last executing test programs: 11m56.987674109s ago: executing program 2 (id=904): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 11m56.733952577s ago: executing program 2 (id=907): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x80, 0x0}, 0x200000c0) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x2, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000140)="f177b6", 0x3}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r6}, 0x8) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffffffffffffff8d}], 0x1, 0x0, 0xfffffffffffffe32}, 0x8d5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_1\x00', 0x400}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x8, 0x7, 0x15d4, 0x10, r7, 0x4c0, '\x00', r8, r6, 0x2, 0x4, 0x1, 0xa}, 0x50) 11m53.613646585s ago: executing program 2 (id=910): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000007b0000009500"/32], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xaa4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d1e9a958e2f6184c6aecc01eaa4a36b9bba2d527f3b2dc36f6d9ff416e0aab0ab74dc1836c7c9dc1b689da1cf9fca14a233bc4bc4daed80186b281daf5c53f84ed292531f140fbb275136c1778317ca3d263cb66f4f65baf3be8659d66189c02a484791521adca6d5da79e39a7fb264e61e0434df8e600"/151, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) close(r0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000da7b0000", @ANYBLOB], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r6) r8 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 11m53.153599099s ago: executing program 2 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m49.94927691s ago: executing program 2 (id=925): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000007b0000009500"/32], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xaa4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d1e9a958e2f6184c6aecc01eaa4a36b9bba2d527f3b2dc36f6d9ff416e0aab0ab74dc1836c7c9dc1b689da1cf9fca14a233bc4bc4daed80186b281daf5c53f84ed292531f140fbb275136c1778317ca3d263cb66f4f65baf3be8659d66189c02a484791521adca6d5da79e39a7fb264e61e0434df8e600"/151, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) close(r0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000da7b0000", @ANYBLOB], 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 11m46.793587859s ago: executing program 2 (id=935): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x7000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (rerun: 32) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={&(0x7f0000000500)="a9f82cf68921418f1f7909a88ae92bef8865d9e12667f4baedd6fc81bf834acdede5a011d0fb06aca63067d55e96fb28103ad6d6c786b27c377bd7b1f924298ec7e359c89c83005daebf07b583346d9c6a77892557a8a974c97a39ec7e771d7e3aa07271446fa18b2157cbf1f96fcdc9d23324aa3ec99c2aae5ba1d885021e836acfa7e187dd6479aaadfc27756a98387bc1791570bd8ea093ae4c263d60bc6c47c8b6fd6ce1f229", &(0x7f00000005c0)=""/143, &(0x7f0000000680)="d5a160f45534ec1231f4ada3f7ca35e39604dc4edc2a0e70877334cf44403c477c88eef171622fde795d3c447153c939ffcb80028aeca21d5449fa0fba185197ec02e47a82b81b89422889e3f2fd5d3c155e778f98baecc1e8b87517a0e93369c774aef17272534624ad83d7c11a98bef150ee601b6669358e102b7ad02c3e95991f93a8544c72a2968305a62df7b209bcbb2c5a95042942ca0d48c11e54962351e73a", &(0x7f0000000740)="587078f546c2abaf6008890c575e97314e21c9fbb0c191949eec8019b124964aa2a168830b7860c654051d4a2ea0e5903f883661926f1171b4394c0d3a70fd6657048f84a521a70b932ed86c51ba85b43777dcc83273a7b898c2f7e6d59461a658f999eaf9be5c3bebea70dc8ad2b7e0df9324641b03be1c69fec5", 0x5, r0}, 0x38) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000080)=r7) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) 11m31.252617278s ago: executing program 32 (id=935): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x7000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) (rerun: 32) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000007c0)={&(0x7f0000000500)="a9f82cf68921418f1f7909a88ae92bef8865d9e12667f4baedd6fc81bf834acdede5a011d0fb06aca63067d55e96fb28103ad6d6c786b27c377bd7b1f924298ec7e359c89c83005daebf07b583346d9c6a77892557a8a974c97a39ec7e771d7e3aa07271446fa18b2157cbf1f96fcdc9d23324aa3ec99c2aae5ba1d885021e836acfa7e187dd6479aaadfc27756a98387bc1791570bd8ea093ae4c263d60bc6c47c8b6fd6ce1f229", &(0x7f00000005c0)=""/143, &(0x7f0000000680)="d5a160f45534ec1231f4ada3f7ca35e39604dc4edc2a0e70877334cf44403c477c88eef171622fde795d3c447153c939ffcb80028aeca21d5449fa0fba185197ec02e47a82b81b89422889e3f2fd5d3c155e778f98baecc1e8b87517a0e93369c774aef17272534624ad83d7c11a98bef150ee601b6669358e102b7ad02c3e95991f93a8544c72a2968305a62df7b209bcbb2c5a95042942ca0d48c11e54962351e73a", &(0x7f0000000740)="587078f546c2abaf6008890c575e97314e21c9fbb0c191949eec8019b124964aa2a168830b7860c654051d4a2ea0e5903f883661926f1171b4394c0d3a70fd6657048f84a521a70b932ed86c51ba85b43777dcc83273a7b898c2f7e6d59461a658f999eaf9be5c3bebea70dc8ad2b7e0df9324641b03be1c69fec5", 0x5, r0}, 0x38) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000080)=r7) (async) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) 5m38.470171718s ago: executing program 1 (id=2680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m34.944596759s ago: executing program 1 (id=2687): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x406) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_clone(0x10241000, &(0x7f00000000c0)="4e29d63467da3d789cb6a622cf980756f51b08fa997a86a6920419464bece379598f2c05268b83a8634395d4e2116a3581227b436612423056cad1d50246dbf5354228f9ad10ae58846016", 0x4b, &(0x7f0000000180), 0x0, &(0x7f0000000200)='k9') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, r2, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x9}]}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x891b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d7", 0xd7}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002a00)=""/4102, 0x1006}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x22) 5m33.902911801s ago: executing program 1 (id=2692): socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) 5m32.684814059s ago: executing program 1 (id=2697): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0xfffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x6, r0, 0x3) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8531}, 0x0, 0x2, r0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 5m32.116075607s ago: executing program 1 (id=2699): socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0xc, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], &(0x7f00000004c0)='GPL\x00', 0x7, 0xd6, &(0x7f0000000680)=""/214, 0x41100, 0x1a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0xe, 0x9, 0x7ff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r0, r0], 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000064b60a0000000000000000007b1af8ff00000000bfa1000000000000ffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200, 0x830, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$kcm(0x2, 0x2, 0x73) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m31.216995696s ago: executing program 1 (id=2701): socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@restrict={0x7f, 0x0, 0x0, 0xb, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x41, 0x4}]}, {0x0, [0x5f, 0xe, 0x0, 0x0, 0x2e, 0x6f, 0x61]}}, &(0x7f00000013c0)=""/4096, 0x3d, 0x1000, 0x0, 0x7, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4008, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac14", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu<0a\xe3\x90\x9f') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 5m15.458960191s ago: executing program 33 (id=2701): socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@restrict={0x7f, 0x0, 0x0, 0xb, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x41, 0x4}]}, {0x0, [0x5f, 0xe, 0x0, 0x0, 0x2e, 0x6f, 0x61]}}, &(0x7f00000013c0)=""/4096, 0x3d, 0x1000, 0x0, 0x7, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x2, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4008, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac14", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu<0a\xe3\x90\x9f') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2m56.610842452s ago: executing program 4 (id=3053): r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)='#*\xbe[:[\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@cred={{0x1c}}], 0x20}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x10) socketpair(0x1, 0xb, 0x10, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000800000005f9ff000000000b04000000000000000400000d00a9010000000000000000000f0000000100000005000000000000000b00000003000000006161615f5f2e00"], &(0x7f0000002700)=""/236, 0x58, 0xec, 0x1, 0x4}, 0x28) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 2m55.513695516s ago: executing program 4 (id=3058): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m54.590517566s ago: executing program 4 (id=3060): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = syz_clone(0x1c18c000, &(0x7f00000001c0)="a92000"/17, 0x11, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000000c0)='./file0\x00', r6}, 0x18) r7 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x8001, @private2, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="270300ff8dcfdc268a", 0x9}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) 2m53.254028478s ago: executing program 4 (id=3073): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000640)={r0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x5f, 0x7, 0x20, 0x5}, 0x2f) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000008000000fa0400004501000000000040", @ANYRES32, @ANYBLOB="0000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x74, &(0x7f00000000c0)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff71ef288543"], 0xffdd) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000008b81bc31b1373e769f96d2f00000003fecdcb5b21a6fca799785", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2m49.825939436s ago: executing program 4 (id=3071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb704, 0x0) socketpair(0x10, 0x2, 0x4, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x8, 0x8, 0xa, 0x0, 0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x9082, 0x5, 0x7, 0x7, 0x2, 0x4b, 0x56, 0x0, 0x30c, 0x0, 0x4}, r0, 0x10, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="1400000015000b63d25a9a197b9df73d05000000", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061108c00000000006b0a00ff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 2m47.774066781s ago: executing program 4 (id=3079): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000020000000000000e03400000000300005f00"/45], 0x0, 0x2d}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.115548913s ago: executing program 34 (id=3079): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000020000000000000e03400000000300005f00"/45], 0x0, 0x2d}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.995188732s ago: executing program 3 (id=3377): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8,N'], 0x6a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4008, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r5, r3, 0x26, 0x8, 0x0, @void, @value=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$kcm(0xa, 0x2, 0x88) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.508993037s ago: executing program 3 (id=3384): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000840)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000ac0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcb}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x7, 0x12) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xd8, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000500000001", @ANYRES32, @ANYBLOB="00000000000000000016000000000000008eb80014fb97649f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0xc, 0x1, 0xff, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1f, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3214}, @map_idx_val={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0x1a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xc060}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0xfff, 0x7c, &(0x7f00000007c0)=""/124, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x1, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000900)=[{0x3, 0x5, 0x8}, {0x1, 0x3, 0x9, 0xa}, {0x3, 0x3, 0x8, 0x2}, {0x0, 0x1, 0x9, 0x5}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="180000000400000000000000", @ANYRESOCT=r1, @ANYBLOB="c7dfd251de68212829ead1e8b968186494a835260c55ff99abfeda94a42baafa589a156c21f1c8a2a7f8dcde195d924015072c17e0c2a4f535d604c61b2ef43d0078cd", @ANYRES64=r9], 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x32, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x3, 0x1, 0xdc66b1ad735a390b, 0x30}, @jmp={0x5, 0x1, 0x9, 0x5, 0x6, 0x4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x3, 0xd9, &(0x7f0000000300)=""/217, 0x550ecf88e55fefc4, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x3, 0xc, 0x6}, {0x2, 0x4, 0xc, 0x4}, {0xe, 0x2, 0x8, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x2, 0x1, 0x3, 0xb}, {0x2, 0x4, 0x4, 0x1}, {0x1, 0x5, 0x6, 0x6}, {0x0, 0x5, 0xc, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="3000000004000000", @ANYRES32=r6, @ANYBLOB="800a9512cdaf2de5e33fda17c86a4d2b628fb502e9d2f522ad070000000000000012a1a340d2fc256eb9e5b67c5104", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r9], 0x20) 4.41373728s ago: executing program 7 (id=3385): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e14f008004de7f9c764360000002100135433f6e31e17128c", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'pim6reg\x00', 0x400}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 4.4115352s ago: executing program 5 (id=3387): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x26d60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x20a0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000005000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x38, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 4.140614769s ago: executing program 6 (id=3388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb704, 0x0) socketpair(0x10, 0x2, 0x4, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="1400000015000b63d25a9a197b9df73d05000000", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 4.12625191s ago: executing program 0 (id=3389): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45", 0xc}], 0x1, 0x0, 0x0, 0x400300}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000980)={0x0, 0x0}) close(r1) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x2b, 0x1, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 3.908418776s ago: executing program 7 (id=3390): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x921b0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000000fc181edb25e69f097458d3d5ffb62c20f972e806f366346ab4f796c68146f2ca108b96af362d79e403e8b6e533e71b867576e7dec322357b5a437f849f365e9aea4e94fe82c7b5e2fe108f64c19916293cbf06583f787805127e232ef2eaccf7b0efa92699fdee0c3d6e5fce71bd80375810368b1df3f03c6ab5c38fddba5e6396792a410e945a5257e799754c6b42a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e423", 0x38}, {&(0x7f0000001740)="ba733b3229f151bda96b0d7a9951e944755a20662ef250c2939ab8d1dcf0", 0x1e}], 0x2}, 0x24000008) r3 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2d63707561636374202d6e65745f7072696f202b6d656d6f72792010630475736574202d6e65745f7072696f202b626c6b696f202b726c696d697620"], 0x3c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000120081ae0000dc676f97daf01e2357f9ffffffffffffff0521", 0x1d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000580)=""/263, 0x39, 0x107, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000000240)=@caif=@dbg={0x25, 0x4, 0x8}, 0x80, 0x0}, 0x4000850) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000040), 0x4) 3.879270307s ago: executing program 6 (id=3391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.745836131s ago: executing program 0 (id=3392): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r4}) 3.639293515s ago: executing program 5 (id=3393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, 0x1}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000010073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)}, {&(0x7f00000003c0)="10ce82ea1179d85b8dc2651e33010e6f", 0x10}], 0x2, &(0x7f0000001100)=[{0xc0, 0x108, 0xa29, "197be8d4eb3369a8855148ae3d3a5d1007ea5919bcb23401eeea38f117d4ea4cdf54f0d3b937b0753fc62aeaae758678c9d5d5326b11051fd5c7a43c4a4b77b516a1f036fcd602cdba872cf43f9e73bb1bbb48f0fddefbcd3a2e00da09108fc15f3d7d15acbf82001073bde9a21b26fec70c254ab5736204d6f2b4312a4a1b6dd8ccdc24503ce0c0a97e912c49c054f8e7117c6743628a13de1e503072244ffe7a71b2f43ab80a9d8e"}, {0xb8, 0x3a, 0x8, "9fb631438f02926dc1cc81e60adcc9d63e28a81051d769c52d556da28542454cfef99f9d0fc37ef9a093fe09fa8ee684d24a3b2b9840a15f42dd5a9d9358cf418a0c119f85cff55f511d5942efa23221464219212dc4fe0da958ce2b8c6b3b36552568f9a018461c1da4696d734e0601c4cacf958fadd2001a90250155f45551dae3ca06335f504003453b38ec97fdd7e3a2c46093f17d18fedab0430209231aefeff46d1a5df2"}, {0x30, 0x116, 0x0, "96a161a7f73b7fadd40e0579d5ca20b56de909e3feb8b91ee13f0e"}, {0xe8, 0x10d, 0xfffffffe, "5fb52c19e4848d3ebe7f3c8d96a28e4aaaa9ef4580122ad85e3f8b0c4b7bc668b7dc0fb5730fd9d341ca3d8ea24ac4c0b7d3ac8eb62e45897963194455b22ae154bc191298483eeb75916c34abdb0051918ee625358e3ed1c4a5e5daf4457e14653a1323b2e117589bad201b6427a6bc97b0b675567db037af199bcbb847c624e925903d221e60682e559c03c865cf557aff4141eca3677f4b81f241fff23fddce648b9b9602baf0b7757733ebec9906a5f078887e58506fd56c0efcd65186e681c3ad7490167441f57bcc3f136675d78a18"}, {0x68, 0x103, 0x5, "9cf26ba6a16643005c4bba100244cecba24f922f2d9782bf5be5cec59ed9ec1d5e48aa28a3679468b8d84b0a3d8dfdfafd3e31640ea900a3cffa267e75bb563e5a5129bb3fea4862019bcd73c95b1d87da85aac642c1ed9f"}], 0x2f8}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r6}, 0x18) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x26, &(0x7f0000000240), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000200)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.538799498s ago: executing program 7 (id=3394): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8,N'], 0x6a) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4008, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r5, r3, 0x26, 0x8, 0x0, @void, @value=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891f, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.47704477s ago: executing program 0 (id=3395): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001440)={r2, r4}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5, 0xffffffffffffff81, 0x7, 0x0, 0x0, 0xa34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) sendmsg$inet(r1, &(0x7f0000001400)={&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000180)="02a60263a4e72c04cc732dbcb37a70982a057a695c5eab68c8cc03ea00cc8395c35049c1451e1a758f714145ab3b40e6f2b3", 0x32}, {&(0x7f00000001c0)="a4ec8d", 0x3}, {&(0x7f0000001300)="adcaa25a4c3fca25d5ff18e9680f7b2c1931c99f9668d0a710bb79a3e7edd2b96f09cd7d5dcf6e01cc009cbef75cb1cae19033c0dab13e4a554af24459d2a3709ca81de0fa3912dc6fd5d570cbe10583d6b360df98ef5f58e9676a83360c6197a1179ca16c63e6ed246262c13cae42cd7732f3688b2cad830a01b21ea97a2ee1228c62377e2a2b704cc2392b2be836bac7be031bf557687a8778fd02b4adb302131b0f620ce69c1f87bef24dc367c4", 0xaf}], 0x3}, 0x20000000) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xff0}, 0x8) 3.451106611s ago: executing program 6 (id=3396): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x1a48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x14}, {0x6, 0x3}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="c59401ef29", 0x5}], 0x1, &(0x7f0000000240)="669f2251c6b8a55b733b821e97017167a7074fef44f7526ce50ce1888a7595c7b891833513a8a86b8bc039278aea9330c2dbb60d2090c5cb79e274c6459f1f7f6c329c5ed59853cd8b852fc128474b27c465cd482df0e781381d4e027d39adb8a1c7d1a4934e61ab2d17b4fded3cbead35e528266102c302c3", 0x79, 0x40000}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 3.370926554s ago: executing program 3 (id=3397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3.294466946s ago: executing program 0 (id=3398): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8ef5, 0x2, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x84) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x10000, 0x400000, 0x5, 0x0, 0x100}, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x2, 0x800, 0xfffffff9, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1800, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 3.195696359s ago: executing program 5 (id=3399): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000400000000000084fdffffff006100302e5f005162d27caa0a5860c0f71bd5ea42a22748"], 0x0, 0x2b}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x15, 0x5, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000180)='%d\x1e\x00\x00\x00j\xfe?oz f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\xaa\xb3\x00\x00\x00\x00\x00\x00\xd4\xb5\x0f\x00\x00\x00\x00\x00\x00\x00Q\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000400000000000084fdffffff006100302e5f005162d27caa0a5860c0f71bd5ea42a22748"], 0x0, 0x2b}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x15, 0x5, 0x0) (async) close(r1) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000180)='%d\x1e\x00\x00\x00j\xfe?oz f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\xaa\xb3\x00\x00\x00\x00\x00\x00\xd4\xb5\x0f\x00\x00\x00\x00\x00\x00\x00Q\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') (async) 3.17056138s ago: executing program 3 (id=3400): r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)='#*\xbe[:[\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x10) socketpair(0x1, 0xb, 0x10, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000800000005f9ff000000000b04000000000000000400000d00a9010000000000000000000f0000000100000005000000000000000b00000003000000006161615f5f2e00"], &(0x7f0000002700)=""/236, 0x58, 0xec, 0x1, 0x4}, 0x28) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 3.1698693s ago: executing program 7 (id=3401): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0500000008000000fa0400004501000000000040", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000", 0xd5}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000008b81bc31b1373e769f96d2f00000003fecdcb5b21a6fca799785", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 2.5243772s ago: executing program 3 (id=3402): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45", 0xc}], 0x1, 0x0, 0x0, 0x400300}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000980)={0x0, 0x0}) close(r1) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x2b, 0x1, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 1.986688647s ago: executing program 6 (id=3403): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x26d60, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000340), 0x2}, 0x20a0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000005000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdir(0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x38, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) 1.89754269s ago: executing program 5 (id=3404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xb704, 0x0) socketpair(0x10, 0x2, 0x4, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="1400000015000b63d25a9a197b9df73d05000000", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 1.832015882s ago: executing program 0 (id=3405): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x12, 0x3, 0x9, 0x5, 0x0, 0x7fffffffffffffff, 0x1110, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, @perf_config_ext={0x1000, 0xcd0f}, 0x8001, 0xff, 0xfffffff9, 0x1, 0x7, 0xc5b0, 0x37, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x80000001}, 0x10103, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = syz_clone(0x8880a000, &(0x7f0000000180)="4bae333f055eaa6bd8dcb1d7b5be54d954c0b648cfececff8a6c8a1e6aa129b6955a3e1efbabf60c273cd562dcde1dd6dffec1d2f40d87aff0e137583521aa7d5e5de102425e610b16955b7d7975a9315dcb6011fab95a4a5d19731ad52ec951ba702176e4f1e15952e3319a6c9d8631c0b701", 0x73, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000500)="3e44b9920a043987eb2d26db40c14597dfc3dead45bf8c24fdd428454aa7793b158c008b56749a9d8b62e374bc9be4311e1d405fd68857d65c18d6ca4085639bd64c0974d644a2ff91a6d176efae9206f87a43e9ebd9a9bc243446cfd545bfe16b371748a880bdd3f4fceeff80dc4f502fccc61076af3cd3d448f5ac5048e466864ea9cc9094ffb361a2875fba9644eddeebaca7a94efaa787551ca51eac6a6d519505c9cee7042148b084864a893628c104684a1e7658e7554eb4d4defe2208e121275b22be19f0518339365f66b4d07516f6cc6ab8a6e50677") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r5, r2, 0x0, 0x1, &(0x7f0000000600)='\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.274781729s ago: executing program 3 (id=3406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.194632342s ago: executing program 5 (id=3407): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)="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"}], 0x100000000000012a}, 0x0) 946.93933ms ago: executing program 7 (id=3408): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001440)={r1, r3}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5, 0xffffffffffffff81, 0x7, 0x0, 0x0, 0xa34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xff0}, 0x8) 664.665129ms ago: executing program 6 (id=3409): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 422.784237ms ago: executing program 5 (id=3410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 375.517728ms ago: executing program 0 (id=3411): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) (fail_nth: 1) 249.035592ms ago: executing program 7 (id=3412): r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)='#*\xbe[:[\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socket$kcm(0x2, 0x3, 0x2) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x10) socketpair(0x1, 0xb, 0x10, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000800000005f9ff000000000b04000000000000000400000d00a9010000000000000000000f0000000100000005000000000000000b00000003000000006161615f5f2e00"], &(0x7f0000002700)=""/236, 0x58, 0xec, 0x1, 0x4}, 0x28) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 0s ago: executing program 6 (id=3413): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000005c0), 0x8}, 0x0, 0x2, 0xfffffffe, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e105000000894f000f110186cee84400000008000000001900000000000200000000000000000000000000266c", 0x3e}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x81}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9e", 0x4}], 0x4}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161c00, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) kernel console output (not intermixed with test programs): 0][T11649] netlink: 'syz.5.2577': attribute type 25 has an invalid length. [ 680.571853][T11655] netlink: 'syz.5.2582': attribute type 2 has an invalid length. [ 680.622336][T11655] netlink: 'syz.5.2582': attribute type 8 has an invalid length. [ 680.651858][T11655] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2582'. [ 685.690737][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.697433][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.891166][T11715] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 686.923307][T11715] netlink: 'syz.4.2601': attribute type 4 has an invalid length. [ 686.944273][T11715] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2601'. [ 688.095982][T11725] netlink: 'syz.5.2604': attribute type 25 has an invalid length. [ 688.312318][T11726] netlink: 'syz.4.2605': attribute type 2 has an invalid length. [ 688.348939][T11726] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2605'. [ 688.693953][T11732] netlink: 'syz.5.2607': attribute type 10 has an invalid length. [ 689.087074][T11732] team0: Port device geneve1 added [ 689.397577][T11738] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 689.405425][T11738] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2609'. [ 692.260215][T11757] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 692.306081][T11757] netlink: 'syz.4.2615': attribute type 4 has an invalid length. [ 692.388251][T11757] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2615'. [ 694.538543][T11783] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2624'. [ 694.681183][T11783] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 696.471569][T11810] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 696.536323][T11810] netlink: 'syz.3.2631': attribute type 4 has an invalid length. [ 696.633409][T11810] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2631'. [ 696.717899][T11811] netlink: 'syz.4.2632': attribute type 25 has an invalid length. [ 700.349551][T11845] netlink: 'syz.4.2642': attribute type 3 has an invalid length. [ 700.432393][T11845] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2642'. [ 700.543301][T11850] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2642'. [ 702.929521][T11871] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 703.034685][T11873] netlink: set zone limit has 8 unknown bytes [ 703.066002][T11871] netlink: 'syz.3.2648': attribute type 4 has an invalid length. [ 703.181722][T11871] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2648'. [ 703.353219][T11875] netlink: 'syz.4.2651': attribute type 21 has an invalid length. [ 703.386146][T11875] IPv6: NLM_F_CREATE should be specified when creating new route [ 707.869849][T11904] FAULT_INJECTION: forcing a failure. [ 707.869849][T11904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.900583][T11903] FAULT_INJECTION: forcing a failure. [ 707.900583][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 707.938248][T11904] CPU: 0 PID: 11904 Comm: syz.4.2661 Not tainted syzkaller #0 [ 707.945908][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.956039][T11904] Call Trace: [ 707.959379][T11904] [ 707.962375][T11904] dump_stack_lvl+0x188/0x250 [ 707.967155][T11904] ? show_regs_print_info+0x20/0x20 [ 707.972438][T11904] ? load_image+0x400/0x400 [ 707.977106][T11904] should_fail+0x38c/0x4c0 [ 707.981717][T11904] prepare_alloc_pages+0x1e4/0x5f0 [ 707.986958][T11904] __alloc_pages+0x11b/0x480 [ 707.991648][T11904] ? zone_statistics+0x170/0x170 [ 707.996750][T11904] ? alloc_pages+0x438/0x550 [ 708.001451][T11904] skb_page_frag_refill+0x225/0x4c0 [ 708.006748][T11904] sk_page_frag_refill+0x4a/0x200 [ 708.011871][T11904] __ip6_append_data+0x15d7/0x38c0 [ 708.017302][T11904] ? ip6_setup_cork+0x11e0/0x11e0 [ 708.022526][T11904] ? ip6_setup_cork+0xc63/0x11e0 [ 708.027581][T11904] ip6_append_data+0x1d4/0x310 [ 708.032411][T11904] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 708.037361][T11904] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 708.042322][T11904] l2tp_ip6_sendmsg+0x11c7/0x1700 [ 708.047499][T11904] ? __might_sleep+0xf0/0xf0 [ 708.052161][T11904] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 708.057665][T11904] ? aa_af_perm+0x340/0x340 [ 708.062253][T11904] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 708.068768][T11904] ? sock_rps_record_flow+0x17/0x3b0 [ 708.074141][T11904] ? inet_sendmsg+0x78/0x2f0 [ 708.078803][T11904] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.084160][T11904] ? security_socket_sendmsg+0x7c/0xa0 [ 708.089733][T11904] ? inet_send_prepare+0x260/0x260 [ 708.094918][T11904] ____sys_sendmsg+0x5b7/0x8f0 [ 708.099813][T11904] ? __sys_sendmsg_sock+0x30/0x30 [ 708.104988][T11904] ? import_iovec+0x6f/0xa0 [ 708.109602][T11904] ___sys_sendmsg+0x236/0x2e0 [ 708.114417][T11904] ? __sys_sendmsg+0x2a0/0x2a0 [ 708.119356][T11904] ? trace_event_raw_event_lock+0x270/0x270 [ 708.125490][T11904] ? vfs_write+0x8b2/0xd60 [ 708.130151][T11904] __se_sys_sendmsg+0x1af/0x290 [ 708.135195][T11904] ? __x64_sys_sendmsg+0x80/0x80 [ 708.140208][T11904] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 708.146350][T11904] ? lockdep_hardirqs_on+0x94/0x140 [ 708.151662][T11904] do_syscall_64+0x4c/0xa0 [ 708.156141][T11904] ? clear_bhb_loop+0x30/0x80 [ 708.160884][T11904] ? clear_bhb_loop+0x30/0x80 [ 708.165737][T11904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.171769][T11904] RIP: 0033:0x7fa1e14e5e59 [ 708.176260][T11904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.195939][T11904] RSP: 002b:00007fa1df73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.204524][T11904] RAX: ffffffffffffffda RBX: 00007fa1e175efa0 RCX: 00007fa1e14e5e59 [ 708.212735][T11904] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 708.220768][T11904] RBP: 00007fa1df73f090 R08: 0000000000000000 R09: 0000000000000000 [ 708.228804][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.236841][T11904] R13: 00007fa1e175f038 R14: 00007fa1e175efa0 R15: 00007ffe442499d8 [ 708.244992][T11904] [ 708.260955][T11903] CPU: 1 PID: 11903 Comm: syz.1.2660 Not tainted syzkaller #0 [ 708.268515][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.278642][T11903] Call Trace: [ 708.281991][T11903] [ 708.284991][T11903] dump_stack_lvl+0x188/0x250 [ 708.289774][T11903] ? show_regs_print_info+0x20/0x20 [ 708.295065][T11903] ? load_image+0x400/0x400 [ 708.299691][T11903] ? __lock_acquire+0x7d10/0x7d10 [ 708.304808][T11903] ? rcu_lock_acquire+0x30/0x30 [ 708.309777][T11903] should_fail+0x38c/0x4c0 [ 708.314325][T11903] should_failslab+0x5/0x20 [ 708.318913][T11903] slab_pre_alloc_hook+0x51/0xc0 [ 708.323940][T11903] ? security_file_alloc+0x30/0x110 [ 708.329234][T11903] kmem_cache_alloc+0x3d/0x290 [ 708.334075][T11903] ? rcu_is_watching+0x11/0xa0 [ 708.338951][T11903] security_file_alloc+0x30/0x110 [ 708.344082][T11903] __alloc_file+0xc2/0x240 [ 708.348609][T11903] alloc_empty_file+0x90/0x180 [ 708.353470][T11903] path_openat+0x10f/0x2fa0 [ 708.358322][T11903] ? do_filp_open+0x410/0x410 [ 708.363096][T11903] ? perf_trace_lock+0x301/0x390 [ 708.368183][T11903] ? trace_event_raw_event_lock+0x270/0x270 [ 708.374223][T11903] do_filp_open+0x1e2/0x410 [ 708.378868][T11903] ? vfs_tmpfile+0x300/0x300 [ 708.383723][T11903] ? _raw_spin_unlock+0x24/0x40 [ 708.388656][T11903] ? alloc_fd+0x598/0x630 [ 708.393144][T11903] do_sys_openat2+0x150/0x4b0 [ 708.397903][T11903] ? __lock_acquire+0x7d10/0x7d10 [ 708.403050][T11903] ? do_sys_open+0xe0/0xe0 [ 708.407566][T11903] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 708.413657][T11903] ? lock_chain_count+0x20/0x20 [ 708.418599][T11903] ? vtime_user_exit+0x2c8/0x3e0 [ 708.423656][T11903] __x64_sys_openat+0x135/0x160 [ 708.428634][T11903] do_syscall_64+0x4c/0xa0 [ 708.433129][T11903] ? clear_bhb_loop+0x30/0x80 [ 708.437898][T11903] ? clear_bhb_loop+0x30/0x80 [ 708.442671][T11903] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.448640][T11903] RIP: 0033:0x7f9da769a68e [ 708.453485][T11903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.473185][T11903] RSP: 002b:00007f9da5932ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 708.481702][T11903] RAX: ffffffffffffffda RBX: 00007f9da59336c0 RCX: 00007f9da769a68e [ 708.489847][T11903] RDX: 0000000000000002 RSI: 00007f9da5932f90 RDI: ffffffffffffff9c [ 708.497894][T11903] RBP: 00007f9da5933090 R08: 0000000000000000 R09: 0000000000000000 [ 708.505940][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.513976][T11903] R13: 00007f9da7953038 R14: 00007f9da7952fa0 R15: 00007ffc89fcee78 [ 708.522151][T11903] [ 708.620143][T11906] netlink: 'syz.0.2659': attribute type 25 has an invalid length. [ 710.582389][T11923] netlink: 'syz.3.2665': attribute type 1 has an invalid length. [ 710.674080][T11923] netlink: 'syz.3.2665': attribute type 4 has an invalid length. [ 710.761176][T11923] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2665'. [ 715.357674][T11952] netlink: 2220 bytes leftover after parsing attributes in process `syz.4.2674'. [ 716.491446][T11958] netlink: 'syz.5.2675': attribute type 25 has an invalid length. [ 717.499229][T11972] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2679'. [ 718.587310][T11977] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 718.595197][T11977] netlink: 'syz.0.2682': attribute type 4 has an invalid length. [ 718.787361][T11977] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2682'. [ 721.411040][T11995] netlink: 'syz.1.2687': attribute type 21 has an invalid length. [ 722.208271][T12006] netlink: 'syz.5.2691': attribute type 21 has an invalid length. [ 722.357350][T12006] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2691'. [ 722.848791][T12006] netlink: 'syz.5.2691': attribute type 16 has an invalid length. [ 723.040337][T12006] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2691'. [ 723.110904][T12010] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2691'. [ 723.951368][T12029] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2696'. [ 724.187648][T12029] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 725.362468][T12040] netlink: 'syz.1.2701': attribute type 3 has an invalid length. [ 725.409531][T12040] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2701'. [ 725.784752][T12042] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2701'. [ 730.105206][T12066] netlink: 'syz.4.2710': attribute type 25 has an invalid length. [ 731.045090][T12074] netlink: 'syz.5.2711': attribute type 1 has an invalid length. [ 731.096314][T12074] netlink: 'syz.5.2711': attribute type 4 has an invalid length. [ 731.227356][T12074] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2711'. [ 731.285312][T12077] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2714'. [ 731.351163][T12077] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 735.788304][T12109] netlink: 'syz.3.2725': attribute type 25 has an invalid length. [ 736.425333][T12116] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 736.486840][T12116] netlink: 'syz.4.2727': attribute type 4 has an invalid length. [ 736.526134][T12116] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2727'. [ 736.978395][T12119] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2730'. [ 737.055964][T12119] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 740.381308][T12148] netlink: 'syz.5.2738': attribute type 25 has an invalid length. [ 743.077452][T12160] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 743.173758][T12160] netlink: 'syz.4.2742': attribute type 4 has an invalid length. [ 743.229769][T12160] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2742'. [ 743.621257][T12165] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2743'. [ 743.682082][T12165] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 744.449033][T12157] chnl_net:caif_netlink_parms(): no params data found [ 744.726041][T10486] Bluetooth: hci4: command 0x0409 tx timeout [ 745.397161][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.437449][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.479949][T12157] device bridge_slave_0 entered promiscuous mode [ 745.522415][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.569750][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.610510][T12157] device bridge_slave_1 entered promiscuous mode [ 745.952715][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.040944][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.669749][T12157] team0: Port device team_slave_0 added [ 746.741619][T12157] team0: Port device team_slave_1 added [ 746.821766][T10486] Bluetooth: hci4: command 0x041b tx timeout [ 747.065562][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.132245][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.139042][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.157382][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.272271][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.411038][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.452239][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.586345][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.677267][T12197] netlink: 'syz.3.2752': attribute type 25 has an invalid length. [ 748.886216][ T4203] Bluetooth: hci4: command 0x040f tx timeout [ 750.195110][T12212] netlink: 'syz.0.2756': attribute type 1 has an invalid length. [ 750.216600][T12212] netlink: 'syz.0.2756': attribute type 4 has an invalid length. [ 750.224431][T12212] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2756'. [ 750.628569][T12157] device hsr_slave_0 entered promiscuous mode [ 750.678457][T12157] device hsr_slave_1 entered promiscuous mode [ 750.706475][T12157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.736303][T12157] Cannot create hsr debugfs directory [ 750.901047][T12220] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2758'. [ 750.966279][ T4203] Bluetooth: hci4: command 0x0419 tx timeout [ 750.990289][T12220] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 752.580871][T12157] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 752.825414][T12157] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 752.948185][T12157] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 753.056409][T12157] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 754.120138][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.289657][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 754.319391][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.349855][T12247] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 754.408356][T12247] netlink: 'syz.0.2767': attribute type 4 has an invalid length. [ 754.436334][T12247] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2767'. [ 754.495020][T12241] netlink: 'syz.5.2766': attribute type 25 has an invalid length. [ 754.589647][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.667840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 754.710592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.766012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.773305][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.903203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.938351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 754.997831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 755.047524][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.054733][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.146090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.215180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.290656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 755.337967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 755.388419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 755.447784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 755.498507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 755.551060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 755.611129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 755.718873][T12157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.796734][T12157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 755.835983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 755.868111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 756.424288][T12261] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2771'. [ 756.695973][T12261] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 758.227594][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 758.235637][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.332539][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.881893][T12287] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 759.979448][T12287] netlink: 'syz.0.2778': attribute type 4 has an invalid length. [ 760.076080][T12287] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2778'. [ 760.983612][T12295] netlink: 'syz.4.2780': attribute type 25 has an invalid length. [ 761.889511][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 761.910995][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.149005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 762.168287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 762.219038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.247756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.323823][T12157] device veth0_vlan entered promiscuous mode [ 762.466896][T12157] device veth1_vlan entered promiscuous mode [ 762.740251][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 762.768517][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 762.827724][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 762.888344][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.924961][T12157] device veth0_macvtap entered promiscuous mode [ 763.039144][T12157] device veth1_macvtap entered promiscuous mode [ 763.302015][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 763.375948][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.449214][T12157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.488882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 763.527446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 763.574327][T12157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 763.636791][T12157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 763.697925][T12157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.707894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 763.742818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 763.833030][T12157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.896062][T12157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.904858][T12157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.016088][T12157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.363379][T12316] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2786'. [ 764.646911][T12316] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 764.958405][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.006355][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.228142][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.321249][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.348429][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.386889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 768.471551][T12336] netlink: 'syz.6.2793': attribute type 25 has an invalid length. [ 770.240980][T12349] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.824997][ T3075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.040655][T12361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2799'. [ 772.156357][T12361] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 772.427397][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 774.482923][ T3075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.487349][T10486] Bluetooth: hci0: command 0x041b tx timeout [ 775.412127][ T3075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.324694][T12383] netlink: 'syz.6.2805': attribute type 25 has an invalid length. [ 776.567466][ T4203] Bluetooth: hci0: command 0x040f tx timeout [ 777.531746][T12351] chnl_net:caif_netlink_parms(): no params data found [ 778.646074][ T4203] Bluetooth: hci0: command 0x0419 tx timeout [ 779.721754][T12351] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.816274][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.887360][T12351] device bridge_slave_0 entered promiscuous mode [ 779.939469][T12351] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.976413][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.029746][T12351] device bridge_slave_1 entered promiscuous mode [ 780.284754][T12413] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2812'. [ 780.366992][T12413] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 780.803277][T12351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.897889][T12351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.960623][T12413] device sit0 entered promiscuous mode [ 783.621840][T12351] team0: Port device team_slave_0 added [ 783.690871][T12439] netlink: 'syz.5.2816': attribute type 25 has an invalid length. [ 783.879253][T12351] team0: Port device team_slave_1 added [ 784.280395][T12351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.336179][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.446066][T12351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.840258][T12351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.877234][T12351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.977516][T12351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.741699][T12351] device hsr_slave_0 entered promiscuous mode [ 785.817125][T12351] device hsr_slave_1 entered promiscuous mode [ 785.886526][T12351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.894201][T12351] Cannot create hsr debugfs directory [ 786.906203][T12462] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2823'. [ 786.915615][T12462] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 787.721983][T12474] nr0: port 1(hsr0) entered blocking state [ 787.769951][T12474] nr0: port 1(hsr0) entered disabled state [ 787.826598][T12474] device hsr0 entered promiscuous mode [ 788.143530][T12351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.610830][ T3075] team0: Port device wlan1 removed [ 788.914557][T12351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.012362][T12486] netlink: 'syz.3.2829': attribute type 25 has an invalid length. [ 789.383779][T12351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.631090][ T3075] device hsr_slave_0 left promiscuous mode [ 789.675846][ T3075] device hsr_slave_1 left promiscuous mode [ 789.908771][ T3075] device veth1_macvtap left promiscuous mode [ 789.914996][ T3075] device veth0_macvtap left promiscuous mode [ 789.981736][ T3075] device veth1_vlan left promiscuous mode [ 789.996981][ T3075] device veth0_vlan left promiscuous mode [ 793.587376][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 793.723180][ T3075] team0 (unregistering): Port device team_slave_0 removed [ 795.137950][T12510] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2834'. [ 795.231217][T12351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 795.246906][T12510] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 795.342032][T12351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 795.482051][T12351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 795.573634][T12351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 796.511937][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.665333][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 796.694195][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 796.779064][T12351] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.863005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 796.902460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 796.948765][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.956245][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.018931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 797.054410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 797.091226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 797.131798][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.139302][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.320285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 797.358644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 797.459296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 797.528717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 797.582960][T12535] netlink: 'syz.3.2840': attribute type 25 has an invalid length. [ 797.640511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 797.667886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 797.737918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 797.793514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 797.840948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 797.915612][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 797.966664][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 798.021633][T12351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 800.620655][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 800.637998][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 800.734434][T12351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.244772][T12571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2847'. [ 802.296307][T12571] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 804.161865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.198505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.394360][T12595] netlink: 'syz.0.2852': attribute type 25 has an invalid length. [ 804.455821][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.465587][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.543275][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.592329][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.656737][T12351] device veth0_vlan entered promiscuous mode [ 804.809864][T12351] device veth1_vlan entered promiscuous mode [ 805.132632][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 805.177829][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 805.227933][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 805.298075][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.345685][T12351] device veth0_macvtap entered promiscuous mode [ 805.449808][T12351] device veth1_macvtap entered promiscuous mode [ 805.689732][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.783015][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.842271][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.890349][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.960195][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.006371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 806.054340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 806.122328][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.185005][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.223542][T12351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.280224][T12351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.328848][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.399030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.437813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.522799][T12351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.590370][T12351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.639058][T12351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.693764][T12351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.688021][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.725915][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.733917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 808.111348][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.125913][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.133922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.581458][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.588304][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.813067][T12635] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2860'. [ 808.965067][T12635] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 809.261532][T12639] netlink: 'syz.4.2791': attribute type 1 has an invalid length. [ 809.336486][T12639] netlink: 'syz.4.2791': attribute type 4 has an invalid length. [ 809.344332][T12639] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2791'. [ 810.506266][T12650] netlink: 'syz.4.2865': attribute type 25 has an invalid length. [ 814.478018][T12686] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.106762][T12695] netlink: 'syz.5.2875': attribute type 1 has an invalid length. [ 816.114625][T12695] netlink: 'syz.5.2875': attribute type 4 has an invalid length. [ 816.178135][T12695] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2875'. [ 817.836437][T12705] nr0: port 1(hsr0) entered blocking state [ 817.842403][T12705] nr0: port 1(hsr0) entered disabled state [ 817.921462][T12705] device hsr0 entered promiscuous mode [ 818.228250][T12708] netlink: 'syz.5.2878': attribute type 25 has an invalid length. [ 818.646204][ T4233] Bluetooth: hci1: command 0x0409 tx timeout [ 818.739365][T12713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2879'. [ 818.946328][T12713] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 819.141654][T12696] chnl_net:caif_netlink_parms(): no params data found [ 820.681823][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.689797][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.703023][T12696] device bridge_slave_0 entered promiscuous mode [ 820.715671][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.725124][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.740425][T12696] device bridge_slave_1 entered promiscuous mode [ 820.755963][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 821.124386][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.192478][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.762954][T12696] team0: Port device team_slave_0 added [ 821.811411][T12696] team0: Port device team_slave_1 added [ 822.112697][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.161395][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.324448][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.449574][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.516118][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.657329][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.726639][T12754] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 822.768614][T12754] netlink: 'syz.4.2887': attribute type 4 has an invalid length. [ 822.808934][T12754] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2887'. [ 822.866691][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 823.389864][T12696] device hsr_slave_0 entered promiscuous mode [ 823.557527][T12696] device hsr_slave_1 entered promiscuous mode [ 823.716320][T12696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.724953][T12696] Cannot create hsr debugfs directory [ 823.921108][T12760] netlink: 'syz.4.2890': attribute type 25 has an invalid length. [ 825.060598][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 826.779195][T12696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.864872][T12777] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2893'. [ 826.955910][T12777] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 827.215518][T12696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.642765][T12696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.620334][T12696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.743650][T12696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 829.879251][T12696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 829.999853][T12696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.606977][T12807] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 830.699255][T12807] netlink: 'syz.3.2899': attribute type 4 has an invalid length. [ 830.793836][T12807] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2899'. [ 831.466463][T12696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.581428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.617832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 831.687042][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.698064][T12813] netlink: 'syz.4.2901': attribute type 25 has an invalid length. [ 831.776629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 831.790861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 831.857781][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.864963][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.936863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 832.008963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 832.077855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 832.137263][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.144442][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.236557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 832.308792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 832.409563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 832.465990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 832.558243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 832.597615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 832.668767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 832.735622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 832.787665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 832.850478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 832.903691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 832.964358][T12696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.940782][T12836] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2907'. [ 835.046420][T12836] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 836.148535][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.209170][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.383259][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.700487][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 836.750202][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 837.027605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 837.051441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 837.122873][T12696] device veth0_vlan entered promiscuous mode [ 837.168017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 837.198113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 837.337253][T12696] device veth1_vlan entered promiscuous mode [ 837.758414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 837.819772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 837.881858][T12696] device veth0_macvtap entered promiscuous mode [ 838.117398][T12696] device veth1_macvtap entered promiscuous mode [ 838.176954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.228578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.389480][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.436090][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.475987][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.545996][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.596095][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.670469][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.748971][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.789840][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.847683][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.894295][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.965836][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.005972][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.045814][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.095862][T12696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.156358][T12696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.208488][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.260072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 839.308552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 839.353585][T12696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.395989][T12696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.404802][T12696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.484279][T12696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.568497][T12861] netlink: 'syz.6.2911': attribute type 1 has an invalid length. [ 839.760074][T12861] netlink: 'syz.6.2911': attribute type 4 has an invalid length. [ 839.828737][T12861] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2911'. [ 840.470171][T12867] netlink: 'syz.5.2913': attribute type 25 has an invalid length. [ 841.853674][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.894890][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.960064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 842.241559][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.265811][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.273891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 843.097434][T12887] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2918'. [ 843.180713][T12887] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 847.875298][T12914] netlink: 'syz.5.2925': attribute type 25 has an invalid length. [ 847.956405][T12922] netlink: 'syz.4.2926': attribute type 1 has an invalid length. [ 848.018865][T12922] netlink: 'syz.4.2926': attribute type 4 has an invalid length. [ 848.088444][T12922] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2926'. [ 850.434590][ T1111] Bluetooth: hci2: command 0x0409 tx timeout [ 850.644537][T12946] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2933'. [ 850.706395][T12946] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 852.041039][T12924] chnl_net:caif_netlink_parms(): no params data found [ 852.567746][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 853.159016][T12965] netlink: 'syz.0.2937': attribute type 25 has an invalid length. [ 854.648381][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 856.734514][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 857.004903][T12974] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 857.039812][T12974] netlink: 'syz.4.2938': attribute type 4 has an invalid length. [ 857.109478][T12974] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2938'. [ 857.385002][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.419168][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.469288][T12924] device bridge_slave_0 entered promiscuous mode [ 857.709271][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.725895][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.778391][T12924] device bridge_slave_1 entered promiscuous mode [ 858.033014][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.081142][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.673742][T13006] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2946'. [ 858.708881][T12924] team0: Port device team_slave_0 added [ 858.725431][T13006] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 858.806950][T12924] team0: Port device team_slave_1 added [ 859.211505][T13012] device sit0 entered promiscuous mode [ 859.307277][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.314326][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.462628][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.698849][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.732473][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.856018][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.714549][T13023] netlink: 'syz.5.2951': attribute type 25 has an invalid length. [ 860.777014][ T3075] device hsr0 left promiscuous mode [ 860.782559][ T3075] nr0: port 1(hsr0) entered disabled state [ 861.663568][ T3075] device hsr_slave_0 left promiscuous mode [ 861.679772][ T3075] device hsr_slave_1 left promiscuous mode [ 861.699666][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.729396][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.753985][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.779120][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.805587][ T3075] device bridge_slave_1 left promiscuous mode [ 861.832453][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.864796][ T3075] device bridge_slave_0 left promiscuous mode [ 861.884460][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.915488][ T3075] device hsr0 left promiscuous mode [ 861.936994][ T3075] nr0: port 1(hsr0) entered disabled state [ 861.951860][ T3075] device hsr_slave_0 left promiscuous mode [ 861.968010][ T3075] device hsr_slave_1 left promiscuous mode [ 861.976655][ T3075] device bridge_slave_1 left promiscuous mode [ 861.982932][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.008605][ T3075] device bridge_slave_0 left promiscuous mode [ 862.021059][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.057177][ T3075] device veth1_macvtap left promiscuous mode [ 862.066305][ T3075] device veth0_macvtap left promiscuous mode [ 862.072512][ T3075] device veth1_vlan left promiscuous mode [ 862.097419][ T3075] device veth0_vlan left promiscuous mode [ 862.110854][ T3075] device veth1_macvtap left promiscuous mode [ 862.126148][ T3075] device veth0_macvtap left promiscuous mode [ 862.136379][ T3075] device veth1_vlan left promiscuous mode [ 862.142234][ T3075] device veth0_vlan left promiscuous mode [ 862.628145][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 862.647853][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.667447][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.746166][ T3075] bond0 (unregistering): Released all slaves [ 863.020193][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 863.037055][ T3075] team0 (unregistering): Port device team_slave_0 removed [ 863.056393][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.073903][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.143215][ T3075] bond0 (unregistering): Released all slaves [ 863.213099][T13035] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2952'. [ 863.223831][T13046] netlink: 'syz.4.2954': attribute type 25 has an invalid length. [ 863.246653][T12924] device hsr_slave_0 entered promiscuous mode [ 863.287681][T12924] device hsr_slave_1 entered promiscuous mode [ 863.736612][T13067] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2960'. [ 863.760938][T13067] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 863.953595][T12924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.071709][T12924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.299325][T12924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.693985][T13098] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.114256][T12924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 865.275591][T12924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 865.363624][T13109] nr0: port 1(hsr0) entered blocking state [ 865.383659][T13109] nr0: port 1(hsr0) entered disabled state [ 865.406575][T13109] device hsr0 entered promiscuous mode [ 865.455603][T12924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 865.493559][T12924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 865.697015][T13115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2971'. [ 865.856235][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.976815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 866.019954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 866.050262][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.095124][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 866.119740][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 866.142283][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.149585][T11879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.182167][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 866.204883][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 866.229257][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.236483][T11879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.271317][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 866.295430][T13131] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 866.310002][T13131] netlink: 'syz.4.2974': attribute type 4 has an invalid length. [ 866.345979][T13131] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2974'. [ 866.355587][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 866.450952][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 866.525687][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 866.578634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 866.628380][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 866.658159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 866.689350][T13137] netlink: 'syz.0.2988': attribute type 25 has an invalid length. [ 866.709131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 866.766632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 866.801117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 866.842728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 866.922285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 866.961127][T12924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 866.969539][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 867.559285][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2987'. [ 867.736301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 867.744128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 867.761266][T13179] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2991'. [ 867.802811][T13179] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 867.847864][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.970810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 868.009226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 868.042422][T12924] device veth0_vlan entered promiscuous mode [ 868.086988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 868.105577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 868.144531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 868.204465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 868.268897][T12924] device veth1_vlan entered promiscuous mode [ 868.350478][T13201] FAULT_INJECTION: forcing a failure. [ 868.350478][T13201] name failslab, interval 1, probability 0, space 0, times 0 [ 868.407090][T13201] CPU: 0 PID: 13201 Comm: syz.0.2998 Not tainted syzkaller #0 [ 868.414621][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.424884][T13201] Call Trace: [ 868.428249][T13201] [ 868.431215][T13201] dump_stack_lvl+0x188/0x250 [ 868.435990][T13201] ? show_regs_print_info+0x20/0x20 [ 868.441461][T13201] ? load_image+0x400/0x400 [ 868.446413][T13201] ? __might_sleep+0xf0/0xf0 [ 868.451079][T13201] ? __lock_acquire+0x7d10/0x7d10 [ 868.456173][T13201] should_fail+0x38c/0x4c0 [ 868.460660][T13201] should_failslab+0x5/0x20 [ 868.465342][T13201] slab_pre_alloc_hook+0x51/0xc0 [ 868.470439][T13201] kmem_cache_alloc_trace+0x47/0x2a0 [ 868.475775][T13201] ? rtnl_newlink+0x183/0x1a50 [ 868.480594][T13201] rtnl_newlink+0x183/0x1a50 [ 868.485237][T13201] ? __lock_acquire+0x12e8/0x7d10 [ 868.490318][T13201] ? mark_lock+0x94/0x320 [ 868.494687][T13201] ? rtnl_setlink+0x500/0x500 [ 868.499411][T13201] ? __lock_acquire+0x13bc/0x7d10 [ 868.504541][T13201] ? verify_lock_unused+0x140/0x140 [ 868.509784][T13201] ? mark_lock+0x94/0x320 [ 868.514165][T13201] ? rcu_is_watching+0x11/0xa0 [ 868.518969][T13201] ? rcu_lock_acquire+0x30/0x30 [ 868.523978][T13201] ? __mutex_lock_common+0x1552/0x2400 [ 868.529521][T13201] ? __lock_acquire+0x7d10/0x7d10 [ 868.534583][T13201] ? do_raw_spin_lock+0x128/0x2f0 [ 868.539651][T13201] ? __rwlock_init+0x140/0x140 [ 868.544460][T13201] ? do_raw_spin_unlock+0x11d/0x230 [ 868.549805][T13201] ? __mutex_lock_common+0x155c/0x2400 [ 868.555327][T13201] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 868.560484][T13201] ? mutex_lock_io_nested+0x60/0x60 [ 868.565811][T13201] ? rtnl_setlink+0x500/0x500 [ 868.570532][T13201] rtnetlink_rcv_msg+0x844/0xf30 [ 868.575534][T13201] ? rtnetlink_bind+0x80/0x80 [ 868.580239][T13201] ? __local_bh_enable_ip+0x136/0x1c0 [ 868.585647][T13201] ? lockdep_hardirqs_on+0x94/0x140 [ 868.590884][T13201] ? __local_bh_enable_ip+0x136/0x1c0 [ 868.596410][T13201] ? _local_bh_enable+0xa0/0xa0 [ 868.601316][T13201] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 868.606574][T13201] ? dev_queue_xmit+0x20/0x20 [ 868.611295][T13201] ? memcpy+0x3c/0x60 [ 868.615317][T13201] ? __copy_skb_header+0x3ba/0x4f0 [ 868.620467][T13201] ? __skb_clone+0x480/0x790 [ 868.625112][T13201] netlink_rcv_skb+0x1f5/0x440 [ 868.629905][T13201] ? rtnetlink_bind+0x80/0x80 [ 868.634622][T13201] ? netlink_ack+0xb50/0xb50 [ 868.639266][T13201] netlink_unicast+0x774/0x920 [ 868.644093][T13201] netlink_sendmsg+0x8ba/0xbe0 [ 868.648907][T13201] ? netlink_getsockopt+0x570/0x570 [ 868.654147][T13201] ? aa_sock_msg_perm+0x94/0x150 [ 868.659153][T13201] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.664490][T13201] ? security_socket_sendmsg+0x7c/0xa0 [ 868.669986][T13201] ? netlink_getsockopt+0x570/0x570 [ 868.675312][T13201] ____sys_sendmsg+0x5b7/0x8f0 [ 868.680120][T13201] ? __sys_sendmsg_sock+0x30/0x30 [ 868.685189][T13201] ? import_iovec+0x6f/0xa0 [ 868.689736][T13201] ___sys_sendmsg+0x236/0x2e0 [ 868.694468][T13201] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.699279][T13201] ? ktime_get_real_ts64+0x440/0x440 [ 868.704622][T13201] __se_sys_sendmsg+0x1af/0x290 [ 868.709540][T13201] ? __x64_sys_sendmsg+0x80/0x80 [ 868.714519][T13201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 868.720560][T13201] ? lockdep_hardirqs_on+0x94/0x140 [ 868.725799][T13201] do_syscall_64+0x4c/0xa0 [ 868.730364][T13201] ? clear_bhb_loop+0x30/0x80 [ 868.735077][T13201] ? clear_bhb_loop+0x30/0x80 [ 868.739797][T13201] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 868.745737][T13201] RIP: 0033:0x7f6ecd9a9e59 [ 868.750399][T13201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.770278][T13201] RSP: 002b:00007f6ecbc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.778738][T13201] RAX: ffffffffffffffda RBX: 00007f6ecdc22fa0 RCX: 00007f6ecd9a9e59 [ 868.786746][T13201] RDX: 0300000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 868.794761][T13201] RBP: 00007f6ecbc03090 R08: 0000000000000000 R09: 0000000000000000 [ 868.802764][T13201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.810781][T13201] R13: 00007f6ecdc23038 R14: 00007f6ecdc22fa0 R15: 00007ffcd0f70c58 [ 868.818896][T13201] [ 868.869373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 868.889800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 868.948671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 868.981288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.022829][T12924] device veth0_macvtap entered promiscuous mode [ 869.053729][T12924] device veth1_macvtap entered promiscuous mode [ 869.152148][T13212] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3013'. [ 869.206444][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.264126][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.305793][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.337068][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.347567][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.358661][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.383148][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.470206][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.513818][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.554282][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.595561][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.645396][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.656327][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.669171][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.685180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 869.698885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 869.710623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 869.737572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 869.770463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 869.787115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 869.927885][T12924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.965802][T12924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.974576][T12924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.987931][T12924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.020371][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.026830][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.220496][T13234] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3010'. [ 870.298927][T13234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 870.344627][T13234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.465179][T13240] netlink: 'syz.6.3014': attribute type 13 has an invalid length. [ 870.475634][T13240] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3014'. [ 870.542485][T13240] erspan0: refused to change device tx_queue_len [ 870.817061][T13261] netlink: 'syz.6.3017': attribute type 29 has an invalid length. [ 870.867378][T13261] netlink: 'syz.6.3017': attribute type 29 has an invalid length. [ 870.923594][T11879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.962338][T11879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.001892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 871.055979][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.085912][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.138716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 872.171767][T13295] FAULT_INJECTION: forcing a failure. [ 872.171767][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 872.187934][T13295] CPU: 0 PID: 13295 Comm: syz.6.3026 Not tainted syzkaller #0 [ 872.195477][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.205594][T13295] Call Trace: [ 872.208937][T13295] [ 872.211921][T13295] dump_stack_lvl+0x188/0x250 [ 872.216676][T13295] ? show_regs_print_info+0x20/0x20 [ 872.221940][T13295] ? load_image+0x400/0x400 [ 872.226533][T13295] ? __might_sleep+0xf0/0xf0 [ 872.231217][T13295] ? __lock_acquire+0x7d10/0x7d10 [ 872.236342][T13295] should_fail+0x38c/0x4c0 [ 872.240938][T13295] should_failslab+0x5/0x20 [ 872.245499][T13295] slab_pre_alloc_hook+0x51/0xc0 [ 872.250520][T13295] __kmalloc+0x6b/0x330 [ 872.254773][T13295] ? tomoyo_encode+0x27e/0x540 [ 872.259639][T13295] tomoyo_encode+0x27e/0x540 [ 872.264358][T13295] tomoyo_realpath_from_path+0x5cd/0x610 [ 872.270121][T13295] tomoyo_path_number_perm+0x242/0x660 [ 872.275704][T13295] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 872.281230][T13295] ? perf_trace_lock+0xe4/0x390 [ 872.286394][T13295] security_file_ioctl+0x6c/0xa0 [ 872.291432][T13295] __se_sys_ioctl+0x48/0x170 [ 872.296104][T13295] do_syscall_64+0x4c/0xa0 [ 872.300572][T13295] ? clear_bhb_loop+0x30/0x80 [ 872.305416][T13295] ? clear_bhb_loop+0x30/0x80 [ 872.310159][T13295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 872.316111][T13295] RIP: 0033:0x7fbd8f37de59 [ 872.320594][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.340270][T13295] RSP: 002b:00007fbd8d5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.348761][T13295] RAX: ffffffffffffffda RBX: 00007fbd8f5f6fa0 RCX: 00007fbd8f37de59 [ 872.356795][T13295] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 872.364829][T13295] RBP: 00007fbd8d5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 872.372868][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.380896][T13295] R13: 00007fbd8f5f7038 R14: 00007fbd8f5f6fa0 R15: 00007fff1a424518 [ 872.389006][T13295] [ 872.698082][T13295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 873.460659][T13317] FAULT_INJECTION: forcing a failure. [ 873.460659][T13317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.510054][T13317] CPU: 1 PID: 13317 Comm: syz.6.3032 Not tainted syzkaller #0 [ 873.517607][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.527726][T13317] Call Trace: [ 873.531062][T13317] [ 873.534047][T13317] dump_stack_lvl+0x188/0x250 [ 873.538803][T13317] ? show_regs_print_info+0x20/0x20 [ 873.544072][T13317] ? load_image+0x400/0x400 [ 873.548663][T13317] ? __lock_acquire+0x7d10/0x7d10 [ 873.553761][T13317] ? vfs_write+0x8b2/0xd60 [ 873.558271][T13317] should_fail+0x38c/0x4c0 [ 873.562788][T13317] _copy_from_user+0x2e/0x170 [ 873.567678][T13317] __sys_bpf+0x26d/0x6f0 [ 873.572019][T13317] ? bpf_link_show_fdinfo+0x380/0x380 [ 873.577646][T13317] ? vtime_user_exit+0x2c8/0x3e0 [ 873.582699][T13317] __x64_sys_bpf+0x78/0x90 [ 873.588371][T13317] do_syscall_64+0x4c/0xa0 [ 873.592848][T13317] ? clear_bhb_loop+0x30/0x80 [ 873.597580][T13317] ? clear_bhb_loop+0x30/0x80 [ 873.602338][T13317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 873.608334][T13317] RIP: 0033:0x7fbd8f37de59 [ 873.612811][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.632713][T13317] RSP: 002b:00007fbd8d5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 873.641205][T13317] RAX: ffffffffffffffda RBX: 00007fbd8f5f6fa0 RCX: 00007fbd8f37de59 [ 873.649240][T13317] RDX: 0000000000000070 RSI: 0000200000000480 RDI: 0000000000000005 [ 873.657271][T13317] RBP: 00007fbd8d5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 873.665410][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.673441][T13317] R13: 00007fbd8f5f7038 R14: 00007fbd8f5f6fa0 R15: 00007fff1a424518 [ 873.681554][T13317] [ 875.388502][ T3075] device hsr_slave_0 left promiscuous mode [ 875.467112][ T3075] device hsr_slave_1 left promiscuous mode [ 875.487052][ T3075] bridge0: port 3(hsr0) entered disabled state [ 875.535312][ T3075] device bridge_slave_1 left promiscuous mode [ 875.554461][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.601313][ T3075] device bridge_slave_0 left promiscuous mode [ 875.618779][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.809764][ T3075] device veth1_macvtap left promiscuous mode [ 875.823120][ T3075] device veth0_macvtap left promiscuous mode [ 875.861556][ T3075] device veth1_vlan left promiscuous mode [ 875.882167][ T3075] device veth0_vlan left promiscuous mode [ 877.381022][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 877.447960][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.516131][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.854526][ T3075] bond0 (unregistering): Released all slaves [ 878.074769][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.126421][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.175364][T13352] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.201441][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.247591][T13352] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.281921][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.314518][T13352] netlink: 33 bytes leftover after parsing attributes in process `syz.4.3042'. [ 878.366252][T13359] netlink: 'syz.6.3043': attribute type 9 has an invalid length. [ 878.433243][T13359] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.3043'. [ 878.527555][T13365] netlink: 'syz.5.3047': attribute type 30 has an invalid length. [ 879.459766][T13382] netlink: 'syz.3.3049': attribute type 29 has an invalid length. [ 879.541807][T13382] netlink: 'syz.3.3049': attribute type 29 has an invalid length. [ 880.588362][T13404] FAULT_INJECTION: forcing a failure. [ 880.588362][T13404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.696333][T13404] CPU: 0 PID: 13404 Comm: syz.0.3056 Not tainted syzkaller #0 [ 880.703898][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 880.714028][T13404] Call Trace: [ 880.717374][T13404] [ 880.720369][T13404] dump_stack_lvl+0x188/0x250 [ 880.725141][T13404] ? show_regs_print_info+0x20/0x20 [ 880.730415][T13404] ? load_image+0x400/0x400 [ 880.735009][T13404] ? __lock_acquire+0x7d10/0x7d10 [ 880.740149][T13404] should_fail+0x38c/0x4c0 [ 880.744667][T13404] _copy_from_user+0x2e/0x170 [ 880.749426][T13404] __copy_msghdr_from_user+0xc9/0x630 [ 880.754872][T13404] ? verify_lock_unused+0x140/0x140 [ 880.760165][T13404] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 880.765632][T13404] ___sys_sendmsg+0x19a/0x2e0 [ 880.770447][T13404] ? __sys_sendmsg+0x2a0/0x2a0 [ 880.775375][T13404] ? trace_event_raw_event_lock+0x270/0x270 [ 880.781333][T13404] ? vfs_write+0x8b2/0xd60 [ 880.785955][T13404] __se_sys_sendmsg+0x1af/0x290 [ 880.790894][T13404] ? __x64_sys_sendmsg+0x80/0x80 [ 880.795900][T13404] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 880.802215][T13404] ? lockdep_hardirqs_on+0x94/0x140 [ 880.807518][T13404] do_syscall_64+0x4c/0xa0 [ 880.812003][T13404] ? clear_bhb_loop+0x30/0x80 [ 880.816766][T13404] ? clear_bhb_loop+0x30/0x80 [ 880.821523][T13404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 880.827496][T13404] RIP: 0033:0x7f6ecd9a9e59 [ 880.832075][T13404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.851763][T13404] RSP: 002b:00007f6ecbc03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.858114][T13406] nr0: port 1(hsr0) entered blocking state [ 880.860255][T13404] RAX: ffffffffffffffda RBX: 00007f6ecdc22fa0 RCX: 00007f6ecd9a9e59 [ 880.860283][T13404] RDX: 00000000000080e0 RSI: 0000200000000000 RDI: 0000000000000003 [ 880.860305][T13404] RBP: 00007f6ecbc03090 R08: 0000000000000000 R09: 0000000000000000 [ 880.860326][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.860347][T13404] R13: 00007f6ecdc23038 R14: 00007f6ecdc22fa0 R15: 00007ffcd0f70c58 [ 880.906485][T13404] [ 880.944725][T13406] nr0: port 1(hsr0) entered disabled state [ 881.018017][T13406] device hsr0 entered promiscuous mode [ 881.918426][T13414] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.3059'. [ 885.678966][T13458] netlink: 'syz.0.3067': attribute type 29 has an invalid length. [ 885.826510][T13458] netlink: 'syz.0.3067': attribute type 29 has an invalid length. [ 885.959824][T13460] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.235614][T13466] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3070'. [ 886.320130][T13466] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 888.936318][T13494] netlink: 'syz.5.3080': attribute type 6 has an invalid length. [ 888.945163][T13494] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3080'. [ 889.020110][T13492] netlink: 'syz.4.3079': attribute type 39 has an invalid length. [ 889.347258][T13492] device veth0_macvtap left promiscuous mode [ 891.552826][T13525] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3087'. [ 891.616577][T13525] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 892.565903][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 892.781325][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 896.311593][T13552] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3092'. [ 897.728741][T13568] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3094'. [ 899.461191][T13584] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3100'. [ 899.565919][T13584] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 901.202014][T13600] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.3103'. [ 901.326277][T13600] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 904.417209][T13607] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3104'. [ 905.477715][T13619] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3108'. [ 907.615175][T13624] chnl_net:caif_netlink_parms(): no params data found [ 907.722500][T13642] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3113'. [ 907.826444][T13642] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 908.308368][T13624] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.315654][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.326216][ T4233] Bluetooth: hci3: command 0x0409 tx timeout [ 908.334373][T13624] device bridge_slave_0 entered promiscuous mode [ 908.391120][T13624] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.446064][T13624] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.479312][T13624] device bridge_slave_1 entered promiscuous mode [ 908.738033][T13624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.794959][T13624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.945273][T13652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 908.998746][T13652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.168048][T13652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.175680][T13652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.406215][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 910.441426][T13624] team0: Port device team_slave_0 added [ 910.480836][T13624] team0: Port device team_slave_1 added [ 910.689835][T13624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.726170][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.855976][T13624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.938289][T13624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.945674][T13624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.138594][T13624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.590221][T13624] device hsr_slave_0 entered promiscuous mode [ 911.701807][T13624] device hsr_slave_1 entered promiscuous mode [ 911.756397][T13624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.764058][T13624] Cannot create hsr debugfs directory [ 912.486315][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 913.245234][T13624] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 913.412618][T13624] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 913.517421][T13624] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 913.654362][T13624] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 913.829370][T13677] Ÿë: port 1(ip6gretap0) entered blocking state [ 913.976408][T13677] Ÿë: port 1(ip6gretap0) entered disabled state [ 914.118732][T13677] device ip6gretap0 entered promiscuous mode [ 914.292045][T13688] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3120'. [ 914.566044][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 915.240050][T13624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.343441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.373169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.423749][T13624] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.504349][T13699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3128'. [ 915.516047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 915.540847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 915.600088][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.607525][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.751956][T13696] netlink: 'syz.3.3127': attribute type 29 has an invalid length. [ 915.929030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 915.942512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.983114][T13705] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3129'. [ 915.993815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 916.023534][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.030845][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.098771][T13705] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 916.133477][T13696] netlink: 'syz.3.3127': attribute type 29 has an invalid length. [ 916.361041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 916.395980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 916.449591][T13703] netlink: 'syz.3.3127': attribute type 29 has an invalid length. [ 916.656686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 916.695988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 916.745955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 916.806640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 916.840647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 917.022506][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 917.067343][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 917.646629][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 917.676979][ T1178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 919.639231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 919.656306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 919.848172][T13742] Ÿë: port 1(ip6gretap0) entered blocking state [ 919.957897][T13742] Ÿë: port 1(ip6gretap0) entered disabled state [ 920.047046][T13742] device ip6gretap0 entered promiscuous mode [ 920.218243][T13624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.071526][T13753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3140'. [ 921.225157][T13757] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3141'. [ 921.298954][T13759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3142'. [ 921.306980][T13757] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 922.527589][T13770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3146'. [ 922.911008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 922.949735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 923.187744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 923.237393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 923.282745][T13624] device veth0_vlan entered promiscuous mode [ 923.331712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 923.347438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 923.470284][T13624] device veth1_vlan entered promiscuous mode [ 923.686251][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 923.697379][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 923.726817][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 923.746870][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 923.925168][T13624] device veth0_macvtap entered promiscuous mode [ 923.957759][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 923.998782][T13624] device veth1_macvtap entered promiscuous mode [ 924.078239][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.174177][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.220493][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.273856][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.356789][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.405563][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.464192][T13624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.504684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 924.521939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 924.567876][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.629444][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.670364][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.727815][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.762031][T13624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 924.801034][T13624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.847816][T13624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.868322][T13795] netlink: 'syz.6.3161': attribute type 39 has an invalid length. [ 925.377214][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 925.396515][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 925.429947][T13624] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.465771][T13624] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.505450][T13624] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.552931][T13624] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.606244][T13801] Ÿë: port 1(ip6gretap0) entered blocking state [ 925.689988][T13801] Ÿë: port 1(ip6gretap0) entered disabled state [ 925.751641][T13801] device ip6gretap0 entered promiscuous mode [ 926.145746][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.153859][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.268633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 926.540833][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.604293][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.648885][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 926.660578][T13815] FAULT_INJECTION: forcing a failure. [ 926.660578][T13815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 926.820936][T13815] CPU: 0 PID: 13815 Comm: syz.5.3154 Not tainted syzkaller #0 [ 926.828521][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.838676][T13815] Call Trace: [ 926.842055][T13815] [ 926.845055][T13815] dump_stack_lvl+0x188/0x250 [ 926.849825][T13815] ? show_regs_print_info+0x20/0x20 [ 926.855103][T13815] ? load_image+0x400/0x400 [ 926.859701][T13815] ? __lock_acquire+0x7d10/0x7d10 [ 926.864794][T13815] ? slab_post_alloc_hook+0x4c/0x380 [ 926.870148][T13815] ? __alloc_skb+0xf4/0x750 [ 926.874718][T13815] ? alloc_skb_with_frags+0xa7/0x730 [ 926.880069][T13815] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 926.885546][T13815] should_fail+0x38c/0x4c0 [ 926.890076][T13815] prepare_alloc_pages+0x1e4/0x5f0 [ 926.895309][T13815] __alloc_pages+0x11b/0x480 [ 926.900789][T13815] ? zone_statistics+0x170/0x170 [ 926.905988][T13815] kmalloc_large_node+0x7d/0x190 [ 926.911032][T13815] __kmalloc_node_track_caller+0x22e/0x3a0 [ 926.916904][T13815] ? alloc_skb_with_frags+0xa7/0x730 [ 926.922268][T13815] ? kmem_cache_alloc_node+0x162/0x2d0 [ 926.927790][T13815] ? __alloc_skb+0xf4/0x750 [ 926.932385][T13815] ? alloc_skb_with_frags+0xa7/0x730 [ 926.937767][T13815] __alloc_skb+0x22c/0x750 [ 926.942309][T13815] alloc_skb_with_frags+0xa7/0x730 [ 926.947754][T13815] sock_alloc_send_pskb+0x87f/0x9a0 [ 926.953141][T13815] ? sock_kzfree_s+0x50/0x50 [ 926.957837][T13815] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 926.963809][T13815] tun_get_user+0x7c8/0x3a70 [ 926.968703][T13815] ? tun_ring_recv+0xc40/0xc40 [ 926.973604][T13815] ? rcu_lock_release+0x5/0x20 [ 926.978462][T13815] ? __lock_acquire+0x7d10/0x7d10 [ 926.983666][T13815] tun_chr_write_iter+0x112/0x1e0 [ 926.988795][T13815] vfs_write+0x745/0xd60 [ 926.993150][T13815] ? file_end_write+0x250/0x250 [ 926.998124][T13815] ? __fget_files+0x40f/0x480 [ 927.002941][T13815] ? __fdget_pos+0x1e2/0x370 [ 927.007667][T13815] ? ksys_write+0x71/0x260 [ 927.012339][T13815] ksys_write+0x152/0x260 [ 927.016815][T13815] ? __ia32_sys_read+0x80/0x80 [ 927.021794][T13815] ? lockdep_hardirqs_on+0x94/0x140 [ 927.027105][T13815] do_syscall_64+0x4c/0xa0 [ 927.031769][T13815] ? clear_bhb_loop+0x30/0x80 [ 927.036523][T13815] ? clear_bhb_loop+0x30/0x80 [ 927.041286][T13815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 927.047265][T13815] RIP: 0033:0x7f7334c5fe59 [ 927.051941][T13815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.071881][T13815] RSP: 002b:00007f7332eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.080390][T13815] RAX: ffffffffffffffda RBX: 00007f7334ed8fa0 RCX: 00007f7334c5fe59 [ 927.088434][T13815] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 927.096699][T13815] RBP: 00007f7332eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 927.104777][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.112817][T13815] R13: 00007f7334ed9038 R14: 00007f7334ed8fa0 R15: 00007ffdaa561728 [ 927.121751][T13815] [ 927.791028][T13824] netlink: 'syz.7.3105': attribute type 1 has an invalid length. [ 927.827308][T13822] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3155'. [ 927.836397][T13824] netlink: 'syz.7.3105': attribute type 4 has an invalid length. [ 927.836431][T13824] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3105'. [ 928.613247][T13829] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.3157'. [ 929.121146][T13834] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3163'. [ 929.166304][T13835] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3163'. [ 930.348325][T13851] netlink: 'syz.7.3166': attribute type 28 has an invalid length. [ 930.763787][T13841] device syzkaller0 entered promiscuous mode [ 931.460284][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.467144][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.073830][T13875] device syzkaller0 entered promiscuous mode [ 934.333339][T13885] netlink: 'syz.7.3175': attribute type 1 has an invalid length. [ 934.423828][T13885] netlink: 'syz.7.3175': attribute type 4 has an invalid length. [ 934.463510][T13885] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3175'. [ 942.876864][T13939] netlink: 'syz.6.3197': attribute type 29 has an invalid length. [ 943.359937][T13931] netlink: 'syz.7.3190': attribute type 1 has an invalid length. [ 943.450492][T13931] netlink: 'syz.7.3190': attribute type 4 has an invalid length. [ 943.566155][T13931] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3190'. [ 943.777432][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 943.934634][ T3075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.051547][T13939] netlink: 'syz.6.3197': attribute type 29 has an invalid length. [ 944.066828][T13944] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.3197'. [ 944.774189][ T3075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.764894][ T3075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.186745][T13971] netlink: 'syz.5.3205': attribute type 20 has an invalid length. [ 949.257062][T13971] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3205'. [ 949.403358][T13973] netlink: 'syz.3.3206': attribute type 29 has an invalid length. [ 949.952829][T13973] netlink: 'syz.3.3206': attribute type 29 has an invalid length. [ 952.025085][T13984] netlink: 'syz.6.3211': attribute type 1 has an invalid length. [ 952.122381][T13985] netlink: 'syz.3.3210': attribute type 29 has an invalid length. [ 952.146856][T13984] netlink: 'syz.6.3211': attribute type 4 has an invalid length. [ 952.186611][T13984] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3211'. [ 952.238410][T13985] netlink: 'syz.3.3210': attribute type 29 has an invalid length. [ 952.329208][T13988] netlink: 'syz.3.3210': attribute type 29 has an invalid length. [ 952.601529][T13985] netlink: 10190 bytes leftover after parsing attributes in process `syz.3.3210'. [ 953.797002][T13989] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3209'. [ 954.314545][T13993] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 954.407464][T13993] netlink: 'syz.0.3222': attribute type 4 has an invalid length. [ 954.415363][T13993] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3222'. [ 954.532491][T13997] netlink: 'syz.5.3213': attribute type 3 has an invalid length. [ 954.637319][T13997] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3213'. [ 965.251941][T14043] FAULT_INJECTION: forcing a failure. [ 965.251941][T14043] name failslab, interval 1, probability 0, space 0, times 0 [ 965.483846][T14043] CPU: 1 PID: 14043 Comm: syz.7.3223 Not tainted syzkaller #0 [ 965.491451][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 965.501621][T14043] Call Trace: [ 965.505094][T14043] [ 965.508133][T14043] dump_stack_lvl+0x188/0x250 [ 965.512976][T14043] ? show_regs_print_info+0x20/0x20 [ 965.518318][T14043] ? load_image+0x400/0x400 [ 965.522988][T14043] ? __might_sleep+0xf0/0xf0 [ 965.527705][T14043] ? __lock_acquire+0x7d10/0x7d10 [ 965.532878][T14043] ? __lock_acquire+0x7d10/0x7d10 [ 965.538106][T14043] should_fail+0x38c/0x4c0 [ 965.542722][T14043] should_failslab+0x5/0x20 [ 965.547332][T14043] slab_pre_alloc_hook+0x51/0xc0 [ 965.552420][T14043] kmem_cache_alloc_trace+0x47/0x2a0 [ 965.557816][T14043] ? sctp_association_new+0x86/0x24a0 [ 965.563391][T14043] sctp_association_new+0x86/0x24a0 [ 965.568700][T14043] ? apparmor_capable+0x12c/0x190 [ 965.573868][T14043] ? bpf_lsm_capable+0x5/0x10 [ 965.578646][T14043] ? security_capable+0x85/0xb0 [ 965.583730][T14043] sctp_connect_new_asoc+0x2da/0x6a0 [ 965.589184][T14043] ? __sctp_connect+0xd80/0xd80 [ 965.594222][T14043] ? __local_bh_enable_ip+0x136/0x1c0 [ 965.599921][T14043] ? _local_bh_enable+0xa0/0xa0 [ 965.604937][T14043] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 965.610590][T14043] ? security_sctp_bind_connect+0x85/0xb0 [ 965.616479][T14043] sctp_sendmsg+0x164a/0x2a30 [ 965.621581][T14043] ? aa_sk_perm+0x7dc/0x910 [ 965.626205][T14043] ? sctp_getsockopt+0x8a0/0x8a0 [ 965.631313][T14043] ? aa_af_perm+0x340/0x340 [ 965.636124][T14043] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 965.642720][T14043] ? sock_rps_record_flow+0x17/0x3b0 [ 965.648156][T14043] ? inet_sendmsg+0x78/0x2f0 [ 965.652845][T14043] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 965.658235][T14043] ? security_socket_sendmsg+0x7c/0xa0 [ 965.663883][T14043] ? inet_send_prepare+0x260/0x260 [ 965.669112][T14043] ____sys_sendmsg+0x5b7/0x8f0 [ 965.674218][T14043] ? __sys_sendmsg_sock+0x30/0x30 [ 965.679496][T14043] ? import_iovec+0x6f/0xa0 [ 965.684182][T14043] ___sys_sendmsg+0x236/0x2e0 [ 965.689128][T14043] ? __sys_sendmsg+0x2a0/0x2a0 [ 965.694185][T14043] ? trace_event_raw_event_lock+0x270/0x270 [ 965.700184][T14043] ? vfs_write+0x8b2/0xd60 [ 965.705052][T14043] __se_sys_sendmsg+0x1af/0x290 [ 965.710070][T14043] ? __x64_sys_sendmsg+0x80/0x80 [ 965.715114][T14043] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 965.721388][T14043] ? lockdep_hardirqs_on+0x94/0x140 [ 965.726849][T14043] do_syscall_64+0x4c/0xa0 [ 965.731360][T14043] ? clear_bhb_loop+0x30/0x80 [ 965.736135][T14043] ? clear_bhb_loop+0x30/0x80 [ 965.740980][T14043] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 965.747024][T14043] RIP: 0033:0x7f4949c58e59 [ 965.751553][T14043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.771362][T14043] RSP: 002b:00007f4947eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.779940][T14043] RAX: ffffffffffffffda RBX: 00007f4949ed1fa0 RCX: 00007f4949c58e59 [ 965.788192][T14043] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 965.796375][T14043] RBP: 00007f4947eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 965.804465][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.812633][T14043] R13: 00007f4949ed2038 R14: 00007f4949ed1fa0 R15: 00007ffeba5c67c8 [ 965.821022][T14043] [ 965.996739][T14044] netlink: 'syz.0.3225': attribute type 29 has an invalid length. [ 967.872047][T14037] IPv6: Can't replace route, no match found [ 968.066062][T14044] netlink: 'syz.0.3225': attribute type 29 has an invalid length. [ 968.077707][T14051] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3225'. [ 968.223466][T14046] IPv6: Can't replace route, no match found [ 968.287414][T14050] netlink: 'syz.5.3226': attribute type 1 has an invalid length. [ 968.326271][T14050] netlink: 'syz.5.3226': attribute type 4 has an invalid length. [ 968.334153][T14050] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3226'. [ 968.609074][ T3075] device hsr0 left promiscuous mode [ 968.614895][ T3075] nr0: port 1(hsr0) entered disabled state [ 969.756739][ T3075] device hsr_slave_0 left promiscuous mode [ 969.921239][ T3075] device hsr_slave_1 left promiscuous mode [ 969.943584][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 970.025991][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.071058][ T3075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 970.117995][ T3075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.159768][ T3075] device bridge_slave_1 left promiscuous mode [ 970.216388][ T3075] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.400810][ T3075] device bridge_slave_0 left promiscuous mode [ 970.426517][ T3075] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.132571][ T3075] device veth1_macvtap left promiscuous mode [ 971.151353][ T3075] device veth1_vlan left promiscuous mode [ 971.193095][ T3075] device veth0_vlan left promiscuous mode [ 971.307799][T14064] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3231'. [ 973.689464][T14078] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 974.493513][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 976.950519][ T3075] team0 (unregistering): Port device team_slave_1 removed [ 977.249201][ T3075] team0 (unregistering): Port device team_slave_0 removed [ 977.548560][ T3075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.812419][ T3075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.273488][ T3075] bond0 (unregistering): Released all slaves [ 979.821462][T14078] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 982.118759][T14093] netlink: 'syz.5.3239': attribute type 1 has an invalid length. [ 982.266752][T14093] netlink: 'syz.5.3239': attribute type 4 has an invalid length. [ 982.333851][T14093] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3239'. [ 984.957755][T14115] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3243'. [ 985.706800][T14122] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3244'. [ 986.033171][T14122] device hsr_slave_0 left promiscuous mode [ 986.442031][T14122] device hsr_slave_1 left promiscuous mode [ 987.951824][T14122] device hsr0 left promiscuous mode [ 988.016799][T14122] nr0: port 1(hsr0) entered disabled state [ 988.455819][T14137] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3249'. [ 991.859025][T14155] netlink: 'syz.6.3253': attribute type 1 has an invalid length. [ 992.216068][T14155] netlink: 'syz.6.3253': attribute type 4 has an invalid length. [ 992.223953][T14155] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3253'. [ 992.838999][T14167] FAULT_INJECTION: forcing a failure. [ 992.838999][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 992.851979][T14167] CPU: 1 PID: 14167 Comm: syz.5.3257 Not tainted syzkaller #0 [ 992.859553][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 992.869971][T14167] Call Trace: [ 992.873357][T14167] [ 992.876427][T14167] dump_stack_lvl+0x188/0x250 [ 992.881231][T14167] ? trace_event_raw_event_lock+0x270/0x270 [ 992.887353][T14167] ? show_regs_print_info+0x20/0x20 [ 992.892688][T14167] ? load_image+0x400/0x400 [ 992.897512][T14167] should_fail+0x38c/0x4c0 [ 992.902216][T14167] should_failslab+0x5/0x20 [ 992.906932][T14167] slab_pre_alloc_hook+0x51/0xc0 [ 992.912102][T14167] ? skb_clone+0x1bd/0x350 [ 992.916649][T14167] kmem_cache_alloc+0x3d/0x290 [ 992.921609][T14167] skb_clone+0x1bd/0x350 [ 992.925951][T14167] ? packet_rcv+0x446/0x1210 [ 992.930703][T14167] packet_rcv+0x5a2/0x1210 [ 992.935361][T14167] ? packet_sock_destruct+0x160/0x160 [ 992.940887][T14167] dev_queue_xmit_nit+0x4ad/0xb00 [ 992.946196][T14167] dev_hard_start_xmit+0x13e/0x7e0 [ 992.951642][T14167] __dev_queue_xmit+0x1a9b/0x2f80 [ 992.957029][T14167] ? dev_queue_xmit+0x20/0x20 [ 992.961830][T14167] ? memcpy+0x3c/0x60 [ 992.965951][T14167] ? __copy_skb_header+0x3ba/0x4f0 [ 992.971223][T14167] ? __skb_clone+0x480/0x790 [ 992.976036][T14167] ? skb_clone+0x1f1/0x350 [ 992.980631][T14167] __netlink_deliver_tap+0x53e/0x7c0 [ 992.986519][T14167] netlink_deliver_tap+0x16c/0x180 [ 992.991774][T14167] netlink_unicast+0x74f/0x920 [ 992.996811][T14167] netlink_sendmsg+0x8ba/0xbe0 [ 993.001820][T14167] ? netlink_getsockopt+0x570/0x570 [ 993.007185][T14167] ? aa_sock_msg_perm+0x94/0x150 [ 993.012279][T14167] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 993.017704][T14167] ? security_socket_sendmsg+0x7c/0xa0 [ 993.023331][T14167] ? netlink_getsockopt+0x570/0x570 [ 993.028641][T14167] ____sys_sendmsg+0x5b7/0x8f0 [ 993.033648][T14167] ? __sys_sendmsg_sock+0x30/0x30 [ 993.038936][T14167] ? import_iovec+0x6f/0xa0 [ 993.043631][T14167] ___sys_sendmsg+0x236/0x2e0 [ 993.048552][T14167] ? __sys_sendmsg+0x2a0/0x2a0 [ 993.053747][T14167] ? trace_event_raw_event_lock+0x270/0x270 [ 993.059780][T14167] ? vfs_write+0x8b2/0xd60 [ 993.064751][T14167] __se_sys_sendmsg+0x1af/0x290 [ 993.069770][T14167] ? __x64_sys_sendmsg+0x80/0x80 [ 993.075598][T14167] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 993.081881][T14167] ? lockdep_hardirqs_on+0x94/0x140 [ 993.087278][T14167] do_syscall_64+0x4c/0xa0 [ 993.091805][T14167] ? clear_bhb_loop+0x30/0x80 [ 993.096584][T14167] ? clear_bhb_loop+0x30/0x80 [ 993.101417][T14167] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 993.107416][T14167] RIP: 0033:0x7f7334c5fe59 [ 993.111958][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 993.131687][T14167] RSP: 002b:00007f7332eb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 993.140247][T14167] RAX: ffffffffffffffda RBX: 00007f7334ed8fa0 RCX: 00007f7334c5fe59 [ 993.148334][T14167] RDX: 000000002000489c RSI: 0000200000000600 RDI: 0000000000000003 [ 993.156505][T14167] RBP: 00007f7332eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 993.164580][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.172655][T14167] R13: 00007f7334ed9038 R14: 00007f7334ed8fa0 R15: 00007ffdaa561728 [ 993.180938][T14167] [ 993.196246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.203022][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.060131][T14167] netlink: 'syz.5.3257': attribute type 10 has an invalid length. [ 994.371329][T14167] team0: Port device virt_wifi0 added [ 994.533738][T14175] netlink: 'syz.7.3256': attribute type 1 has an invalid length. [ 994.734889][T14175] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1000.747244][T14204] nr0: port 1(hsr0) entered blocking state [ 1000.753278][T14204] nr0: port 1(hsr0) entered disabled state [ 1001.097449][T14204] device hsr0 entered promiscuous mode [ 1003.155159][T14213] netlink: 'syz.0.3267': attribute type 9 has an invalid length. [ 1003.355843][T14213] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1003.530490][T14211] netlink: 'syz.0.3267': attribute type 9 has an invalid length. [ 1003.696273][T14211] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1004.897665][T14219] netlink: 'syz.6.3269': attribute type 1 has an invalid length. [ 1004.905566][T14219] netlink: 'syz.6.3269': attribute type 4 has an invalid length. [ 1005.059093][T14219] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3269'. [ 1006.353843][T14229] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1006.881454][T14229] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1007.048977][T14229] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1007.288180][T14229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1017.031538][T14283] netlink: 'syz.7.3284': attribute type 1 has an invalid length. [ 1017.162560][T14283] netlink: 'syz.7.3284': attribute type 4 has an invalid length. [ 1017.458328][T14283] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3284'. [ 1017.820357][T14294] FAULT_INJECTION: forcing a failure. [ 1017.820357][T14294] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.026450][T14294] CPU: 1 PID: 14294 Comm: syz.5.3287 Not tainted syzkaller #0 [ 1018.034042][T14294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.044229][T14294] Call Trace: [ 1018.047703][T14294] [ 1018.050770][T14294] dump_stack_lvl+0x188/0x250 [ 1018.055592][T14294] ? show_regs_print_info+0x20/0x20 [ 1018.060914][T14294] ? load_image+0x400/0x400 [ 1018.065561][T14294] ? __might_sleep+0xf0/0xf0 [ 1018.070265][T14294] ? __lock_acquire+0x7d10/0x7d10 [ 1018.075449][T14294] should_fail+0x38c/0x4c0 [ 1018.080028][T14294] should_failslab+0x5/0x20 [ 1018.084623][T14294] slab_pre_alloc_hook+0x51/0xc0 [ 1018.089696][T14294] __kmalloc_node_track_caller+0x68/0x3a0 [ 1018.095765][T14294] ? __ip6_append_data+0x266c/0x38c0 [ 1018.101134][T14294] ? kmem_cache_alloc_node+0x162/0x2d0 [ 1018.106798][T14294] ? __alloc_skb+0xf4/0x750 [ 1018.111452][T14294] ? __ip6_append_data+0x266c/0x38c0 [ 1018.116859][T14294] __alloc_skb+0x22c/0x750 [ 1018.121433][T14294] __ip6_append_data+0x266c/0x38c0 [ 1018.127039][T14294] ? ip6_setup_cork+0x11e0/0x11e0 [ 1018.132226][T14294] ? ip6_setup_cork+0xc63/0x11e0 [ 1018.137334][T14294] ip6_append_data+0x1d4/0x310 [ 1018.142184][T14294] ? rawv6_send_hdrinc+0x1690/0x1690 [ 1018.147618][T14294] ? rawv6_send_hdrinc+0x1690/0x1690 [ 1018.153066][T14294] rawv6_sendmsg+0x1222/0x1700 [ 1018.158127][T14294] ? compat_rawv6_ioctl+0x60/0x60 [ 1018.163518][T14294] ? aa_af_perm+0x340/0x340 [ 1018.168117][T14294] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 1018.174688][T14294] ? sock_rps_record_flow+0x17/0x3b0 [ 1018.180117][T14294] ? inet_sendmsg+0x78/0x2f0 [ 1018.184800][T14294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1018.190267][T14294] ? security_socket_sendmsg+0x7c/0xa0 [ 1018.195869][T14294] ? inet_send_prepare+0x260/0x260 [ 1018.201088][T14294] ____sys_sendmsg+0x5b7/0x8f0 [ 1018.206062][T14294] ? __sys_sendmsg_sock+0x30/0x30 [ 1018.211297][T14294] ? import_iovec+0x6f/0xa0 [ 1018.215954][T14294] ___sys_sendmsg+0x236/0x2e0 [ 1018.220823][T14294] ? __sys_sendmsg+0x2a0/0x2a0 [ 1018.225780][T14294] ? trace_event_raw_event_lock+0x270/0x270 [ 1018.231736][T14294] ? vfs_write+0x8b2/0xd60 [ 1018.236504][T14294] __se_sys_sendmsg+0x1af/0x290 [ 1018.241485][T14294] ? __x64_sys_sendmsg+0x80/0x80 [ 1018.246497][T14294] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1018.252690][T14294] ? lockdep_hardirqs_on+0x94/0x140 [ 1018.258017][T14294] do_syscall_64+0x4c/0xa0 [ 1018.262510][T14294] ? clear_bhb_loop+0x30/0x80 [ 1018.267269][T14294] ? clear_bhb_loop+0x30/0x80 [ 1018.272055][T14294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1018.278024][T14294] RIP: 0033:0x7f7334c5fe59 [ 1018.282531][T14294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.302225][T14294] RSP: 002b:00007f7332eb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.310750][T14294] RAX: ffffffffffffffda RBX: 00007f7334ed8fa0 RCX: 00007f7334c5fe59 [ 1018.318802][T14294] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1018.326853][T14294] RBP: 00007f7332eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.334902][T14294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.342953][T14294] R13: 00007f7334ed9038 R14: 00007f7334ed8fa0 R15: 00007ffdaa561728 [ 1018.351144][T14294] [ 1027.178807][T14347] netlink: 'syz.3.3300': attribute type 1 has an invalid length. [ 1027.326006][T14347] netlink: 'syz.3.3300': attribute type 4 has an invalid length. [ 1027.333852][T14347] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1030.720321][T14371] netlink: 'syz.7.3305': attribute type 10 has an invalid length. [ 1030.908518][T14371] netlink: 'syz.7.3305': attribute type 10 has an invalid length. [ 1031.027574][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 1033.193421][T14390] veth0_to_hsr: mtu less than device minimum [ 1035.817031][T14416] netlink: 'syz.3.3316': attribute type 1 has an invalid length. [ 1035.936769][T14416] netlink: 'syz.3.3316': attribute type 4 has an invalid length. [ 1036.037310][T14416] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3316'. [ 1037.965851][T14433] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 1038.089704][T14433] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3322'. [ 1039.020822][T14444] FAULT_INJECTION: forcing a failure. [ 1039.020822][T14444] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.136943][T14444] CPU: 0 PID: 14444 Comm: syz.7.3326 Not tainted syzkaller #0 [ 1039.144521][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.154935][T14444] Call Trace: [ 1039.158291][T14444] [ 1039.161298][T14444] dump_stack_lvl+0x188/0x250 [ 1039.166112][T14444] ? show_regs_print_info+0x20/0x20 [ 1039.171485][T14444] ? load_image+0x400/0x400 [ 1039.176093][T14444] ? __lock_acquire+0x7d10/0x7d10 [ 1039.181277][T14444] should_fail+0x38c/0x4c0 [ 1039.185857][T14444] should_failslab+0x5/0x20 [ 1039.190450][T14444] slab_pre_alloc_hook+0x51/0xc0 [ 1039.195503][T14444] __kmalloc+0x6b/0x330 [ 1039.199719][T14444] ? sk_prot_alloc+0xe7/0x210 [ 1039.204504][T14444] sk_prot_alloc+0xe7/0x210 [ 1039.209155][T14444] ? sk_alloc+0x1d/0x310 [ 1039.213512][T14444] sk_alloc+0x2f/0x310 [ 1039.217701][T14444] bpf_prog_test_run_skb+0x240/0x10b0 [ 1039.223331][T14444] ? __fget_files+0x40f/0x480 [ 1039.228150][T14444] ? cpu_online+0x60/0x60 [ 1039.232563][T14444] bpf_prog_test_run+0x31e/0x390 [ 1039.237617][T14444] __sys_bpf+0x5a5/0x6f0 [ 1039.242140][T14444] ? bpf_link_show_fdinfo+0x380/0x380 [ 1039.247673][T14444] ? vtime_user_exit+0x2c8/0x3e0 [ 1039.252732][T14444] __x64_sys_bpf+0x78/0x90 [ 1039.257237][T14444] do_syscall_64+0x4c/0xa0 [ 1039.261765][T14444] ? clear_bhb_loop+0x30/0x80 [ 1039.266523][T14444] ? clear_bhb_loop+0x30/0x80 [ 1039.271573][T14444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1039.277534][T14444] RIP: 0033:0x7f4949c58e59 [ 1039.282119][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.301977][T14444] RSP: 002b:00007f4947eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.310468][T14444] RAX: ffffffffffffffda RBX: 00007f4949ed1fa0 RCX: 00007f4949c58e59 [ 1039.318502][T14444] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1039.326573][T14444] RBP: 00007f4947eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.334596][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.342635][T14444] R13: 00007f4949ed2038 R14: 00007f4949ed1fa0 R15: 00007ffeba5c67c8 [ 1039.350810][T14444] [ 1041.997919][T14475] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 1042.088684][T14475] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 1042.182425][T14475] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1045.122936][T14502] FAULT_INJECTION: forcing a failure. [ 1045.122936][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.240475][T14502] CPU: 1 PID: 14502 Comm: syz.7.3341 Not tainted syzkaller #0 [ 1045.248145][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1045.258289][T14502] Call Trace: [ 1045.261645][T14502] [ 1045.264680][T14502] dump_stack_lvl+0x188/0x250 [ 1045.269587][T14502] ? show_regs_print_info+0x20/0x20 [ 1045.274891][T14502] ? load_image+0x400/0x400 [ 1045.279526][T14502] ? __lock_acquire+0x7d10/0x7d10 [ 1045.284641][T14502] ? perf_trace_lock+0xe4/0x390 [ 1045.289646][T14502] should_fail+0x38c/0x4c0 [ 1045.294207][T14502] _copy_from_user+0x2e/0x170 [ 1045.299016][T14502] ___sys_recvmsg+0x173/0x5c0 [ 1045.303856][T14502] ? __sys_recvmsg+0x280/0x280 [ 1045.308777][T14502] ? trace_event_raw_event_lock+0x270/0x270 [ 1045.315007][T14502] __x64_sys_recvmsg+0x1f9/0x2c0 [ 1045.320198][T14502] ? ___sys_recvmsg+0x5c0/0x5c0 [ 1045.325141][T14502] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1045.331416][T14502] ? lockdep_hardirqs_on+0x94/0x140 [ 1045.336762][T14502] do_syscall_64+0x4c/0xa0 [ 1045.341277][T14502] ? clear_bhb_loop+0x30/0x80 [ 1045.346829][T14502] ? clear_bhb_loop+0x30/0x80 [ 1045.351633][T14502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1045.357627][T14502] RIP: 0033:0x7f4949c58e59 [ 1045.362140][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.381928][T14502] RSP: 002b:00007f4947eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1045.390461][T14502] RAX: ffffffffffffffda RBX: 00007f4949ed1fa0 RCX: 00007f4949c58e59 [ 1045.398518][T14502] RDX: 0000000000010040 RSI: 0000200000000540 RDI: 0000000000000003 [ 1045.406667][T14502] RBP: 00007f4947eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.414719][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.422784][T14502] R13: 00007f4949ed2038 R14: 00007f4949ed1fa0 R15: 00007ffeba5c67c8 [ 1045.430977][T14502] [ 1046.530608][T14508] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3343'. [ 1046.603065][T14510] netlink: 'syz.6.3344': attribute type 10 has an invalid length. [ 1046.775491][T14510] netlink: 'syz.6.3344': attribute type 10 has an invalid length. [ 1047.853098][T14523] netlink: 'syz.7.3348': attribute type 1 has an invalid length. [ 1047.906247][T14523] netlink: 'syz.7.3348': attribute type 4 has an invalid length. [ 1047.962521][T14523] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3348'. [ 1048.138490][T14526] netlink: 'syz.6.3349': attribute type 21 has an invalid length. [ 1048.277363][T14534] FAULT_INJECTION: forcing a failure. [ 1048.277363][T14534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.362694][T14534] CPU: 1 PID: 14534 Comm: syz.3.3351 Not tainted syzkaller #0 [ 1048.370227][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1048.380331][T14534] Call Trace: [ 1048.383640][T14534] [ 1048.386595][T14534] dump_stack_lvl+0x188/0x250 [ 1048.391413][T14534] ? show_regs_print_info+0x20/0x20 [ 1048.396657][T14534] ? load_image+0x400/0x400 [ 1048.401295][T14534] ? __lock_acquire+0x7d10/0x7d10 [ 1048.406374][T14534] should_fail+0x38c/0x4c0 [ 1048.410857][T14534] _copy_to_user+0x2e/0x130 [ 1048.415436][T14534] simple_read_from_buffer+0xe3/0x150 [ 1048.420856][T14534] proc_fail_nth_read+0x1a6/0x220 [ 1048.426096][T14534] ? proc_fault_inject_write+0x310/0x310 [ 1048.431825][T14534] ? fsnotify_perm+0x254/0x560 [ 1048.436638][T14534] ? proc_fault_inject_write+0x310/0x310 [ 1048.442324][T14534] vfs_read+0x301/0xd60 [ 1048.446552][T14534] ? kernel_read+0x1e0/0x1e0 [ 1048.451183][T14534] ? __fget_files+0x40f/0x480 [ 1048.456173][T14534] ? mutex_lock_nested+0x17/0x20 [ 1048.461148][T14534] ? __fdget_pos+0x2bf/0x370 [ 1048.465889][T14534] ? ksys_read+0x71/0x260 [ 1048.470264][T14534] ksys_read+0x152/0x260 [ 1048.474557][T14534] ? vfs_write+0xd60/0xd60 [ 1048.479105][T14534] ? lockdep_hardirqs_on+0x94/0x140 [ 1048.484353][T14534] do_syscall_64+0x4c/0xa0 [ 1048.488937][T14534] ? clear_bhb_loop+0x30/0x80 [ 1048.493749][T14534] ? clear_bhb_loop+0x30/0x80 [ 1048.498480][T14534] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1048.504501][T14534] RIP: 0033:0x7f054a65768e [ 1048.508961][T14534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1048.528815][T14534] RSP: 002b:00007f05488effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1048.537301][T14534] RAX: ffffffffffffffda RBX: 00007f05488f06c0 RCX: 00007f054a65768e [ 1048.545490][T14534] RDX: 000000000000000f RSI: 00007f05488f00a0 RDI: 0000000000000004 [ 1048.553511][T14534] RBP: 00007f05488f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.561521][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.569555][T14534] R13: 00007f054a910038 R14: 00007f054a90ffa0 R15: 00007ffe02889f88 [ 1048.577581][T14534] [ 1049.003912][T14559] FAULT_INJECTION: forcing a failure. [ 1049.003912][T14559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.034501][T14559] CPU: 1 PID: 14559 Comm: syz.7.3358 Not tainted syzkaller #0 [ 1049.042045][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1049.052170][T14559] Call Trace: [ 1049.055513][T14559] [ 1049.058476][T14559] dump_stack_lvl+0x188/0x250 [ 1049.063288][T14559] ? show_regs_print_info+0x20/0x20 [ 1049.068615][T14559] ? load_image+0x400/0x400 [ 1049.073264][T14559] ? __lock_acquire+0x7d10/0x7d10 [ 1049.078414][T14559] ? vfs_write+0x8b2/0xd60 [ 1049.082879][T14559] should_fail+0x38c/0x4c0 [ 1049.087364][T14559] _copy_from_user+0x2e/0x170 [ 1049.092139][T14559] __sys_bpf+0x26d/0x6f0 [ 1049.096421][T14559] ? bpf_link_show_fdinfo+0x380/0x380 [ 1049.101855][T14559] ? vtime_user_exit+0x2c8/0x3e0 [ 1049.106842][T14559] __x64_sys_bpf+0x78/0x90 [ 1049.111306][T14559] do_syscall_64+0x4c/0xa0 [ 1049.115752][T14559] ? clear_bhb_loop+0x30/0x80 [ 1049.120468][T14559] ? clear_bhb_loop+0x30/0x80 [ 1049.125193][T14559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1049.131378][T14559] RIP: 0033:0x7f4949c58e59 [ 1049.135847][T14559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.155494][T14559] RSP: 002b:00007f4947eb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1049.163957][T14559] RAX: ffffffffffffffda RBX: 00007f4949ed1fa0 RCX: 00007f4949c58e59 [ 1049.172054][T14559] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1049.180109][T14559] RBP: 00007f4947eb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.188117][T14559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.196127][T14559] R13: 00007f4949ed2038 R14: 00007f4949ed1fa0 R15: 00007ffeba5c67c8 [ 1049.204240][T14559] [ 1049.597327][T14573] FAULT_INJECTION: forcing a failure. [ 1049.597327][T14573] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.655895][T14573] CPU: 0 PID: 14573 Comm: syz.5.3363 Not tainted syzkaller #0 [ 1049.663484][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1049.673700][T14573] Call Trace: [ 1049.677018][T14573] [ 1049.680022][T14573] dump_stack_lvl+0x188/0x250 [ 1049.684753][T14573] ? show_regs_print_info+0x20/0x20 [ 1049.690616][T14573] ? load_image+0x400/0x400 [ 1049.695160][T14573] ? mark_lock+0x94/0x320 [ 1049.699548][T14573] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1049.705588][T14573] should_fail+0x38c/0x4c0 [ 1049.710082][T14573] should_failslab+0x5/0x20 [ 1049.714631][T14573] slab_pre_alloc_hook+0x51/0xc0 [ 1049.719623][T14573] kmem_cache_alloc_trace+0x47/0x2a0 [ 1049.724962][T14573] ? sctp_add_bind_addr+0x89/0x350 [ 1049.730126][T14573] sctp_add_bind_addr+0x89/0x350 [ 1049.735124][T14573] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 1049.740817][T14573] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 1049.747709][T14573] ? sctp_v4_is_any+0x31/0x50 [ 1049.752457][T14573] ? sctp_copy_one_addr+0x93/0x660 [ 1049.757708][T14573] sctp_bind_addr_copy+0xaf/0x3c0 [ 1049.762960][T14573] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1049.769343][T14573] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1049.774692][T14573] ? __sctp_connect+0xd80/0xd80 [ 1049.779584][T14573] ? __local_bh_enable_ip+0x136/0x1c0 [ 1049.785002][T14573] ? _local_bh_enable+0xa0/0xa0 [ 1049.789904][T14573] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1049.795489][T14573] ? security_sctp_bind_connect+0x85/0xb0 [ 1049.801256][T14573] sctp_sendmsg+0x164a/0x2a30 [ 1049.805998][T14573] ? aa_sk_perm+0x7dc/0x910 [ 1049.810638][T14573] ? sctp_getsockopt+0x8a0/0x8a0 [ 1049.815633][T14573] ? aa_af_perm+0x340/0x340 [ 1049.820182][T14573] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1049.826648][T14573] ? sock_rps_record_flow+0x17/0x3b0 [ 1049.832205][T14573] ? inet_sendmsg+0x78/0x2f0 [ 1049.836850][T14573] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1049.842184][T14573] ? security_socket_sendmsg+0x7c/0xa0 [ 1049.847701][T14573] ? inet_send_prepare+0x260/0x260 [ 1049.852862][T14573] ____sys_sendmsg+0x5b7/0x8f0 [ 1049.857687][T14573] ? __sys_sendmsg_sock+0x30/0x30 [ 1049.862765][T14573] ? import_iovec+0x6f/0xa0 [ 1049.867324][T14573] ___sys_sendmsg+0x236/0x2e0 [ 1049.872051][T14573] ? __sys_sendmsg+0x2a0/0x2a0 [ 1049.876868][T14573] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1049.883137][T14573] __se_sys_sendmsg+0x1af/0x290 [ 1049.888048][T14573] ? __x64_sys_sendmsg+0x80/0x80 [ 1049.893039][T14573] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1049.898980][T14573] do_syscall_64+0x4c/0xa0 [ 1049.903435][T14573] ? clear_bhb_loop+0x30/0x80 [ 1049.908144][T14573] ? clear_bhb_loop+0x30/0x80 [ 1049.912857][T14573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1049.918813][T14573] RIP: 0033:0x7f7334c5fe59 [ 1049.923253][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.943084][T14573] RSP: 002b:00007f7332eb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.951551][T14573] RAX: ffffffffffffffda RBX: 00007f7334ed8fa0 RCX: 00007f7334c5fe59 [ 1049.959657][T14573] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1049.967759][T14573] RBP: 00007f7332eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.975752][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1049.983748][T14573] R13: 00007f7334ed9038 R14: 00007f7334ed8fa0 R15: 00007ffdaa561728 [ 1049.991775][T14573] [ 1050.542314][T14586] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 1050.603186][T14586] netlink: 'syz.0.3364': attribute type 4 has an invalid length. [ 1050.664175][T14586] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3364'. [ 1050.859026][T14608] netlink: 144316 bytes leftover after parsing attributes in process `syz.7.3373'. [ 1051.644873][T14646] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3385'. [ 1051.707440][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1051.740710][T14646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.871535][T14649] netlink: 'syz.3.3384': attribute type 2 has an invalid length. [ 1051.902746][T14657] netlink: 'syz.5.3387': attribute type 1 has an invalid length. [ 1051.920987][T14657] netlink: 'syz.5.3387': attribute type 4 has an invalid length. [ 1051.959833][T14657] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1052.228745][T14658] device syzkaller0 entered promiscuous mode [ 1052.634463][T14687] netlink: 'syz.6.3396': attribute type 1 has an invalid length. [ 1052.654045][T14687] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.3396'. [ 1052.738447][T14690] netlink: 'syz.0.3398': attribute type 10 has an invalid length. [ 1052.809702][T14690] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1054.332107][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.339726][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.408928][T14714] netlink: 'syz.6.3403': attribute type 1 has an invalid length. [ 1054.476019][T14714] netlink: 'syz.6.3403': attribute type 4 has an invalid length. [ 1054.483890][T14714] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3403'. [ 1054.967898][T14725] IPv6: NLM_F_CREATE should be specified when creating new route [ 1054.996234][T14725] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1056.004837][ C1] ------------[ cut here ]------------ [ 1056.010380][ C1] WARNING: CPU: 1 PID: 14740 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 1056.019828][ C1] Modules linked in: [ 1056.023768][ C1] CPU: 1 PID: 14740 Comm: syz-executor Not tainted syzkaller #0 [ 1056.031456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.041578][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1056.047800][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1056.067456][ C1] RSP: 0000:ffffc90000dd09d0 EFLAGS: 00010006 [ 1056.073664][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88807ca1bb80 [ 1056.082083][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1056.090212][ C1] RBP: 0000000000000000 R08: ffff88807ca1bb87 R09: 1ffff1100f943770 [ 1056.098379][ C1] R10: dffffc0000000000 R11: ffffed100f943771 R12: ffff88807ca1d308 [ 1056.106409][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0a48 R15: 0000000000000000 [ 1056.114420][ C1] FS: 000055555752a500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1056.123394][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.130020][ C1] CR2: fffffffffc000000 CR3: 000000001ec9e000 CR4: 00000000003506e0 [ 1056.138076][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1056.146093][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1056.154106][ C1] Call Trace: [ 1056.157416][ C1] [ 1056.160293][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1056.165543][ C1] bpf_prog_662a39d8fedf23b6+0x38/0xac0 [ 1056.171128][ C1] trace_call_bpf+0x32d/0x5b0 [ 1056.175857][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1056.181807][ C1] ? verify_lock_unused+0x140/0x140 [ 1056.187060][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1056.192647][ C1] perf_trace_lock_acquire+0x340/0x3e0 [ 1056.198320][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1056.204968][ C1] ? ktime_get+0x7b/0x270 [ 1056.209341][ C1] lock_acquire+0x3d7/0x400 [ 1056.213885][ C1] ? hrtimer_interrupt+0xf8/0x8d0 [ 1056.219002][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1056.224434][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1056.230731][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1056.236075][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1056.241397][ C1] ? hrtimer_interrupt+0xf8/0x8d0 [ 1056.246462][ C1] ? _raw_spin_lock+0x40/0x40 [ 1056.251194][ C1] hrtimer_interrupt+0xf8/0x8d0 [ 1056.256118][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1056.261360][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1056.266263][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1056.272392][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1056.278077][ C1] [ 1056.281048][ C1] [ 1056.284092][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.290115][ C1] RIP: 0010:lock_page_memcg+0x23d/0x440 [ 1056.295705][ C1] Code: 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 c6 44 01 04 f8 0f 85 f9 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 36 8f fb ff 4c 89 e8 48 c1 e8 03 48 b9 [ 1056.315462][ C1] RSP: 0000:ffffc900030cf9c0 EFLAGS: 00000206 [ 1056.321583][ C1] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 1ffff92000619f3c [ 1056.329592][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0 [ 1056.337604][ C1] RBP: ffffc900030cfa90 R08: ffffffff901d80c7 R09: 1ffffffff203b018 [ 1056.345624][ C1] R10: dffffc0000000000 R11: fffffbfff203b019 R12: ffff888016e7c670 [ 1056.353642][ C1] R13: ffff888016e7d080 R14: ffffea0001cc51f8 R15: ffff888016e7c000 [ 1056.361703][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1056.367490][ C1] page_add_file_rmap+0x185/0x940 [ 1056.372568][ C1] do_set_pte+0x3c9/0x530 [ 1056.376951][ C1] filemap_map_pages+0xea1/0x13b0 [ 1056.382124][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 1056.387287][ C1] ? count_memcg_event_mm+0x324/0x370 [ 1056.392746][ C1] handle_mm_fault+0x25bc/0x4410 [ 1056.397753][ C1] ? get_page+0xe0/0xe0 [ 1056.402048][ C1] ? vmacache_find+0x238/0x590 [ 1056.406947][ C1] ? find_vma+0xd2/0x230 [ 1056.411247][ C1] do_user_addr_fault+0x489/0xc80 [ 1056.416506][ C1] exc_page_fault+0x60/0x100 [ 1056.421146][ C1] ? clear_bhb_loop+0x30/0x80 [ 1056.425873][ C1] asm_exc_page_fault+0x22/0x30 [ 1056.430781][ C1] RIP: 0033:0x7f6ecd939080 [ 1056.435289][ C1] Code: Unable to access opcode bytes at RIP 0x7f6ecd939056. [ 1056.442684][ C1] RSP: 002b:00007ffcd0f70bb8 EFLAGS: 00010286 [ 1056.448789][ C1] RAX: ffffffffffffffff RBX: 00007ffcd0f70bc0 RCX: 0000000000000000 [ 1056.456807][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000000000c8 [ 1056.465017][ C1] RBP: 00007ffcd0f70ffc R08: 0000000000000000 R09: 0000000000000000 [ 1056.473033][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000070 [ 1056.481049][ C1] R13: 00000000000927c0 R14: 00000000001018fa R15: 00007ffcd0f71050 [ 1056.489090][ C1] [ 1056.492170][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1056.499510][ C1] CPU: 1 PID: 14740 Comm: syz-executor Not tainted syzkaller #0 [ 1056.507210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.517296][ C1] Call Trace: [ 1056.520746][ C1] [ 1056.523634][ C1] dump_stack_lvl+0x188/0x250 [ 1056.528359][ C1] ? show_regs_print_info+0x20/0x20 [ 1056.533600][ C1] ? load_image+0x400/0x400 [ 1056.538165][ C1] panic+0x2e5/0x810 [ 1056.542206][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1056.546774][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1056.552361][ C1] __warn+0x248/0x2b0 [ 1056.556384][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1056.561974][ C1] report_bug+0x1b7/0x2e0 [ 1056.566351][ C1] handle_bug+0x3a/0x70 [ 1056.570544][ C1] exc_invalid_op+0x16/0x40 [ 1056.575087][ C1] asm_exc_invalid_op+0x16/0x20 [ 1056.579967][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 1056.586162][ C1] Code: 24 45 31 f6 31 ff 89 de e8 5d 95 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 1056.605807][ C1] RSP: 0000:ffffc90000dd09d0 EFLAGS: 00010006 [ 1056.611939][ C1] RAX: ffffffff81a0b710 RBX: 0000000000000008 RCX: ffff88807ca1bb80 [ 1056.620454][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1056.628476][ C1] RBP: 0000000000000000 R08: ffff88807ca1bb87 R09: 1ffff1100f943770 [ 1056.636492][ C1] R10: dffffc0000000000 R11: ffffed100f943771 R12: ffff88807ca1d308 [ 1056.644633][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0a48 R15: 0000000000000000 [ 1056.652663][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 1056.658280][ C1] bpf_probe_read_compat+0xdd/0x170 [ 1056.663535][ C1] bpf_prog_662a39d8fedf23b6+0x38/0xac0 [ 1056.669165][ C1] trace_call_bpf+0x32d/0x5b0 [ 1056.673904][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1056.679847][ C1] ? verify_lock_unused+0x140/0x140 [ 1056.685101][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 1056.690694][ C1] perf_trace_lock_acquire+0x340/0x3e0 [ 1056.696218][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1056.702858][ C1] ? ktime_get+0x7b/0x270 [ 1056.707235][ C1] lock_acquire+0x3d7/0x400 [ 1056.711782][ C1] ? hrtimer_interrupt+0xf8/0x8d0 [ 1056.716864][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1056.722277][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1056.728559][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1056.733889][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 1056.739211][ C1] ? hrtimer_interrupt+0xf8/0x8d0 [ 1056.744283][ C1] ? _raw_spin_lock+0x40/0x40 [ 1056.749205][ C1] hrtimer_interrupt+0xf8/0x8d0 [ 1056.754119][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1056.759401][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 1056.764428][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1056.770471][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1056.776156][ C1] [ 1056.779146][ C1] [ 1056.782111][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.788192][ C1] RIP: 0010:lock_page_memcg+0x23d/0x440 [ 1056.793868][ C1] Code: 00 00 9c 8f 44 24 40 f7 44 24 40 00 02 00 00 c6 44 01 04 f8 0f 85 f9 00 00 00 f7 c3 00 02 00 00 74 01 fb 4d 8d af 80 10 00 00 <4c> 89 ef be 04 00 00 00 e8 36 8f fb ff 4c 89 e8 48 c1 e8 03 48 b9 [ 1056.813607][ C1] RSP: 0000:ffffc900030cf9c0 EFLAGS: 00000206 [ 1056.819730][ C1] RAX: dffffc0000000000 RBX: 0000000000000286 RCX: 1ffff92000619f3c [ 1056.827742][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0 [ 1056.835762][ C1] RBP: ffffc900030cfa90 R08: ffffffff901d80c7 R09: 1ffffffff203b018 [ 1056.843778][ C1] R10: dffffc0000000000 R11: fffffbfff203b019 R12: ffff888016e7c670 [ 1056.851794][ C1] R13: ffff888016e7d080 R14: ffffea0001cc51f8 R15: ffff888016e7c000 [ 1056.859836][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1056.865618][ C1] page_add_file_rmap+0x185/0x940 [ 1056.870691][ C1] do_set_pte+0x3c9/0x530 [ 1056.875082][ C1] filemap_map_pages+0xea1/0x13b0 [ 1056.880184][ C1] ? filemap_read_page+0x4c0/0x4c0 [ 1056.885377][ C1] ? count_memcg_event_mm+0x324/0x370 [ 1056.890809][ C1] handle_mm_fault+0x25bc/0x4410 [ 1056.895805][ C1] ? get_page+0xe0/0xe0 [ 1056.900027][ C1] ? vmacache_find+0x238/0x590 [ 1056.904831][ C1] ? find_vma+0xd2/0x230 [ 1056.909113][ C1] do_user_addr_fault+0x489/0xc80 [ 1056.914249][ C1] exc_page_fault+0x60/0x100 [ 1056.918877][ C1] ? clear_bhb_loop+0x30/0x80 [ 1056.923596][ C1] asm_exc_page_fault+0x22/0x30 [ 1056.928483][ C1] RIP: 0033:0x7f6ecd939080 [ 1056.932939][ C1] Code: Unable to access opcode bytes at RIP 0x7f6ecd939056. [ 1056.940331][ C1] RSP: 002b:00007ffcd0f70bb8 EFLAGS: 00010286 [ 1056.946442][ C1] RAX: ffffffffffffffff RBX: 00007ffcd0f70bc0 RCX: 0000000000000000 [ 1056.954506][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00000000000000c8 [ 1056.962510][ C1] RBP: 00007ffcd0f70ffc R08: 0000000000000000 R09: 0000000000000000 [ 1056.970519][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000070 [ 1056.978532][ C1] R13: 00000000000927c0 R14: 00000000001018fa R15: 00007ffcd0f71050 [ 1056.986568][ C1] [ 1056.989875][ C1] Kernel Offset: disabled [ 1056.994309][ C1] Rebooting in 86400 seconds..