc7ee0e5b84ba2b8c5c15243a0d8dc3c843a6429a965b94a7d6480c8438565482a9803f74d84183aba48a67b809c979d85b", 0x4, 0x0, 0x1}, 0x50) openat$cgroup_type(r6, &(0x7f0000001e80), 0x2, 0x0) (async) openat$cgroup_type(r6, &(0x7f0000001e80), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ec0)={@fallback=r5, r5, 0x9, 0x200c, 0x0, @value=r1, @void, @void, @void, r7}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ec0)={@fallback=r5, r5, 0x9, 0x200c, 0x0, @value=r1, @void, @void, @void, r7}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001f00), 0x4) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001f00), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001f40)=r8, 0x4) perf_event_open(&(0x7f0000001fc0)={0x5, 0x80, 0x7, 0xc, 0x0, 0x10, 0x0, 0x9, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000001f80), 0xb}, 0x8, 0x40, 0x6, 0x2, 0xffffffffffffff00, 0x81, 0x9, 0x0, 0xffffd289, 0x0, 0x5}, r3, 0x5, 0xffffffffffffffff, 0x1) 256.524652ms ago: executing program 2 (id=6658): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x101f, 0x81}, 0x100d20, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="86dd00"/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 255.501902ms ago: executing program 3 (id=6659): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x8081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0x72bd1de2ad10b2f3, 0x8000000000000000, 0xcfb5, 0x8, 0x0, 0x0, 0x40, 0x0, 0x84000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0xfdef}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) 174.646374ms ago: executing program 1 (id=6660): socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c0000445653b2cf582be1b600000000032cde0013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c001a0008286d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004000300c5bb5b64f6985300", 0x6c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c080) 0s ago: executing program 4 (id=6661): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x118420, 0x0, 0xfffffffe, 0x6, 0x5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) (async) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 'syz.2.4972': attribute type 5 has an invalid length. [ 1052.696633][T22513] FAULT_INJECTION: forcing a failure. [ 1052.696633][T22513] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.759649][T22513] CPU: 1 PID: 22513 Comm: syz.4.4981 Not tainted syzkaller #0 [ 1052.767175][T22513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.777244][T22513] Call Trace: [ 1052.780529][T22513] [ 1052.783470][T22513] dump_stack_lvl+0x188/0x24e [ 1052.788167][T22513] ? show_regs_print_info+0x12/0x12 [ 1052.793384][T22513] ? load_image+0x400/0x400 [ 1052.797905][T22513] ? __lock_acquire+0x7d10/0x7d10 [ 1052.802941][T22513] ? trace_call_bpf+0xbf/0x6b0 [ 1052.807819][T22513] ? trace_call_bpf+0x5d6/0x6b0 [ 1052.812686][T22513] should_fail_ex+0x399/0x4d0 [ 1052.817377][T22513] should_failslab+0x5/0x20 [ 1052.821891][T22513] slab_pre_alloc_hook+0x59/0x310 [ 1052.826927][T22513] ? verify_lock_unused+0x140/0x140 [ 1052.832141][T22513] ? bpf_test_init+0x9f/0x140 [ 1052.836834][T22513] __kmem_cache_alloc_node+0x4f/0x260 [ 1052.842225][T22513] ? bpf_test_init+0x9f/0x140 [ 1052.846917][T22513] __kmalloc+0xa0/0x240 [ 1052.851092][T22513] bpf_test_init+0x9f/0x140 [ 1052.855616][T22513] bpf_prog_test_run_xdp+0x484/0xf10 [ 1052.860932][T22513] ? dev_put+0x80/0x80 [ 1052.865025][T22513] ? dev_put+0x80/0x80 [ 1052.869112][T22513] bpf_prog_test_run+0x31e/0x390 [ 1052.874086][T22513] __sys_bpf+0x62b/0x780 [ 1052.878358][T22513] ? bpf_link_show_fdinfo+0x380/0x380 [ 1052.883765][T22513] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.889957][T22513] __x64_sys_bpf+0x78/0x90 [ 1052.894390][T22513] do_syscall_64+0x4c/0xa0 [ 1052.898819][T22513] ? clear_bhb_loop+0x60/0xb0 [ 1052.903513][T22513] ? clear_bhb_loop+0x60/0xb0 [ 1052.908209][T22513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.914121][T22513] RIP: 0033:0x7fc7a599ce59 [ 1052.918551][T22513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.938177][T22513] RSP: 002b:00007fc7a6846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.946606][T22513] RAX: ffffffffffffffda RBX: 00007fc7a5c15fa0 RCX: 00007fc7a599ce59 [ 1052.954588][T22513] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1052.962571][T22513] RBP: 00007fc7a6846090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.970560][T22513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.978546][T22513] R13: 00007fc7a5c16038 R14: 00007fc7a5c15fa0 R15: 00007ffcbfa1df28 [ 1052.986551][T22513] [ 1053.053114][T22503] netlink: 'syz.3.4978': attribute type 10 has an invalid length. [ 1053.108704][T22503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.125563][T22503] team0: Port device batadv0 added [ 1053.641967][T22534] netlink: 'syz.2.4987': attribute type 5 has an invalid length. [ 1053.987176][T22548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1054.078466][T22549] netlink: 'syz.2.4992': attribute type 10 has an invalid length. [ 1054.133819][T22549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1054.151368][T22549] batman_adv: batadv0: Adding interface: vlan1 [ 1054.170108][T22549] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.229068][T22549] batman_adv: batadv0: Interface activated: vlan1 [ 1054.359397][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.365828][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.481333][T22561] netlink: 'syz.2.4998': attribute type 10 has an invalid length. [ 1054.512715][T22561] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.532816][T22560] FAULT_INJECTION: forcing a failure. [ 1054.532816][T22560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.555576][T22561] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.573604][T22561] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.602944][T22561] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.643932][T22560] CPU: 1 PID: 22560 Comm: syz.4.4996 Not tainted syzkaller #0 [ 1054.651459][T22560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.661513][T22560] Call Trace: [ 1054.664788][T22560] [ 1054.667718][T22560] dump_stack_lvl+0x188/0x24e [ 1054.672398][T22560] ? show_regs_print_info+0x12/0x12 [ 1054.677595][T22560] ? load_image+0x400/0x400 [ 1054.682102][T22560] ? __lock_acquire+0x7d10/0x7d10 [ 1054.687134][T22560] should_fail_ex+0x399/0x4d0 [ 1054.691814][T22560] _copy_from_user+0x2c/0x170 [ 1054.696491][T22560] kstrtouint_from_user+0xda/0x170 [ 1054.701606][T22560] ? kstrtol_from_user+0x190/0x190 [ 1054.706731][T22560] proc_fail_nth_write+0x8b/0x200 [ 1054.711755][T22560] ? proc_fail_nth_read+0x220/0x220 [ 1054.716951][T22560] ? common_file_perm+0x171/0x1c0 [ 1054.721982][T22560] ? proc_fail_nth_read+0x220/0x220 [ 1054.727180][T22560] vfs_write+0x2e6/0xa30 [ 1054.731429][T22560] ? file_end_write+0x250/0x250 [ 1054.736281][T22560] ? __fget_files+0x28/0x4b0 [ 1054.740921][T22560] ? __fget_files+0x28/0x4b0 [ 1054.745521][T22560] ? __fget_files+0x43d/0x4b0 [ 1054.750209][T22560] ? __fdget_pos+0x2ae/0x360 [ 1054.754884][T22560] ? ksys_write+0x71/0x250 [ 1054.759333][T22560] ksys_write+0x14c/0x250 [ 1054.763668][T22560] ? __ia32_sys_read+0x80/0x80 [ 1054.768437][T22560] ? lockdep_hardirqs_on+0x94/0x140 [ 1054.773642][T22560] do_syscall_64+0x4c/0xa0 [ 1054.778051][T22560] ? clear_bhb_loop+0x60/0xb0 [ 1054.782763][T22560] ? clear_bhb_loop+0x60/0xb0 [ 1054.787441][T22560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1054.793340][T22560] RIP: 0033:0x7fc7a595d68e [ 1054.797778][T22560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1054.817385][T22560] RSP: 002b:00007fc7a6824fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.825797][T22560] RAX: ffffffffffffffda RBX: 00007fc7a68256c0 RCX: 00007fc7a595d68e [ 1054.833765][T22560] RDX: 0000000000000001 RSI: 00007fc7a68250a0 RDI: 000000000000000a [ 1054.841738][T22560] RBP: 00007fc7a6825090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.849709][T22560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.857674][T22560] R13: 00007fc7a5c16128 R14: 00007fc7a5c16090 R15: 00007ffcbfa1df28 [ 1054.865686][T22560] [ 1054.965274][T22561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.013945][T22561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.063760][T22561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.072537][T22561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.253778][T22561] team0: Port device geneve1 added [ 1055.352690][T22584] netlink: 'syz.1.5002': attribute type 5 has an invalid length. [ 1056.048053][T22608] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5008'. [ 1056.585650][T22633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1056.592998][T22633] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.600304][T22633] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.607596][T22633] IPv6: NLM_F_CREATE should be set when creating new route [ 1056.707749][T22631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1056.780689][T22641] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5018'. [ 1057.269376][T22655] netlink: 'syz.1.5023': attribute type 25 has an invalid length. [ 1057.295055][T22655] netlink: 'syz.1.5023': attribute type 25 has an invalid length. [ 1059.613433][T22692] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1059.732640][T22694] sctp: [Deprecated]: syz.0.5029 (pid 22694) Use of int in maxseg socket option. [ 1059.732640][T22694] Use struct sctp_assoc_value instead [ 1059.747669][T22691] netlink: 'syz.2.5040': attribute type 3 has an invalid length. [ 1059.779426][T22691] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5040'. [ 1059.950841][T22697] netlink: 'syz.1.5042': attribute type 10 has an invalid length. [ 1059.997467][T22697] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1061.059295][T22718] netlink: 'syz.2.5036': attribute type 4 has an invalid length. [ 1061.091594][T22718] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5036'. [ 1061.117808][T22721] netlink: 'syz.4.5038': attribute type 1 has an invalid length. [ 1061.133539][T22721] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1061.191638][T22721] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1061.941292][T22732] sctp: [Deprecated]: syz.2.5041 (pid 22732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1061.941292][T22732] Use struct sctp_sack_info instead [ 1062.616102][T22751] netlink: 'syz.3.5045': attribute type 3 has an invalid length. [ 1062.633396][T22751] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1064.019153][T22754] netlink: 'syz.4.5046': attribute type 5 has an invalid length. [ 1064.157701][T22756] netlink: 'syz.2.5047': attribute type 10 has an invalid length. [ 1064.205478][T22756] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1064.513546][T22764] netlink: 'syz.4.5050': attribute type 12 has an invalid length. [ 1068.520014][T22808] netlink: 'syz.1.5061': attribute type 5 has an invalid length. [ 1068.616521][T22819] netlink: 'syz.3.5064': attribute type 10 has an invalid length. [ 1068.640042][T22819] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5064'. [ 1068.810056][T22825] device bridge_slave_0 entered promiscuous mode [ 1068.989786][T22832] tap0: tun_chr_ioctl cmd 1074025677 [ 1069.030982][T22832] tap0: linktype set to 6 [ 1069.036947][T22834] netlink: 'syz.2.5067': attribute type 1 has an invalid length. [ 1069.078353][T22834] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1069.161998][T22827] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5067'. [ 1069.693715][T22840] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1070.115438][T22850] netlink: 'syz.0.5075': attribute type 2 has an invalid length. [ 1070.225014][T22850] netlink: 'syz.0.5075': attribute type 1 has an invalid length. [ 1070.275488][T22850] netlink: 'syz.0.5075': attribute type 4 has an invalid length. [ 1070.283770][T22850] netlink: 'syz.0.5075': attribute type 6 has an invalid length. [ 1070.291640][T22850] netlink: 'syz.0.5075': attribute type 7 has an invalid length. [ 1070.299968][T22850] netlink: 'syz.0.5075': attribute type 5 has an invalid length. [ 1070.308293][T22850] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1070.390440][T22862] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1070.540362][T22864] sctp: [Deprecated]: syz.4.5077 (pid 22864) Use of int in maxseg socket option. [ 1070.540362][T22864] Use struct sctp_assoc_value instead [ 1070.614371][T22866] netlink: 'syz.0.5081': attribute type 5 has an invalid length. [ 1070.928072][T22877] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1071.025741][T22881] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.5086'. [ 1071.360399][T22890] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1071.391064][T22890] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1071.446277][T22892] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1071.481924][T22894] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5088'. [ 1072.402637][T22924] device syzkaller0 entered promiscuous mode [ 1072.557007][T22926] sctp: [Deprecated]: syz.2.5098 (pid 22926) Use of int in maxseg socket option. [ 1072.557007][T22926] Use struct sctp_assoc_value instead [ 1075.747322][T22958] validate_nla: 6 callbacks suppressed [ 1075.747332][T22958] netlink: 'syz.0.5108': attribute type 5 has an invalid length. [ 1076.790290][T23012] netlink: 'syz.1.5125': attribute type 5 has an invalid length. [ 1077.559124][T23040] netlink: 'syz.0.5132': attribute type 29 has an invalid length. [ 1077.644945][T23040] netlink: 'syz.0.5132': attribute type 29 has an invalid length. [ 1078.066074][T23055] netlink: 'syz.2.5137': attribute type 10 has an invalid length. [ 1078.121880][T23055] team0: Device veth1_vlan failed to register rx_handler [ 1078.221193][T23061] netlink: 'syz.0.5139': attribute type 2 has an invalid length. [ 1078.239427][T23061] netlink: 'syz.0.5139': attribute type 1 has an invalid length. [ 1078.253107][T23061] __nla_validate_parse: 1 callbacks suppressed [ 1078.253124][T23061] netlink: 185292 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1078.404622][T23062] netlink: 'syz.3.5138': attribute type 5 has an invalid length. [ 1078.696666][T23084] netlink: 'syz.2.5146': attribute type 29 has an invalid length. [ 1078.724488][T23086] netlink: 'syz.2.5146': attribute type 29 has an invalid length. [ 1079.117734][T23101] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1079.873890][T23137] sctp: [Deprecated]: syz.2.5163 (pid 23137) Use of int in maxseg socket option. [ 1079.873890][T23137] Use struct sctp_assoc_value instead [ 1079.919921][T23133] device wlan1 left promiscuous mode [ 1079.993975][T23137] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1080.342389][T23153] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1080.371681][T23153] device bond0 entered promiscuous mode [ 1080.439760][T23153] device bond_slave_0 entered promiscuous mode [ 1080.470106][T23153] device bond_slave_1 entered promiscuous mode [ 1080.479936][T23153] bridge0: port 3(bond0) entered blocking state [ 1080.522844][T23153] bridge0: port 3(bond0) entered disabled state [ 1080.568877][T23153] bridge0: port 3(bond0) entered blocking state [ 1080.575599][T23153] bridge0: port 3(bond0) entered forwarding state [ 1080.587696][T23168] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.5171'. [ 1080.612984][T23152] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1080.825221][T23171] validate_nla: 8 callbacks suppressed [ 1080.825236][T23171] netlink: 'syz.4.5172': attribute type 21 has an invalid length. [ 1080.912871][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1080.959812][T23173] netlink: 'syz.0.5173': attribute type 5 has an invalid length. [ 1081.331269][T23195] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5182'. [ 1081.415207][T23193] netlink: 'syz.0.5180': attribute type 10 has an invalid length. [ 1081.885834][T23212] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5187'. [ 1081.943792][T23212] openvswitch: netlink: Message has 6 unknown bytes. [ 1082.025965][T23222] netlink: 'syz.4.5190': attribute type 5 has an invalid length. [ 1082.220927][T23223] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 1082.333411][T23223] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1082.602467][T23221] sctp: [Deprecated]: syz.3.5188 (pid 23221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1082.602467][T23221] Use struct sctp_sack_info instead [ 1083.614283][T23252] netlink: 'syz.1.5198': attribute type 10 has an invalid length. [ 1083.915885][T23271] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5203'. [ 1084.018485][T23258] netlink: 'syz.2.5200': attribute type 21 has an invalid length. [ 1084.898638][T23296] netlink: 'syz.4.5208': attribute type 10 has an invalid length. [ 1084.928862][T23296] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5208'. [ 1085.174334][T23299] netlink: 'syz.2.5209': attribute type 3 has an invalid length. [ 1085.213532][T23299] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1085.306078][T23299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5209'. [ 1085.902177][T23314] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1085.945551][T23314] syzkaller0: linktype set to 776 [ 1086.369452][T23341] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.5223'. [ 1086.413663][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5223'. [ 1086.561241][T23343] netlink: 'syz.0.5225': attribute type 3 has an invalid length. [ 1086.657773][T23343] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1086.740642][T23347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1086.820528][T23354] netlink: 'syz.3.5228': attribute type 10 has an invalid length. [ 1086.899253][T23354] team0: Device veth1_vlan failed to register rx_handler [ 1089.961340][T23370] tap0: tun_chr_ioctl cmd 99999999 [ 1090.088225][T23375] netlink: 463 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1090.117049][T23375] netlink: 'syz.0.5235': attribute type 3 has an invalid length. [ 1090.143619][T23375] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1092.661389][T23420] netlink: 'syz.1.5244': attribute type 2 has an invalid length. [ 1092.762682][T23420] netlink: 'syz.1.5244': attribute type 11 has an invalid length. [ 1092.798093][T23420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5244'. [ 1092.847000][T23421] netlink: 'syz.3.5248': attribute type 21 has an invalid length. [ 1092.893354][T23421] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1093.174799][T23440] netlink: 'syz.2.5252': attribute type 1 has an invalid length. [ 1093.220418][T23440] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1093.860369][T23468] netlink: 'syz.0.5261': attribute type 10 has an invalid length. [ 1093.873477][T23468] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5261'. [ 1093.980372][T23478] netlink: 'syz.1.5263': attribute type 2 has an invalid length. [ 1093.990080][T23478] netlink: 'syz.1.5263': attribute type 1 has an invalid length. [ 1093.998732][T23478] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1096.592848][T23525] netlink: 'syz.0.5270': attribute type 2 has an invalid length. [ 1096.627917][T23525] netlink: 'syz.0.5270': attribute type 11 has an invalid length. [ 1096.683553][T23525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1096.887416][T23536] netlink: 'syz.4.5278': attribute type 10 has an invalid length. [ 1097.837668][T23557] device syzkaller0 entered promiscuous mode [ 1097.851885][T23564] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5287'. [ 1097.871391][T23566] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.5288'. [ 1098.682386][T23574] netlink: 'syz.0.5290': attribute type 21 has an invalid length. [ 1098.690920][T23574] netlink: 'syz.0.5290': attribute type 1 has an invalid length. [ 1099.418858][T23603] netlink: 'syz.0.5297': attribute type 29 has an invalid length. [ 1101.219247][T23581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5292'. [ 1101.239667][T23601] netlink: 'syz.3.5295': attribute type 2 has an invalid length. [ 1101.247968][T23601] netlink: 'syz.3.5295': attribute type 11 has an invalid length. [ 1101.256224][T23601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5295'. [ 1101.295359][T23603] netlink: 'syz.0.5297': attribute type 29 has an invalid length. [ 1102.250173][T23638] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5309'. [ 1102.406610][T23641] netlink: 'syz.0.5308': attribute type 2 has an invalid length. [ 1102.462051][T23641] device .*! entered promiscuous mode [ 1103.065225][T23669] ÿ: renamed from bond_slave_0 [ 1103.448722][T23676] netlink: 'syz.4.5315': attribute type 2 has an invalid length. [ 1103.478390][T23676] netlink: 'syz.4.5315': attribute type 11 has an invalid length. [ 1103.508330][T23676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1104.739750][T23707] netlink: 'syz.0.5325': attribute type 3 has an invalid length. [ 1104.859928][T23707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1106.209064][T23721] netlink: 'syz.2.5329': attribute type 10 has an invalid length. [ 1106.228967][T23721] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1106.257736][T23722] netlink: 'syz.2.5329': attribute type 21 has an invalid length. [ 1106.273436][T23722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1106.291049][T23722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1106.335483][T23730] netlink: 'syz.2.5329': attribute type 21 has an invalid length. [ 1106.367518][T23730] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1106.387299][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1106.823022][T23753] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5337'. [ 1107.798553][T23760] delete_channel: no stack [ 1108.780833][T23829] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1108.791008][T23816] netlink: 'syz.3.5354': attribute type 2 has an invalid length. [ 1108.825242][T23824] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1109.278673][T23816] device .*! entered promiscuous mode [ 1109.932999][T23842] netlink: 'syz.3.5363': attribute type 10 has an invalid length. [ 1110.232482][T23849] netlink: 'syz.0.5366': attribute type 29 has an invalid length. [ 1110.315143][T23849] netlink: 'syz.0.5366': attribute type 29 has an invalid length. [ 1110.326633][T23854] netlink: 'syz.4.5368': attribute type 21 has an invalid length. [ 1110.337482][T23854] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1110.347092][T23853] netlink: 'syz.0.5366': attribute type 29 has an invalid length. [ 1110.360212][T23857] netlink: 'syz.0.5366': attribute type 29 has an invalid length. [ 1110.505255][T23862] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5369'. [ 1110.528028][T23862] device hsr_slave_0 left promiscuous mode [ 1110.578085][T23862] device hsr_slave_1 left promiscuous mode [ 1110.667212][T23865] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1110.705238][T23865] netlink: zone id is out of range [ 1110.749450][T23865] netlink: zone id is out of range [ 1110.787259][T23865] netlink: zone id is out of range [ 1110.794630][T23865] netlink: zone id is out of range [ 1110.800625][T23865] netlink: zone id is out of range [ 1110.858940][T23865] netlink: zone id is out of range [ 1110.883991][T23865] netlink: zone id is out of range [ 1110.891396][T23865] netlink: zone id is out of range [ 1110.911281][T23865] netlink: zone id is out of range [ 1110.926141][T23865] netlink: zone id is out of range [ 1112.109702][T23937] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5389'. [ 1112.217496][T23938] netlink: 'syz.4.5393': attribute type 10 has an invalid length. [ 1112.444426][T23942] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5395'. [ 1112.753525][T21087] Bluetooth: hci0: command 0x0406 tx timeout [ 1112.759640][T21087] Bluetooth: hci2: command 0x0406 tx timeout [ 1113.042698][T23965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5402'. [ 1113.738576][T23992] netlink: 'syz.1.5410': attribute type 1 has an invalid length. [ 1113.798091][T23992] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1114.826451][T24036] netlink: 'syz.0.5422': attribute type 2 has an invalid length. [ 1115.055236][T24045] netlink: 'syz.4.5424': attribute type 10 has an invalid length. [ 1115.706765][T24070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.728956][T24070] netlink: 'syz.1.5431': attribute type 6 has an invalid length. [ 1115.996449][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.002857][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.365087][T24083] netlink: 'syz.4.5435': attribute type 3 has an invalid length. [ 1116.400964][T24083] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5435'. [ 1116.986482][T24092] netlink: 'syz.2.5440': attribute type 10 has an invalid length. [ 1118.566781][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1118.620296][T24119] device wlan1 entered promiscuous mode [ 1119.093901][T24123] device syzkaller0 entered promiscuous mode [ 1127.252659][T24194] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.5464'. [ 1127.280778][T24194] net_ratelimit: 3544 callbacks suppressed [ 1127.280797][T24194] netlink: zone id is out of range [ 1127.308267][T24194] netlink: zone id is out of range [ 1127.320862][T24194] netlink: zone id is out of range [ 1127.339051][T24194] netlink: zone id is out of range [ 1127.345731][T24194] netlink: zone id is out of range [ 1127.358183][T24194] netlink: zone id is out of range [ 1127.377500][T24194] netlink: zone id is out of range [ 1127.382924][T24194] netlink: zone id is out of range [ 1127.394145][T24194] netlink: zone id is out of range [ 1127.416548][T24194] netlink: zone id is out of range [ 1127.758973][T24198] netlink: 'syz.2.5465': attribute type 27 has an invalid length. [ 1127.767169][T24198] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1128.879278][T24169] netlink: 'syz.4.5458': attribute type 21 has an invalid length. [ 1128.906448][T24169] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1128.923043][T24197] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1128.953480][T24198] netlink: 'syz.2.5465': attribute type 13 has an invalid length. [ 1128.961409][T24198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5465'. [ 1128.986834][T24198] syz_tun: refused to change device tx_queue_len [ 1129.041073][T24203] netlink: 'syz.1.5466': attribute type 21 has an invalid length. [ 1129.051180][T24203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1129.061315][T24203] netlink: 'syz.1.5466': attribute type 1 has an invalid length. [ 1132.131198][T24232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1133.800470][T24250] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1133.852842][T24250] netlink: 'syz.3.5482': attribute type 21 has an invalid length. [ 1133.884584][T24250] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1133.923813][T24250] netlink: 'syz.3.5482': attribute type 4 has an invalid length. [ 1133.944400][T24250] netlink: 'syz.3.5482': attribute type 5 has an invalid length. [ 1133.973661][T24250] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1134.832394][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5485'. [ 1135.189926][T24280] netlink: 'syz.4.5488': attribute type 10 has an invalid length. [ 1135.559548][T24289] netlink: 'syz.3.5490': attribute type 29 has an invalid length. [ 1135.583740][T24289] netlink: 'syz.3.5490': attribute type 29 has an invalid length. [ 1135.629897][T24288] netlink: 'syz.3.5490': attribute type 29 has an invalid length. [ 1135.657503][T24294] netlink: 'syz.3.5490': attribute type 29 has an invalid length. [ 1135.848892][T24298] netlink: 'syz.0.5494': attribute type 1 has an invalid length. [ 1135.902779][T24298] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.5494'. [ 1137.062213][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5502'. [ 1138.135886][T24333] device syzkaller0 entered promiscuous mode [ 1138.217624][T24340] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1138.253394][T24340] net_ratelimit: 3554 callbacks suppressed [ 1138.253415][T24340] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1139.592612][T21087] Bluetooth: hci3: ISO packet for unknown connection handle 61 [ 1142.158005][T24358] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1142.187600][T24360] mac80211_hwsim hwsim40 ªªªªªªõUÁMVµ"˜: renamed from wlan0 [ 1142.402703][T24369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1142.443689][T24369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1142.475324][T24369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1142.739766][T24385] netlink: 'syz.1.5517': attribute type 13 has an invalid length. [ 1142.777067][T24385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5517'. [ 1142.802939][T24385] syz_tun: refused to change device tx_queue_len [ 1142.826598][T24385] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1142.896411][T24391] netlink: 'syz.1.5517': attribute type 10 has an invalid length. [ 1142.984791][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1143.202132][T24405] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5521'. [ 1143.886337][T24411] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1145.237181][T24420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5527'. [ 1145.256134][T24420] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5527'. [ 1145.381688][T24434] netlink: 'syz.1.5530': attribute type 29 has an invalid length. [ 1145.411878][T24434] netlink: 'syz.1.5530': attribute type 29 has an invalid length. [ 1145.475958][T24436] netlink: 'syz.1.5530': attribute type 29 has an invalid length. [ 1145.551624][T24434] netlink: 'syz.1.5530': attribute type 29 has an invalid length. [ 1145.596020][T24436] netlink: 'syz.1.5530': attribute type 29 has an invalid length. [ 1145.637894][T24445] netlink: 'syz.1.5530': attribute type 21 has an invalid length. [ 1145.701505][T24445] netlink: 'syz.1.5530': attribute type 1 has an invalid length. [ 1145.907061][T24451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.934333][T24451] netlink: 'syz.0.5534': attribute type 6 has an invalid length. [ 1148.445691][T24504] device sit0 entered promiscuous mode [ 1148.642232][T24512] netlink: 'syz.1.5553': attribute type 3 has an invalid length. [ 1148.717274][T24512] __nla_validate_parse: 3 callbacks suppressed [ 1148.717290][T24512] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5553'. [ 1149.445746][T24533] netlink: 'syz.0.5559': attribute type 4 has an invalid length. [ 1149.487540][T24533] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.5559'. [ 1149.791754][T24546] IPv6: Can't replace route, no match found [ 1150.575941][T24580] netlink: 'syz.1.5574': attribute type 1 has an invalid length. [ 1150.603393][T24580] netlink: 'syz.1.5574': attribute type 2 has an invalid length. [ 1150.642347][T24580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5574'. [ 1150.654614][T24583] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5574'. [ 1150.973441][T24597] netlink: 'syz.0.5580': attribute type 7 has an invalid length. [ 1151.184383][T24593] netlink: 'syz.2.5579': attribute type 1 has an invalid length. [ 1151.219059][T24593] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1151.249620][T24602] netlink: 'syz.2.5579': attribute type 29 has an invalid length. [ 1151.303350][T24602] netlink: 'syz.2.5579': attribute type 29 has an invalid length. [ 1151.436360][T19311] tipc: Subscription rejected, illegal request [ 1152.119569][T24640] device syzkaller0 entered promiscuous mode [ 1152.306707][T24650] netlink: 'syz.2.5598': attribute type 2 has an invalid length. [ 1152.585783][T24666] netlink: 'syz.1.5602': attribute type 10 has an invalid length. [ 1152.600513][T24666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1152.636844][T24666] bridge0: port 3(veth0_vlan) entered blocking state [ 1152.669270][T24666] bridge0: port 3(veth0_vlan) entered disabled state [ 1152.727753][T24666] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1152.811103][T24665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5602'. [ 1152.829666][T24665] bridge0: port 3(veth0_vlan) entered blocking state [ 1152.885338][T24665] bridge0: port 3(veth0_vlan) entered disabled state [ 1152.950895][T24665] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1155.265901][T24750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1155.349220][T24755] validate_nla: 1 callbacks suppressed [ 1155.349236][T24755] netlink: 'syz.3.5627': attribute type 1 has an invalid length. [ 1156.309226][T24794] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1156.383483][T24794] netlink: zone id is out of range [ 1156.385030][T24800] netlink: 'syz.1.5642': attribute type 275 has an invalid length. [ 1156.441804][T24794] netlink: zone id is out of range [ 1156.463144][T24794] netlink: zone id is out of range [ 1156.523519][T24794] netlink: zone id is out of range [ 1156.566192][T24794] netlink: zone id is out of range [ 1156.583831][T24794] netlink: zone id is out of range [ 1156.629213][T24794] netlink: del zone limit has 4 unknown bytes [ 1156.903184][T24822] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1157.554318][T24859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1157.566265][T24859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1157.599690][T24861] netlink: 'syz.3.5662': attribute type 1 has an invalid length. [ 1157.614772][T24861] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5662'. [ 1157.624258][T24859] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1159.519905][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.600333][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.609527][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.618679][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.627822][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.636977][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.646117][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.655244][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.664377][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.673510][T24917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1159.862549][T24927] FAULT_INJECTION: forcing a failure. [ 1159.862549][T24927] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.882763][T24927] CPU: 1 PID: 24927 Comm: syz.2.5684 Not tainted syzkaller #0 [ 1159.890292][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1159.900378][T24927] Call Trace: [ 1159.903674][T24927] [ 1159.906626][T24927] dump_stack_lvl+0x188/0x24e [ 1159.911337][T24927] ? show_regs_print_info+0x12/0x12 [ 1159.916562][T24927] ? load_image+0x400/0x400 [ 1159.921093][T24927] ? __might_sleep+0xd0/0xd0 [ 1159.925707][T24927] ? __lock_acquire+0x7d10/0x7d10 [ 1159.930773][T24927] should_fail_ex+0x399/0x4d0 [ 1159.935480][T24927] should_failslab+0x5/0x20 [ 1159.940007][T24927] slab_pre_alloc_hook+0x59/0x310 [ 1159.945064][T24927] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1159.950915][T24927] __kmem_cache_alloc_node+0x4f/0x260 [ 1159.956317][T24927] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1159.962070][T24927] __kmalloc+0xa0/0x240 [ 1159.966260][T24927] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1159.971848][T24927] ? tomoyo_path_number_perm+0x205/0x650 [ 1159.977518][T24927] tomoyo_path_number_perm+0x22f/0x650 [ 1159.983011][T24927] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1159.988499][T24927] ? ksys_write+0x1c0/0x250 [ 1159.993033][T24927] ? common_file_perm+0x171/0x1c0 [ 1159.998112][T24927] ? __fget_files+0x28/0x4b0 [ 1160.002734][T24927] ? __fget_files+0x28/0x4b0 [ 1160.007369][T24927] security_file_ioctl+0x6c/0xa0 [ 1160.012349][T24927] __se_sys_ioctl+0x48/0x170 [ 1160.016978][T24927] do_syscall_64+0x4c/0xa0 [ 1160.021422][T24927] ? clear_bhb_loop+0x60/0xb0 [ 1160.026129][T24927] ? clear_bhb_loop+0x60/0xb0 [ 1160.030837][T24927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1160.036759][T24927] RIP: 0033:0x7f03fbb9ce59 [ 1160.041199][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.060833][T24927] RSP: 002b:00007f03f9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.069280][T24927] RAX: ffffffffffffffda RBX: 00007f03fbe15fa0 RCX: 00007f03fbb9ce59 [ 1160.077278][T24927] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 1160.085272][T24927] RBP: 00007f03f9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.093265][T24927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.101269][T24927] R13: 00007f03fbe16038 R14: 00007f03fbe15fa0 R15: 00007fff7e07ab98 [ 1160.109292][T24927] [ 1160.135821][T24927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1160.731044][T24952] netlink: 'syz.1.5693': attribute type 10 has an invalid length. [ 1160.748536][T24952] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1160.884040][T24965] FAULT_INJECTION: forcing a failure. [ 1160.884040][T24965] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.906110][T24965] CPU: 1 PID: 24965 Comm: syz.4.5697 Not tainted syzkaller #0 [ 1160.913634][T24965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1160.923699][T24965] Call Trace: [ 1160.927024][T24965] [ 1160.929951][T24965] dump_stack_lvl+0x188/0x24e [ 1160.934657][T24965] ? show_regs_print_info+0x12/0x12 [ 1160.939850][T24965] ? load_image+0x400/0x400 [ 1160.944359][T24965] ? __might_sleep+0xd0/0xd0 [ 1160.948944][T24965] ? __lock_acquire+0x7d10/0x7d10 [ 1160.953969][T24965] should_fail_ex+0x399/0x4d0 [ 1160.958643][T24965] should_failslab+0x5/0x20 [ 1160.963139][T24965] slab_pre_alloc_hook+0x59/0x310 [ 1160.968165][T24965] ? tomoyo_encode+0x27e/0x540 [ 1160.972926][T24965] __kmem_cache_alloc_node+0x4f/0x260 [ 1160.978298][T24965] ? tomoyo_encode+0x27e/0x540 [ 1160.983057][T24965] __kmalloc+0xa0/0x240 [ 1160.987215][T24965] tomoyo_encode+0x27e/0x540 [ 1160.991810][T24965] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1160.997477][T24965] ? tomoyo_path_number_perm+0x205/0x650 [ 1161.003111][T24965] tomoyo_path_number_perm+0x22f/0x650 [ 1161.008570][T24965] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1161.014025][T24965] ? ksys_write+0x1c0/0x250 [ 1161.018530][T24965] ? common_file_perm+0x171/0x1c0 [ 1161.023574][T24965] ? __fget_files+0x28/0x4b0 [ 1161.028165][T24965] ? __fget_files+0x28/0x4b0 [ 1161.032764][T24965] security_file_ioctl+0x6c/0xa0 [ 1161.037704][T24965] __se_sys_ioctl+0x48/0x170 [ 1161.042298][T24965] do_syscall_64+0x4c/0xa0 [ 1161.046710][T24965] ? clear_bhb_loop+0x60/0xb0 [ 1161.051385][T24965] ? clear_bhb_loop+0x60/0xb0 [ 1161.056066][T24965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.061964][T24965] RIP: 0033:0x7fc7a599ce59 [ 1161.066376][T24965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.085981][T24965] RSP: 002b:00007fc7a6846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1161.094403][T24965] RAX: ffffffffffffffda RBX: 00007fc7a5c15fa0 RCX: 00007fc7a599ce59 [ 1161.102374][T24965] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 1161.110342][T24965] RBP: 00007fc7a6846090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.118309][T24965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.126277][T24965] R13: 00007fc7a5c16038 R14: 00007fc7a5c15fa0 R15: 00007ffcbfa1df28 [ 1161.134256][T24965] [ 1161.173605][T24965] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1161.197315][T24963] netlink: 'syz.1.5693': attribute type 27 has an invalid length. [ 1161.937979][T25005] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1161.978188][T25005] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1162.375004][T25028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5715'. [ 1162.441622][T25034] netlink: 'syz.2.5715': attribute type 1 has an invalid length. [ 1163.104259][T25059] delete_channel: no stack [ 1163.117565][T25059] delete_channel: no stack [ 1163.149340][T25058] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1163.216110][T25061] netlink: 'syz.2.5724': attribute type 1 has an invalid length. [ 1163.255637][T25058] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1163.841442][T25078] device syzkaller0 entered promiscuous mode [ 1169.628566][T25127] device virt_wifi0 entered promiscuous mode [ 1170.134805][T25155] netlink: 'syz.1.5748': attribute type 2 has an invalid length. [ 1170.153874][T25155] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1170.414996][T25160] netlink: 'syz.1.5748': attribute type 1 has an invalid length. [ 1170.916676][T25168] device syzkaller0 entered promiscuous mode [ 1173.365766][T25174] netlink: 'syz.0.5752': attribute type 10 has an invalid length. [ 1173.375055][T25174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5752'. [ 1173.385743][T25174] device dummy0 entered promiscuous mode [ 1173.392241][T25174] bridge0: port 3(dummy0) entered blocking state [ 1173.399651][T25174] bridge0: port 3(dummy0) entered disabled state [ 1173.410619][T25178] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1173.682910][T25194] netlink: 15430 bytes leftover after parsing attributes in process `syz.1.5759'. [ 1174.550099][T25231] netlink: 'syz.2.5771': attribute type 1 has an invalid length. [ 1174.596895][T25231] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1174.902537][T25246] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1174.926007][T25246] net_ratelimit: 3256 callbacks suppressed [ 1174.926025][T25246] openvswitch: netlink: Flow actions attr not present in new flow. [ 1175.282352][T25252] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5774'. [ 1175.342441][T25252] openvswitch: netlink: Flow key attr not present in new flow. [ 1175.841705][T25275] netlink: 'syz.1.5782': attribute type 10 has an invalid length. [ 1175.924984][T25275] batman_adv: batadv0: Adding interface: netdevsim0 [ 1175.948580][T25275] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.009223][T25275] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1176.027301][T25283] À: port 1(vlan0) entered blocking state [ 1176.050530][T25283] À: port 1(vlan0) entered disabled state [ 1176.079757][T25283] device vlan0 entered promiscuous mode [ 1176.144083][T25282] netlink: 'syz.3.5784': attribute type 1 has an invalid length. [ 1176.618752][T25303] netlink: 'syz.1.5791': attribute type 2 has an invalid length. [ 1176.638438][T25303] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.5791'. [ 1176.690849][T25313] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1177.236496][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.242866][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.032324][T25328] netlink: 'syz.1.5799': attribute type 3 has an invalid length. [ 1178.040389][T25328] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5799'. [ 1179.467385][T25311] netlink: 'syz.3.5794': attribute type 21 has an invalid length. [ 1180.089136][T25356] netlink: 'syz.1.5808': attribute type 2 has an invalid length. [ 1180.342187][T25373] netlink: 'syz.1.5814': attribute type 4 has an invalid length. [ 1180.430656][T25377] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.5815'. [ 1181.111599][T25401] device bridge_slave_1 left promiscuous mode [ 1181.118125][T25401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.156502][T25401] device bridge_slave_0 left promiscuous mode [ 1181.172222][T25401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.751740][T25423] netlink: 'syz.3.5828': attribute type 46 has an invalid length. [ 1181.824903][T25423] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1182.430546][T25454] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5837'. [ 1183.559107][T25464] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1185.558823][T25512] delete_channel: no stack [ 1186.890319][T25554] device syzkaller0 entered promiscuous mode [ 1186.915855][T25562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.923351][T25562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.787653][T25558] device bridge_slave_1 left promiscuous mode [ 1191.794131][T25558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.802289][T25558] device bridge_slave_0 left promiscuous mode [ 1191.809429][T25558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.897033][T25573] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5867'. [ 1191.907097][T25577] netlink: 'syz.0.5868': attribute type 7 has an invalid length. [ 1191.917328][T25578] netlink: 'syz.0.5868': attribute type 10 has an invalid length. [ 1192.256404][T25599] netlink: 'syz.3.5875': attribute type 4 has an invalid length. [ 1192.722233][T25624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5882'. [ 1194.172486][T25662] netlink: 'syz.3.5894': attribute type 29 has an invalid length. [ 1194.231338][T25662] netlink: 'syz.3.5894': attribute type 29 has an invalid length. [ 1194.264677][T25663] netlink: 'syz.3.5894': attribute type 29 has an invalid length. [ 1194.305789][T25662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5894'. [ 1194.379504][T25665] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5895'. [ 1194.501292][T25665] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1194.575789][T25665] CPU: 1 PID: 25665 Comm: syz.0.5895 Not tainted syzkaller #0 [ 1194.583327][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1194.593398][T25665] Call Trace: [ 1194.596675][T25665] [ 1194.599607][T25665] dump_stack_lvl+0x188/0x24e [ 1194.604292][T25665] ? show_regs_print_info+0x12/0x12 [ 1194.609502][T25665] ? load_image+0x400/0x400 [ 1194.614019][T25665] sysfs_warn_dup+0x8a/0xa0 [ 1194.618531][T25665] sysfs_do_create_link_sd+0xc0/0x110 [ 1194.623908][T25665] device_add+0x7f6/0x1000 [ 1194.628339][T25665] wiphy_register+0x1d9f/0x2ac0 [ 1194.633214][T25665] ? cfg80211_event_work+0x40/0x40 [ 1194.638343][T25665] ? minstrel_ht_alloc+0x894/0xa20 [ 1194.643461][T25665] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1194.649538][T25665] ieee80211_register_hw+0x2d00/0x39f0 [ 1194.655015][T25665] ? ieee80211_register_hw+0xec1/0x39f0 [ 1194.660560][T25665] ? ieee80211_register_hw+0xec1/0x39f0 [ 1194.666114][T25665] ? ieee80211_tasklet_handler+0x20/0x20 [ 1194.671748][T25665] ? debug_init+0x39/0x260 [ 1194.676169][T25665] ? memset+0x1e/0x40 [ 1194.680150][T25665] ? __hrtimer_init+0x186/0x270 [ 1194.685007][T25665] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1194.690742][T25665] hwsim_new_radio_nl+0xafa/0xce0 [ 1194.695785][T25665] genl_family_rcv_msg_doit+0x22a/0x330 [ 1194.701342][T25665] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1194.707243][T25665] ? bpf_lsm_capable+0x5/0x10 [ 1194.711921][T25665] ? security_capable+0x85/0xb0 [ 1194.716787][T25665] genl_rcv_msg+0x604/0x790 [ 1194.721309][T25665] ? genl_bind+0x360/0x360 [ 1194.725726][T25665] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1194.732069][T25665] netlink_rcv_skb+0x1fb/0x450 [ 1194.736834][T25665] ? genl_bind+0x360/0x360 [ 1194.741252][T25665] ? netlink_ack+0x1170/0x1170 [ 1194.746042][T25665] ? down_read+0x1a8/0x2d0 [ 1194.750464][T25665] genl_rcv+0x24/0x40 [ 1194.754449][T25665] netlink_unicast+0x74d/0x8d0 [ 1194.759224][T25665] netlink_sendmsg+0x8ad/0xbd0 [ 1194.764000][T25665] ? netlink_getsockopt+0x550/0x550 [ 1194.769198][T25665] ? aa_sock_msg_perm+0x94/0x150 [ 1194.774139][T25665] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1194.779432][T25665] ? security_socket_sendmsg+0x7c/0xa0 [ 1194.784896][T25665] ? netlink_getsockopt+0x550/0x550 [ 1194.790100][T25665] ____sys_sendmsg+0x5be/0x970 [ 1194.794876][T25665] ? __sys_sendmsg_sock+0x30/0x30 [ 1194.799897][T25665] ? __import_iovec+0x315/0x500 [ 1194.804757][T25665] ? import_iovec+0x6f/0xa0 [ 1194.809400][T25665] ___sys_sendmsg+0x2a2/0x360 [ 1194.814105][T25665] ? __sys_sendmsg+0x290/0x290 [ 1194.818919][T25665] __se_sys_sendmsg+0x1bb/0x2a0 [ 1194.823768][T25665] ? ct_nmi_exit+0x145/0x1c0 [ 1194.828357][T25665] ? __x64_sys_sendmsg+0x80/0x80 [ 1194.833314][T25665] ? lockdep_hardirqs_on+0x94/0x140 [ 1194.838526][T25665] do_syscall_64+0x4c/0xa0 [ 1194.842940][T25665] ? clear_bhb_loop+0x60/0xb0 [ 1194.847620][T25665] ? clear_bhb_loop+0x60/0xb0 [ 1194.852298][T25665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1194.858200][T25665] RIP: 0033:0x7fd8e619ce59 [ 1194.862616][T25665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.882226][T25665] RSP: 002b:00007fd8e43f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.890641][T25665] RAX: ffffffffffffffda RBX: 00007fd8e6415fa0 RCX: 00007fd8e619ce59 [ 1194.898614][T25665] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1194.906580][T25665] RBP: 00007fd8e6232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1194.914550][T25665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.922519][T25665] R13: 00007fd8e6416038 R14: 00007fd8e6415fa0 R15: 00007fff999ebe38 [ 1194.930519][T25665] [ 1195.069811][T25669] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.5895'. [ 1195.141349][T25671] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1195.591265][T25686] netlink: 'syz.4.5903': attribute type 21 has an invalid length. [ 1195.644782][T25686] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1195.860068][T25700] FAULT_INJECTION: forcing a failure. [ 1195.860068][T25700] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.923469][T25700] CPU: 1 PID: 25700 Comm: syz.0.5907 Not tainted syzkaller #0 [ 1195.931011][T25700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.941135][T25700] Call Trace: [ 1195.944441][T25700] [ 1195.947402][T25700] dump_stack_lvl+0x188/0x24e [ 1195.952126][T25700] ? show_regs_print_info+0x12/0x12 [ 1195.957362][T25700] ? load_image+0x400/0x400 [ 1195.961883][T25700] ? __might_sleep+0xd0/0xd0 [ 1195.966494][T25700] ? __lock_acquire+0x7d10/0x7d10 [ 1195.971523][T25700] ? aa_file_perm+0x3ea/0xf00 [ 1195.976207][T25700] should_fail_ex+0x399/0x4d0 [ 1195.980899][T25700] should_failslab+0x5/0x20 [ 1195.985405][T25700] slab_pre_alloc_hook+0x59/0x310 [ 1195.990439][T25700] ? kernfs_fop_write_iter+0x155/0x520 [ 1195.995905][T25700] __kmem_cache_alloc_node+0x4f/0x260 [ 1196.001295][T25700] ? kernfs_fop_write_iter+0x155/0x520 [ 1196.006755][T25700] __kmalloc+0xa0/0x240 [ 1196.010926][T25700] kernfs_fop_write_iter+0x155/0x520 [ 1196.016230][T25700] vfs_write+0x4b1/0xa30 [ 1196.020492][T25700] ? file_end_write+0x250/0x250 [ 1196.025356][T25700] ? __fget_files+0x43d/0x4b0 [ 1196.030051][T25700] ? __fdget_pos+0x2ae/0x360 [ 1196.034654][T25700] ? ksys_write+0x71/0x250 [ 1196.039085][T25700] ksys_write+0x14c/0x250 [ 1196.043430][T25700] ? __ia32_sys_read+0x80/0x80 [ 1196.048210][T25700] ? lockdep_hardirqs_on+0x94/0x140 [ 1196.053420][T25700] do_syscall_64+0x4c/0xa0 [ 1196.057839][T25700] ? clear_bhb_loop+0x60/0xb0 [ 1196.062521][T25700] ? clear_bhb_loop+0x60/0xb0 [ 1196.067207][T25700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1196.073106][T25700] RIP: 0033:0x7fd8e619ce59 [ 1196.077523][T25700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1196.097136][T25700] RSP: 002b:00007fd8e43f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1196.105561][T25700] RAX: ffffffffffffffda RBX: 00007fd8e6415fa0 RCX: 00007fd8e619ce59 [ 1196.113535][T25700] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1196.121507][T25700] RBP: 00007fd8e43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.129482][T25700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.137460][T25700] R13: 00007fd8e6416038 R14: 00007fd8e6415fa0 R15: 00007fff999ebe38 [ 1196.145455][T25700] [ 1196.467772][T25716] netlink: 'syz.3.5911': attribute type 4 has an invalid length. [ 1196.843822][T21087] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 1196.991286][T25742] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1197.126925][T25748] FAULT_INJECTION: forcing a failure. [ 1197.126925][T25748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.223647][T25748] CPU: 0 PID: 25748 Comm: syz.2.5922 Not tainted syzkaller #0 [ 1197.231180][T25748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1197.241271][T25748] Call Trace: [ 1197.244571][T25748] [ 1197.247516][T25748] dump_stack_lvl+0x188/0x24e [ 1197.252239][T25748] ? show_regs_print_info+0x12/0x12 [ 1197.257481][T25748] ? load_image+0x400/0x400 [ 1197.262034][T25748] ? __lock_acquire+0x7d10/0x7d10 [ 1197.267113][T25748] should_fail_ex+0x399/0x4d0 [ 1197.271836][T25748] _copy_from_iter+0x1c0/0x1130 [ 1197.276718][T25748] ? __lock_acquire+0x7d10/0x7d10 [ 1197.281788][T25748] ? copyout_mc+0x110/0x110 [ 1197.286344][T25748] ? __virt_addr_valid+0x188/0x540 [ 1197.291548][T25748] ? __virt_addr_valid+0x188/0x540 [ 1197.296666][T25748] ? __virt_addr_valid+0x465/0x540 [ 1197.301790][T25748] ? __check_object_size+0x500/0xa40 [ 1197.307075][T25748] kernfs_fop_write_iter+0x1a0/0x520 [ 1197.312365][T25748] vfs_write+0x4b1/0xa30 [ 1197.316715][T25748] ? file_end_write+0x250/0x250 [ 1197.321594][T25748] ? __fget_files+0x43d/0x4b0 [ 1197.326306][T25748] ? __fdget_pos+0x2ae/0x360 [ 1197.330927][T25748] ? ksys_write+0x71/0x250 [ 1197.335393][T25748] ksys_write+0x14c/0x250 [ 1197.339771][T25748] ? __ia32_sys_read+0x80/0x80 [ 1197.344590][T25748] ? lockdep_hardirqs_on+0x94/0x140 [ 1197.349844][T25748] do_syscall_64+0x4c/0xa0 [ 1197.354300][T25748] ? clear_bhb_loop+0x60/0xb0 [ 1197.359019][T25748] ? clear_bhb_loop+0x60/0xb0 [ 1197.363746][T25748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1197.369683][T25748] RIP: 0033:0x7f03fbb9ce59 [ 1197.374131][T25748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.393779][T25748] RSP: 002b:00007f03f9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1197.402232][T25748] RAX: ffffffffffffffda RBX: 00007f03fbe15fa0 RCX: 00007f03fbb9ce59 [ 1197.410234][T25748] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1197.418239][T25748] RBP: 00007f03f9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.426242][T25748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.434245][T25748] R13: 00007f03fbe16038 R14: 00007f03fbe15fa0 R15: 00007fff7e07ab98 [ 1197.442253][T25748] [ 1197.562822][T25760] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5927'. [ 1197.665208][T25760] netlink: 'syz.4.5927': attribute type 13 has an invalid length. [ 1197.752638][T25760] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5927'. [ 1198.377436][T21087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1198.389968][T21087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1198.398756][T21087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1198.406882][T21087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1198.417730][T21087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1198.425427][T21087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1198.906902][T25790] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.5935'. [ 1198.916464][T21087] Bluetooth: hci5: command 0x0409 tx timeout [ 1198.923785][T25790] netlink: zone id is out of range [ 1199.176260][T19314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.364448][T19314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.549186][T19314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.622538][T25774] chnl_net:caif_netlink_parms(): no params data found [ 1199.762274][T19314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.056261][T25774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.063727][T25774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.089091][T25774] device bridge_slave_0 entered promiscuous mode [ 1200.137469][T25827] netlink: 'syz.3.5945': attribute type 39 has an invalid length. [ 1200.205258][T25774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.219003][T25774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.227031][T25774] device bridge_slave_1 entered promiscuous mode [ 1200.305668][T19314] device 0 left promiscuous mode [ 1200.334779][T25774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1200.350911][T25774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.406801][T19314] device 0 left promiscuous mode [ 1200.431352][T25832] netlink: 'syz.2.5947': attribute type 11 has an invalid length. [ 1200.487104][T25774] team0: Port device team_slave_0 added [ 1200.513563][T21087] Bluetooth: hci1: command 0x0409 tx timeout [ 1200.516685][T19314] device .*! left promiscuous mode [ 1200.627803][T25774] team0: Port device team_slave_1 added [ 1200.709523][T25774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.749779][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.835660][T25774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.076372][T25774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.089559][T25774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.125850][T25774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.530041][T25865] netlink: 'syz.2.5954': attribute type 13 has an invalid length. [ 1201.565043][T25865] netlink: 'syz.2.5954': attribute type 14 has an invalid length. [ 1201.572923][T25865] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1201.608282][T25774] device hsr_slave_0 entered promiscuous mode [ 1201.632587][T25774] device hsr_slave_1 entered promiscuous mode [ 1202.231102][T25892] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1202.594618][T21087] Bluetooth: hci1: command 0x041b tx timeout [ 1203.020189][T25774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1203.074798][T25774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1203.126230][T25913] netlink: 'syz.4.5964': attribute type 29 has an invalid length. [ 1203.566453][T25774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1203.587355][T25913] netlink: 'syz.4.5964': attribute type 29 has an invalid length. [ 1203.608609][T25774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1203.664380][T25916] netlink: 'syz.4.5964': attribute type 29 has an invalid length. [ 1204.313439][T19314] device hsr_slave_0 left promiscuous mode [ 1204.335964][T19314] device hsr_slave_1 left promiscuous mode [ 1204.427763][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.448029][T19314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.514897][T19314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.553058][T19314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.694222][T21087] Bluetooth: hci1: command 0x040f tx timeout [ 1204.694236][T19314] bridge0: port 3(dummy0) entered disabled state [ 1204.730429][T19314] device bridge_slave_1 left promiscuous mode [ 1204.746609][T19314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.797979][T19314] device bridge_slave_0 left promiscuous mode [ 1204.820622][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.928522][T25951] netlink: 'syz.2.5970': attribute type 2 has an invalid length. [ 1205.948283][T25957] netlink: 'syz.3.5972': attribute type 29 has an invalid length. [ 1206.757705][T21087] Bluetooth: hci1: command 0x0419 tx timeout [ 1207.023952][T25949] netlink: 'syz.4.5971': attribute type 10 has an invalid length. [ 1207.044768][T25957] netlink: 'syz.3.5972': attribute type 29 has an invalid length. [ 1207.164308][T25774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1207.222528][T25774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.230829][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1207.311013][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1207.344118][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1207.353958][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1207.397868][T19308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.405060][T19308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.489467][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1207.534370][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1207.579677][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1207.635304][T19308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.642450][T19308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.704074][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1207.765206][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1207.814284][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1207.870482][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1207.914761][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1207.975617][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1208.062805][T25774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1208.120380][T25774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1208.192200][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1208.234313][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1208.280691][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1208.320406][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1208.390529][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1208.433914][T26016] netlink: 'syz.4.5986': attribute type 2 has an invalid length. [ 1208.438773][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1208.603941][T26024] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1209.655608][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1209.715947][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1209.752911][T25774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.837714][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1209.858114][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1209.941041][T19314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1209.960189][T19314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1209.976607][T25774] device veth0_vlan entered promiscuous mode [ 1209.988843][T26073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1209.996209][T26073] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.003515][T26073] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.010754][T26073] IPv6: NLM_F_CREATE should be set when creating new route [ 1210.038762][T19314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1210.061888][T19314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1210.089742][T26075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1210.129255][T25774] device veth1_vlan entered promiscuous mode [ 1210.217901][T25774] device veth0_macvtap entered promiscuous mode [ 1210.227909][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1210.237626][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1210.246419][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1210.311376][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1210.336135][T25774] device veth1_macvtap entered promiscuous mode [ 1210.370776][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1210.392929][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1210.472571][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.521986][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.544578][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.576735][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.612724][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.640764][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.662333][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.686250][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.712802][T25774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.741399][T26090] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6005'. [ 1210.752059][T26090] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1210.791985][T26090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1210.843995][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1210.909607][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1210.955077][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.029912][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.059643][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.080490][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.102395][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.120918][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.151292][T25774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.182826][T25774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.216550][T25774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1211.245992][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1211.269983][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1211.334326][T25774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.356214][T25774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.386259][T25774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.413476][T25774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.720640][T26127] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1211.773596][T26127] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1211.834311][T19310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.842165][T19310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.877947][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1211.987870][T19310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.026698][T19310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.054201][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1213.161742][T26173] netlink: 'syz.2.6026': attribute type 7 has an invalid length. [ 1213.199293][T26173] netlink: 208404 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1213.301029][T26169] netlink: 'syz.1.6025': attribute type 3 has an invalid length. [ 1213.443359][T26169] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6025'. [ 1214.035185][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.074835][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.083308][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.102087][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.111057][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1214.119094][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.382873][T26193] netlink: 'syz.0.6030': attribute type 27 has an invalid length. [ 1214.458006][T26193] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6030'. [ 1214.636276][T19310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.813896][T19310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.996674][T19310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.116263][T19310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.231027][T26184] chnl_net:caif_netlink_parms(): no params data found [ 1215.594767][T26184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.647562][T26184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.684831][T26184] device bridge_slave_0 entered promiscuous mode [ 1215.795205][T26240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6039'. [ 1216.203364][T21087] Bluetooth: hci3: command 0x0409 tx timeout [ 1216.270250][T26184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.280278][T26184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.291401][T26184] device bridge_slave_1 entered promiscuous mode [ 1216.335709][T26240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6039'. [ 1216.487904][T26184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.545607][T26184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.860458][T26184] team0: Port device team_slave_0 added [ 1217.104526][T26184] team0: Port device team_slave_1 added [ 1217.179604][T26184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.208992][T26184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.235525][T26288] netlink: 'syz.0.6049': attribute type 11 has an invalid length. [ 1217.235596][T26288] netlink: 'syz.0.6049': attribute type 6 has an invalid length. [ 1217.235668][T26288] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1217.275724][T21087] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 1217.323290][T26184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.351671][T26292] netlink: 87536 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1217.484784][T26184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.496933][T26184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.564683][T26184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.731006][T26184] device hsr_slave_0 entered promiscuous mode [ 1217.749962][T26184] device hsr_slave_1 entered promiscuous mode [ 1217.780771][T26184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1217.804346][T26184] Cannot create hsr debugfs directory [ 1217.894542][T26300] netlink: 'syz.2.6051': attribute type 4 has an invalid length. [ 1217.923306][T26300] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1217.975498][T26300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1218.070778][T26308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1218.273621][T21087] Bluetooth: hci3: command 0x041b tx timeout [ 1218.476295][T26326] netlink: 'syz.0.6058': attribute type 3 has an invalid length. [ 1218.533388][T26326] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1218.624304][T26330] netlink: 'syz.1.6060': attribute type 27 has an invalid length. [ 1218.667160][T26330] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1218.837814][T26336] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.6061'. [ 1219.404065][T19310] device hsr_slave_0 left promiscuous mode [ 1219.429829][T19310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.443297][T19310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.451367][T19310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.469178][T19310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.781429][T26356] netlink: 'syz.0.6065': attribute type 3 has an invalid length. [ 1219.819998][T26356] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1220.363558][T21087] Bluetooth: hci3: command 0x040f tx timeout [ 1221.316027][T26184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1221.336344][T26184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1221.373660][T26184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1221.425555][T26184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1221.582577][T21087] Bluetooth: hci4: ISO packet for unknown connection handle 1794 [ 1221.646832][T26184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.702291][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1221.715003][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1221.924558][T26184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.931536][T26392] tap0: tun_chr_ioctl cmd 2147767517 [ 1222.019104][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1222.032208][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1222.051946][T19297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.059159][T19297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.077518][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1222.098052][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1222.116804][T19297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.124026][T19297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.175156][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1222.203928][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1222.258578][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1222.295472][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1222.326147][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1222.356490][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1222.383749][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1222.397091][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1222.443538][T21087] Bluetooth: hci3: command 0x0419 tx timeout [ 1222.461109][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1222.538810][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1222.573346][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1222.602464][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1222.652448][T26184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1222.792974][T26423] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1222.804242][T26418] netlink: 'syz.0.6079': attribute type 3 has an invalid length. [ 1222.820986][T26418] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1223.309034][T26444] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1223.608980][T26454] netlink: 'syz.1.6088': attribute type 39 has an invalid length. [ 1223.906408][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1223.944268][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1223.956993][T26184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.969599][T26474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6091'. [ 1224.817330][T26496] netlink: 'syz.2.6095': attribute type 10 has an invalid length. [ 1224.834562][T26496] netlink: 'syz.2.6095': attribute type 19 has an invalid length. [ 1224.854562][T26496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6095'. [ 1225.282811][T26512] tap0: tun_chr_ioctl cmd 1074025673 [ 1225.434525][T26519] netlink: 'syz.2.6101': attribute type 3 has an invalid length. [ 1225.462377][T26519] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1225.599044][T26521] netlink: 'syz.3.6102': attribute type 21 has an invalid length. [ 1225.641170][T26521] netlink: 'syz.3.6102': attribute type 1 has an invalid length. [ 1225.705099][T26521] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1225.761260][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1225.776312][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1225.799973][T26536] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1225.843024][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1225.867584][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1225.905119][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1225.999991][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1226.048398][T26184] device veth0_vlan entered promiscuous mode [ 1226.057925][T26549] netlink: 'syz.2.6107': attribute type 16 has an invalid length. [ 1226.065431][T26184] device veth1_vlan entered promiscuous mode [ 1226.076713][T26549] netlink: 'syz.2.6107': attribute type 4 has an invalid length. [ 1226.094210][T26549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1226.142939][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1226.214284][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1226.258382][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1226.289725][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1226.294843][T26559] delete_channel: no stack [ 1226.323011][T26559] delete_channel: no stack [ 1226.340790][T26184] device veth0_macvtap entered promiscuous mode [ 1226.349291][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1226.376865][T26184] device veth1_macvtap entered promiscuous mode [ 1226.469144][T26562] netlink: 'syz.2.6110': attribute type 9 has an invalid length. [ 1226.526545][T26562] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.6110'. [ 1226.597246][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.733432][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.783273][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.823239][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.868230][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.923308][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.967895][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.985515][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.018879][T26184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.048329][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1227.070652][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1227.101618][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.119293][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.130437][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.151973][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.191732][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.211786][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.227353][T26184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.251549][T26184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.283053][T26184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.351913][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1227.369076][T19308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1227.443010][T26588] device syzkaller0 entered promiscuous mode [ 1227.470869][T26184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.480471][T26184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.489658][T26184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.503431][T26184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.545089][T26602] netlink: 'syz.3.6119': attribute type 33 has an invalid length. [ 1227.559575][T26602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6119'. [ 1230.512916][T26613] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.6122'. [ 1230.522251][T26613] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.6122'. [ 1230.532220][T26613] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.6122'. [ 1230.683836][T19315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.691750][T19315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.770263][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1230.825611][T19308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.831723][T26632] netlink: 'syz.3.6128': attribute type 2 has an invalid length. [ 1230.843299][T26632] netlink: 'syz.3.6128': attribute type 8 has an invalid length. [ 1230.851093][T26632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6128'. [ 1230.861466][T19308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.887957][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1231.106055][T26635] tap0: tun_chr_ioctl cmd 2147767517 [ 1231.223754][T26639] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1232.321047][T26659] netlink: 'syz.0.6137': attribute type 46 has an invalid length. [ 1232.636888][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1232.650237][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1232.721343][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1232.730920][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1232.740198][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1232.763497][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1233.049036][T26676] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6141'. [ 1233.073615][T26675] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6141'. [ 1233.173636][T26679] tap0: tun_chr_ioctl cmd 2147767517 [ 1233.239702][T26682] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6143'. [ 1233.585230][T26692] netlink: 'syz.0.6147': attribute type 27 has an invalid length. [ 1233.618743][T26692] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1233.625229][T26670] chnl_net:caif_netlink_parms(): no params data found [ 1233.959965][T19315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.003756][T26670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.019995][T26670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.032931][T26707] netlink: 'syz.2.6152': attribute type 3 has an invalid length. [ 1234.057145][T26670] device bridge_slave_0 entered promiscuous mode [ 1234.074235][T26707] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1234.098854][T26670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.121056][T26670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.148370][T26670] device bridge_slave_1 entered promiscuous mode [ 1234.212009][T19315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.344084][T26670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.442712][T19315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.511494][T26670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.595417][T19315] batman_adv: batadv0: Removing interface: netdevsim0 [ 1234.625822][T19315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.815995][T26670] team0: Port device team_slave_0 added [ 1234.834182][T21087] Bluetooth: hci5: command 0x0409 tx timeout [ 1234.913370][T26670] team0: Port device team_slave_1 added [ 1234.969243][T26670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.064132][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.343053][T26670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.366071][T26670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.373080][T26670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.410632][T26670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.524571][T21087] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1235.651390][T19315] device 0 left promiscuous mode [ 1235.681603][T26670] device hsr_slave_0 entered promiscuous mode [ 1235.724654][T26670] device hsr_slave_1 entered promiscuous mode [ 1235.736539][T26670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1235.758554][T26670] Cannot create hsr debugfs directory [ 1235.824602][T19315] device .*! left promiscuous mode [ 1236.869078][T26801] delete_channel: no stack [ 1236.923254][T21087] Bluetooth: hci5: command 0x041b tx timeout [ 1237.110842][T26810] netlink: 'syz.3.6177': attribute type 10 has an invalid length. [ 1237.130916][T26810] bridge0: port 3(bond0) entered disabled state [ 1237.137485][T26810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.144964][T26810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.203272][T26810] bridge0: port 3(bond0) entered blocking state [ 1237.209763][T26810] bridge0: port 3(bond0) entered forwarding state [ 1237.216473][T26810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.223645][T26810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.231079][T26810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.238312][T26810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.258207][T26810] bridge0: port 3(bond0) entered disabled state [ 1237.264742][T26810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.271980][T26810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.444746][T26670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1237.478697][T26670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1237.553437][T21087] Bluetooth: hci2: command 0x2016 tx timeout [ 1237.590034][T26670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1237.645890][T26670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1237.949432][T26829] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6181'. [ 1237.986911][T26835] netlink: 'syz.3.6181': attribute type 21 has an invalid length. [ 1238.020427][T26835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6181'. [ 1238.088021][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1238.164246][T19315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.172670][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1238.189242][T19315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.199724][T19315] batman_adv: batadv0: Interface deactivated: vlan1 [ 1238.238208][T19315] batman_adv: batadv0: Removing interface: vlan1 [ 1238.331937][T19315] device veth0_macvtap left promiscuous mode [ 1238.358356][T19315] device veth1_vlan left promiscuous mode [ 1238.466492][T26851] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.6186'. [ 1238.677428][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.683873][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.996151][T21087] Bluetooth: hci5: command 0x040f tx timeout [ 1240.525150][T26889] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1240.668638][T26670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.705998][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.758044][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.806148][T26670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.828869][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1240.858236][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.888980][T18848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.896243][T18848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.949687][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.982286][T26896] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6197'. [ 1241.027923][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.052566][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.083547][T21087] Bluetooth: hci5: command 0x0419 tx timeout [ 1241.152286][T18848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.159525][T18848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.195618][T26907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1241.295300][T26907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1241.358376][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.379651][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1241.403762][T26910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1241.461807][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1241.496503][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1241.538093][T19290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1241.594054][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1241.620601][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1241.669831][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1241.703831][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.750314][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.805312][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.836653][T26670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1242.354455][T26935] device wlan1 entered promiscuous mode [ 1242.872874][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1242.885358][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1242.908764][T26670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.984316][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1243.021991][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1243.069264][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1243.122212][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1243.177241][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1243.211126][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1243.222551][T26670] device veth0_vlan entered promiscuous mode [ 1243.292377][T26670] device veth1_vlan entered promiscuous mode [ 1243.361285][T26977] netlink: 'syz.2.6218': attribute type 2 has an invalid length. [ 1243.421692][T26977] netlink: 'syz.2.6218': attribute type 8 has an invalid length. [ 1243.441834][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1243.454546][T26977] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1243.462105][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1243.511881][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1243.567474][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1243.594762][T26670] device veth0_macvtap entered promiscuous mode [ 1243.638670][T19297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1243.672914][T26670] device veth1_macvtap entered promiscuous mode [ 1243.753948][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.783342][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.823689][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.872259][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.945503][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.993356][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.029888][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1244.113447][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.142674][T26670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.171830][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1244.212933][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1244.244534][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.272990][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.338296][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.365008][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.399703][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.412233][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.449715][T26670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1244.461532][T26670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1244.488323][T26670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.501722][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1244.575193][T19315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1244.622252][T26670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.643325][T26670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.681701][T26670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.723545][T26670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.779795][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1244.795356][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1244.827826][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1244.878179][T27020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1244.935688][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1244.985627][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1245.036436][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1245.105727][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1245.182910][T27017] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.6230'. [ 1245.369979][T19309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.389734][T19309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.420020][T19310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1245.482254][T18848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.503104][T18848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.541074][T18848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1246.069894][T27048] netlink: 'syz.4.6237': attribute type 10 has an invalid length. [ 1246.089323][T27048] device dummy0 entered promiscuous mode [ 1246.134690][T27048] bridge0: port 3(dummy0) entered blocking state [ 1246.156380][T27048] bridge0: port 3(dummy0) entered disabled state [ 1246.189042][T27048] bridge0: port 3(dummy0) entered blocking state [ 1246.195599][T27048] bridge0: port 3(dummy0) entered forwarding state [ 1246.616804][T27068] IPv6: NLM_F_CREATE should be specified when creating new route [ 1246.782985][T27078] netlink: 'syz.4.6244': attribute type 21 has an invalid length. [ 1247.864363][T27119] device hsr_slave_0 left promiscuous mode [ 1247.942303][T27119] device hsr_slave_1 left promiscuous mode [ 1248.257294][T27125] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1248.292669][T27125] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1248.314702][T27125] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1249.020345][T27149] can: request_module (can-proto-5) failed. [ 1249.167198][T27163] __nla_validate_parse: 38 callbacks suppressed [ 1249.167236][T27163] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1249.287444][T27166] netlink: 'syz.1.6267': attribute type 21 has an invalid length. [ 1249.365284][T27166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1249.807576][T27178] netlink: 'syz.2.6281': attribute type 4 has an invalid length. [ 1249.850850][T27178] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6281'. [ 1250.784637][T27190] batman_adv: batadv0: Interface deactivated: vlan1 [ 1250.903934][T27190] À: port 1(vlan0) entered disabled state [ 1251.708417][T27193] batman_adv: batadv0: Interface activated: vlan1 [ 1251.832084][T27199] mac80211_hwsim hwsim68 ªªªªªª: renamed from wlan0 [ 1251.853294][T27197] device sit0 left promiscuous mode [ 1251.959746][T27203] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6277'. [ 1252.286749][T27220] netlink: 'syz.3.6282': attribute type 39 has an invalid length. [ 1252.531844][T27223] netlink: 'syz.1.6283': attribute type 10 has an invalid length. [ 1252.550956][T27223] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6283'. [ 1252.560282][T27223] device hsr0 entered promiscuous mode [ 1252.572705][T27223] bridge0: port 3(hsr0) entered blocking state [ 1252.579705][T27223] bridge0: port 3(hsr0) entered disabled state [ 1252.607276][T27223] bridge0: port 3(hsr0) entered blocking state [ 1252.613881][T27223] bridge0: port 3(hsr0) entered forwarding state [ 1253.002264][T27235] netlink: 'syz.2.6284': attribute type 1 has an invalid length. [ 1253.085576][T27235] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1253.647324][T27268] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1253.930820][T27268] device hsr_slave_0 left promiscuous mode [ 1253.966328][T27268] device hsr_slave_1 left promiscuous mode [ 1254.200968][T27288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6300'. [ 1254.202366][T27281] netlink: 'syz.2.6299': attribute type 1 has an invalid length. [ 1254.223408][T27281] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1254.538158][T27303] netlink: 'syz.3.6303': attribute type 11 has an invalid length. [ 1254.582213][T27303] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6303'. [ 1255.101851][T27331] netlink: 'syz.3.6312': attribute type 3 has an invalid length. [ 1255.117727][T27331] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1255.247311][T27338] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1255.295719][T27336] netlink: 'syz.0.6311': attribute type 10 has an invalid length. [ 1255.345107][T27336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6311'. [ 1255.384199][T27336] device dummy0 entered promiscuous mode [ 1255.406191][T27336] bridge0: port 3(dummy0) entered blocking state [ 1255.424669][T27336] bridge0: port 3(dummy0) entered disabled state [ 1255.452517][T27336] bridge0: port 3(dummy0) entered blocking state [ 1255.459106][T27336] bridge0: port 3(dummy0) entered forwarding state [ 1255.718750][T27353] netlink: 'syz.1.6320': attribute type 6 has an invalid length. [ 1255.777549][T27353] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6320'. [ 1255.852507][T27357] netlink: 'syz.0.6319': attribute type 10 has an invalid length. [ 1255.912712][T27357] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1255.933795][T27357] device hsr0 entered promiscuous mode [ 1255.956066][T27357] bridge0: port 4(hsr0) entered blocking state [ 1256.010427][T27357] bridge0: port 4(hsr0) entered disabled state [ 1256.030531][T27357] bridge0: port 4(hsr0) entered blocking state [ 1256.037579][T27357] bridge0: port 4(hsr0) entered forwarding state [ 1256.447378][T27390] netlink: 'syz.2.6329': attribute type 4 has an invalid length. [ 1256.478864][T27390] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1258.117912][T27436] netlink: 'syz.2.6343': attribute type 2 has an invalid length. [ 1258.131879][T27436] netlink: 'syz.2.6343': attribute type 8 has an invalid length. [ 1258.184664][T27436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6343'. [ 1258.204366][T27443] netlink: 'syz.2.6343': attribute type 2 has an invalid length. [ 1258.220470][T27443] netlink: 'syz.2.6343': attribute type 8 has an invalid length. [ 1259.568335][T27486] validate_nla: 1 callbacks suppressed [ 1259.568352][T27486] netlink: 'syz.4.6358': attribute type 10 has an invalid length. [ 1259.623516][T27486] team0: Device veth1_vlan failed to register rx_handler [ 1263.612425][T27534] device veth0_vlan left promiscuous mode [ 1263.660200][T27534] device veth0_vlan entered promiscuous mode [ 1263.966325][T27538] device veth0_vlan left promiscuous mode [ 1264.010998][T27538] device veth0_vlan entered promiscuous mode [ 1264.627913][T27574] __nla_validate_parse: 3 callbacks suppressed [ 1264.627947][T27574] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1264.768921][T27583] netlink: 'syz.0.6388': attribute type 10 has an invalid length. [ 1264.814452][T27583] device geneve0 entered promiscuous mode [ 1264.959484][T27583] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1265.004638][T27591] : port 1(ip6gretap0) entered blocking state [ 1265.026376][T27591] : port 1(ip6gretap0) entered disabled state [ 1265.046924][T27591] device ip6gretap0 entered promiscuous mode [ 1265.069551][T27588] device ip6gretap0 left promiscuous mode [ 1265.090648][T27588] : port 1(ip6gretap0) entered disabled state [ 1265.599128][T27617] syz.3.6399[27617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1265.599274][T27617] syz.3.6399[27617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1266.257215][T27650] netlink: 'syz.2.6409': attribute type 1 has an invalid length. [ 1266.280598][T27650] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1266.292385][T27650] netlink: 'syz.2.6409': attribute type 3 has an invalid length. [ 1266.333392][T27650] netlink: 'syz.2.6409': attribute type 1 has an invalid length. [ 1266.341283][T27650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1266.566677][T27657] syz.4.6412[27657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1267.758045][T27718] netlink: 'syz.4.6428': attribute type 3 has an invalid length. [ 1267.846394][T27718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1267.858326][T27724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1267.911338][T27724] netlink: 'syz.3.6430': attribute type 12 has an invalid length. [ 1267.923586][T27724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1268.088888][T27734] netlink: 'syz.3.6430': attribute type 2 has an invalid length. [ 1268.149834][T27734] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1268.967225][T27743] netlink: 'syz.1.6434': attribute type 46 has an invalid length. [ 1269.042002][T27743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1269.082698][T27754] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1269.182335][T27761] netlink: 'syz.2.6439': attribute type 10 has an invalid length. [ 1269.371437][T27766] netlink: 'syz.3.6442': attribute type 3 has an invalid length. [ 1269.423997][T27766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6442'. [ 1269.462509][T27761] team0 (unregistering): Port device team_slave_0 removed [ 1270.390278][T27761] team0 (unregistering): Port device team_slave_1 removed [ 1270.453731][T27761] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.464635][T27761] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.479591][T27761] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.509178][T27761] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.568713][T27761] team0 (unregistering): Port device geneve1 removed [ 1271.472590][T27814] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6456'. [ 1271.703798][T27818] device veth0_vlan left promiscuous mode [ 1271.710363][T27818] device veth0_vlan entered promiscuous mode [ 1272.738765][T27862] netlink: 'syz.0.6468': attribute type 10 has an invalid length. [ 1273.272555][T27862] team0: Device wg1 is of different type [ 1273.433354][T27875] netlink: 'syz.2.6471': attribute type 29 has an invalid length. [ 1273.801735][T27884] device veth0_vlan left promiscuous mode [ 1273.829774][T27884] device veth0_vlan entered promiscuous mode [ 1273.914337][T27887] netlink: 'syz.0.6474': attribute type 12 has an invalid length. [ 1273.922485][T27887] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1274.305726][T27893] : port 1(ip6gretap0) entered blocking state [ 1274.322802][T27893] : port 1(ip6gretap0) entered disabled state [ 1274.348621][T27893] device ip6gretap0 entered promiscuous mode [ 1274.403936][T27905] device ip6gretap0 left promiscuous mode [ 1274.409879][T27905] : port 1(ip6gretap0) entered disabled state [ 1274.566512][T27911] netlink: 'syz.0.6478': attribute type 2 has an invalid length. [ 1274.613570][T27911] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1274.645074][T27913] netlink: 'syz.0.6478': attribute type 10 has an invalid length. [ 1274.682435][T27908] netlink: 'syz.1.6481': attribute type 1 has an invalid length. [ 1274.701129][T27913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.753873][T27913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.788480][T27913] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1274.793837][T27908] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6481'. [ 1274.951223][T27923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1274.958874][T27923] IPv6: NLM_F_CREATE should be set when creating new route [ 1274.966724][T27923] IPv6: NLM_F_CREATE should be set when creating new route [ 1274.974310][T27923] IPv6: NLM_F_CREATE should be set when creating new route [ 1275.310170][T27929] netlink: 'syz.3.6488': attribute type 1 has an invalid length. [ 1275.340666][T27929] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.6488'. [ 1275.373818][T27932] FAULT_INJECTION: forcing a failure. [ 1275.373818][T27932] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.405330][T27932] CPU: 0 PID: 27932 Comm: syz.2.6490 Not tainted syzkaller #0 [ 1275.412885][T27932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1275.422984][T27932] Call Trace: [ 1275.426295][T27932] [ 1275.429263][T27932] dump_stack_lvl+0x188/0x24e [ 1275.434001][T27932] ? show_regs_print_info+0x12/0x12 [ 1275.439250][T27932] ? load_image+0x400/0x400 [ 1275.443817][T27932] ? __might_sleep+0xd0/0xd0 [ 1275.448461][T27932] ? __lock_acquire+0x7d10/0x7d10 [ 1275.453546][T27932] ? aa_file_perm+0x3ea/0xf00 [ 1275.458285][T27932] should_fail_ex+0x399/0x4d0 [ 1275.463018][T27932] should_failslab+0x5/0x20 [ 1275.467559][T27932] slab_pre_alloc_hook+0x59/0x310 [ 1275.472639][T27932] ? kernfs_fop_write_iter+0x155/0x520 [ 1275.478158][T27932] __kmem_cache_alloc_node+0x4f/0x260 [ 1275.483586][T27932] ? kernfs_fop_write_iter+0x155/0x520 [ 1275.489081][T27932] __kmalloc+0xa0/0x240 [ 1275.493270][T27932] kernfs_fop_write_iter+0x155/0x520 [ 1275.498591][T27932] vfs_write+0x4b1/0xa30 [ 1275.502872][T27932] ? file_end_write+0x250/0x250 [ 1275.507761][T27932] ? __fget_files+0x43d/0x4b0 [ 1275.512479][T27932] ? __fdget_pos+0x2ae/0x360 [ 1275.517091][T27932] ? ksys_write+0x71/0x250 [ 1275.521541][T27932] ksys_write+0x14c/0x250 [ 1275.525902][T27932] ? __ia32_sys_read+0x80/0x80 [ 1275.530698][T27932] ? lockdep_hardirqs_on+0x94/0x140 [ 1275.535961][T27932] do_syscall_64+0x4c/0xa0 [ 1275.540398][T27932] ? clear_bhb_loop+0x60/0xb0 [ 1275.545094][T27932] ? clear_bhb_loop+0x60/0xb0 [ 1275.549793][T27932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1275.555701][T27932] RIP: 0033:0x7f03fbb9ce59 [ 1275.560135][T27932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.579772][T27932] RSP: 002b:00007f03f9df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1275.588215][T27932] RAX: ffffffffffffffda RBX: 00007f03fbe15fa0 RCX: 00007f03fbb9ce59 [ 1275.596206][T27932] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 1275.604193][T27932] RBP: 00007f03f9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.612179][T27932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.620312][T27932] R13: 00007f03fbe16038 R14: 00007f03fbe15fa0 R15: 00007fff7e07ab98 [ 1275.628346][T27932] [ 1276.363741][T27957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1276.705302][T27960] netlink: 'syz.1.6496': attribute type 10 has an invalid length. [ 1276.950936][T27960] device veth0_vlan left promiscuous mode [ 1277.017420][T27960] device veth0_vlan entered promiscuous mode [ 1277.099156][T27982] FAULT_INJECTION: forcing a failure. [ 1277.099156][T27982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.120294][T27960] team0: Device veth0_vlan failed to register rx_handler [ 1277.153858][T27982] CPU: 0 PID: 27982 Comm: syz.4.6504 Not tainted syzkaller #0 [ 1277.161421][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1277.171529][T27982] Call Trace: [ 1277.174855][T27982] [ 1277.177823][T27982] dump_stack_lvl+0x188/0x24e [ 1277.182555][T27982] ? show_regs_print_info+0x12/0x12 [ 1277.187802][T27982] ? load_image+0x400/0x400 [ 1277.192383][T27982] ? __lock_acquire+0x7d10/0x7d10 [ 1277.197477][T27982] should_fail_ex+0x399/0x4d0 [ 1277.202214][T27982] _copy_from_iter+0x1c0/0x1130 [ 1277.207107][T27982] ? __lock_acquire+0x7d10/0x7d10 [ 1277.212260][T27982] ? copyout_mc+0x110/0x110 [ 1277.216803][T27982] ? __virt_addr_valid+0x188/0x540 [ 1277.221966][T27982] ? __virt_addr_valid+0x188/0x540 [ 1277.227121][T27982] ? __virt_addr_valid+0x465/0x540 [ 1277.232286][T27982] ? __check_object_size+0x500/0xa40 [ 1277.237632][T27982] kernfs_fop_write_iter+0x1a0/0x520 [ 1277.242998][T27982] vfs_write+0x4b1/0xa30 [ 1277.247303][T27982] ? file_end_write+0x250/0x250 [ 1277.252217][T27982] ? __fget_files+0x43d/0x4b0 [ 1277.256993][T27982] ? __fdget_pos+0x2ae/0x360 [ 1277.261630][T27982] ? ksys_write+0x71/0x250 [ 1277.266107][T27982] ksys_write+0x14c/0x250 [ 1277.270493][T27982] ? __ia32_sys_read+0x80/0x80 [ 1277.275321][T27982] ? lockdep_hardirqs_on+0x94/0x140 [ 1277.280580][T27982] do_syscall_64+0x4c/0xa0 [ 1277.285029][T27982] ? clear_bhb_loop+0x60/0xb0 [ 1277.289740][T27982] ? clear_bhb_loop+0x60/0xb0 [ 1277.294470][T27982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.300403][T27982] RIP: 0033:0x7ff21d79ce59 [ 1277.304865][T27982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.324493][T27982] RSP: 002b:00007ff21e666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1277.324558][T27982] RAX: ffffffffffffffda RBX: 00007ff21da15fa0 RCX: 00007ff21d79ce59 [ 1277.324575][T27982] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 1277.324590][T27982] RBP: 00007ff21e666090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.324605][T27982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.324619][T27982] R13: 00007ff21da16038 R14: 00007ff21da15fa0 R15: 00007ffdc3063d48 [ 1277.324680][T27982] [ 1277.923616][T27996] netlink: 'syz.1.6508': attribute type 21 has an invalid length. [ 1277.931563][T27996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1278.130220][T28009] netlink: 'syz.2.6511': attribute type 3 has an invalid length. [ 1278.223469][T28009] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1279.114302][T28034] FAULT_INJECTION: forcing a failure. [ 1279.114302][T28034] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.163654][T28034] CPU: 1 PID: 28034 Comm: syz.0.6520 Not tainted syzkaller #0 [ 1279.171202][T28034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1279.181308][T28034] Call Trace: [ 1279.184643][T28034] [ 1279.187616][T28034] dump_stack_lvl+0x188/0x24e [ 1279.192359][T28034] ? show_regs_print_info+0x12/0x12 [ 1279.197611][T28034] ? load_image+0x400/0x400 [ 1279.202181][T28034] ? __might_sleep+0xd0/0xd0 [ 1279.206831][T28034] ? __lock_acquire+0x7d10/0x7d10 [ 1279.211935][T28034] should_fail_ex+0x399/0x4d0 [ 1279.216681][T28034] should_failslab+0x5/0x20 [ 1279.221222][T28034] slab_pre_alloc_hook+0x59/0x310 [ 1279.226293][T28034] ? __rwlock_init+0x140/0x140 [ 1279.231115][T28034] kmem_cache_alloc_lru+0x49/0x2e0 [ 1279.236270][T28034] ? iget_locked+0x206/0x830 [ 1279.240934][T28034] iget_locked+0x206/0x830 [ 1279.245425][T28034] kernfs_get_inode+0x4b/0x6d0 [ 1279.250270][T28034] cgroup_attach_permissions+0x26a/0x9d0 [ 1279.256098][T28034] __cgroup_procs_write+0x1e4/0x350 [ 1279.261389][T28034] cgroup_procs_write+0x23/0x40 [ 1279.266289][T28034] ? cgroup_procs_next+0xa0/0xa0 [ 1279.271271][T28034] cgroup_file_write+0x2c5/0x690 [ 1279.276245][T28034] ? read_lock_is_recursive+0x10/0x10 [ 1279.281648][T28034] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1279.286816][T28034] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1279.291947][T28034] kernfs_fop_write_iter+0x3b2/0x520 [ 1279.297273][T28034] vfs_write+0x4b1/0xa30 [ 1279.301553][T28034] ? file_end_write+0x250/0x250 [ 1279.306440][T28034] ? __fget_files+0x43d/0x4b0 [ 1279.311162][T28034] ? __fdget_pos+0x2ae/0x360 [ 1279.315771][T28034] ? ksys_write+0x71/0x250 [ 1279.320221][T28034] ksys_write+0x14c/0x250 [ 1279.324579][T28034] ? __ia32_sys_read+0x80/0x80 [ 1279.329388][T28034] ? lockdep_hardirqs_on+0x94/0x140 [ 1279.334611][T28034] do_syscall_64+0x4c/0xa0 [ 1279.339041][T28034] ? clear_bhb_loop+0x60/0xb0 [ 1279.343733][T28034] ? clear_bhb_loop+0x60/0xb0 [ 1279.348437][T28034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.354346][T28034] RIP: 0033:0x7f039699ce59 [ 1279.358779][T28034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.378407][T28034] RSP: 002b:00007f0397946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1279.386842][T28034] RAX: ffffffffffffffda RBX: 00007f0396c15fa0 RCX: 00007f039699ce59 [ 1279.394830][T28034] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 1279.402813][T28034] RBP: 00007f0397946090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.410802][T28034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.418797][T28034] R13: 00007f0396c16038 R14: 00007f0396c15fa0 R15: 00007ffd22b777c8 [ 1279.426830][T28034] [ 1285.166403][T28071] netlink: 'syz.1.6530': attribute type 21 has an invalid length. [ 1285.179019][T28070] netlink: 'syz.4.6529': attribute type 21 has an invalid length. [ 1285.212043][T28071] device wlan1 entered promiscuous mode [ 1285.329485][T28073] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6531'. [ 1285.371460][T28073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.676731][T28073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.009023][T28104] netlink: 'syz.4.6535': attribute type 3 has an invalid length. [ 1286.039524][T28090] netlink: 'syz.1.6534': attribute type 10 has an invalid length. [ 1286.066663][T28104] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6535'. [ 1286.089160][T28090] device wlan1 left promiscuous mode [ 1286.201903][T28090] team0: Port device wlan1 added [ 1289.726353][T28139] netlink: 'syz.2.6546': attribute type 6 has an invalid length. [ 1289.942953][T28149] netlink: 'syz.4.6549': attribute type 27 has an invalid length. [ 1290.315186][T28156] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1291.321928][T28184] netlink: 'syz.3.6558': attribute type 10 has an invalid length. [ 1291.382482][T28184] device dummy0 entered promiscuous mode [ 1291.391399][T28184] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1291.408676][T28188] netlink: 'syz.2.6561': attribute type 27 has an invalid length. [ 1291.416892][T28189] netlink: 'syz.3.6558': attribute type 10 has an invalid length. [ 1291.456497][T28188] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6561'. [ 1292.759640][T28212] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.6567'. [ 1292.806146][T28212] openvswitch: netlink: Key type 386 is out of range max 32 [ 1294.931564][T28251] netlink: 'syz.3.6580': attribute type 39 has an invalid length. [ 1295.237791][T28260] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.6584'. [ 1295.297904][T28260] netlink: 'syz.1.6584': attribute type 2 has an invalid length. [ 1295.327107][T28260] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6584'. [ 1295.482802][T28270] netlink: 'syz.2.6588': attribute type 21 has an invalid length. [ 1296.815369][T28298] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.6594'. [ 1296.883775][T28297] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1298.496643][T28350] netlink: 'syz.3.6610': attribute type 2 has an invalid length. [ 1298.529651][T28350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1299.041607][T28364] tap0: tun_chr_ioctl cmd 1074025677 [ 1299.047771][T28364] tap0: linktype set to 1 [ 1299.191482][T28364] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6612'. [ 1299.896507][T28374] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1300.122880][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.129307][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.307861][T28385] netlink: 'syz.2.6619': attribute type 13 has an invalid length. [ 1300.360138][T28385] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.6619'. [ 1300.814644][T28409] device sit0 entered promiscuous mode [ 1300.856123][T28412] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1300.931670][T28423] netlink: 'syz.1.6627': attribute type 2 has an invalid length. [ 1300.992799][T28423] netlink: 119 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1301.226994][T28429] netlink: 'syz.0.6631': attribute type 13 has an invalid length. [ 1301.263424][T28429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1301.318021][T28429] erspan0: refused to change device tx_queue_len [ 1301.338033][T28429] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1301.415755][T28432] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1301.454255][T28432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1301.507954][T28432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1301.535859][T28442] netlink: 'syz.2.6636': attribute type 21 has an invalid length. [ 1301.567902][T28442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1301.769826][T28453] netlink: 'syz.1.6639': attribute type 2 has an invalid length. [ 1303.640058][T28501] __nla_validate_parse: 1 callbacks suppressed [ 1303.640077][T28501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6652'. [ 1304.494213][T28513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6656'. [ 1304.881307][T28515] ================================================================== [ 1304.889437][T28515] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1304.897273][T28515] Write of size 104 at addr ffff888056ef9010 by task syz.3.6659/28515 [ 1304.905444][T28515] [ 1304.907784][T28515] CPU: 1 PID: 28515 Comm: syz.3.6659 Not tainted syzkaller #0 [ 1304.915266][T28515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1304.925358][T28515] Call Trace: [ 1304.928648][T28515] [ 1304.931595][T28515] dump_stack_lvl+0x188/0x24e [ 1304.936304][T28515] ? __lock_acquire+0x7d10/0x7d10 [ 1304.941356][T28515] ? show_regs_print_info+0x12/0x12 [ 1304.946582][T28515] ? load_image+0x400/0x400 [ 1304.951115][T28515] ? __virt_addr_valid+0x465/0x540 [ 1304.956254][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1304.961402][T28515] print_report+0xa8/0x210 [ 1304.965852][T28515] kasan_report+0x10b/0x140 [ 1304.970391][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1304.975535][T28515] kasan_check_range+0x235/0x290 [ 1304.980505][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1304.985643][T28515] memcpy+0x3c/0x60 [ 1304.989472][T28515] __bpf_get_stackid+0x6c9/0x920 [ 1304.994441][T28515] bpf_get_stackid_pe+0x33f/0x400 [ 1304.999490][T28515] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1305.004975][T28515] bpf_overflow_handler+0x522/0x7c0 [ 1305.010241][T28515] ? bpf_overflow_handler+0xd9/0x7c0 [ 1305.015554][T28515] ? perf_swevent_overflow+0x230/0x230 [ 1305.021036][T28515] ? ct_irq_exit_irqson+0x113/0x170 [ 1305.026352][T28515] ? __perf_event_account_interrupt+0x187/0x280 [ 1305.032643][T28515] __perf_event_overflow+0x448/0x610 [ 1305.037965][T28515] perf_swevent_event+0x315/0x570 [ 1305.043017][T28515] ? perf_tp_event+0xc30/0xc30 [ 1305.047811][T28515] ___perf_sw_event+0x49e/0x6e0 [ 1305.052693][T28515] ? ___perf_sw_event+0x180/0x6e0 [ 1305.057749][T28515] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1305.064213][T28515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1305.070408][T28515] ? lockdep_hardirqs_on+0x94/0x140 [ 1305.075637][T28515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1305.081831][T28515] __perf_sw_event+0x135/0x260 [ 1305.086633][T28515] do_user_addr_fault+0xaea/0xb10 [ 1305.091692][T28515] ? trace_hardirqs_off_finish+0x86/0x180 [ 1305.097449][T28515] exc_page_fault+0x60/0x100 [ 1305.102071][T28515] asm_exc_page_fault+0x22/0x30 [ 1305.106950][T28515] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1305.113561][T28515] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1305.133189][T28515] RSP: 0018:ffffc9000df1f108 EFLAGS: 00050202 [ 1305.139286][T28515] RAX: ffffffff84116f01 RBX: 00000000000005b0 RCX: 0000000000000318 [ 1305.147284][T28515] RDX: 00000000000005b0 RSI: 0000200000002000 RDI: ffff888076fd834c [ 1305.155284][T28515] RBP: 0000000000000000 R08: ffff888076fd8663 R09: 1ffff1100edfb0cc [ 1305.163281][T28515] R10: dffffc0000000000 R11: ffffed100edfb0cd R12: 00007fffffffea50 [ 1305.171282][T28515] R13: 0000200000001d68 R14: ffff888076fd80b4 R15: 0000200000001d68 [ 1305.179292][T28515] ? _copy_from_user+0xc1/0x170 [ 1305.184176][T28515] _copy_from_user+0xf4/0x170 [ 1305.188884][T28515] csum_and_copy_from_iter+0x493/0x1350 [ 1305.194467][T28515] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1305.200130][T28515] ? __kmem_cache_alloc_node+0x140/0x260 [ 1305.205789][T28515] ip_generic_getfrag+0x150/0x2e0 [ 1305.210958][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1305.215849][T28515] ? skb_put+0x117/0x210 [ 1305.220158][T28515] __ip_append_data+0x2b1f/0x3850 [ 1305.225220][T28515] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1305.230989][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1305.235866][T28515] ? ip_setup_cork+0x850/0x850 [ 1305.240651][T28515] ? ipv4_mtu+0x2c8/0x3e0 [ 1305.244997][T28515] ? ip_setup_cork+0x532/0x850 [ 1305.249768][T28515] ip_make_skb+0x227/0x440 [ 1305.254194][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1305.259043][T28515] ? ip_flush_pending_frames+0x250/0x250 [ 1305.264679][T28515] udp_sendmsg+0x1afb/0x23b0 [ 1305.269311][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1305.274161][T28515] ? udp_cmsg_send+0x350/0x350 [ 1305.278921][T28515] ? lockdep_hardirqs_on+0x94/0x140 [ 1305.284122][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1305.288797][T28515] ? _local_bh_enable+0xa0/0xa0 [ 1305.293729][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1305.298403][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1305.303074][T28515] ? inet_send_prepare+0x260/0x260 [ 1305.308177][T28515] ____sys_sendmsg+0x5be/0x970 [ 1305.312940][T28515] ? __sys_sendmsg_sock+0x30/0x30 [ 1305.317958][T28515] ? __import_iovec+0x315/0x500 [ 1305.322807][T28515] ? import_iovec+0x6f/0xa0 [ 1305.327302][T28515] ___sys_sendmsg+0x2a2/0x360 [ 1305.331978][T28515] ? __sys_sendmsg+0x290/0x290 [ 1305.336749][T28515] __se_sys_sendmsg+0x1bb/0x2a0 [ 1305.341594][T28515] ? __x64_sys_sendmsg+0x80/0x80 [ 1305.346534][T28515] do_syscall_64+0x4c/0xa0 [ 1305.350945][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1305.355621][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1305.360332][T28515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.366222][T28515] RIP: 0033:0x7f6c6db9ce59 [ 1305.370639][T28515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.390249][T28515] RSP: 002b:00007f6c6eb41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.398657][T28515] RAX: ffffffffffffffda RBX: 00007f6c6de15fa0 RCX: 00007f6c6db9ce59 [ 1305.406625][T28515] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000c [ 1305.414592][T28515] RBP: 00007f6c6dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1305.422558][T28515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.430526][T28515] R13: 00007f6c6de16038 R14: 00007f6c6de15fa0 R15: 00007ffce275dba8 [ 1305.438499][T28515] [ 1305.441512][T28515] [ 1305.443842][T28515] Allocated by task 28515: [ 1305.448253][T28515] kasan_set_track+0x4b/0x70 [ 1305.452840][T28515] __kasan_kmalloc+0x8e/0xa0 [ 1305.457426][T28515] __kmalloc_node+0xb0/0x240 [ 1305.462011][T28515] bpf_map_area_alloc+0x47/0xe0 [ 1305.466855][T28515] prealloc_elems_and_freelist+0x86/0x1c0 [ 1305.472569][T28515] stack_map_alloc+0x390/0x520 [ 1305.477325][T28515] map_create+0x534/0x1000 [ 1305.481736][T28515] __sys_bpf+0x38b/0x780 [ 1305.485974][T28515] __x64_sys_bpf+0x78/0x90 [ 1305.490384][T28515] do_syscall_64+0x4c/0xa0 [ 1305.494791][T28515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.500679][T28515] [ 1305.502993][T28515] Last potentially related work creation: [ 1305.508700][T28515] kasan_save_stack+0x3a/0x60 [ 1305.513375][T28515] __kasan_record_aux_stack+0xb2/0xc0 [ 1305.518737][T28515] call_rcu+0x14f/0x990 [ 1305.522989][T28515] nf_unregister_net_hooks+0xc7/0x130 [ 1305.528357][T28515] cleanup_net+0x591/0xba0 [ 1305.532770][T28515] process_one_work+0x8a2/0x1160 [ 1305.537749][T28515] worker_thread+0xaa2/0x1270 [ 1305.542418][T28515] kthread+0x29d/0x330 [ 1305.546536][T28515] ret_from_fork+0x1f/0x30 [ 1305.550993][T28515] [ 1305.553308][T28515] Second to last potentially related work creation: [ 1305.559885][T28515] kasan_save_stack+0x3a/0x60 [ 1305.564561][T28515] __kasan_record_aux_stack+0xb2/0xc0 [ 1305.569924][T28515] call_rcu+0x14f/0x990 [ 1305.574077][T28515] nf_unregister_net_hooks+0xc7/0x130 [ 1305.579446][T28515] nf_defrag_ipv4_disable+0x91/0xe0 [ 1305.584720][T28515] nf_ct_netns_put+0x2d6/0x510 [ 1305.589521][T28515] nf_conncount_destroy+0x3d/0x150 [ 1305.594717][T28515] ovs_ct_exit+0x98/0x200 [ 1305.599086][T28515] ovs_exit_net+0xe9/0x7a0 [ 1305.603534][T28515] cleanup_net+0x706/0xba0 [ 1305.607948][T28515] process_one_work+0x8a2/0x1160 [ 1305.612879][T28515] worker_thread+0xaa2/0x1270 [ 1305.617550][T28515] kthread+0x29d/0x330 [ 1305.621608][T28515] ret_from_fork+0x1f/0x30 [ 1305.626019][T28515] [ 1305.628331][T28515] The buggy address belongs to the object at ffff888056ef9000 [ 1305.628331][T28515] which belongs to the cache kmalloc-cg-64 of size 64 [ 1305.642463][T28515] The buggy address is located 16 bytes inside of [ 1305.642463][T28515] 64-byte region [ffff888056ef9000, ffff888056ef9040) [ 1305.655583][T28515] [ 1305.657896][T28515] The buggy address belongs to the physical page: [ 1305.664312][T28515] page:ffffea00015bbe40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56ef9 [ 1305.674456][T28515] memcg:ffff8880295d6401 [ 1305.678684][T28515] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1305.686243][T28515] raw: 00fff00000000200 ffffea000165f840 dead000000000004 ffff888017442780 [ 1305.694816][T28515] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880295d6401 [ 1305.703389][T28515] page dumped because: kasan: bad access detected [ 1305.709809][T28515] page_owner tracks the page as allocated [ 1305.715513][T28515] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7065, tgid 7064 (syz.1.739), ts 219217852129, free_ts 219213058774 [ 1305.733655][T28515] post_alloc_hook+0x173/0x1a0 [ 1305.738505][T28515] get_page_from_freelist+0x1a1e/0x1ab0 [ 1305.744048][T28515] __alloc_pages+0x1ec/0x4f0 [ 1305.748631][T28515] alloc_slab_page+0x5d/0x160 [ 1305.753301][T28515] new_slab+0x87/0x2c0 [ 1305.757361][T28515] ___slab_alloc+0xbc6/0x1240 [ 1305.762030][T28515] __kmem_cache_alloc_node+0x1a0/0x260 [ 1305.767479][T28515] __kmalloc_node+0xa0/0x240 [ 1305.772062][T28515] kvmalloc_node+0x6c/0x180 [ 1305.776574][T28515] nf_hook_entries_grow+0x309/0x730 [ 1305.781782][T28515] __nf_register_net_hook+0x2c9/0x910 [ 1305.787156][T28515] nf_register_net_hook+0xae/0x190 [ 1305.792267][T28515] nf_register_net_hooks+0x40/0x1a0 [ 1305.797459][T28515] nf_ct_netns_do_get+0x3bc/0x5b0 [ 1305.802477][T28515] nf_ct_netns_inet_get+0x1f/0x150 [ 1305.807585][T28515] nf_conncount_init+0x123/0x380 [ 1305.812523][T28515] page last free stack trace: [ 1305.817190][T28515] free_unref_page_prepare+0x8b4/0x9a0 [ 1305.822646][T28515] free_unref_page+0x2e/0x3f0 [ 1305.827322][T28515] tlb_finish_mmu+0x140/0x220 [ 1305.832082][T28515] exit_mmap+0x384/0x960 [ 1305.836319][T28515] __mmput+0x118/0x3c0 [ 1305.840381][T28515] exit_mm+0x25a/0x360 [ 1305.844456][T28515] do_exit+0x905/0x2480 [ 1305.848610][T28515] do_group_exit+0x217/0x2d0 [ 1305.853198][T28515] get_signal+0x1272/0x1350 [ 1305.857763][T28515] arch_do_signal_or_restart+0xc4/0x1350 [ 1305.863412][T28515] exit_to_user_mode_loop+0x70/0x110 [ 1305.868716][T28515] exit_to_user_mode_prepare+0xee/0x180 [ 1305.874262][T28515] syscall_exit_to_user_mode+0x16/0x40 [ 1305.879717][T28515] do_syscall_64+0x58/0xa0 [ 1305.884123][T28515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.890011][T28515] [ 1305.892324][T28515] Memory state around the buggy address: [ 1305.897955][T28515] ffff888056ef8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1305.906018][T28515] ffff888056ef8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1305.914072][T28515] >ffff888056ef9000: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1305.922121][T28515] ^ [ 1305.927502][T28515] ffff888056ef9080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1305.935555][T28515] ffff888056ef9100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1305.943603][T28515] ================================================================== [ 1305.951653][T28515] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1305.958835][T28515] CPU: 1 PID: 28515 Comm: syz.3.6659 Not tainted syzkaller #0 [ 1305.966283][T28515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1305.976413][T28515] Call Trace: [ 1305.979686][T28515] [ 1305.982607][T28515] dump_stack_lvl+0x188/0x24e [ 1305.987285][T28515] ? memcpy+0x3c/0x60 [ 1305.991261][T28515] ? show_regs_print_info+0x12/0x12 [ 1305.996455][T28515] ? load_image+0x400/0x400 [ 1306.000955][T28515] panic+0x2e5/0x730 [ 1306.004846][T28515] ? bpf_jit_dump+0xd0/0xd0 [ 1306.009347][T28515] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1306.015235][T28515] ? _raw_spin_unlock+0x40/0x40 [ 1306.020087][T28515] ? print_memory_metadata+0x314/0x400 [ 1306.025543][T28515] check_panic_on_warn+0x80/0xa0 [ 1306.030478][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1306.035581][T28515] end_report+0x66/0x110 [ 1306.039822][T28515] kasan_report+0x118/0x140 [ 1306.044343][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1306.049470][T28515] kasan_check_range+0x235/0x290 [ 1306.054408][T28515] ? __bpf_get_stackid+0x6c9/0x920 [ 1306.059513][T28515] memcpy+0x3c/0x60 [ 1306.063316][T28515] __bpf_get_stackid+0x6c9/0x920 [ 1306.068245][T28515] bpf_get_stackid_pe+0x33f/0x400 [ 1306.073262][T28515] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1306.078713][T28515] bpf_overflow_handler+0x522/0x7c0 [ 1306.083906][T28515] ? bpf_overflow_handler+0xd9/0x7c0 [ 1306.089182][T28515] ? perf_swevent_overflow+0x230/0x230 [ 1306.094631][T28515] ? ct_irq_exit_irqson+0x113/0x170 [ 1306.099825][T28515] ? __perf_event_account_interrupt+0x187/0x280 [ 1306.106074][T28515] __perf_event_overflow+0x448/0x610 [ 1306.111358][T28515] perf_swevent_event+0x315/0x570 [ 1306.116384][T28515] ? perf_tp_event+0xc30/0xc30 [ 1306.121146][T28515] ___perf_sw_event+0x49e/0x6e0 [ 1306.125996][T28515] ? ___perf_sw_event+0x180/0x6e0 [ 1306.131018][T28515] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1306.137439][T28515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1306.143593][T28515] ? lockdep_hardirqs_on+0x94/0x140 [ 1306.148786][T28515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1306.154938][T28515] __perf_sw_event+0x135/0x260 [ 1306.159714][T28515] do_user_addr_fault+0xaea/0xb10 [ 1306.164736][T28515] ? trace_hardirqs_off_finish+0x86/0x180 [ 1306.170541][T28515] exc_page_fault+0x60/0x100 [ 1306.175131][T28515] asm_exc_page_fault+0x22/0x30 [ 1306.180005][T28515] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1306.186588][T28515] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1306.206186][T28515] RSP: 0018:ffffc9000df1f108 EFLAGS: 00050202 [ 1306.212244][T28515] RAX: ffffffff84116f01 RBX: 00000000000005b0 RCX: 0000000000000318 [ 1306.220207][T28515] RDX: 00000000000005b0 RSI: 0000200000002000 RDI: ffff888076fd834c [ 1306.228170][T28515] RBP: 0000000000000000 R08: ffff888076fd8663 R09: 1ffff1100edfb0cc [ 1306.236130][T28515] R10: dffffc0000000000 R11: ffffed100edfb0cd R12: 00007fffffffea50 [ 1306.244094][T28515] R13: 0000200000001d68 R14: ffff888076fd80b4 R15: 0000200000001d68 [ 1306.252088][T28515] ? _copy_from_user+0xc1/0x170 [ 1306.256943][T28515] _copy_from_user+0xf4/0x170 [ 1306.261615][T28515] csum_and_copy_from_iter+0x493/0x1350 [ 1306.267157][T28515] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1306.272785][T28515] ? __kmem_cache_alloc_node+0x140/0x260 [ 1306.278414][T28515] ip_generic_getfrag+0x150/0x2e0 [ 1306.283441][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1306.288288][T28515] ? skb_put+0x117/0x210 [ 1306.292525][T28515] __ip_append_data+0x2b1f/0x3850 [ 1306.297546][T28515] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1306.303273][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1306.308127][T28515] ? ip_setup_cork+0x850/0x850 [ 1306.312884][T28515] ? ipv4_mtu+0x2c8/0x3e0 [ 1306.317214][T28515] ? ip_setup_cork+0x532/0x850 [ 1306.321975][T28515] ip_make_skb+0x227/0x440 [ 1306.326389][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1306.331234][T28515] ? ip_flush_pending_frames+0x250/0x250 [ 1306.336872][T28515] udp_sendmsg+0x1afb/0x23b0 [ 1306.341460][T28515] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1306.346311][T28515] ? udp_cmsg_send+0x350/0x350 [ 1306.351072][T28515] ? lockdep_hardirqs_on+0x94/0x140 [ 1306.356266][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1306.360938][T28515] ? _local_bh_enable+0xa0/0xa0 [ 1306.365783][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1306.370452][T28515] ? inet_sendmsg+0x147/0x2f0 [ 1306.375121][T28515] ? inet_send_prepare+0x260/0x260 [ 1306.380231][T28515] ____sys_sendmsg+0x5be/0x970 [ 1306.384991][T28515] ? __sys_sendmsg_sock+0x30/0x30 [ 1306.390005][T28515] ? __import_iovec+0x315/0x500 [ 1306.394854][T28515] ? import_iovec+0x6f/0xa0 [ 1306.399350][T28515] ___sys_sendmsg+0x2a2/0x360 [ 1306.404024][T28515] ? __sys_sendmsg+0x290/0x290 [ 1306.408802][T28515] __se_sys_sendmsg+0x1bb/0x2a0 [ 1306.413669][T28515] ? __x64_sys_sendmsg+0x80/0x80 [ 1306.418605][T28515] do_syscall_64+0x4c/0xa0 [ 1306.423011][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1306.427689][T28515] ? clear_bhb_loop+0x60/0xb0 [ 1306.432359][T28515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1306.438247][T28515] RIP: 0033:0x7f6c6db9ce59 [ 1306.442654][T28515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.462254][T28515] RSP: 002b:00007f6c6eb41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.470657][T28515] RAX: ffffffffffffffda RBX: 00007f6c6de15fa0 RCX: 00007f6c6db9ce59 [ 1306.478618][T28515] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000c [ 1306.486579][T28515] RBP: 00007f6c6dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1306.494543][T28515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.502504][T28515] R13: 00007f6c6de16038 R14: 00007f6c6de15fa0 R15: 00007ffce275dba8 [ 1306.510476][T28515] [ 1306.513745][T28515] Kernel Offset: disabled [ 1306.518063][T28515] Rebooting in 86400 seconds..