last executing test programs: 12.061643859s ago: executing program 3 (id=2486): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x11e, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYRESDEC=r1], &(0x7f00000006c0)='GPL\x00', 0x4000, 0x35, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e0000000900000001040000ca0b000000200000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000005000000030000000500000000000000000000000000000099df39c38b423c9ec6360f49625ffb996c69371424286cebe45bdd2c3a287e8bf72dde88261da03fdcc3c295109c943d89d175e8d23b5af29d24a64e7fdbc5eee7bd0336fb404bdfd193d821942c64e7ab2577fd1ab112c9a823a6b333d9644c921bafd84afa2be691359d68401dfca88c526d5df981f4a3a33da5f906454c9a8c830b"], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x17, &(0x7f0000000200)=r7, 0x21) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x21100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10806, 0x5, 0x0, 0x2, 0x0, 0x0, 0xf6f, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x110108, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg(r10, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10020100002900000010040048e3af00485085beba292c9ad998f161b1c790b026d27502000000000000007ad60000cf5dce29c16e8523794ab45735130c7b956249e679f68154e41111d9a1d5f5aff509993fc918af23dde197b7449d7312ca72d90212046060452bfafa006c6893b63aa57d134e34086e05a4fc0568bfa8001ddefedc"], 0x20}, 0x20028010) r11 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r11, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xa0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f8}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a97}}, @alu={0x7, 0x1, 0x1, 0xa, 0x1, 0x80, 0x10}], &(0x7f0000000340)='syzkaller\x00', 0xe, 0x5f, &(0x7f0000000380)=""/95, 0x40f00, 0x8, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r3, r4], &(0x7f0000000540)=[{0x0, 0x2, 0xf, 0xc}, {0x0, 0x4, 0xf, 0x8}]}, 0x94) 9.944527867s ago: executing program 2 (id=2493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x13}, 0x44, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) recvmsg(r1, &(0x7f0000000d00)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2a105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x73) sendmsg$unix(r5, &(0x7f0000001c00)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20, 0x8051}, 0x14004) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000280)=0x1ffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 9.725494574s ago: executing program 3 (id=2496): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a118", 0x1d}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0xb00000000000018, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2}, [@exit, @generic={0x9, 0x2, 0x6, 0x5, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0xa4, &(0x7f00000001c0)=""/164, 0x41000, 0x3, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x3, 0x8001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f0000000280)=[r0, r0, r0, r0], &(0x7f00000002c0)=[{0x5, 0x3, 0x7, 0x9}, {0x3, 0x2, 0xc, 0xa}, {0x2, 0x4, 0xb, 0x5}, {0x4, 0x4, 0x8, 0x9}, {0x2, 0x2, 0x0, 0x3}, {0x1, 0x4, 0xd}, {0x5, 0x1, 0x2, 0x9}, {0x0, 0x2, 0x10, 0x7}, {0x1, 0x1, 0x8, 0xc}, {0x5, 0x1, 0x6, 0x3}], 0x10, 0x3}, 0x94) close(r5) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) socketpair(0x1e, 0xa, 0x8fc4, &(0x7f0000000040)) 8.64216702s ago: executing program 3 (id=2500): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0x1d, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xbbce}, [@printk={@llu}, @jmp={0x5, 0x1, 0x0, 0x4, 0x3, 0x100, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='syzkaller\x00', 0x7ff, 0xbe, &(0x7f0000000200)=""/190, 0x41000, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x4fd, 0x800}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x4, 0xdfd6feaff94f5e6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='(\x00') perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x0, r4, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x54) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000003c669dbe000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40001) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x555) 7.781918367s ago: executing program 2 (id=2504): socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x121, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb012218000000000000000000000000000000020000000000"], &(0x7f00000003c0)=""/82, 0x1a, 0x52, 0x0, 0x0, 0x10000}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611028000000000063010d00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x23, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000000c0), 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000940)) (async, rerun: 64) r4 = socket$kcm(0xa, 0x2, 0x88) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x6, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="b4000000000000007911a800000000009500000c00000000b660c860d788a2fc104efe5b68d8a646a46e2238b9d2d4cfaca9df807f22e860adcd13caee6157ae2ab1c4f2672462671805e83a23b80584c33a6b1f060b05bed83baa2a46251d26b988b41649196fd2c1a6de63fb8ca0f458b25bf208b937edec6947b1dde06cc879ed0767b5370830e3633f4065661ed3efc3a374134118aca3e9c223a5e8ec490ca7efbc42f5bba290bec3278d0d698f57abdab0ec6a379d584ebdc451ebcf0a979da67c066c939ba87bcc49444208d8c72423d5d9604052882c0c37f6bb8b752f1fb1c023d0577040d8ae8a8778bf82596537025be7e3694d48b2de28aa8a70dab14c2e996724a0a69a295c85c6f095900fc64e451e578359845c85add6030c328846feb2a881a63231d47e5d0c9dfd0a87e7c33d1d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r6, 0x3}, 0x12) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a00018025", 0x29}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x4, 0x0, 0x4) (async) socket$kcm(0x11, 0x2, 0x0) (async) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$sock(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 6.992743643s ago: executing program 3 (id=2505): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) (async) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/74, 0x4a}, 0x2) (async) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/74, 0x4a}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x480c4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 6.854986058s ago: executing program 2 (id=2506): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f00000009c0)="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", &(0x7f0000000740)=""/161, &(0x7f0000000380)="913c3ae0466b96f34aa95a", &(0x7f0000000800)="b848cd3df67b8f57a1c63ce792c5dd18c1c32e623826d05377bc5d0fef9a4909b6f45dfeb30efef0d92aa9487171d5f4d5af800897533ec9c2b6a15e033b360a7c0d4d47912ccd6782ac1ff09c2c6d34d9855076778d", 0x7, r1, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, @perf_config_ext, 0x10c002, 0xac61, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0xffffffffffffffff}, 0x80) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0x23, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.428746604s ago: executing program 2 (id=2511): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000200400014000000140000000500000000000000010000060400000001000000000000000061618700"], &(0x7f0000001f40)=""/4091, 0x31, 0xffb, 0x1}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0000000000004efb1470da963d61d43eecddd43a676a94556b44d08c7ecc562339f4423ab9fe8224cea03a71920fdb6b7451c372735e98e59869d8fd26fe3e31fa297466ebd064933605fbd7a3fb1b06116682b773155683fe51834db42e346a61aae0033e63846e4a9619f0084d112c325ae7ffe70a948df8cf69026ee6e58c4d3b9836b2fc207fb03e9f1571dc8045ee4f0e6a", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000108000000000000000000002d000000968511695f5254870d85507d3a07c7ec589aeb4f8ae572d4d4f8a92603702374dce4a2e65eb9730bedaa914cfd4a29a4f90da1bb8807175966e8b0e3293117a673e35eedb502c3f823369513534fb99e6f50b16c37ed8c0d13abaf46a5d8bb2bd1c2fd07103a78f11edf00060db2a080cd3bb47f19993316fc1992c7eb7a83e64d25f0b860bbfa6e79"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r3, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x1}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x107, 0x2, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="180600000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000004258fd5be8b8d8ad3368a60ce2b1ea27730d6953dd9e63a5e8b5f705887b195417523ebdb274afa1a6b341b50f34f6c103565523515e14aefd7cbe354a315d4884d8c6889a2fec6ad6ffee74113c8f3601d0de90e9307d2843e4db6215bad2fef9d5ea925ad992373a33589a040c038bbb0189259d26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x28, 0x3c, 0x0, 0x0) close(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000004c0)=""/164, 0x3a, 0xa4, 0x1}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, 0x0, 0x0, 0x2}, 0x20) socket$kcm(0x28, 0x5, 0x28) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r8, &(0x7f0000000dc0)="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"}, 0x20) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4d31, 0x20002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7, 0xfffffffe, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpu.stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) socket$kcm(0x10, 0x2, 0x0) 4.941618219s ago: executing program 3 (id=2514): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x13}, 0x44, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) recvmsg(r1, &(0x7f0000000d00)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2a105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x73) sendmsg$unix(r5, &(0x7f0000001c00)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20, 0x8051}, 0x14004) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000280)=0x1ffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 3.966591261s ago: executing program 4 (id=2520): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, @perf_config_ext, 0x10c002, 0xac61, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07080403fe800000", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, @perf_config_ext, 0x10c002, 0xac61, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07080403fe800000", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 3.7005737s ago: executing program 2 (id=2522): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) recvmsg$kcm(r0, 0x0, 0x60000001) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x1, 0x0, 0x100000, 0x20085, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x0, 0x100}, 0x4304, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0xab}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1b8a) 3.429787109s ago: executing program 1 (id=2524): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x1075, 0x6, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.157758798s ago: executing program 4 (id=2525): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180200006602000000000000070000008500000097000000850000007d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.928570865s ago: executing program 0 (id=2526): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2.251792377s ago: executing program 1 (id=2527): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9a072934328956e90eb054d809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xe2}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) 1.817165761s ago: executing program 4 (id=2528): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc601000070003000300053582c137153e37000c", 0x26}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000600)="27050200340f14000680002fb96dbcf706e10104000086ddffff1144ee162fd4b8bf4a31accb", 0x26}, {&(0x7f0000001a40)="e969b9ca2a9a2732559840ec1ed4bfe607b21531c4e677ffe27da0a9157d", 0x1e}], 0x2}, 0x90) 1.669324056s ago: executing program 1 (id=2529): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xedba}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x81142, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 1.664812146s ago: executing program 0 (id=2530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000000491bb44765f6955cbed80000000000010000840000000000000000020000"], 0x0, 0x51}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x0, 0x20, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x0, 0x0, &(0x7f0000000640), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="00003000000000000000d287ac0d1ac8897d63db323e15c0f62ef3bba11216bf43a77df4810653449c6d8a37d625dbadff2c179915e2e0b28b5e03945468211ba936cbb6173adb1c110c3bd37fcb444247a214364352ab50551b040893ad90e39466ccf6505f67e6f7db2f4fc7a125a5e6e872078b00d3a305aec97755b0c8bf0076ae77a900e88eb4105cde094c1cc2485f192b7dfd6d6c16c5e929a866f19f168e4262b6a21c91609694aed8db32bb391a361088d994a9cf1fad04ea", @ANYRES32=r8, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) socket$kcm(0x10, 0x2, 0x10) 1.263337639s ago: executing program 4 (id=2531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x13}, 0x44, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000280)=0x1ffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x6, 0x5, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080)={0x0, 0x8000000}, 0xfffffffffffffc79}, 0x48) 1.253665079s ago: executing program 1 (id=2532): socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1c0000001e0081054e81f782060000000000000006007c095dd24665", 0x1c}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1c0000001e0081054e81f782060000000000000006007c095dd24665", 0x1c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000006400000000600000008", @ANYRES32, @ANYBLOB='\x00'/24], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000006400000000600000008", @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x30}, 0x7e8166965e22236a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x9, 0x8, 0x6, 0xfffffffffdf7bbff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=""/234, 0xea}, 0x1) r4 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f029e3b470d649bc33b02ed1c376c81bb9f72ab2539", 0x1c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.111627604s ago: executing program 0 (id=2533): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x7, 0xc0, 0x5, 0x0, 0x8002, 0x80200, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x40}, 0x8, 0x8, 0x7264, 0x7, 0x7, 0x0, 0xa, 0x0, 0xa, 0x0, 0x5}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) 809.236773ms ago: executing program 1 (id=2534): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x406}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f00000009c0)="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", &(0x7f0000000740)=""/161, &(0x7f0000000380)="913c3ae0466b96f34aa95a", &(0x7f0000000800)="b848cd3df67b8f57a1c63ce792c5dd18c1c32e623826d05377bc5d0fef9a4909b6f45dfeb30efef0d92aa9487171d5f4d5af800897533ec9c2b6a15e033b360a7c0d4d47912ccd6782ac1ff09c2c6d34d9855076778d", 0x7, r1, 0x4}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, @perf_config_ext, 0x10c002, 0xac61, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r3, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0xffffffffffffffff}, 0x80) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0x23, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047e0ffff00124000632f0100000000000000030a07", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 797.815974ms ago: executing program 0 (id=2535): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdff}, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0x2}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0xf}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0xa6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330283ac14142c88a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x50) 672.638108ms ago: executing program 4 (id=2536): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000100081064e81f782db4cb904021d000000000000000855a10a00040011000c000a600e41b0000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b07000000a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180401000000000000000000000000008700000000000000", @ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x3, 0x105, &(0x7f0000000580)=""/261}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x9, 0x8, &(0x7f00000000c0)="55000059703fb7363d", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 366.866378ms ago: executing program 0 (id=2537): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8f, 0x7f, 0x4, 0x4, 0x0, 0xffffffffffff83d7, 0x140, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x7}, 0x10222, 0x6, 0x6, 0x8, 0xcc0, 0x7fffffff, 0xbe2, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xf, 0xffffffffffffffff, 0x12) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x6, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @ringbuf_query], &(0x7f00000000c0)='GPL\x00', 0x53, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xa, 0xd6d, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x4, 0x7, 0x8}, {0x2, 0x2, 0x1, 0x6}, {0x4, 0x4, 0x7, 0x2}, {0x0, 0x2, 0x5}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000300)=r3, 0x12) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x20}, 0x18) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r2}, 0xc) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000500)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540)=r6, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000002740)={&(0x7f0000000580)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="b73a19e2e700ee03d421b351a06861893b34706f94e21f2269c254ee142707e46a47a33acf287a1aef9a4a53", 0x2c}], 0x3, &(0x7f0000002680)=[{0x90, 0x0, 0xd46, "51c4028dc96353966d811fabd392178a9ae7e095d9ac91036f73eccc3ff852da58740fe4352c9c740e3f1d1a0cd092a46613523d8e8db3581dda6c516007f9f1ecdbf43daa64735efc61fb761ddf2d31d2ff358f786b38cc0f7769901f62ee7eb535ca0027dfba8f60ecc541c6a901ed6f1ea9bee17e6197522c"}], 0x90}, 0x4000801) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002780)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000027c0)='memory.min\x00', 0x2, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002840)=@o_path={&(0x7f0000002800)='./file0\x00', r2, 0x4000, r7}, 0x18) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x1}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c00)={0x1, 0x58, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002d40)={{r8, 0xffffffffffffffff}, &(0x7f0000002cc0), &(0x7f0000002d00)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x1a, 0x22, &(0x7f0000002900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x9a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x34bf1f8b}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a40)='GPL\x00', 0xffff53bd, 0xe1, &(0x7f0000002a80)=""/225, 0x40f00, 0x75, '\x00', r9, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000002c40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002c80)={0x5, 0x1, 0x2, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x6, &(0x7f0000002d80)=[r2, r8, r8, r10], &(0x7f0000002dc0)=[{0x4, 0x1, 0x1, 0x5}, {0x4, 0x1, 0x2}, {0x5, 0x3, 0x8, 0x5}, {0x1, 0x3, 0x10, 0xc}, {0x5, 0x4, 0x7, 0x1}, {0x2, 0x1, 0xa, 0x3}], 0x10, 0xb8}, 0x94) (async) perf_event_open(&(0x7f0000002f40)={0x5, 0x80, 0x40, 0xb2, 0x7, 0x0, 0x0, 0xe47a, 0x1040, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000002f00), 0x3}, 0x2a08, 0x7, 0x9, 0x1, 0x8, 0xda2, 0x5, 0x0, 0x80, 0x0, 0x4}, r3, 0x9, r0, 0xe) (async) perf_event_open(&(0x7f0000003000)={0x4, 0x80, 0x5, 0x7, 0xd8, 0x0, 0x0, 0x100, 0x40802, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000002fc0), 0x1}, 0x1000, 0x1, 0x4, 0x0, 0x9, 0x9, 0x9, 0x0, 0x0, 0x0, 0x9}, r3, 0xf, r0, 0x0) (async, rerun: 32) r11 = perf_event_open$cgroup(&(0x7f0000003080)={0x4, 0x80, 0x9, 0x7, 0x5, 0x8, 0x0, 0x9, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x8000, 0x1, 0xa, 0x5, 0x9, 0x4, 0x4, 0x0, 0x80a5, 0x0, 0x3}, r7, 0xd, 0xffffffffffffffff, 0xe) (rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000003140)={0x2, 0x80, 0x0, 0x82, 0x2, 0xff, 0x0, 0x3, 0x60140, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000003100)}, 0x0, 0x2, 0x7f00, 0xc, 0xf9e, 0x3, 0x7ff, 0x0, 0x6, 0x0, 0x100}) (async, rerun: 64) r12 = openat$cgroup(r2, &(0x7f00000031c0)='syz0\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup_devices(r12, &(0x7f0000003200)='devices.deny\x00', 0x2, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003240)={0x1}, 0x4) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003580)={0x6, 0x18, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query, @jmp={0x5, 0x1, 0x8, 0x4, 0x6, 0x30, 0xd}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7ff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x401}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000003440)='GPL\x00', 0x2, 0x9, &(0x7f0000003480)=""/9, 0x0, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000034c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003500)={0x0, 0xd, 0x3, 0xd8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003540)=[r4], 0x0, 0x10, 0x7}, 0x94) 278.372581ms ago: executing program 1 (id=2538): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x40010160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 169.077245ms ago: executing program 2 (id=2539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0x2, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000680)=""/4096, 0x27, 0x1000, 0x1}, 0x28) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1d, 0x1e, &(0x7f0000001d40)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffffd}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0xa4, &(0x7f0000001e40)=""/164, 0x41100, 0x8, '\x00', 0x0, @lsm, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0xd, 0xe, 0x80000000}, 0x10, 0x0, r3, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x3, 0x1, 0x3}, {0x1, 0xfffffffc, 0x6, 0x3}, {0x0, 0x4, 0xb, 0x5}, {0x4, 0x3, 0x6, 0x1}, {0x5, 0x1, 0x3, 0x6}, {0x2, 0x2, 0x8, 0x5}, {0x0, 0x3, 0x10, 0x9}], 0x10, 0x2}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000280)=r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)=""/177, 0xb1}, {0x0}], 0x2, &(0x7f0000000640)}, 0x40) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x5, [@float={0x6, 0x0, 0x0, 0x10, 0xc}, @var={0xb, 0x0, 0x0, 0xe, 0x4, 0x1}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x8, [{0xe, 0x8, 0x7}]}, @union={0x3, 0x7, 0x0, 0x5, 0x0, 0x7, [{0x7, 0x0, 0xf}, {0xb, 0x0, 0x8}, {0xe, 0x5, 0x5b}, {0xe, 0x4, 0x4}, {0x7, 0x0, 0x5}, {0xc, 0x5, 0x1c}, {0x5, 0x2}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3b, 0x0, 0x5d, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x231f371b, 0x8}}, @enum64={0x2, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x1, 0xb6033aa, 0x5}, {0xa, 0x3, 0x7}, {0x1, 0x9, 0x7}]}]}, {0x0, [0x30, 0x2e, 0x2e]}}, &(0x7f0000001ac0)=""/152, 0x109, 0x98, 0x1, 0x8}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x18, &(0x7f00000016c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query, @ldst={0x0, 0x1, 0x3, 0xb, 0x2, 0x4, 0xce7c5f7893568696}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x69}, @ringbuf_query], &(0x7f0000001780)='GPL\x00', 0x6, 0xf2, &(0x7f0000001880)=""/242, 0x41100, 0x40, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000001800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0x0, 0xf312, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001bc0)=[r0, r5, r5, r0], &(0x7f0000001c00)=[{0x2, 0x1, 0xc, 0x9}, {0x0, 0x3, 0x1, 0x3}, {0x5, 0x2, 0x8, 0x6}, {0x3, 0x1, 0x3, 0x8}, {0x1, 0x2, 0x2, 0xb}, {0x0, 0x1, 0xe, 0x7}], 0x10, 0x6d}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x17, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x3, 0x0, 0x0, 0x61880, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000b80), &(0x7f0000000bc0), 0x10, 0xffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r9, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000d80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 168.767674ms ago: executing program 4 (id=2540): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000380)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 114.073866ms ago: executing program 3 (id=2541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x1a, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/87, 0x57}], 0x1}, 0x10057) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x66) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2542): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r4, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x24, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xaa}, @alu={0x7, 0x1, 0x3, 0x3, 0xa, 0x30}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x15}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x6, 0xe9, &(0x7f0000000380)=""/233, 0x41000, 0x2, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x1, 0x5, 0x7, 0x2}, {0x0, 0x3, 0xf, 0xb}]}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x39, 0x0, 0x25, 0x5}]}, {0x0, [0x30, 0x30]}}, &(0x7f00000002c0)=""/92, 0x38, 0x5c, 0x0, 0x36c, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x200, 0x3, 0x100, 0x20002, r1, 0xc06, '\x00', r5, r7, 0x3, 0x2, 0x5}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0xfffffffe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f53cf8b69d3b23f1ec4fc9e4fd608c3a0e57d437f632a318c3581ffc7a5ae2d320f4fc9f589aa6d9cb0e168e0ec5c8a24e2f5700b0e772bba0f27fdaab46d12e31aa728851f43fe2fc83ee1b63d8012ed1cf47c989f3f01e1efa48b2a9500a0df2df7cef9af7ec4b5492e8ba8cfcb478b72056521e9b02298342c89014d353a9ef5a7e4a885d841b05b642c832e072c183977b36414b904f32e5a1a71514e7cf84ce0ee76bf58129bfc7dfd41905201a07ad170973eb2d6d6715f9de9295459383e094329cfd33db80f5cd8f56241c6600d20430e4ef682f01b72cb2ea0ff6f6bf023235ecd2c2adeee3ff22d88a161886ce167bb", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0xffffffffffffff4f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 445.436201][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.449926][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.457811][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.470492][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.489488][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.509236][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.541480][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.570200][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.589196][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.609191][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.669513][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.723772][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.760394][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 445.817778][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 445.842486][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.880567][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.912581][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.921484][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.112649][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.126993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.225083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.241819][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.253433][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.279889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.416327][ T4387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.445586][ T4387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.506975][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 448.473672][ T4426] device syzkaller0 entered promiscuous mode [ 448.547908][ T4429] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 448.565515][ T4441] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 448.580613][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.588845][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.904921][ T4444] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 449.931744][ T4444] team0: Port device dummy0 added [ 449.961457][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 449.981170][ T4444] syz.2.11 (4444) used greatest stack depth: 20016 bytes left [ 450.117768][ T4446] netlink: 'syz.2.12': attribute type 21 has an invalid length. [ 450.797548][ T4467] netlink: 'syz.3.16': attribute type 17 has an invalid length. [ 451.474823][ T4486] Zero length message leads to an empty skb [ 452.495128][ T4503] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.24'. [ 452.599532][ T4483] team0: Port device team_slave_0 removed [ 452.711764][ T4483] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 452.795129][ T4504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24'. [ 452.912515][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.332523][ T4504] device bridge_slave_0 left promiscuous mode [ 453.338827][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.910096][ T4534] device syzkaller1 entered promiscuous mode [ 456.217808][ T4602] netlink: 'syz.2.66': attribute type 13 has an invalid length. [ 456.267885][ T4602] netlink: 152 bytes leftover after parsing attributes in process `syz.2.66'. [ 456.300718][ T4602] syz_tun: refused to change device tx_queue_len [ 456.329427][ T4602] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 456.577612][ T4606] device syzkaller0 entered promiscuous mode [ 460.306536][ T4619] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 460.314305][ T4619] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.71'. [ 460.332463][ T4629] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 460.510193][ T4629] team0 (unregistering): Port device team_slave_0 removed [ 460.534879][ T4629] team0 (unregistering): Port device team_slave_1 removed [ 460.585216][ T4629] team0 (unregistering): Port device dummy0 removed [ 460.607693][ T4631] netlink: 'syz.4.75': attribute type 11 has an invalid length. [ 460.615731][ T4631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.75'. [ 461.015584][ T4645] syz.0.79 (4645) used greatest stack depth: 19192 bytes left [ 461.422124][ T4657] netlink: 'syz.4.82': attribute type 8 has an invalid length. [ 461.446640][ T4662] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.83'. [ 461.471971][ T4657] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.82'. [ 462.077256][ T4671] netlink: 188 bytes leftover after parsing attributes in process `syz.1.85'. [ 462.197985][ T4675] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 462.226412][ T4675] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.87'. [ 462.286038][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 463.308778][ T4691] device syzkaller0 entered promiscuous mode [ 463.888929][ T4721] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.98'. [ 466.429942][ T4719] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 466.437737][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 466.585811][ T4722] device syzkaller0 entered promiscuous mode [ 466.614689][ T4735] netlink: 'syz.3.102': attribute type 39 has an invalid length. [ 466.683294][ T4748] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.105'. [ 466.736821][ T4735] device hsr_slave_1 left promiscuous mode [ 466.759756][ T4748] netlink: zone id is out of range [ 466.765863][ T4748] netlink: get zone limit has 8 unknown bytes [ 469.879477][ T4767] netlink: 'syz.0.111': attribute type 25 has an invalid length. [ 470.164117][ T4795] netlink: 'syz.2.117': attribute type 2 has an invalid length. [ 470.174131][ T4795] netlink: 'syz.2.117': attribute type 8 has an invalid length. [ 470.199989][ T4795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.117'. [ 470.447424][ T4805] netlink: 168 bytes leftover after parsing attributes in process `syz.0.120'. [ 471.895052][ T4831] netlink: 'syz.2.127': attribute type 27 has an invalid length. [ 471.908817][ T4831] netlink: 164 bytes leftover after parsing attributes in process `syz.2.127'. [ 475.550541][ T4877] Driver unsupported XDP return value 0 on prog (id 55) dev N/A, expect packet loss! [ 475.625690][ T4881] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 475.726712][ T4881] device geneve0 entered promiscuous mode [ 475.930111][ T4881] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 479.429850][ T4915] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 479.453235][ T4915] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 479.494608][ T4915] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.146'. [ 479.683402][ T4919] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 479.743847][ T4919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.146'. [ 479.846141][ T4919] netlink: 10 bytes leftover after parsing attributes in process `syz.1.146'. [ 479.956541][ T4920] tipc: Started in network mode [ 479.988059][ T4920] tipc: Node identity 9215a268, cluster identity 4711 [ 480.021298][ T4920] tipc: Node number set to 2450891368 [ 481.244521][ T4940] netlink: 'syz.4.156': attribute type 6 has an invalid length. [ 481.280382][ T4940] netlink: 164 bytes leftover after parsing attributes in process `syz.4.156'. [ 482.438396][ T4966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.161'. [ 484.189881][ T4997] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 484.811763][ T4997] team0 (unregistering): Port device team_slave_1 removed [ 486.239701][ T5041] sock: sock_set_timeout: `syz.0.183' (pid 5041) tries to set negative timeout [ 486.382309][ T5039] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.181'. [ 486.685790][ T5046] netlink: 'syz.0.185': attribute type 28 has an invalid length. [ 486.823051][ T5048] netlink: 105 bytes leftover after parsing attributes in process `syz.4.186'. [ 486.899711][ T5048] netlink: 105 bytes leftover after parsing attributes in process `syz.4.186'. [ 487.276978][ T5062] netlink: 168 bytes leftover after parsing attributes in process `syz.2.187'. [ 488.784609][ T5070] can: request_module (can-proto-0) failed. [ 490.572860][ T5081] netlink: 'syz.2.194': attribute type 21 has an invalid length. [ 490.611680][ T5081] netlink: 144 bytes leftover after parsing attributes in process `syz.2.194'. [ 491.146329][ T5113] netlink: 'syz.4.201': attribute type 3 has an invalid length. [ 491.189372][ T5113] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.201'. [ 491.852255][ T5136] netlink: 'syz.0.207': attribute type 21 has an invalid length. [ 492.284569][ T5147] netlink: 54588 bytes leftover after parsing attributes in process `syz.0.211'. [ 492.960707][ T5158] syz.4.214 uses obsolete (PF_INET,SOCK_PACKET) [ 493.200862][ T5159] netlink: 60 bytes leftover after parsing attributes in process `syz.2.213'. [ 493.363400][ T5163] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 493.379596][ T5163] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.214'. [ 493.681634][ T5176] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.220'. [ 494.058182][ T5174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 494.089894][ T5186] netlink: 'syz.2.218': attribute type 29 has an invalid length. [ 494.177460][ T5186] netlink: 'syz.2.218': attribute type 29 has an invalid length. [ 494.992689][ T5221] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 495.007240][ T5221] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 495.016539][ T5221] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.230'. [ 498.287900][ T5256] netlink: 10 bytes leftover after parsing attributes in process `syz.3.239'. [ 498.743062][ T5275] netlink: 'syz.3.245': attribute type 2 has an invalid length. [ 498.778175][ T5275] netlink: 10 bytes leftover after parsing attributes in process `syz.3.245'. [ 498.791602][ T5279] netlink: 'syz.0.246': attribute type 6 has an invalid length. [ 498.804337][ T5279] netlink: 164 bytes leftover after parsing attributes in process `syz.0.246'. [ 499.441677][ T5291] netlink: 37755 bytes leftover after parsing attributes in process `syz.3.249'. [ 500.927977][ T5306] netlink: 'syz.3.254': attribute type 6 has an invalid length. [ 500.987324][ T5306] netlink: 168 bytes leftover after parsing attributes in process `syz.3.254'. [ 501.143195][ T5306] netlink: 1 bytes leftover after parsing attributes in process `syz.3.254'. [ 501.368035][ T5306] device aaaaaaaaaaaaaaa entered promiscuous mode [ 501.493643][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.501856][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.930165][ T5330] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 502.007127][ T5330] bond0: (slave bond_slave_0): Releasing backup interface [ 504.187519][ T5363] netlink: 'syz.4.269': attribute type 11 has an invalid length. [ 504.226516][ T5365] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 504.257399][ T5363] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.269'. [ 504.345168][ T5367] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 504.456194][ T5367] team0: Port device wlan1 added [ 504.502068][ T5362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.669346][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.683903][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.696820][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.709209][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.720003][ T5378] delete_channel: no stack [ 505.724950][ T5378] delete_channel: no stack [ 505.730795][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.744896][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.800835][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.827697][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.852959][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 505.867903][ T5377] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 508.235245][ T5392] netlink: 'syz.3.275': attribute type 46 has an invalid length. [ 508.264022][ T5392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.275'. [ 508.339400][ T5396] netlink: 'syz.2.276': attribute type 15 has an invalid length. [ 509.546758][ T5427] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.277'. [ 510.827557][ T5428] device wlan1 entered promiscuous mode [ 513.771327][ T5483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.302'. [ 514.036430][ T5488] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.303'. [ 514.763813][ T5493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.306'. [ 516.241386][ T5531] netlink: 10 bytes leftover after parsing attributes in process `syz.3.315'. [ 516.481952][ T5546] netlink: 'syz.3.318': attribute type 17 has an invalid length. [ 516.491279][ T5546] netlink: 'syz.3.318': attribute type 16 has an invalid length. [ 516.504755][ T5546] netlink: 152 bytes leftover after parsing attributes in process `syz.3.318'. [ 519.161347][ T5555] netlink: 'syz.2.317': attribute type 46 has an invalid length. [ 519.349703][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.321'. [ 519.358953][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.321'. [ 519.398963][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.321'. [ 519.484723][ T5565] netlink: 60 bytes leftover after parsing attributes in process `syz.3.321'. [ 519.965543][ T5593] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 520.048950][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.057678][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.083087][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.090350][ T5593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.099248][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.106607][ T5593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.200121][ T5593] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 520.209638][ T5592] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.328'. [ 520.239737][ T5592] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.328'. [ 520.555052][ T5609] netlink: 'syz.0.332': attribute type 17 has an invalid length. [ 521.511840][ T5634] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.338'. [ 522.985455][ T5623] team0: Port device team_slave_0 removed [ 523.029589][ T5629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.337'. [ 525.459910][ T5679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 525.590417][ T5685] netlink: 'syz.1.351': attribute type 21 has an invalid length. [ 525.598369][ T5685] netlink: 'syz.1.351': attribute type 6 has an invalid length. [ 525.700984][ T5685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'. [ 525.982323][ T4339] Bluetooth: hci0: ISO packet for unknown connection handle 3077 [ 526.107865][ T5679] netlink: 'syz.4.349': attribute type 3 has an invalid length. [ 526.118256][ T5679] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.349'. [ 526.776509][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 526.792688][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 526.806227][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 526.835277][ T5708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 528.103724][ T5730] netlink: 'syz.4.361': attribute type 3 has an invalid length. [ 528.216395][ T5730] netlink: 168732 bytes leftover after parsing attributes in process `syz.4.361'. [ 528.371676][ T5737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.360'. [ 528.903860][ T5744] netlink: 'syz.3.365': attribute type 27 has an invalid length. [ 529.172150][ T5754] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.370'. [ 529.720202][ T5744] bond0: (slave bond_slave_0): Releasing backup interface [ 529.788223][ T27] audit: type=1800 audit(1774834848.728:2): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.369" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 529.810199][ T5755] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 529.855122][ T5755] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 529.909754][ T5755] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 530.742470][ T5792] device veth1_macvtap left promiscuous mode [ 530.790535][ T5792] device macsec0 entered promiscuous mode [ 531.716623][ T5810] __nla_validate_parse: 1 callbacks suppressed [ 531.716641][ T5810] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.385'. [ 531.768254][ T5813] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 532.207159][ T5808] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 532.360469][ T5808] device geneve0 entered promiscuous mode [ 532.982870][ T5808] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 533.158893][ T5839] netlink: 14 bytes leftover after parsing attributes in process `syz.0.392'. [ 533.451370][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.544947][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.744234][ T5839] bond0 (unregistering): Released all slaves [ 533.815872][ T5837] netlink: 'syz.2.391': attribute type 4 has an invalid length. [ 534.711602][ T5866] netlink: 'syz.3.400': attribute type 3 has an invalid length. [ 534.739374][ T5866] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.400'. [ 536.083395][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.105936][ T5898] netlink: 'syz.1.406': attribute type 27 has an invalid length. [ 537.092175][ T5913] netlink: 14 bytes leftover after parsing attributes in process `syz.3.411'. [ 537.395601][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.486331][ T5913] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 537.608485][ T5913] bond0 (unregistering): Released all slaves [ 538.289656][ T5918] netlink: 'syz.1.410': attribute type 17 has an invalid length. [ 539.579904][ T5938] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 539.587645][ T5938] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.416'. [ 540.599743][ T5957] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.421'. [ 541.285510][ T5967] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.324369][ T5967] netlink: 1 bytes leftover after parsing attributes in process `syz.3.424'. [ 541.388111][ T5973] netlink: 'syz.3.424': attribute type 2 has an invalid length. [ 541.408397][ T5973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.424'. [ 541.780914][ T5992] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.429'. [ 541.819771][ T5992] net_ratelimit: 705 callbacks suppressed [ 541.819792][ T5992] netlink: zone id is out of range [ 541.864683][ T5992] netlink: get zone limit has 8 unknown bytes [ 543.014088][ T6024] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 545.445167][ T6017] netlink: 'syz.1.432': attribute type 21 has an invalid length. [ 545.453259][ T6024] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 545.747782][ T6040] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.442'. [ 545.758933][ T6040] netlink: zone id is out of range [ 545.778721][ T6040] netlink: get zone limit has 8 unknown bytes [ 546.047367][ T6051] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.443'. [ 546.084265][ T6051] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.443'. [ 546.099628][ T6053] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.444'. [ 546.101619][ T6055] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.443'. [ 546.729373][ T6069] netlink: 'syz.0.448': attribute type 10 has an invalid length. [ 547.016884][ T6072] netlink: 'syz.3.451': attribute type 21 has an invalid length. [ 547.391221][ T6084] netlink: 'syz.4.453': attribute type 6 has an invalid length. [ 547.737673][ T6095] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.457'. [ 547.792155][ T6095] netlink: zone id is out of range [ 547.840421][ T6095] netlink: get zone limit has 8 unknown bytes [ 548.312758][ T6113] netlink: 188 bytes leftover after parsing attributes in process `syz.3.463'. [ 548.393454][ T6120] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.464'. [ 548.977504][ T6136] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 549.913056][ T6136] device geneve0 entered promiscuous mode [ 549.971379][ T6136] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 550.766492][ T6166] netlink: 'syz.1.476': attribute type 39 has an invalid length. [ 551.099047][ T6172] netlink: 'syz.4.479': attribute type 11 has an invalid length. [ 551.160577][ T6166] device hsr_slave_1 left promiscuous mode [ 551.195809][ T6172] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.479'. [ 551.677346][ T6177] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 551.716881][ T6177] syzkaller0: linktype set to 769 [ 551.901340][ T6182] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 551.911229][ T6172] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 552.089409][ T6186] netlink: 'syz.1.483': attribute type 21 has an invalid length. [ 552.122437][ T6186] netlink: 'syz.1.483': attribute type 6 has an invalid length. [ 552.168446][ T6186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 552.215625][ T6190] device virt_wifi0 entered promiscuous mode [ 552.275879][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.012173][ T6211] device syzkaller0 entered promiscuous mode [ 553.675536][ T4339] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 554.840344][ T6261] netlink: 'syz.4.504': attribute type 3 has an invalid length. [ 554.868656][ T6261] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 554.916485][ T6261] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.504'. [ 555.531240][ T6279] netlink: 'syz.0.506': attribute type 29 has an invalid length. [ 555.741129][ T4339] Bluetooth: hci3: command 0x2016 tx timeout [ 557.019844][ T6293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 559.889342][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 559.889391][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 559.895411][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 559.901452][ T4339] Bluetooth: hci0: command 0x0406 tx timeout [ 559.901487][ T4339] Bluetooth: hci4: command 0x0406 tx timeout [ 561.805722][ T6279] netlink: 'syz.0.506': attribute type 29 has an invalid length. [ 562.019798][ T6309] device syzkaller0 entered promiscuous mode [ 562.178427][ T6321] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 562.239367][ T6321] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.519'. [ 562.532509][ T6329] netlink: 'syz.4.521': attribute type 17 has an invalid length. [ 562.562197][ T6329] netlink: 'syz.4.521': attribute type 41 has an invalid length. [ 562.571098][ T6329] netlink: 152 bytes leftover after parsing attributes in process `syz.4.521'. [ 562.615073][ T6330] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 562.631042][ T6330] netlink: 2 bytes leftover after parsing attributes in process `syz.4.521'. [ 562.686261][ T6330] device bond0 entered promiscuous mode [ 562.702022][ T6330] device bond_slave_0 entered promiscuous mode [ 562.734243][ T6330] device bond_slave_1 entered promiscuous mode [ 562.749658][ T6330] device bridge0 entered promiscuous mode [ 562.996355][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.002808][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.337564][ T6380] device bridge_slave_1 left promiscuous mode [ 564.379390][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.495979][ T6380] device bridge_slave_0 left promiscuous mode [ 564.601677][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.923545][ T6389] netlink: 'syz.2.540': attribute type 11 has an invalid length. [ 564.937717][ T6389] netlink: 'syz.2.540': attribute type 15 has an invalid length. [ 564.971741][ T6389] netlink: 'syz.2.540': attribute type 16 has an invalid length. [ 564.995881][ T6389] netlink: 'syz.2.540': attribute type 21 has an invalid length. [ 565.057217][ T6389] netlink: 'syz.2.540': attribute type 25 has an invalid length. [ 565.067354][ T6389] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.540'. [ 565.117792][ T6388] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.540'. [ 565.435310][ T6407] netlink: 188 bytes leftover after parsing attributes in process `syz.1.546'. [ 565.571970][ T6409] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.546'. [ 566.239683][ T6405] syz.3.545 (6405) used greatest stack depth: 16280 bytes left [ 567.824959][ T6457] validate_nla: 14 callbacks suppressed [ 567.824978][ T6457] netlink: 'syz.4.562': attribute type 39 has an invalid length. [ 567.878513][ T6465] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.562'. [ 568.150705][ T6457] device hsr_slave_1 left promiscuous mode [ 568.314876][ T6477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.567'. [ 568.442612][ T6482] netlink: 'syz.3.568': attribute type 11 has an invalid length. [ 568.599500][ T6482] netlink: 'syz.3.568': attribute type 11 has an invalid length. [ 568.607296][ T6482] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.568'. [ 570.623041][ T6542] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.585'. [ 570.841464][ T6546] netlink: 'syz.0.587': attribute type 29 has an invalid length. [ 570.869619][ T6546] netlink: 'syz.0.587': attribute type 29 has an invalid length. [ 570.891525][ T6546] netlink: 'syz.0.587': attribute type 29 has an invalid length. [ 571.295969][ T6552] netlink: 'syz.4.589': attribute type 10 has an invalid length. [ 571.322838][ T6552] netlink: 2 bytes leftover after parsing attributes in process `syz.4.589'. [ 571.350695][ T6552] device hsr0 entered promiscuous mode [ 571.371011][ T6552] bridge0: port 3(hsr0) entered blocking state [ 571.398860][ T6552] bridge0: port 3(hsr0) entered disabled state [ 571.425134][ T6552] bridge0: port 3(hsr0) entered blocking state [ 571.431648][ T6552] bridge0: port 3(hsr0) entered forwarding state [ 571.957609][ T6564] netlink: 'syz.4.592': attribute type 3 has an invalid length. [ 572.009228][ T6564] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.592'. [ 572.653058][ T6585] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 572.923682][ T6585] team0 (unregistering): Port device team_slave_0 removed [ 572.986365][ T6585] team0 (unregistering): Port device team_slave_1 removed [ 573.067316][ T6587] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 573.111510][ T6587] device veth1_macvtap left promiscuous mode [ 573.667495][ T6592] netlink: 'syz.0.599': attribute type 27 has an invalid length. [ 575.430108][ T6626] netlink: 2 bytes leftover after parsing attributes in process `syz.0.608'. [ 575.501582][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.644619][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.766121][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.788145][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.825211][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.898366][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.943171][ T6626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.047882][ T6626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.060714][ T6626] device batadv_slave_1 entered promiscuous mode [ 576.067656][ T6628] bridge0: port 3(hsr0) entered disabled state [ 576.092769][ T6628] device bridge_slave_1 left promiscuous mode [ 576.279602][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.446194][ T6628] device bridge_slave_0 left promiscuous mode [ 576.509351][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.697837][ T6628] bond0: (slave bridge0): Releasing backup interface [ 576.717338][ T6628] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 576.788768][ T6628] device bridge0 left promiscuous mode [ 577.474004][ T6654] netlink: 'syz.1.616': attribute type 27 has an invalid length. [ 578.386893][ T6654] bond0: (slave bond_slave_0): Releasing backup interface [ 578.774605][ T6679] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 578.856839][ T6679] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.624'. [ 580.815721][ T6715] netlink: 'syz.1.645': attribute type 39 has an invalid length. [ 580.885591][ T6715] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.645'. [ 581.114342][ T6718] netlink: 'syz.2.635': attribute type 27 has an invalid length. [ 586.149530][ T6771] netlink: 'syz.2.652': attribute type 20 has an invalid length. [ 586.215846][ T6777] netlink: 'syz.1.655': attribute type 46 has an invalid length. [ 586.267923][ T6777] netlink: 55 bytes leftover after parsing attributes in process `syz.1.655'. [ 586.660831][ T6781] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 589.618771][ T6827] netlink: 'syz.4.668': attribute type 11 has an invalid length. [ 589.635382][ T6827] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.668'. [ 589.713532][ T6834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.005834][ T6827] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 591.443293][ T6865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.674'. [ 591.682362][ T6865] tc_dump_action: action bad kind [ 594.456672][ T6910] syzkaller0: create flow: hash 1134058333 index 1 [ 594.652002][ T6904] device syzkaller0 entered promiscuous mode [ 594.704928][ T1198] syzkaller0: tun_net_xmit 48 [ 594.938630][ T6930] netlink: 'syz.4.697': attribute type 7 has an invalid length. [ 594.997614][ T6930] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 595.039162][ T6930] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.697'. [ 595.063857][ T6903] syzkaller0: delete flow: hash 1134058333 index 1 [ 598.851989][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.859542][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.151211][ T6976] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 599.177102][ T6978] delete_channel: no stack [ 599.202076][ T6978] delete_channel: no stack [ 600.002180][ T7000] netlink: 'syz.4.715': attribute type 29 has an invalid length. [ 600.027083][ T6996] device syzkaller0 entered promiscuous mode [ 600.075793][ T7000] netlink: 'syz.4.715': attribute type 29 has an invalid length. [ 600.090519][ T7004] tc_dump_action: action bad kind [ 600.098977][ T7006] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 600.113806][ T7005] netlink: 'syz.4.715': attribute type 29 has an invalid length. [ 600.129868][ T7000] netlink: 'syz.4.715': attribute type 29 has an invalid length. [ 602.554274][ T7019] device syzkaller0 entered promiscuous mode [ 603.285446][ T7058] netlink: 'syz.1.729': attribute type 4 has an invalid length. [ 603.306703][ T7053] netlink: 'syz.3.728': attribute type 2 has an invalid length. [ 603.316560][ T7053] netlink: 10 bytes leftover after parsing attributes in process `syz.3.728'. [ 603.326041][ T7058] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.729'. [ 604.044828][ T4337] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 604.066231][ T7082] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 604.140818][ T7082] netlink: 'syz.0.737': attribute type 3 has an invalid length. [ 604.175937][ T7082] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.737'. [ 604.571728][ T7094] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.741'. [ 604.589742][ T7094] netlink: zone id is out of range [ 604.596004][ T7094] netlink: zone id is out of range [ 604.641354][ T7094] netlink: zone id is out of range [ 604.812432][ T7094] netlink: del zone limit has 4 unknown bytes [ 605.678284][ T7115] netlink: 'syz.3.757': attribute type 3 has an invalid length. [ 605.694978][ T7115] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.757'. [ 607.641254][ T7085] netlink: 180 bytes leftover after parsing attributes in process `syz.0.737'. [ 607.938173][ T7139] netlink: 'syz.1.754': attribute type 2 has an invalid length. [ 607.994033][ T7142] netlink: 'syz.2.755': attribute type 16 has an invalid length. [ 608.617298][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 608.654697][ T7163] netlink: 'syz.1.761': attribute type 2 has an invalid length. [ 608.705928][ T7163] netlink: 10 bytes leftover after parsing attributes in process `syz.1.761'. [ 608.737492][ T7161] tc_dump_action: action bad kind [ 608.858579][ T7167] netlink: 'syz.0.762': attribute type 12 has an invalid length. [ 608.879255][ T7167] netlink: 'syz.0.762': attribute type 15 has an invalid length. [ 609.002853][ T4337] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 609.783405][ T7188] raw_sendmsg: syz.4.770 forgot to set AF_INET. Fix it! [ 609.994666][ T7187] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 610.573412][ T7208] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 610.613025][ T7208] netlink: 10 bytes leftover after parsing attributes in process `syz.0.775'. [ 610.618579][ T7211] netlink: 'syz.2.777': attribute type 21 has an invalid length. [ 610.652441][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 610.681789][ T7214] netlink: 'syz.2.777': attribute type 21 has an invalid length. [ 610.706943][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 611.173086][ T7222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.779'. [ 611.214330][ T7222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.273395][ T7224] netlink: 'syz.0.780': attribute type 21 has an invalid length. [ 611.293018][ T7222] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.779'. [ 611.339510][ T7224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.780'. [ 611.399404][ T7224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.780'. [ 611.442030][ T7226] netlink: 60 bytes leftover after parsing attributes in process `syz.0.780'. [ 611.490834][ T7228] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 611.526596][ T7228] team0: Port device wlan1 removed [ 611.572412][ T7228] device wlan1 entered promiscuous mode [ 611.632680][ T7228] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 611.706261][ T7228] netlink: 'syz.4.781': attribute type 10 has an invalid length. [ 611.727650][ T7228] device team0 entered promiscuous mode [ 611.735854][ T7228] device team_slave_1 entered promiscuous mode [ 611.750960][ T7228] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 612.574924][ T7269] netlink: 'syz.1.794': attribute type 3 has an invalid length. [ 612.594883][ T7270] netlink: 'syz.1.794': attribute type 3 has an invalid length. [ 616.231857][ T7326] __nla_validate_parse: 8 callbacks suppressed [ 616.231874][ T7326] netlink: 830 bytes leftover after parsing attributes in process `syz.4.810'. [ 617.626935][ T7348] netlink: 'syz.1.817': attribute type 21 has an invalid length. [ 617.644511][ T7348] netlink: 100 bytes leftover after parsing attributes in process `syz.1.817'. [ 618.720633][ T7364] netlink: 'syz.4.821': attribute type 2 has an invalid length. [ 618.756552][ T7364] netlink: 132 bytes leftover after parsing attributes in process `syz.4.821'. [ 620.708316][ T7423] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 621.460846][ T7423] device wg1 entered promiscuous mode [ 621.512394][ T7423] team0: Device wg1 is of different type [ 622.952575][ T7466] netlink: 'syz.4.851': attribute type 2 has an invalid length. [ 623.053945][ T7466] netlink: 'syz.4.851': attribute type 1 has an invalid length. [ 623.092440][ T7466] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.851'. [ 624.372704][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.379154][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.796949][ T7543] device pim6reg1 entered promiscuous mode [ 626.594902][ T7560] TCP: TCP_TX_DELAY enabled [ 627.614697][ T7588] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.891'. [ 627.638072][ T7589] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.891'. [ 627.684874][ T7589] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 627.695071][ T7588] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 628.384675][ T7598] device syzkaller0 entered promiscuous mode [ 628.401860][ T7592] netlink: 'syz.0.892': attribute type 41 has an invalid length. [ 628.494199][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 628.582137][ T7592] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 631.642781][ T7637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.901'. [ 631.855101][ T7644] FAULT_INJECTION: forcing a failure. [ 631.855101][ T7644] name failslab, interval 1, probability 0, space 0, times 1 [ 631.902768][ T7644] CPU: 0 PID: 7644 Comm: syz.2.906 Not tainted syzkaller #0 [ 631.910134][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.920230][ T7644] Call Trace: [ 631.923631][ T7644] [ 631.926594][ T7644] dump_stack_lvl+0x188/0x24e [ 631.931329][ T7644] ? show_regs_print_info+0x12/0x12 [ 631.936580][ T7644] ? load_image+0x400/0x400 [ 631.941122][ T7644] ? __might_sleep+0xd0/0xd0 [ 631.945723][ T7644] ? __lock_acquire+0x7d10/0x7d10 [ 631.950765][ T7644] should_fail_ex+0x399/0x4d0 [ 631.955544][ T7644] should_failslab+0x5/0x20 [ 631.960055][ T7644] slab_pre_alloc_hook+0x59/0x310 [ 631.965107][ T7644] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 631.970869][ T7644] __kmem_cache_alloc_node+0x4f/0x260 [ 631.976260][ T7644] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 631.981993][ T7644] __kmalloc+0xa0/0x240 [ 631.986167][ T7644] tomoyo_realpath_from_path+0xdf/0x5d0 [ 631.991734][ T7644] ? tomoyo_path_number_perm+0x205/0x650 [ 631.997380][ T7644] tomoyo_path_number_perm+0x22f/0x650 [ 632.002854][ T7644] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 632.008325][ T7644] ? ksys_write+0x1c0/0x250 [ 632.012850][ T7644] ? common_file_perm+0x171/0x1c0 [ 632.017910][ T7644] ? __fget_files+0x28/0x4b0 [ 632.022522][ T7644] ? __fget_files+0x28/0x4b0 [ 632.027137][ T7644] security_file_ioctl+0x6c/0xa0 [ 632.032095][ T7644] __se_sys_ioctl+0x48/0x170 [ 632.036704][ T7644] do_syscall_64+0x4c/0xa0 [ 632.041137][ T7644] ? clear_bhb_loop+0x60/0xb0 [ 632.045830][ T7644] ? clear_bhb_loop+0x60/0xb0 [ 632.050521][ T7644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.056424][ T7644] RIP: 0033:0x7f596739c819 [ 632.060854][ T7644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.080474][ T7644] RSP: 002b:00007f5968334028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.088946][ T7644] RAX: ffffffffffffffda RBX: 00007f5967615fa0 RCX: 00007f596739c819 [ 632.096943][ T7644] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000000 [ 632.104935][ T7644] RBP: 00007f5968334090 R08: 0000000000000000 R09: 0000000000000000 [ 632.112943][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.120925][ T7644] R13: 00007f5967616038 R14: 00007f5967615fa0 R15: 00007ffe99461618 [ 632.128922][ T7644] [ 632.219772][ T7650] netlink: 'syz.0.908': attribute type 41 has an invalid length. [ 632.246423][ T7644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 632.595614][ T7660] netlink: 'syz.0.910': attribute type 3 has an invalid length. [ 632.638960][ T7660] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.910'. [ 633.214529][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.915'. [ 633.351518][ T7684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.919'. [ 633.531387][ T7689] FAULT_INJECTION: forcing a failure. [ 633.531387][ T7689] name failslab, interval 1, probability 0, space 0, times 0 [ 633.567120][ T7689] CPU: 0 PID: 7689 Comm: syz.1.921 Not tainted syzkaller #0 [ 633.574482][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.584569][ T7689] Call Trace: [ 633.587880][ T7689] [ 633.590838][ T7689] dump_stack_lvl+0x188/0x24e [ 633.595562][ T7689] ? show_regs_print_info+0x12/0x12 [ 633.600802][ T7689] ? load_image+0x400/0x400 [ 633.605337][ T7689] ? __might_sleep+0xd0/0xd0 [ 633.610050][ T7689] ? __lock_acquire+0x7d10/0x7d10 [ 633.615574][ T7689] should_fail_ex+0x399/0x4d0 [ 633.620307][ T7689] should_failslab+0x5/0x20 [ 633.624848][ T7689] slab_pre_alloc_hook+0x59/0x310 [ 633.629925][ T7689] ? tomoyo_encode+0x27e/0x540 [ 633.634736][ T7689] __kmem_cache_alloc_node+0x4f/0x260 [ 633.640175][ T7689] ? tomoyo_encode+0x27e/0x540 [ 633.644973][ T7689] __kmalloc+0xa0/0x240 [ 633.649177][ T7689] tomoyo_encode+0x27e/0x540 [ 633.653814][ T7689] tomoyo_realpath_from_path+0x58e/0x5d0 [ 633.659493][ T7689] ? tomoyo_path_number_perm+0x205/0x650 [ 633.665165][ T7689] tomoyo_path_number_perm+0x22f/0x650 [ 633.670667][ T7689] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 633.676158][ T7689] ? ksys_write+0x1c0/0x250 [ 633.680803][ T7689] ? common_file_perm+0x171/0x1c0 [ 633.685903][ T7689] ? __fget_files+0x28/0x4b0 [ 633.690612][ T7689] ? __fget_files+0x28/0x4b0 [ 633.695247][ T7689] security_file_ioctl+0x6c/0xa0 [ 633.700224][ T7689] __se_sys_ioctl+0x48/0x170 [ 633.704857][ T7689] do_syscall_64+0x4c/0xa0 [ 633.709309][ T7689] ? clear_bhb_loop+0x60/0xb0 [ 633.714016][ T7689] ? clear_bhb_loop+0x60/0xb0 [ 633.718748][ T7689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.724771][ T7689] RIP: 0033:0x7f818d99c819 [ 633.729218][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.748940][ T7689] RSP: 002b:00007f818e913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.757388][ T7689] RAX: ffffffffffffffda RBX: 00007f818dc15fa0 RCX: 00007f818d99c819 [ 633.765471][ T7689] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000000 [ 633.773489][ T7689] RBP: 00007f818e913090 R08: 0000000000000000 R09: 0000000000000000 [ 633.781677][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.789677][ T7689] R13: 00007f818dc16038 R14: 00007f818dc15fa0 R15: 00007ffd5eabd3b8 [ 633.797717][ T7689] [ 633.854858][ T7689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.358565][ T7696] netlink: 'syz.1.923': attribute type 29 has an invalid length. [ 635.754628][ T7712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.762276][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 635.769623][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 635.776861][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 636.014182][ T7696] netlink: 'syz.1.923': attribute type 29 has an invalid length. [ 636.120639][ T7719] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 636.159012][ T7719] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.928'. [ 636.843968][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 637.766440][ T7737] FAULT_INJECTION: forcing a failure. [ 637.766440][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 637.795859][ T7737] CPU: 1 PID: 7737 Comm: syz.0.933 Not tainted syzkaller #0 [ 637.803216][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.813393][ T7737] Call Trace: [ 637.816747][ T7737] [ 637.819712][ T7737] dump_stack_lvl+0x188/0x24e [ 637.824436][ T7737] ? show_regs_print_info+0x12/0x12 [ 637.829676][ T7737] ? load_image+0x400/0x400 [ 637.834308][ T7737] ? __lock_acquire+0x7d10/0x7d10 [ 637.839376][ T7737] ? snprintf+0xe5/0x140 [ 637.843669][ T7737] should_fail_ex+0x399/0x4d0 [ 637.848401][ T7737] _copy_to_user+0x2c/0x130 [ 637.852955][ T7737] simple_read_from_buffer+0xe3/0x150 [ 637.858462][ T7737] proc_fail_nth_read+0x1a6/0x220 [ 637.863534][ T7737] ? proc_fault_inject_write+0x310/0x310 [ 637.869261][ T7737] ? fsnotify_perm+0x248/0x550 [ 637.874075][ T7737] ? proc_fault_inject_write+0x310/0x310 [ 637.879775][ T7737] vfs_read+0x2de/0xa00 [ 637.883979][ T7737] ? kernel_read+0x1e0/0x1e0 [ 637.888696][ T7737] ? __fget_files+0x28/0x4b0 [ 637.893327][ T7737] ? __fget_files+0x28/0x4b0 [ 637.898047][ T7737] ? __fget_files+0x43d/0x4b0 [ 637.902779][ T7737] ? __fdget_pos+0x2ae/0x360 [ 637.907425][ T7737] ? ksys_read+0x71/0x250 [ 637.911819][ T7737] ksys_read+0x14c/0x250 [ 637.916209][ T7737] ? vfs_write+0xa30/0xa30 [ 637.920684][ T7737] ? lockdep_hardirqs_on+0x94/0x140 [ 637.925944][ T7737] do_syscall_64+0x4c/0xa0 [ 637.930422][ T7737] ? clear_bhb_loop+0x60/0xb0 [ 637.935150][ T7737] ? clear_bhb_loop+0x60/0xb0 [ 637.939879][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.945821][ T7737] RIP: 0033:0x7fb684b5d04e [ 637.950273][ T7737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 637.970023][ T7737] RSP: 002b:00007fb6859a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 637.978470][ T7737] RAX: ffffffffffffffda RBX: 00007fb6859a36c0 RCX: 00007fb684b5d04e [ 637.986552][ T7737] RDX: 000000000000000f RSI: 00007fb6859a30a0 RDI: 0000000000000004 [ 637.994608][ T7737] RBP: 00007fb6859a3090 R08: 0000000000000000 R09: 0000000000000000 [ 638.002614][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.010716][ T7737] R13: 00007fb684e16038 R14: 00007fb684e15fa0 R15: 00007fffe38b3b58 [ 638.018728][ T7737] [ 640.322690][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.333708][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.343972][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.354112][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.364210][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.375890][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.386180][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.396217][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.406780][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 640.416680][ T7754] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 642.531467][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 642.546512][ T7724] netlink: 60 bytes leftover after parsing attributes in process `syz.4.930'. [ 642.557684][ T7729] netlink: 'syz.1.929': attribute type 2 has an invalid length. [ 642.566249][ T7729] netlink: 'syz.1.929': attribute type 8 has an invalid length. [ 642.575593][ T7729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'. [ 643.124882][ T7761] delete_channel: no stack [ 649.449329][ T7814] netlink: 144 bytes leftover after parsing attributes in process `syz.2.956'. [ 649.737641][ T7832] device syzkaller0 entered promiscuous mode [ 652.441301][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.965'. [ 652.459340][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.965'. [ 652.495199][ T7851] net_ratelimit: 33018 callbacks suppressed [ 652.495217][ T7851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 653.738593][ T7884] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 653.880413][ T7884] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 653.924800][ T7884] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.974'. [ 654.137630][ T7881] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 654.152587][ T7881] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 654.183212][ T7881] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 654.928347][ T7903] netlink: 'syz.0.979': attribute type 9 has an invalid length. [ 654.959263][ T7903] netlink: 399 bytes leftover after parsing attributes in process `syz.0.979'. [ 656.201370][ T7932] netlink: 'syz.4.987': attribute type 2 has an invalid length. [ 656.259247][ T7932] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.987'. [ 656.768328][ T7946] netlink: 'syz.0.992': attribute type 2 has an invalid length. [ 656.856179][ T7946] netlink: 'syz.0.992': attribute type 8 has an invalid length. [ 656.895338][ T7946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.992'. [ 657.181328][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.995'. [ 657.452069][ T7966] device syzkaller0 entered promiscuous mode [ 657.682420][ T7971] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 659.443620][ T8013] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 659.459415][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1010'. [ 659.559532][ T8013] netlink: 'syz.0.1010': attribute type 10 has an invalid length. [ 659.729743][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1010'. [ 660.138724][ T8020] netlink: 'syz.2.1013': attribute type 6 has an invalid length. [ 660.387635][ T8032] netlink: 'syz.1.1015': attribute type 11 has an invalid length. [ 660.552864][ T8033] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1015'. [ 660.744448][ T8045] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 660.745527][ T8042] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1020'. [ 660.811259][ T8045] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1019'. [ 661.241999][ T8056] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1023'. [ 661.792880][ T8056] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 668.318140][ T8174] device syzkaller0 entered promiscuous mode [ 670.423070][ T8188] device syzkaller0 entered promiscuous mode [ 672.332326][ T8204] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 672.339340][ T8206] netlink: 'syz.0.1044': attribute type 27 has an invalid length. [ 672.341997][ T8204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 672.360689][ T8204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 672.480873][ T8208] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1046'. [ 673.926228][ T8296] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1054'. [ 674.449629][ T8297] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1054'. [ 674.898766][ T8297] device hsr_slave_0 left promiscuous mode [ 675.171096][ T8306] netlink: 'syz.0.1057': attribute type 8 has an invalid length. [ 675.180202][ T8306] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1057'. [ 675.719820][ T8321] netlink: 3291 bytes leftover after parsing attributes in process `syz.0.1060'. [ 678.545960][ T8425] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1079'. [ 678.589233][ T8425] netlink: zone id is out of range [ 678.595980][ T8425] netlink: zone id is out of range [ 678.630356][ T8425] netlink: zone id is out of range [ 678.659888][ T8425] netlink: zone id is out of range [ 678.687883][ T8425] netlink: zone id is out of range [ 678.696087][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1080'. [ 678.721987][ T8425] netlink: zone id is out of range [ 678.732339][ T8427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1080'. [ 678.737554][ T8425] netlink: zone id is out of range [ 678.767354][ T8425] netlink: zone id is out of range [ 678.794861][ T8425] netlink: zone id is out of range [ 678.809456][ T8425] netlink: zone id is out of range [ 678.890256][ T8439] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1082'. [ 678.988924][ T8439] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1082'. [ 679.171168][ T8438] netlink: 'syz.1.1083': attribute type 11 has an invalid length. [ 679.243028][ T8449] tipc: Started in network mode [ 679.247979][ T8449] tipc: Node identity 9215a268, cluster identity 4711 [ 679.330361][ T8449] tipc: Node number set to 2450891368 [ 679.702353][ T8465] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 679.749227][ T8465] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1091'. [ 679.886917][ T8471] netlink: 'syz.1.1092': attribute type 21 has an invalid length. [ 679.949263][ T8471] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1092'. [ 679.967639][ T8471] netlink: 'syz.1.1092': attribute type 4 has an invalid length. [ 679.992563][ T8471] netlink: 'syz.1.1092': attribute type 5 has an invalid length. [ 680.043030][ T8471] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1092'. [ 681.830660][ T8513] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1106'. [ 682.351745][ T8537] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.1110'. [ 683.187021][ T8553] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 684.550536][ T8589] device wlan1 entered promiscuous mode [ 685.007024][ T8598] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 685.803571][ T8610] netlink: 'syz.4.1136': attribute type 10 has an invalid length. [ 685.819768][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.826113][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.253667][ T8610] device team_slave_1 left promiscuous mode [ 686.417303][ T8610] team0 (unregistering): Port device team_slave_1 removed [ 687.871482][ T8653] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 688.211992][ T8659] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 691.412340][ T8670] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 692.632901][ T8703] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1160'. [ 692.840993][ T8711] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1164'. [ 692.873154][ T8710] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 692.919396][ T8710] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.1164'. [ 693.879544][ T8718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1166'. [ 694.160485][ T8733] netlink: 'syz.2.1169': attribute type 29 has an invalid length. [ 694.185347][ T8733] netlink: 'syz.2.1169': attribute type 3 has an invalid length. [ 694.206046][ T8733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1169'. [ 695.079498][ T8758] netlink: 'syz.4.1177': attribute type 2 has an invalid length. [ 695.130026][ T8758] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 695.384988][ T8762] netlink: 'syz.2.1178': attribute type 3 has an invalid length. [ 695.499167][ T8762] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1178'. [ 695.838195][ T8767] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 695.878299][ T8767] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1179'. [ 696.338649][ T8778] tap0: tun_chr_ioctl cmd 1074025677 [ 696.389810][ T8778] tap0: linktype set to 823 [ 697.504904][ T8809] netlink: 'syz.0.1190': attribute type 46 has an invalid length. [ 697.521019][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1190'. [ 698.167996][ T8824] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1194'. [ 698.545037][ T8840] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.1198'. [ 698.609783][ T8840] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.1198'. [ 698.717107][ T8840] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 698.755573][ T8840] device hsr0 entered promiscuous mode [ 698.777574][ T8840] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 699.131503][ T8864] netlink: 'syz.3.1206': attribute type 29 has an invalid length. [ 699.168244][ T8864] netlink: 'syz.3.1206': attribute type 29 has an invalid length. [ 699.196929][ T8867] netlink: 'syz.3.1206': attribute type 29 has an invalid length. [ 699.534832][ T8878] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 699.561977][ T8878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1209'. [ 701.260397][ T8898] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 702.025787][ T8916] netlink: 'syz.4.1220': attribute type 3 has an invalid length. [ 702.052456][ T8916] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1220'. [ 702.558611][ T8937] device syzkaller0 entered promiscuous mode [ 702.587176][ T8937] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 716.886914][ T9010] netlink: 'syz.3.1247': attribute type 21 has an invalid length. [ 716.909240][ T9011] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 717.687072][ T9033] device syzkaller0 entered promiscuous mode [ 720.795564][ T9063] netlink: 'syz.1.1261': attribute type 21 has an invalid length. [ 720.803573][ T9063] netlink: 'syz.1.1261': attribute type 20 has an invalid length. [ 720.811753][ T9068] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 720.823736][ T9068] device veth0_macvtap left promiscuous mode [ 720.907762][ T9081] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 720.919154][ T9081] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1263'. [ 720.938564][ T9081] device hsr0 entered promiscuous mode [ 723.251528][ T9137] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 723.280263][ T4337] Bluetooth: hci4: ISO packet for unknown connection handle 17 [ 723.298058][ T9137] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1280'. [ 723.358363][ T9142] device bond_slave_1 entered promiscuous mode [ 723.480068][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 723.816237][ T9152] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1283'. [ 725.333020][ T9179] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1291'. [ 725.366240][ T9179] net_ratelimit: 3660 callbacks suppressed [ 725.366259][ T9179] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 725.837196][ T9200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1296'. [ 727.437351][ T9234] device syzkaller0 entered promiscuous mode [ 727.457342][ T9233] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 728.922816][ T9252] device syzkaller0 entered promiscuous mode [ 731.026018][ T9291] delete_channel: no stack [ 732.951702][ T9301] netlink: 'syz.0.1326': attribute type 7 has an invalid length. [ 733.584740][ T9324] netlink: 'syz.1.1333': attribute type 3 has an invalid length. [ 733.604471][ T9324] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1333'. [ 735.057502][ T9348] netlink: 'syz.4.1340': attribute type 7 has an invalid length. [ 735.289907][ T9352] netlink: 'syz.1.1342': attribute type 4 has an invalid length. [ 735.312344][ T9352] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 735.359511][ T9352] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1342'. [ 736.244966][ T9390] netlink: 'syz.4.1351': attribute type 30 has an invalid length. [ 737.368753][ T9423] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1360'. [ 737.466892][ T9423] delete_channel: no stack [ 738.734554][ T9456] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.1371'. [ 738.790583][ T9456] netlink: 14577 bytes leftover after parsing attributes in process `syz.0.1371'. [ 739.259386][ T9463] netlink: 'syz.0.1373': attribute type 11 has an invalid length. [ 739.326199][ T9463] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1373'. [ 740.043380][ T9462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.318601][ T9500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1383'. [ 740.335651][ T9500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1383'. [ 740.366948][ T9500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1383'. [ 740.435987][ T9500] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1383'. [ 740.793229][ T9506] netlink: 'syz.0.1385': attribute type 15 has an invalid length. [ 740.816841][ T9506] netlink: 'syz.0.1385': attribute type 7 has an invalid length. [ 741.140270][ T9522] netlink: 'syz.1.1389': attribute type 21 has an invalid length. [ 741.166733][ T9522] netlink: 'syz.1.1389': attribute type 6 has an invalid length. [ 741.259294][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1389'. [ 742.197007][ T9547] netlink: 'syz.2.1396': attribute type 11 has an invalid length. [ 742.277117][ T9547] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1396'. [ 742.405817][ T9546] netlink: 'syz.1.1397': attribute type 9 has an invalid length. [ 742.426668][ T9546] netlink: 103272 bytes leftover after parsing attributes in process `syz.1.1397'. [ 742.589834][ T9541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.706168][ T9562] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 742.997967][ T9578] netlink: 'syz.3.1406': attribute type 7 has an invalid length. [ 744.482387][ T9624] __nla_validate_parse: 1 callbacks suppressed [ 744.482407][ T9624] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1418'. [ 746.009287][ T9658] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 746.046693][ T9658] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.069143][ T9658] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.109205][ T9658] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.152514][ T9658] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.259777][ T9665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1429'. [ 747.615469][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.622480][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.981037][ T9705] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 748.010055][ T9705] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 748.061709][ T9709] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 748.631714][ T9731] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1445'. [ 748.653258][ T9731] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 748.701390][ T9730] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1445'. [ 748.744315][ T9730] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 748.784396][ T9730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 748.830513][ T9730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 750.740964][ T9773] netlink: 'syz.1.1457': attribute type 12 has an invalid length. [ 750.748850][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1457'. [ 752.944530][ T9809] netlink: 'syz.4.1466': attribute type 3 has an invalid length. [ 752.954884][ T9809] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1466'. [ 752.977357][ T9809] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1466'. [ 753.047735][ T9812] netlink: 'syz.1.1467': attribute type 5 has an invalid length. [ 753.271212][ T9818] netlink: 'syz.0.1469': attribute type 10 has an invalid length. [ 753.279611][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1469'. [ 753.303849][ T9818] batman_adv: batadv0: Adding interface: virt_wifi0 [ 753.310905][ T9818] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.449385][ T9818] batman_adv: batadv0: Interface activated: virt_wifi0 [ 753.574458][ T9825] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 753.599270][ T9825] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1470'. [ 753.977364][ T9840] netlink: 'syz.3.1475': attribute type 27 has an invalid length. [ 754.020891][ T9840] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1475'. [ 755.474959][ T9871] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 755.783786][ T9884] netlink: 'syz.3.1486': attribute type 2 has an invalid length. [ 755.807853][ T9884] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 755.856238][ T9884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1486'. [ 756.043006][ T9889] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1488'. [ 756.622628][ T9915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1497'. [ 756.743963][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.766590][ T9910] sctp: [Deprecated]: syz.4.1495 (pid 9910) Use of int in maxseg socket option. [ 756.766590][ T9910] Use struct sctp_assoc_value instead [ 756.935406][ T9915] device bridge_slave_0 left promiscuous mode [ 756.953257][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.079568][ T9920] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1498'. [ 757.117513][ T9920] netlink: 'syz.1.1498': attribute type 12 has an invalid length. [ 757.160714][ T9920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1498'. [ 759.050979][ T9972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.077393][ T9972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.215649][ T9972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.261601][ T9972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.649031][ T9972] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 759.712667][ T9972] batman_adv: batadv0: Removing interface: virt_wifi0 [ 760.545574][ T9973] netlink: 'syz.0.1513': attribute type 21 has an invalid length. [ 760.559475][ T9973] netlink: 'syz.0.1513': attribute type 6 has an invalid length. [ 760.567296][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1513'. [ 760.712338][ T9994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1517'. [ 761.183143][T10004] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1518'. [ 762.707919][T10041] device syzkaller0 entered promiscuous mode [ 765.364575][T10049] netlink: 'syz.4.1533': attribute type 10 has an invalid length. [ 765.388766][T10081] netlink: 'syz.3.1541': attribute type 21 has an invalid length. [ 765.400557][T10081] netlink: 'syz.3.1541': attribute type 11 has an invalid length. [ 767.067891][T10126] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 767.119948][T10126] netlink: 'syz.2.1554': attribute type 1 has an invalid length. [ 767.211344][T10126] netlink: 'syz.2.1554': attribute type 8 has an invalid length. [ 767.313405][T10126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1554'. [ 767.972458][T10144] netlink: 'syz.4.1557': attribute type 28 has an invalid length. [ 769.006530][T10150] device syzkaller0 entered promiscuous mode [ 769.080636][T10156] netlink: 'syz.2.1560': attribute type 28 has an invalid length. [ 769.911327][T10205] netlink: 'syz.3.1572': attribute type 6 has an invalid length. [ 769.934512][T10205] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1572'. [ 772.246124][T10191] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 772.289364][T10191] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 772.358766][T10191] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 772.844599][T10233] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1580'. [ 773.306755][T10245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1582'. [ 774.064064][T10268] device syzkaller0 entered promiscuous mode [ 774.690984][T10296] netlink: 'syz.4.1599': attribute type 7 has an invalid length. [ 774.841560][T10298] netlink: 'syz.3.1598': attribute type 21 has an invalid length. [ 775.549082][T10323] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1608'. [ 775.616679][T10319] netlink: 'syz.4.1605': attribute type 21 has an invalid length. [ 775.633436][T10319] netlink: 'syz.4.1605': attribute type 20 has an invalid length. [ 775.711631][T10325] netlink: 'syz.2.1608': attribute type 5 has an invalid length. [ 775.781045][T10325] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1608'. [ 775.976136][T10329] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 776.136569][T10333] netlink: 'syz.4.1611': attribute type 1 has an invalid length. [ 776.543787][T10340] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 776.606627][T10342] netlink: 'syz.1.1614': attribute type 21 has an invalid length. [ 776.655251][T10342] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1614'. [ 776.899711][T10345] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 777.743700][T10366] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1621'. [ 777.786505][T10366] netlink: zone id is out of range [ 777.849964][T10366] netlink: zone id is out of range [ 778.116569][T10366] netlink: del zone limit has 4 unknown bytes [ 779.677353][T10396] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1630'. [ 780.578272][T10407] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1634'. [ 780.598896][T10407] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1634'. [ 780.638079][T10407] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1634'. [ 780.935647][T10422] tipc: Started in network mode [ 780.942605][T10422] tipc: Node identity 9215a268, cluster identity 4711 [ 780.951868][T10422] tipc: Node number set to 2450891368 [ 781.887126][T10440] validate_nla: 1 callbacks suppressed [ 781.887144][T10440] netlink: 'syz.0.1644': attribute type 3 has an invalid length. [ 781.908704][T10440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1644'. [ 783.603974][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 783.700636][T10460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1648'. [ 784.442769][T10489] netlink: 'syz.4.1655': attribute type 3 has an invalid length. [ 784.539149][T10489] netlink: 172424 bytes leftover after parsing attributes in process `syz.4.1655'. [ 785.303022][T10510] netlink: 'syz.4.1661': attribute type 12 has an invalid length. [ 785.378045][T10510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1661'. [ 785.421939][T10509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1661'. [ 785.545019][T10520] netlink: 'syz.0.1664': attribute type 2 has an invalid length. [ 785.573052][T10522] delete_channel: no stack [ 786.383011][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'. [ 786.413644][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'. [ 786.464540][T10534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'. [ 786.558497][T10536] netlink: 'syz.4.1668': attribute type 9 has an invalid length. [ 786.576949][T10536] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1668'. [ 787.221926][T10549] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1671'. [ 788.061714][T10578] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 788.423203][T10578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.548605][T10578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 788.729204][T10588] netlink: 'syz.4.1680': attribute type 21 has an invalid length. [ 789.200499][T10600] netlink: 'syz.3.1685': attribute type 21 has an invalid length. [ 789.210254][T10600] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1685'. [ 792.599448][T10665] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1702'. [ 793.674557][T10683] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 796.089766][T10704] netlink: 'syz.2.1713': attribute type 2 has an invalid length. [ 796.133988][ T8136] tipc: Subscription rejected, illegal request [ 796.327058][T10708] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1713'. [ 796.831096][T10718] sctp: [Deprecated]: syz.0.1716 (pid 10718) Use of int in maxseg socket option. [ 796.831096][T10718] Use struct sctp_assoc_value instead [ 796.907973][T10719] netlink: 'syz.3.1717': attribute type 2 has an invalid length. [ 797.126807][T10719] device 0 entered promiscuous mode [ 798.616555][T10727] netlink: 'syz.0.1720': attribute type 1 has an invalid length. [ 798.810646][T10727] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1720'. [ 800.575415][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1727'. [ 802.746913][T10777] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 802.997587][T10776] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 803.034393][T10777] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1733'. [ 803.127454][T10776] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 803.353248][T10780] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 804.071619][T10803] syz.0.1742[10803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 804.071769][T10803] syz.0.1742[10803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 805.036884][T10822] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1748'. [ 806.284549][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 806.810353][T10859] netlink: 'syz.1.1759': attribute type 21 has an invalid length. [ 806.858309][T10859] netlink: 'syz.1.1759': attribute type 22 has an invalid length. [ 806.892795][T10859] netlink: 7600 bytes leftover after parsing attributes in process `syz.1.1759'. [ 807.483906][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.764950][T10873] netlink: 'syz.1.1764': attribute type 10 has an invalid length. [ 807.833005][T10873] team0: Device wg1 is of different type [ 808.692581][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.699011][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.857242][T10902] netlink: 'syz.4.1771': attribute type 16 has an invalid length. [ 808.898543][T10902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1771'. [ 810.469141][T10929] netlink: 'syz.1.1781': attribute type 21 has an invalid length. [ 810.944424][T10939] netlink: 'syz.4.1784': attribute type 2 has an invalid length. [ 810.979798][T10939] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1784'. [ 811.006377][T10937] FAULT_INJECTION: forcing a failure. [ 811.006377][T10937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.039159][T10937] CPU: 0 PID: 10937 Comm: syz.3.1783 Not tainted syzkaller #0 [ 811.046868][T10937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.056964][T10937] Call Trace: [ 811.060273][T10937] [ 811.063290][T10937] dump_stack_lvl+0x188/0x24e [ 811.068017][T10937] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 811.074219][T10937] ? show_regs_print_info+0x12/0x12 [ 811.079489][T10937] ? load_image+0x400/0x400 [ 811.084040][T10937] should_fail_ex+0x399/0x4d0 [ 811.088767][T10937] strncpy_from_user+0x32/0x350 [ 811.093668][T10937] bpf_prog_load+0x1f3/0x1560 [ 811.098403][T10937] ? map_freeze+0x390/0x390 [ 811.102970][T10937] ? __sys_bpf+0x360/0x780 [ 811.107525][T10937] __sys_bpf+0x5b8/0x780 [ 811.111810][T10937] ? bpf_link_show_fdinfo+0x380/0x380 [ 811.117233][T10937] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 811.123457][T10937] __x64_sys_bpf+0x78/0x90 [ 811.128009][T10937] do_syscall_64+0x4c/0xa0 [ 811.132506][T10937] ? clear_bhb_loop+0x60/0xb0 [ 811.137216][T10937] ? clear_bhb_loop+0x60/0xb0 [ 811.141930][T10937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.147944][T10937] RIP: 0033:0x7f070e99c819 [ 811.152388][T10937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.172040][T10937] RSP: 002b:00007f070f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.180502][T10937] RAX: ffffffffffffffda RBX: 00007f070ec15fa0 RCX: 00007f070e99c819 [ 811.188513][T10937] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000005 [ 811.196520][T10937] RBP: 00007f070f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 811.204614][T10937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.212622][T10937] R13: 00007f070ec16038 R14: 00007f070ec15fa0 R15: 00007ffcb4daa8c8 [ 811.220649][T10937] [ 811.453514][T10944] device bridge_slave_1 left promiscuous mode [ 811.473952][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.887362][T10944] device bridge_slave_0 left promiscuous mode [ 811.942795][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.726526][T10984] syz.2.1796[10984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.726683][T10984] syz.2.1796[10984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.940195][T10984] syz.2.1796[10984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.008552][T10988] IPv6: Can't replace route, no match found [ 813.076687][T10984] syz.2.1796[10984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.346437][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 816.895967][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1821'. [ 816.924949][T11086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1821'. [ 817.724995][T11109] netlink: 'syz.3.1827': attribute type 39 has an invalid length. [ 818.062908][T11113] FAULT_INJECTION: forcing a failure. [ 818.062908][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 818.105876][T11113] CPU: 0 PID: 11113 Comm: syz.4.1829 Not tainted syzkaller #0 [ 818.113417][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 818.123602][T11113] Call Trace: [ 818.126917][T11113] [ 818.129885][T11113] dump_stack_lvl+0x188/0x24e [ 818.134622][T11113] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 818.140828][T11113] ? show_regs_print_info+0x12/0x12 [ 818.146171][T11113] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 818.152397][T11113] should_fail_ex+0x399/0x4d0 [ 818.157128][T11113] should_failslab+0x5/0x20 [ 818.161668][T11113] slab_pre_alloc_hook+0x59/0x310 [ 818.166740][T11113] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 818.172516][T11113] __kmem_cache_alloc_node+0x4f/0x260 [ 818.177936][T11113] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 818.183754][T11113] __kmalloc+0xa0/0x240 [ 818.187962][T11113] tomoyo_realpath_from_path+0xdf/0x5d0 [ 818.193564][T11113] ? tomoyo_path_number_perm+0x205/0x650 [ 818.199247][T11113] tomoyo_path_number_perm+0x22f/0x650 [ 818.204743][T11113] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 818.210223][T11113] ? ktime_get+0x7b/0x270 [ 818.214593][T11113] ? ktime_get+0x7b/0x270 [ 818.218933][T11113] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 818.225215][T11113] ? __fget_files+0x28/0x4b0 [ 818.229994][T11113] ? __fget_files+0x28/0x4b0 [ 818.234874][T11113] security_file_ioctl+0x6c/0xa0 [ 818.239837][T11113] __se_sys_ioctl+0x48/0x170 [ 818.244471][T11113] do_syscall_64+0x4c/0xa0 [ 818.248903][T11113] ? clear_bhb_loop+0x60/0xb0 [ 818.253594][T11113] ? clear_bhb_loop+0x60/0xb0 [ 818.258288][T11113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.264191][T11113] RIP: 0033:0x7fd2acb9c819 [ 818.268618][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.288232][T11113] RSP: 002b:00007fd2ad9bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.296659][T11113] RAX: ffffffffffffffda RBX: 00007fd2ace16090 RCX: 00007fd2acb9c819 [ 818.304649][T11113] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000000 [ 818.312631][T11113] RBP: 00007fd2ad9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 818.320611][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.328589][T11113] R13: 00007fd2ace16128 R14: 00007fd2ace16090 R15: 00007fff12ce5408 [ 818.336583][T11113] [ 818.467790][T11113] ERROR: Out of memory at tomoyo_realpath_from_path. [ 820.091571][T11162] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1844'. [ 820.154022][T11162] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1844'. [ 821.578482][T11199] netlink: 'syz.1.1856': attribute type 2 has an invalid length. [ 821.645942][T11199] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1856'. [ 822.450223][T11214] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1860'. [ 822.675855][T11193] netlink: 'syz.0.1853': attribute type 5 has an invalid length. [ 823.678195][T11246] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1867'. [ 824.485479][T11258] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1871'. [ 825.037187][T11271] netlink: 'syz.4.1873': attribute type 13 has an invalid length. [ 825.077988][T11271] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1873'. [ 825.112283][T11271] syz_tun: refused to change device tx_queue_len [ 825.118709][T11271] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 827.239728][T11305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 827.343219][T11305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 827.461797][T11311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 827.490290][T11316] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 829.826511][T11343] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 832.346438][T11359] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1897'. [ 832.366236][T11359] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1897'. [ 832.400558][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.407349][T11362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1897'. [ 832.408580][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.425649][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.433586][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.441511][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.449361][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.457145][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.465114][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.473176][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.481157][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.489083][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.496901][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.505025][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.514137][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.522019][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.529977][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.537896][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.545972][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.553908][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.561808][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.569711][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.577529][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.585421][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.593300][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.601199][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.609206][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.617100][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.624995][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.632883][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.640757][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.648546][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.656554][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.664439][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.672281][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.680176][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.687995][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.696075][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.703972][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.712002][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.719902][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.727703][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.735598][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.743499][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.751385][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.759290][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.767082][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.775167][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.783058][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.790936][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.798729][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.806699][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.814815][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.822752][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.830661][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.838573][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.846461][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.854355][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.862314][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.870155][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.877948][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.885954][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.893854][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.901725][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.910716][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 832.918885][ T4337] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 834.120025][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 834.254000][T11399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 834.472622][T11400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 834.633667][T11402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 835.297405][T11413] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1911'. [ 836.414088][T11430] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.1916'. [ 836.833679][T11443] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1919'. [ 837.164701][T11446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1921'. [ 837.217309][T11446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1921'. [ 837.266717][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1921'. [ 837.635713][T11455] device syzkaller0 entered promiscuous mode [ 842.614398][T11470] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 843.488906][T11535] cgroup: fork rejected by pids controller in /syz4 [ 844.042252][T11547] __nla_validate_parse: 1 callbacks suppressed [ 844.042271][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1951'. [ 844.085675][T11547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.230278][T11552] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 844.806488][T11552] team0: Port device geneve1 added [ 845.253345][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.459210][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.700492][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.842686][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.305320][T11589] netlink: 'syz.0.1964': attribute type 12 has an invalid length. [ 846.322270][T11589] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1964'. [ 846.533649][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 846.579261][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 846.588229][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 846.596748][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 846.605425][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 846.613330][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 846.643520][ T11] tipc: Left network mode [ 848.057022][T11624] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1975'. [ 848.088359][T11591] chnl_net:caif_netlink_parms(): no params data found [ 848.303727][T11624] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1975'. [ 848.407449][T11637] device bridge_slave_1 left promiscuous mode [ 848.479310][T11637] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.689369][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 848.728260][T11635] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1975'. [ 849.245914][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.284134][T11658] netlink: 'syz.2.1981': attribute type 3 has an invalid length. [ 849.295775][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.326982][T11591] device bridge_slave_0 entered promiscuous mode [ 849.374840][T11658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1981'. [ 849.471083][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.498262][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.521429][T11591] device bridge_slave_1 entered promiscuous mode [ 849.781170][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.861682][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.021118][T11591] team0: Port device team_slave_0 added [ 850.152795][T11673] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1984'. [ 850.189642][ T11] bond0: (slave wlan1): Releasing backup interface [ 850.306424][ T11] device wlan1 left promiscuous mode [ 850.558833][T11591] team0: Port device team_slave_1 added [ 850.578919][T11674] netlink: 'syz.0.1986': attribute type 6 has an invalid length. [ 850.587560][T11674] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1986'. [ 850.662092][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.676496][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.713548][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.769052][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 851.076902][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.091764][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.135375][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.204334][T11700] netlink: 'syz.2.1991': attribute type 21 has an invalid length. [ 851.234540][T11700] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1991'. [ 851.493048][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.531450][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.559778][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.567422][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.740584][ T11] device veth1_macvtap left promiscuous mode [ 851.763652][ T11] device veth0_macvtap left promiscuous mode [ 851.780994][ T11] device veth1_vlan left promiscuous mode [ 851.807945][ T11] device veth0_vlan left promiscuous mode [ 852.538611][T11727] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1996'. [ 852.571075][T11727] netlink: 'syz.2.1996': attribute type 29 has an invalid length. [ 852.859728][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 852.958238][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.967579][ T11] device bond_slave_1 left promiscuous mode [ 853.013251][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.022903][ T11] device bond_slave_0 left promiscuous mode [ 853.323006][ T11] bond0 (unregistering): Released all slaves [ 853.436333][T11727] netlink: 'syz.2.1996': attribute type 29 has an invalid length. [ 853.494097][T11591] device hsr_slave_0 entered promiscuous mode [ 853.524348][T11591] device hsr_slave_1 entered promiscuous mode [ 853.559734][T11591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.567737][T11591] Cannot create hsr debugfs directory [ 853.766543][T11735] netlink: 'syz.1.1999': attribute type 12 has an invalid length. [ 853.796561][T11735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1999'. [ 854.722009][T11754] netlink: 'syz.1.2004': attribute type 2 has an invalid length. [ 854.793494][T11754] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 854.803816][T11759] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 854.827533][T11754] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2004'. [ 854.942783][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 855.230285][T11767] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 855.756620][T11591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 855.839272][T11591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 855.906928][T11591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 855.982442][T11591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 856.329584][T11793] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2011'. [ 856.489549][T11795] netlink: 'syz.3.2012': attribute type 2 has an invalid length. [ 856.518230][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.566509][T11795] device 0 entered promiscuous mode [ 856.600786][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.643029][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.657252][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.698770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.719536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.753449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.760676][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.790680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 856.827231][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 856.850219][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 856.877556][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.884815][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.924353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 856.955358][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 857.013558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 857.070942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 857.097107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 857.135254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 857.161225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 857.189384][T11813] netlink: 'syz.0.2017': attribute type 21 has an invalid length. [ 857.198461][T11814] netlink: 'syz.0.2017': attribute type 21 has an invalid length. [ 857.234876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 857.247612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 857.293588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 857.313123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 857.370175][T11591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 858.090641][T11831] netlink: 'syz.1.2022': attribute type 2 has an invalid length. [ 858.109213][T11831] netlink: 'syz.1.2022': attribute type 9 has an invalid length. [ 858.127509][T11831] netlink: 'syz.1.2022': attribute type 10 has an invalid length. [ 858.149104][T11831] netlink: 'syz.1.2022': attribute type 11 has an invalid length. [ 858.176954][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2022'. [ 858.292445][T11835] netlink: 'syz.2.2023': attribute type 21 has an invalid length. [ 858.877417][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 858.906019][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 858.956039][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.436191][T11871] device sit0 entered promiscuous mode [ 860.618384][T11903] sctp: [Deprecated]: syz.0.2035 (pid 11903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 860.618384][T11903] Use struct sctp_sack_info instead [ 861.110225][T11911] validate_nla: 2 callbacks suppressed [ 861.110245][T11911] netlink: 'syz.3.2036': attribute type 21 has an invalid length. [ 861.186953][T11911] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2036'. [ 861.240544][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 861.265811][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.500171][T11911] netlink: 'syz.3.2036': attribute type 10 has an invalid length. [ 861.515893][T11911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2036'. [ 861.525776][T11911] device ipvlan1 entered promiscuous mode [ 861.546715][T11911] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 861.766857][T11591] device veth0_vlan entered promiscuous mode [ 861.800030][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.858362][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.984952][T11591] device veth1_vlan entered promiscuous mode [ 861.997942][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 862.014346][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 862.030195][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 862.105042][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 862.153411][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.180719][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.224354][T11591] device veth0_macvtap entered promiscuous mode [ 862.263641][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 862.315910][T11591] device veth1_macvtap entered promiscuous mode [ 862.480085][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.555690][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.615078][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.654950][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.685756][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.718394][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.786289][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.836156][T11947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2042'. [ 862.859616][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 862.870506][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 862.891533][T11948] netlink: 'syz.2.2043': attribute type 10 has an invalid length. [ 862.904909][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2043'. [ 862.940152][T11948] batman_adv: batadv0: Adding interface: vlan1 [ 862.946381][T11948] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.042325][T11948] batman_adv: batadv0: Interface activated: vlan1 [ 863.054234][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.072336][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.084395][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.098230][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.108114][T11591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.118715][T11591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.130643][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.138916][T11953] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2044'. [ 863.160652][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 863.174172][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 863.867712][T11591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.911756][T11591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.949033][T11591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.999251][T11591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.508389][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.549453][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.597654][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 864.668272][ T5547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.689591][ T5547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.740646][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 866.942291][T12029] netlink: 'syz.2.2063': attribute type 21 has an invalid length. [ 866.966859][T12029] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 867.015439][T12029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2063'. [ 867.757876][T12049] IPv6: …: Disabled Multicast RS [ 867.787703][T12050] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2067'. [ 868.633878][T12073] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2073'. [ 868.828434][T12078] netlink: 'syz.1.2075': attribute type 10 has an invalid length. [ 868.919427][T12078] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2075'. [ 868.993797][T12078] device batadv_slave_1 entered promiscuous mode [ 869.010095][T12078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.024173][T12078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.133679][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.140353][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.585082][T12085] netlink: 'syz.1.2075': attribute type 10 has an invalid length. [ 871.607563][T12085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2075'. [ 871.623739][T12085] device dummy0 entered promiscuous mode [ 871.632732][T12085] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 872.928045][T12118] can: request_module (can-proto-0) failed. [ 872.997926][T12127] netlink: 'syz.2.2084': attribute type 8 has an invalid length. [ 873.082775][T12127] netlink: 'syz.2.2084': attribute type 1 has an invalid length. [ 873.175970][T12127] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.2084'. [ 873.273694][T12121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 873.304068][T12122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 875.569831][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2102'. [ 875.578895][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2102'. [ 876.109484][T12210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2106'. [ 876.843789][T12224] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 876.925398][T12224] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 877.001704][T12224] netlink: 'syz.0.2112': attribute type 4 has an invalid length. [ 877.021854][T12224] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.2112'. [ 877.530229][T12216] delete_channel: no stack [ 878.418163][T12256] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 879.043035][T12261] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 879.264581][T12261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 881.542186][T12254] netlink: 'syz.2.2118': attribute type 10 has an invalid length. [ 885.373717][T12308] device syzkaller0 entered promiscuous mode [ 885.397579][T12310] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 885.453387][T12310] device wlan1 left promiscuous mode [ 890.222268][T12377] netlink: 'syz.3.2151': attribute type 3 has an invalid length. [ 890.237805][T12377] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2151'. [ 890.556435][T12383] syz.0.2153[12383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 890.568040][T12383] syz.0.2153[12383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 890.843925][T12388] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2154'. [ 892.165862][T12350] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2141'. [ 892.178106][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.187617][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.198508][T12354] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.208265][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.274921][T12354] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.293705][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 892.306578][T12354] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2142'. [ 894.161095][T12447] netlink: 'syz.3.2171': attribute type 29 has an invalid length. [ 896.427207][T12436] __nla_validate_parse: 2 callbacks suppressed [ 896.427226][T12436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2171'. [ 896.613193][T12445] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2171'. [ 896.623078][T12445] bridge_slave_1: default FDB implementation only supports local addresses [ 896.633479][T12447] netlink: 'syz.3.2171': attribute type 29 has an invalid length. [ 897.022748][T12482] netlink: 'syz.2.2182': attribute type 2 has an invalid length. [ 897.099187][T12482] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.2182'. [ 897.895765][T12532] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 897.923286][T12532] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 897.951538][T12532] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2193'. [ 897.973057][T12514] IPv6: NLM_F_CREATE should be specified when creating new route [ 898.018265][T12514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2190'. [ 898.226703][T12539] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2196'. [ 898.704822][T12556] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2199'. [ 899.596839][T12587] netlink: 'syz.1.2208': attribute type 10 has an invalid length. [ 899.623986][T12585] netlink: 'syz.1.2208': attribute type 3 has an invalid length. [ 899.647734][T12585] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 899.694530][T12587] team0: Device hsr_slave_0 failed to register rx_handler [ 899.713364][T12585] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2208'. [ 901.645068][T12638] netlink: 'syz.4.2224': attribute type 13 has an invalid length. [ 901.713232][T12638] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2224'. [ 903.401219][T12662] netlink: 'syz.4.2230': attribute type 21 has an invalid length. [ 906.231317][T12706] netlink: 'syz.2.2244': attribute type 11 has an invalid length. [ 906.344634][T12706] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2244'. [ 906.679613][T12705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.365971][T12727] netlink: 'syz.0.2251': attribute type 7 has an invalid length. [ 909.718347][T12744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2256'. [ 909.759099][T12744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2256'. [ 909.779209][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2256'. [ 909.923125][T12756] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2257'. [ 911.674534][T12784] netlink: 'syz.2.2267': attribute type 21 has an invalid length. [ 911.731361][T12784] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 911.811028][T12784] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.2267'. [ 912.021433][T12787] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 912.054945][T12787] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2268'. [ 912.642770][T12797] tipc: Started in network mode [ 912.647792][T12797] tipc: Node identity 9215a268, cluster identity 4711 [ 912.689822][T12797] tipc: Node number set to 2450891368 [ 913.131517][T12821] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2276'. [ 913.587623][T12831] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2281'. [ 914.359353][T12854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.369897][T12854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.030303][T12853] netlink: 'syz.1.2287': attribute type 21 has an invalid length. [ 915.038414][T12853] netlink: 'syz.1.2287': attribute type 6 has an invalid length. [ 915.046729][T12853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2287'. [ 915.168057][T12872] netlink: 'syz.2.2291': attribute type 23 has an invalid length. [ 915.472556][T12881] device sit0 left promiscuous mode [ 916.285899][T12896] netlink: 'syz.2.2297': attribute type 10 has an invalid length. [ 916.513932][T12896] device hsr0 left promiscuous mode [ 916.644150][T12909] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2300'. [ 917.749544][T12948] netlink: 'syz.4.2313': attribute type 6 has an invalid length. [ 917.778595][T12948] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2313'. [ 918.139032][T12965] tap0: tun_chr_ioctl cmd 2148553947 [ 919.192886][T13000] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2327'. [ 922.624766][T13043] netlink: 'syz.2.2339': attribute type 7 has an invalid length. [ 925.857324][T13061] netlink: 'syz.1.2346': attribute type 20 has an invalid length. [ 926.910830][T13083] netlink: 'syz.2.2351': attribute type 13 has an invalid length. [ 926.949430][T13083] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2351'. [ 926.975689][T13085] netlink: 'syz.2.2351': attribute type 10 has an invalid length. [ 927.572846][T13110] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2361'. [ 927.644200][T13115] netlink: 'syz.4.2363': attribute type 11 has an invalid length. [ 927.678656][T13115] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2363'. [ 927.833862][T13121] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2364'. [ 928.703143][T13139] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2370'. [ 928.777510][T13139] device veth0_macvtap left promiscuous mode [ 930.460025][T13179] netlink: 'syz.1.2381': attribute type 21 has an invalid length. [ 930.561963][T13179] IPv6: NLM_F_CREATE should be specified when creating new route [ 931.574531][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.580966][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.488171][T13243] netlink: 'syz.2.2399': attribute type 21 has an invalid length. [ 932.503283][T13243] IPv6: NLM_F_CREATE should be specified when creating new route [ 932.556255][T13248] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2398'. [ 932.684634][T13240] tipc: Started in network mode [ 932.722619][T13240] tipc: Node identity 9215a268, cluster identity 4711 [ 932.778020][T13240] tipc: Node number set to 2450891368 [ 932.929746][T13250] netlink: 'syz.4.2398': attribute type 10 has an invalid length. [ 932.984686][T13258] ref_ctr_offset mismatch. inode: 0xa32 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 933.038032][T13250] team0: Device hsr_slave_0 failed to register rx_handler [ 933.150890][T13258] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2402'. [ 934.160273][T13274] device syzkaller0 entered promiscuous mode [ 937.155418][T13304] sctp: [Deprecated]: syz.1.2413 (pid 13304) Use of int in maxseg socket option. [ 937.155418][T13304] Use struct sctp_assoc_value instead [ 937.587871][T13284] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 937.598703][T13284] syzkaller0: linktype set to 778 [ 937.607387][T13294] netlink: 'syz.0.2412': attribute type 21 has an invalid length. [ 937.615477][T13294] IPv6: NLM_F_CREATE should be specified when creating new route [ 937.629141][T13301] netlink: 'syz.1.2413': attribute type 10 has an invalid length. [ 938.002941][T13314] netlink: 'syz.1.2417': attribute type 2 has an invalid length. [ 938.172500][T13312] netlink: 'syz.0.2415': attribute type 19 has an invalid length. [ 938.942524][T13338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2424'. [ 939.854369][T13366] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 940.528844][T13389] tap0: tun_chr_ioctl cmd 1074025677 [ 940.594858][T13389] tap0: linktype set to 774 [ 940.890801][T13400] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2441'. [ 944.203903][T13472] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2459'. [ 949.352309][T13551] netlink: 'syz.4.2480': attribute type 2 has an invalid length. [ 949.399123][T13551] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2480'. [ 949.540556][T13558] netlink: 'syz.2.2481': attribute type 3 has an invalid length. [ 949.572842][T13558] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2481'. [ 952.055379][T13601] netlink: 'syz.1.2494': attribute type 3 has an invalid length. [ 952.139660][T13601] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.2494'. [ 952.512582][T13613] netlink: 'syz.3.2496': attribute type 17 has an invalid length. [ 952.573269][T13613] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2496'. [ 952.647703][T13613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 953.516360][T13631] netlink: 'syz.3.2500': attribute type 3 has an invalid length. [ 953.617573][T13631] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2500'. [ 953.756524][T13630] netlink: 'syz.4.2502': attribute type 10 has an invalid length. [ 953.775188][T13630] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2502'. [ 954.960386][T13640] netlink: 'syz.0.2503': attribute type 28 has an invalid length. [ 955.553472][T13661] netlink: 'syz.0.2508': attribute type 13 has an invalid length. [ 955.657087][T13661] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2508'. [ 955.680687][T13661] erspan0: refused to change device tx_queue_len [ 956.416927][T13666] netlink: 'syz.4.2509': attribute type 3 has an invalid length. [ 956.457422][T13666] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2509'. [ 956.678316][T13664] netlink: 'syz.0.2510': attribute type 29 has an invalid length. [ 956.929970][T13664] netlink: 'syz.0.2510': attribute type 29 has an invalid length. [ 956.945134][T13678] netlink: 'syz.1.2512': attribute type 3 has an invalid length. [ 956.963477][T13677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2513'. [ 956.999123][T13678] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 957.027541][T13678] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2512'. [ 957.438440][T13680] netlink: 'syz.2.2511': attribute type 10 has an invalid length. [ 957.566381][T13680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.646990][T13680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.736804][T13680] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 959.354303][T13728] netlink: 'syz.0.2526': attribute type 3 has an invalid length. [ 959.569541][T13728] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2526'. [ 959.972568][T13732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2527'. [ 960.291693][T13734] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2528'. [ 960.397860][T13734] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.2528'. [ 960.430989][T13734] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2528'. [ 961.393788][T13763] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2536'. [ 961.429540][T13763] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2536'. [ 961.933392][T13775] ================================================================== [ 961.941530][T13775] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 961.949390][T13775] Write of size 88 at addr ffff888058ec8590 by task syz.3.2541/13775 [ 961.957478][T13775] [ 961.959832][T13775] CPU: 0 PID: 13775 Comm: syz.3.2541 Not tainted syzkaller #0 [ 961.967315][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 961.977391][T13775] Call Trace: [ 961.980696][T13775] [ 961.983644][T13775] dump_stack_lvl+0x188/0x24e [ 961.988359][T13775] ? __lock_acquire+0x7d10/0x7d10 [ 961.993500][T13775] ? show_regs_print_info+0x12/0x12 [ 961.998721][T13775] ? load_image+0x400/0x400 [ 962.003342][T13775] ? __virt_addr_valid+0x465/0x540 [ 962.008477][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 962.013604][T13775] print_report+0xa8/0x210 [ 962.018041][T13775] kasan_report+0x10b/0x140 [ 962.022567][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 962.027702][T13775] kasan_check_range+0x235/0x290 [ 962.032666][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 962.037800][T13775] memcpy+0x3c/0x60 [ 962.041625][T13775] __bpf_get_stackid+0x6c9/0x920 [ 962.046587][T13775] bpf_get_stackid_pe+0x33f/0x400 [ 962.051639][T13775] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 962.057120][T13775] bpf_overflow_handler+0x522/0x7c0 [ 962.062384][T13775] ? bpf_overflow_handler+0xd9/0x7c0 [ 962.067706][T13775] ? perf_swevent_overflow+0x230/0x230 [ 962.073216][T13775] ? ct_irq_exit_irqson+0x113/0x170 [ 962.078482][T13775] ? __perf_event_account_interrupt+0x187/0x280 [ 962.084756][T13775] __perf_event_overflow+0x448/0x610 [ 962.090094][T13775] perf_swevent_event+0x315/0x570 [ 962.095183][T13775] ? perf_tp_event+0xc30/0xc30 [ 962.099999][T13775] ___perf_sw_event+0x49e/0x6e0 [ 962.104884][T13775] ? ___perf_sw_event+0x180/0x6e0 [ 962.109958][T13775] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 962.116426][T13775] ? __lock_acquire+0x13cf/0x7d10 [ 962.121496][T13775] ? __kernel_text_address+0x9/0x30 [ 962.126745][T13775] ? verify_lock_unused+0x140/0x140 [ 962.131996][T13775] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 962.138020][T13775] ? lock_chain_count+0x20/0x20 [ 962.142903][T13775] __perf_sw_event+0x135/0x260 [ 962.147721][T13775] do_user_addr_fault+0xaea/0xb10 [ 962.152805][T13775] ? trace_hardirqs_off_finish+0x86/0x180 [ 962.158561][T13775] exc_page_fault+0x60/0x100 [ 962.163183][T13775] asm_exc_page_fault+0x22/0x30 [ 962.168070][T13775] RIP: 0010:copy_user_short_string+0xd/0x40 [ 962.174009][T13775] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 962.193665][T13775] RSP: 0018:ffffc900032072a8 EFLAGS: 00050202 [ 962.199772][T13775] RAX: ffffffff84114401 RBX: 000000000000000b RCX: 0000000000000001 [ 962.207767][T13775] RDX: 0000000000000003 RSI: ffff88801d66066c RDI: 000020000000cf3d [ 962.215753][T13775] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff11003acc0ce [ 962.223764][T13775] R10: dffffc0000000000 R11: ffffed1003acc0cf R12: 00007fffffffeff5 [ 962.231764][T13775] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88801d66066c [ 962.239782][T13775] ? _copy_from_user+0x161/0x170 [ 962.244768][T13775] _copy_to_user+0xea/0x130 [ 962.249316][T13775] bpf_verifier_vlog+0x172/0x390 [ 962.254287][T13775] verbose+0x1f2/0x2b0 [ 962.258382][T13775] ? check_func_arg_reg_off+0x280/0x280 [ 962.263946][T13775] ? kvmalloc_node+0x6c/0x180 [ 962.268649][T13775] ? bpf_lsm_capable+0x5/0x10 [ 962.273365][T13775] ? security_capable+0x85/0xb0 [ 962.278386][T13775] bpf_check+0x301b/0x10db0 [ 962.282933][T13775] ? mark_lock+0x94/0x320 [ 962.287296][T13775] ? mark_lock+0x94/0x320 [ 962.291673][T13775] ? bpf_get_btf_vmlinux+0x10/0x10 [ 962.296828][T13775] ? mark_lock+0x94/0x320 [ 962.301187][T13775] ? __lock_acquire+0x12f4/0x7d10 [ 962.306264][T13775] ? mark_lock+0x94/0x320 [ 962.310722][T13775] ? __lock_acquire+0x13cf/0x7d10 [ 962.315783][T13775] ? verify_lock_unused+0x140/0x140 [ 962.321006][T13775] ? verify_lock_unused+0x140/0x140 [ 962.326231][T13775] ? verify_lock_unused+0x140/0x140 [ 962.331460][T13775] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 962.337303][T13775] ? __lock_acquire+0x7d10/0x7d10 [ 962.342360][T13775] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 962.348383][T13775] ? lock_chain_count+0x20/0x20 [ 962.353292][T13775] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 962.359573][T13775] ? lockdep_hardirqs_on+0x94/0x140 [ 962.364836][T13775] ? ktime_get_with_offset+0xff/0x320 [ 962.370249][T13775] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 962.376553][T13775] ? ktime_get_real_ts64+0x440/0x440 [ 962.381862][T13775] ? do_raw_spin_unlock+0x11d/0x230 [ 962.387099][T13775] ? __might_fault+0xc2/0x120 [ 962.391795][T13775] ? memset+0x1e/0x40 [ 962.395805][T13775] ? bpf_obj_name_cpy+0x190/0x1d0 [ 962.400853][T13775] bpf_prog_load+0x101a/0x1560 [ 962.405650][T13775] ? map_freeze+0x390/0x390 [ 962.410264][T13775] ? __might_fault+0xa6/0x120 [ 962.414966][T13775] ? __might_fault+0xa6/0x120 [ 962.419664][T13775] ? __might_fault+0xc2/0x120 [ 962.424367][T13775] ? __might_fault+0xa6/0x120 [ 962.429067][T13775] ? bpf_lsm_bpf+0x5/0x10 [ 962.433418][T13775] ? security_bpf+0x7a/0xa0 [ 962.437942][T13775] __sys_bpf+0x5b8/0x780 [ 962.442207][T13775] ? bpf_link_show_fdinfo+0x380/0x380 [ 962.447612][T13775] ? lock_chain_count+0x20/0x20 [ 962.452490][T13775] __x64_sys_bpf+0x78/0x90 [ 962.456935][T13775] do_syscall_64+0x4c/0xa0 [ 962.461379][T13775] ? clear_bhb_loop+0x60/0xb0 [ 962.466080][T13775] ? clear_bhb_loop+0x60/0xb0 [ 962.470781][T13775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.476693][T13775] RIP: 0033:0x7f070e99c819 [ 962.481132][T13775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.500768][T13775] RSP: 002b:00007f070f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 962.509207][T13775] RAX: ffffffffffffffda RBX: 00007f070ec15fa0 RCX: 00007f070e99c819 [ 962.517208][T13775] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 962.525217][T13775] RBP: 00007f070ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 962.533222][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.541242][T13775] R13: 00007f070ec16038 R14: 00007f070ec15fa0 R15: 00007ffcb4daa8c8 [ 962.549273][T13775] [ 962.552328][T13775] [ 962.554702][T13775] Allocated by task 13775: [ 962.559180][T13775] kasan_set_track+0x4b/0x70 [ 962.563809][T13775] __kasan_kmalloc+0x8e/0xa0 [ 962.568429][T13775] __kmalloc_node+0xb0/0x240 [ 962.573054][T13775] bpf_map_area_alloc+0x47/0xe0 [ 962.577923][T13775] prealloc_elems_and_freelist+0x86/0x1c0 [ 962.583663][T13775] stack_map_alloc+0x390/0x520 [ 962.588454][T13775] map_create+0x534/0x1000 [ 962.592909][T13775] __sys_bpf+0x38b/0x780 [ 962.597183][T13775] __x64_sys_bpf+0x78/0x90 [ 962.601633][T13775] do_syscall_64+0x4c/0xa0 [ 962.606074][T13775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.612006][T13775] [ 962.614378][T13775] Last potentially related work creation: [ 962.620119][T13775] kasan_save_stack+0x3a/0x60 [ 962.624830][T13775] __kasan_record_aux_stack+0xb2/0xc0 [ 962.630226][T13775] call_rcu+0x14f/0x990 [ 962.634502][T13775] nf_unregister_net_hooks+0xc7/0x130 [ 962.639891][T13775] nf_defrag_ipv4_disable+0x91/0xe0 [ 962.645141][T13775] nf_ct_netns_put+0x2d6/0x510 [ 962.649923][T13775] nf_conncount_destroy+0x3d/0x150 [ 962.655191][T13775] ovs_ct_exit+0x98/0x200 [ 962.659551][T13775] ovs_exit_net+0xe9/0x7a0 [ 962.663983][T13775] cleanup_net+0x706/0xba0 [ 962.668608][T13775] process_one_work+0x8a2/0x1160 [ 962.673593][T13775] worker_thread+0xaa2/0x1270 [ 962.678301][T13775] kthread+0x29d/0x330 [ 962.682393][T13775] ret_from_fork+0x1f/0x30 [ 962.686853][T13775] [ 962.689218][T13775] The buggy address belongs to the object at ffff888058ec8580 [ 962.689218][T13775] which belongs to the cache kmalloc-cg-64 of size 64 [ 962.703486][T13775] The buggy address is located 16 bytes inside of [ 962.703486][T13775] 64-byte region [ffff888058ec8580, ffff888058ec85c0) [ 962.716618][T13775] [ 962.718956][T13775] The buggy address belongs to the physical page: [ 962.725380][T13775] page:ffffea000163b200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58ec8 [ 962.735574][T13775] memcg:ffff8880735c4001 [ 962.739829][T13775] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 962.747491][T13775] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017442780 [ 962.756096][T13775] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880735c4001 [ 962.764691][T13775] page dumped because: kasan: bad access detected [ 962.771147][T13775] page_owner tracks the page as allocated [ 962.776905][T13775] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4329, tgid 4329 (syz-executor), ts 437310685918, free_ts 20381292278 [ 962.795330][T13775] post_alloc_hook+0x173/0x1a0 [ 962.800123][T13775] get_page_from_freelist+0x1a1e/0x1ab0 [ 962.805697][T13775] __alloc_pages+0x1ec/0x4f0 [ 962.810337][T13775] alloc_slab_page+0x5d/0x160 [ 962.815058][T13775] new_slab+0x87/0x2c0 [ 962.819160][T13775] ___slab_alloc+0xbc6/0x1240 [ 962.823875][T13775] __kmem_cache_alloc_node+0x1a0/0x260 [ 962.829353][T13775] __kmalloc_node+0xa0/0x240 [ 962.833969][T13775] kvmalloc_node+0x6c/0x180 [ 962.838586][T13775] nf_hook_entries_grow+0x309/0x730 [ 962.843807][T13775] __nf_register_net_hook+0x2c9/0x910 [ 962.849197][T13775] nf_register_net_hook+0xae/0x190 [ 962.854327][T13775] nf_register_net_hooks+0x40/0x1a0 [ 962.859551][T13775] brnf_device_event+0x12e/0x1d0 [ 962.864510][T13775] raw_notifier_call_chain+0xcb/0x160 [ 962.869909][T13775] register_netdevice+0x163f/0x1b00 [ 962.875153][T13775] page last free stack trace: [ 962.879837][T13775] free_unref_page_prepare+0x8b4/0x9a0 [ 962.885319][T13775] free_unref_page+0x2e/0x3f0 [ 962.890019][T13775] free_contig_range+0x9d/0x150 [ 962.894891][T13775] destroy_args+0xf0/0xa0a [ 962.899333][T13775] debug_vm_pgtable+0x33c/0x38e [ 962.904213][T13775] do_one_initcall+0x26a/0x840 [ 962.908998][T13775] do_initcall_level+0x137/0x1e4 [ 962.913956][T13775] do_initcalls+0x4b/0x8a [ 962.918403][T13775] kernel_init_freeable+0x415/0x5be [ 962.923709][T13775] kernel_init+0x19/0x1b0 [ 962.928060][T13775] ret_from_fork+0x1f/0x30 [ 962.932502][T13775] [ 962.934846][T13775] Memory state around the buggy address: [ 962.940486][T13775] ffff888058ec8480: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 962.948654][T13775] ffff888058ec8500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 962.956727][T13775] >ffff888058ec8580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 962.964798][T13775] ^ [ 962.970178][T13775] ffff888058ec8600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 962.978265][T13775] ffff888058ec8680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 962.986342][T13775] ================================================================== [ 962.994415][T13775] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 963.001620][T13775] CPU: 0 PID: 13775 Comm: syz.3.2541 Not tainted syzkaller #0 [ 963.009133][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.019221][T13775] Call Trace: [ 963.022522][T13775] [ 963.025478][T13775] dump_stack_lvl+0x188/0x24e [ 963.030189][T13775] ? memcpy+0x3c/0x60 [ 963.034190][T13775] ? show_regs_print_info+0x12/0x12 [ 963.039412][T13775] ? load_image+0x400/0x400 [ 963.043944][T13775] panic+0x2e5/0x730 [ 963.047873][T13775] ? bpf_jit_dump+0xd0/0xd0 [ 963.052393][T13775] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 963.058309][T13775] ? _raw_spin_unlock+0x40/0x40 [ 963.063177][T13775] ? print_memory_metadata+0x314/0x400 [ 963.068668][T13775] check_panic_on_warn+0x80/0xa0 [ 963.073627][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 963.078757][T13775] end_report+0x66/0x110 [ 963.083022][T13775] kasan_report+0x118/0x140 [ 963.087556][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 963.092708][T13775] kasan_check_range+0x235/0x290 [ 963.097695][T13775] ? __bpf_get_stackid+0x6c9/0x920 [ 963.102840][T13775] memcpy+0x3c/0x60 [ 963.106848][T13775] __bpf_get_stackid+0x6c9/0x920 [ 963.111909][T13775] bpf_get_stackid_pe+0x33f/0x400 [ 963.116959][T13775] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 963.122438][T13775] bpf_overflow_handler+0x522/0x7c0 [ 963.127667][T13775] ? bpf_overflow_handler+0xd9/0x7c0 [ 963.132970][T13775] ? perf_swevent_overflow+0x230/0x230 [ 963.138445][T13775] ? ct_irq_exit_irqson+0x113/0x170 [ 963.143757][T13775] ? __perf_event_account_interrupt+0x187/0x280 [ 963.150024][T13775] __perf_event_overflow+0x448/0x610 [ 963.155354][T13775] perf_swevent_event+0x315/0x570 [ 963.160432][T13775] ? perf_tp_event+0xc30/0xc30 [ 963.165246][T13775] ___perf_sw_event+0x49e/0x6e0 [ 963.170131][T13775] ? ___perf_sw_event+0x180/0x6e0 [ 963.175181][T13775] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 963.181622][T13775] ? __lock_acquire+0x13cf/0x7d10 [ 963.186769][T13775] ? __kernel_text_address+0x9/0x30 [ 963.191993][T13775] ? verify_lock_unused+0x140/0x140 [ 963.197244][T13775] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 963.203249][T13775] ? lock_chain_count+0x20/0x20 [ 963.208123][T13775] __perf_sw_event+0x135/0x260 [ 963.212922][T13775] do_user_addr_fault+0xaea/0xb10 [ 963.217975][T13775] ? trace_hardirqs_off_finish+0x86/0x180 [ 963.223744][T13775] exc_page_fault+0x60/0x100 [ 963.228357][T13775] asm_exc_page_fault+0x22/0x30 [ 963.233229][T13775] RIP: 0010:copy_user_short_string+0xd/0x40 [ 963.239152][T13775] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 963.258778][T13775] RSP: 0018:ffffc900032072a8 EFLAGS: 00050202 [ 963.264868][T13775] RAX: ffffffff84114401 RBX: 000000000000000b RCX: 0000000000000001 [ 963.272859][T13775] RDX: 0000000000000003 RSI: ffff88801d66066c RDI: 000020000000cf3d [ 963.280852][T13775] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff11003acc0ce [ 963.288855][T13775] R10: dffffc0000000000 R11: ffffed1003acc0cf R12: 00007fffffffeff5 [ 963.297018][T13775] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88801d66066c [ 963.305010][T13775] ? _copy_from_user+0x161/0x170 [ 963.310152][T13775] _copy_to_user+0xea/0x130 [ 963.314681][T13775] bpf_verifier_vlog+0x172/0x390 [ 963.319656][T13775] verbose+0x1f2/0x2b0 [ 963.323743][T13775] ? check_func_arg_reg_off+0x280/0x280 [ 963.329311][T13775] ? kvmalloc_node+0x6c/0x180 [ 963.334011][T13775] ? bpf_lsm_capable+0x5/0x10 [ 963.338709][T13775] ? security_capable+0x85/0xb0 [ 963.343582][T13775] bpf_check+0x301b/0x10db0 [ 963.348112][T13775] ? mark_lock+0x94/0x320 [ 963.352479][T13775] ? mark_lock+0x94/0x320 [ 963.356839][T13775] ? bpf_get_btf_vmlinux+0x10/0x10 [ 963.361970][T13775] ? mark_lock+0x94/0x320 [ 963.366334][T13775] ? __lock_acquire+0x12f4/0x7d10 [ 963.371384][T13775] ? mark_lock+0x94/0x320 [ 963.375737][T13775] ? __lock_acquire+0x13cf/0x7d10 [ 963.380794][T13775] ? verify_lock_unused+0x140/0x140 [ 963.386032][T13775] ? verify_lock_unused+0x140/0x140 [ 963.391254][T13775] ? verify_lock_unused+0x140/0x140 [ 963.396479][T13775] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 963.402313][T13775] ? __lock_acquire+0x7d10/0x7d10 [ 963.407366][T13775] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 963.413370][T13775] ? lock_chain_count+0x20/0x20 [ 963.418247][T13775] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 963.424510][T13775] ? lockdep_hardirqs_on+0x94/0x140 [ 963.429815][T13775] ? ktime_get_with_offset+0xff/0x320 [ 963.435213][T13775] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 963.441481][T13775] ? ktime_get_real_ts64+0x440/0x440 [ 963.446805][T13775] ? do_raw_spin_unlock+0x11d/0x230 [ 963.452032][T13775] ? __might_fault+0xc2/0x120 [ 963.456732][T13775] ? memset+0x1e/0x40 [ 963.460730][T13775] ? bpf_obj_name_cpy+0x190/0x1d0 [ 963.465777][T13775] bpf_prog_load+0x101a/0x1560 [ 963.470575][T13775] ? map_freeze+0x390/0x390 [ 963.475100][T13775] ? __might_fault+0xa6/0x120 [ 963.479806][T13775] ? __might_fault+0xa6/0x120 [ 963.484503][T13775] ? __might_fault+0xc2/0x120 [ 963.489210][T13775] ? __might_fault+0xa6/0x120 [ 963.493905][T13775] ? bpf_lsm_bpf+0x5/0x10 [ 963.498269][T13775] ? security_bpf+0x7a/0xa0 [ 963.502792][T13775] __sys_bpf+0x5b8/0x780 [ 963.507058][T13775] ? bpf_link_show_fdinfo+0x380/0x380 [ 963.512477][T13775] ? lock_chain_count+0x20/0x20 [ 963.517360][T13775] __x64_sys_bpf+0x78/0x90 [ 963.521801][T13775] do_syscall_64+0x4c/0xa0 [ 963.526247][T13775] ? clear_bhb_loop+0x60/0xb0 [ 963.530950][T13775] ? clear_bhb_loop+0x60/0xb0 [ 963.535652][T13775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.541569][T13775] RIP: 0033:0x7f070e99c819 [ 963.546000][T13775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.565711][T13775] RSP: 002b:00007f070f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.574147][T13775] RAX: ffffffffffffffda RBX: 00007f070ec15fa0 RCX: 00007f070e99c819 [ 963.582134][T13775] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 963.590123][T13775] RBP: 00007f070ea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 963.598112][T13775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.606097][T13775] R13: 00007f070ec16038 R14: 00007f070ec15fa0 R15: 00007ffcb4daa8c8 [ 963.614095][T13775] [ 963.617506][T13775] Kernel Offset: disabled [ 963.621832][T13775] Rebooting in 86400 seconds..