last executing test programs: 4m48.60680363s ago: executing program 2 (id=4692): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRESHEX, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="9e2a7a7a6c95df72c0b68a9dca404e9d34b21204b68816e161f819373001c5ca92b85e7ffee2af2a791c4cd747703f3da5bae32d451d9b0800dd8914c3db8744b28a1db1", @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400009118f32f85000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6408d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x52010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0x38}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000500000000000000010000040800000000000000030000001000"/55], 0x0, 0x4d}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000092ee793963c57a3031133e62a3aaf5398a56ed254a9eca985029bd9717bd26d13f7ba85574d9c9bc45b1a8340854e1779a8befe572f34c5733576480be3aa74a1945f3a15b5bf4bbca4c48ada56c37372d37a16bbea1e842fa175deca0003a9664bfba79de"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2b, 0x0, 0x400, 0xf7921, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000c000fdd3206210ee0898ec8fb9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) close(r5) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) 4m48.339061718s ago: executing program 2 (id=4696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88ca", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r4, &(0x7f00000014c0)={&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x119, 0x32, 0x0, 0x2a) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x80, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="eab5d943", 0x4}], 0x1}, 0x80) 4m47.750577328s ago: executing program 2 (id=4700): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x17, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x3, 0x0, 0x0, 0x61880, 0x10, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000b80)=[0x1, 0x1, 0x1], &(0x7f0000000bc0), 0x10, 0x1000}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003020002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r2, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000d80), 0x0, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 4m47.291101698s ago: executing program 2 (id=4703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa36}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x8}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x50) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES16=r2, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000168c7ebe631aa32bcea46eece33d0d28211273a41fd4f0ef4d5cfc297163c1575e2594f93678ff7d2e033a5951d06e38b3c7cb0e0c355197aae6d1a60c6d28b4ea6cc5b274a62969e2b2cab9261a936498df56fdebb2a68d7844aec0ab65f1f621ce442ec784e3fd7a19350ea3f3ebb70e0abb1b3907d5fe117861e9aaae1aa54c1c4e"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000690005"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4c9c5238, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa36}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x8}, 0x50) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, r2, 0x2, 0x5, 0x5}, 0x50) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES16=r2, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000168c7ebe631aa32bcea46eece33d0d28211273a41fd4f0ef4d5cfc297163c1575e2594f93678ff7d2e033a5951d06e38b3c7cb0e0c355197aae6d1a60c6d28b4ea6cc5b274a62969e2b2cab9261a936498df56fdebb2a68d7844aec0ab65f1f621ce442ec784e3fd7a19350ea3f3ebb70e0abb1b3907d5fe117861e9aaae1aa54c1c4e"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000690005"], 0xfe33) (async) 4m46.981364689s ago: executing program 2 (id=4707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x108c, 0x0, 0x0, 0x4, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x4, &(0x7f0000000000), 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0xa, 0x0, 0x8, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x1, 0x7fffffff, 0x9, 0x3, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x100000001}, r0, 0x10, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r8 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0xb101, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb35a, 0x35}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, 0x0, 0x0) 4m46.483744183s ago: executing program 2 (id=4711): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f00000000c0), 0x4) (async) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 4m30.912317921s ago: executing program 32 (id=4711): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x44, &(0x7f00000000c0), 0x4) (async) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 8.439381812s ago: executing program 1 (id=6389): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r3}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.917038404s ago: executing program 4 (id=6399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260", 0xf}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x200, 0x1, 0x4}, {0x0, 0x4, 0x10006}]}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008005aca6bffff000000000000000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffa603200008000000b704000000000000a50000000300001285000000070000009506000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) r5 = socket$kcm(0xa, 0x7, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r7, &(0x7f00000002c0), 0x0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 6.870225987s ago: executing program 3 (id=6400): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000140)="084a7a3f01000053aa23843e4382c4f9ce3a320000000000000000", 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.594820143s ago: executing program 3 (id=6402): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001980)="7af9b21257c6037ee2226038c8030587c8fbe35addb8e837e410d1e0970cdba3b3434aba0c24caee29eb9110fbcd11d7c5d18974002f470ef91757c0ff4b7cca3bdec6c6ccb0fd4edb70b79079eeb3e6ef8b69d05a8329a93d220eac3f2ead680198fb8590705773267d95178a8d0748a846ff38f1b7d84c96c58dc320a9ba7cf6b0d9aa4ea49e412b914bedbc054235684976fda4309a6cc2888f00db9e07fb19252cde0627ff0d346d88f20d31d7b615831745b2fe443bf275670bf972e354d84e262f6f52c9d656c059a2b086c71b2331cb989c247c68fafe85a88550bb813573cb3028ed62bdd12a7d647957a794bf45451ddf00f3c7024a19fda965c2a5e8e0bdc7230e835852c51a43f6d3326631ade8bdd591dca18293e9c07dfd97226ea6ab3b0a5ef4d9d4bd349701ef08b019c1d84eaec0f094caf80109d48a7ff1824af6fefb2ca8c82cde419a87c7f0ee0f881ee58fbca9cfcadbfad11714475fdc2baa770cc48555f19c4d513c1398e670bb346bb364ec1a7c04c9f1f290d8efe0e8718fd1269246afe55844e453c95444875ba5eea6e812b8ba7e59f27bb4c35ef1b93d526c1ac84e15d48e4d7a68755241490414cc2cd640b9c91af0f816a710888500aab51f368a1bbc1a99f89ed89754bac873f52233d260fbac034f1ba4f785127c46ebdc9b88ef438cdebd756aca6e5e10937bc92fff019091fabb6b9f983d673c19525cebd1585f00d72b215026be3b34d7751ae7ad6fa2697c951c94d6c48c493c0fda429ffae6a7706a4269219a6d0ad0536592b44447eccee776e27f5f2d2c1d46131f0b48bb3566d8d5ec086e292909eada9e4671c56011ec046be8c29a76ab933a8bf22b14c2d51c9c0f5bbf868830f4fc6965c37ce55d18b64b2aba76418f7d5215060e15c4be03679dc0695c71bf18358c5e06a6588f611d04320a4e2755ebf4c4836f4bf748a561a44ec8c213c17c1658ea5dc113bdfbe3690e4ec7d9756c405254d5d154a7f740bfed0fc077b88302b5fc18deddc45374958970fe096d12364ec41d4db8b1468484ed6d83b7ade1579f2317f01f2ae6b98e8ff64c65389289fe9c88f39ec2d1718023b0831a3b5e8e4f6139635973ba80f99f4dedab86a04b71a8071253f043b140c6a15c296db978d44124a36cf72bec78dcecca95f7331036bd31a8c044767b3627c57c0c2c110e16692445649a287ebdcdc6364d378c422d6461b4bb3344533618d07f70078735bc1edbeb91c06c3f0ab606fb91e624ced026995a7dd465c9d00d0208240180121c0d0718ea4f3ef5eae8b668589e67e1626a9fa12d1f804f2d8d51f0dde4febbbfa07d41620c8f053dcff93fced847d108f438aefe2655e1532442ba7a3e6286bc571dc6c3e47fe720a85e9f929e4bc9b19b545cc3308ea8b91ce416ecaf5624ef08437740336609e375a6abd523c7a9a6b4f8a63d9a925b0cd0d8fb60316569c9b766a2e496d9788208a8b12ecf5a95186a1d54fc511193174d591661a1a9d31dd2a4b316a20be7a9c5d91ea3144a5400c484b0812a6c95b6e63bfd5d11c16310374dc3a27caf1614748f01965f89fddf6ec9241d90bc78a57c09fa0dc25273f09c06ca305150d92afaa519bc80e1cad4b705825bfc02d660a52411cce44cb683156e8629654a4849303b2e266b149f1d64c93c7ec3242afd5812e07143780627d32fffb21a24eb38ef28c89c711e89adeab43f177ea89f61fd56826fc3d5b036cb711d0b17dda10b0d9a8349f891778dca6de285c74c1da78a04d05eaad3d727b841aceb244e93dac36a0c6bd8a31ba75f543bbfe6950a58ab38ba6d513a209403760b63387dfb6a5b97b271cd72b7bd9f88bb4adcd7986692c9206ab1d110913149fb1950c6a61c884c638473d8f7983b205c655c278fd5164890cb846cea7818b4a4da67e3fb25ad33a035f09bbf00982beb8573ee3039c5f7a93df5edd85e19d22298d710b517f269b581ae0dc41bf7af5abb7403909fcc57cf8775f8b60cf85a717a87e87bb34d6fba09fff58273b4bd2fcaa0e181700eac485b38792a0942aa2dd7a741e2f8c38e5f18fe85a56a8988eb33f66e5b04086f98cf24a6dba888d545ff84beb35668f8e7689392a5d7cf26eff171e0adaf0d16be85ca0aad8594e35731c3bc36055ef25d6ec68c3642c6596ecc6c747b202cb448f06a9363bb24a1b6474febd3d952eb0793b4234215ccb17532b91ad11fad1511f0d3532e0fda664ca0c9c3f740c5325bbeb57a82abe68d0c2ba7f87fc3019e3912da97c700dbb26090cb660a057cc21eb4932d129f70bef23e6dc3f0cbfea994d29a596577673a0f825fec7038e2762579988a06437c6dce74a96b27037108cb562a812a97bfabc5fcc65bac5579ebfae4d1caf97a90a9dc9be71d9f62ee4bcdccca6305bac1785fab7ab6f5f5ff1042a7e4355999d267c7be9420e65e02be9c216b7176427053b93d83cf9956aa212b19b1ee7a93ad0b3141025b1e587a79c4ccb54a15bb45554f543cba29ddea3c3c299a6928124ed1611a56eeba8f173f64a0e7ccb30972c60b89f057ac6b49f450b90ff3404d6f64b835f0ee4cd02fd45acb6865590e86e9bd8d0f5a25deba305f0a814be0f97cbdec14ece66b8245959106918da23bec927930793bd3432e0d0a11b6f53f265416724625d5beb63d363070efb3c216157c222bbb682d4b63b01a6144521604002285ec59f752020102e1d64ba81b388c77861f3b5087b050d48c3f2e221a66b71c1021245530c39e0ab67f50bb43122f3584447fe3434d958f80bd678a639de5acfed399aaefbaeca94d3895bd94726bf5ff9fce4938d9c8b73f4a2e308d6ef1ca0e2d41136f65ad79a8a11268fa73ee1f86b92a7e0e6cc83583c4c138beca787420ef35bd2a388a329775a3c5726abd7ca9095c38e77e1e765862268d363c925ef902f74c5cb4dbe1c47460eb9cc823b4643df3a445b5c9173dee5d0e3c293475db2f6dbd0933f478b629152fd175ddd4efafd123ecc974a2045792c7cf69945b5fe6a5f55cfff876fe74a419b063c70b5ec232f8af11a145cae49331c88ec78bafdb458c88da6075a0eeb57362f16b4dc34eaf513817345cc09751ce5401c599a32e17bb13894f89e667d6f523f51818acdb882f5aad85bcbf4aac635ab4d12273f1086fae41f62a611b17cc01cbd8f52f5dc00ae3d2311223e5c29c0011df3a6aa80af64daae1930d6acc59c74d19b7c7d589ee68e851a85d7a6c0be38b1ccbbb6dd7c9e0fcb795014e28c7f27f42d8209aa62bb22948cdda7babfc5e45d2853a3d2a4396e93cba98c3d39ccfa7904b9c7cd190a206d607fb7563db7e4ad355f6679812fdc02e8de3f23873c9827f83ca17e9979bf46f31a251933d4220473fef459e8bb20309d842ec2446d1412f9fe4503d5161a5f448300e68e46620c880404fb17fc8dfe5fc103249ed3f4f788518bf366b6b420bbf7f223a956ddeae5761b0351ad37dadc5635224f40941", 0x9b8}], 0x1}, 0x3eb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10001, 0x7ff, 0x1, 0x7, 0x0, 0x4, 0x201}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0x10b, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.382737397s ago: executing program 4 (id=6403): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)}, {&(0x7f0000000440)="8e72618c1591aa1237120f41907aa1bcd355", 0x12}, {&(0x7f0000000400)="5a1ea8201f0a109feb53198748539bc58128a623dbf6ae729eedce0a7868cd", 0x1f}, {&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000980)="37d7d02f048553ce7d838a87f604fe291faca960124a3447fd328e07fa561e8df49162eddecae674c7b3a706bd9770898eba846c9f669cfef5a36b5d8c27b385d1eb750e5ec69cf5796aba86fc31816d9a3e560406275564b00f0fadea137dabd2f12fca8890538bd4713091144fe5079a36323cec45ce5cd69f23a92a0022f736bb0867d24f746466ffc35c6e3fbfc91e0c7fff34cbabd03abc4b545031b934fd19f8877c7b5ab811aa131a204329129d1e8faf9371ca7e6259b5581ac801f6fcc5bb61b1c69a4e3b2e2e763a41da4c73fada6aa2aaa026f1a1573458ea0463dfe892e037fabc8918a03c7e15d7a7600ea91077c9a31171", 0xf8}], 0x10, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="db82384e", 0x4}], 0x1}, 0x8000) 5.035380781s ago: executing program 3 (id=6404): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000008c0)=""/76, 0x4c}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/176, 0xb0}], 0x5}, 0x12001) recvmsg(0xffffffffffffffff, 0x0, 0x1f02) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000400)=""/125, 0xcc, 0x7d, 0x0, 0x4, 0x10000}, 0x28) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x3, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x2000007fff, 0x0, 0x6, 0xaf3, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x401}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 4.918309649s ago: executing program 3 (id=6405): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r1, &(0x7f0000000580)="f106494c0f2d55cfab086ff0ac4cca1348062b5248e7a993251c5b8f2e8e28d05dfba984151854602efc6fb94af3e8fd7de380647d0fdc2d36f6f1bb04bcf5e71c764ea84dc4ad8f31e204f687b7446786f1bb88c8b13e87e48e813e2973ed8e00e064670b6d954b502d3339c8405533adb983744c89346875b9e63196fa279a5ee03c6c6ba44ded7c4126dae9acf5a819e99e379125c34f5b40589f06fea0de1ba978aa638000c86f2c8ad85d6305ec88d0d45cefd309f768714852b67ed5b2c5e08213566ba630cf72b2", &(0x7f0000000680)=""/30}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000200)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) gettid() r8 = socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000003700)={&(0x7f0000000340)=@nl=@proc, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/56, 0x38}, {&(0x7f0000003540)=""/69, 0x45}], 0x4, &(0x7f0000003600)=""/195, 0xc3}, 0x2) setsockopt$sock_attach_bpf(r8, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20000002) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1002, @local}}, 0x80, &(0x7f00000004c0)}, 0x0) 4.546252514s ago: executing program 1 (id=6408): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xdf, 0x0, 0x80, 0x0, 0x0, 0x2, 0xe30e, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8000, 0x3, 0x4000, 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x0, 0x0, 0x8000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 4.44947481s ago: executing program 4 (id=6410): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc50685b86a23c04ad002d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1, 0x0, 0x2b}, 0x2040) 4.320970369s ago: executing program 4 (id=6412): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000000)=0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005100)=@bpf_tracing={0x1a, 0x200000b0, &(0x7f0000001300)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x2, 0x0, 0x3, 0x4, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x0, 0x6, 0x4, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000013c0)='GPL\x00', 0xb6c, 0x1000, &(0x7f0000004000)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000005000)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000005040)={0x1, 0x0, 0x1, 0xffff}, 0x10, 0x1e54d, r1, 0x3, &(0x7f0000005080)=[r1, r1], &(0x7f00000050c0)=[{0x2, 0x3, 0x5, 0x1}, {0x2, 0x3, 0xe, 0x6}, {0xfffffffd, 0x5, 0x10, 0x7}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120) 4.211020796s ago: executing program 1 (id=6413): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000008c0)=""/76, 0x4c}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/176, 0xb0}], 0x5}, 0x12001) recvmsg(0xffffffffffffffff, 0x0, 0x1f02) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000400)=""/125, 0xcc, 0x7d, 0x0, 0x4, 0x10000}, 0x28) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x3, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x2000007fff, 0x0, 0x6, 0xaf3, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x401}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 4.182136069s ago: executing program 4 (id=6414): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)="c1dfb0", 0x0, 0xec73, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x12) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000280)="cdccdf0e330e9ca553db778a0c7d53fbd02cc048562b449e9a6c73671450528e47812f31ef56ec637c756c739559109141e2f5f6f3d166741caf971a101f3fd2505e286d70c34ab7778e9ecb372e823b551e02ea3ebe8746768f5a26161bc6fc77b970fd70", 0x65}, {&(0x7f0000000300)="3f445599b42e71ae34bf358006d4c835366de9b0d06e490ed80b11255f25f552f3b1a0c5d1fa1bbd7365ab5c5bc488daff35abdfc9ae818c03f606ef8aa613920ca9f2d5d50ccaba9ee66c1d1922f76ec21d00dd2716c7af66bd133226ada3dc2ad30af2fecd", 0x66}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="cb9157daa6", 0x5}, {&(0x7f0000001580)="7f0fd246821e40eeeaa936cd602491eb5fb47e104fd4fca422a75b6eb7d144d4d1e53aca6e8338f9e3a953c781744bf2553a43e266677fd3487d73937118d78a20699f34fa5e8f280145f212d157b990d6910070b743ed5d3bb93871b45a31f5a265b19c996e3b1bfe8b7cd016cdfd3bf17d001464eb7f1403727086caa392149c5abb", 0x83}, {&(0x7f0000001640)="51cad8b2373aff18b7", 0x9}], 0x6, &(0x7f0000001700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x61, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@loopback, 0x3}]}, @lsrr={0x83, 0x7, 0xfc, [@loopback]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x1, [{@private=0xa010100, 0x3}, {@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x3}, {@multicast1, 0x1}, {@private=0xa010102, 0x2}]}, @lsrr={0x83, 0xb, 0xb8, [@empty, @dev={0xac, 0x14, 0x14, 0x36}]}, @generic={0x7, 0xc, "3aa05a56b5100957d897"}]}}}], 0xa0}, 0x40804) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000002a80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 4.101709044s ago: executing program 0 (id=6415): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002380)={&(0x7f0000001e40)=@abs={0x1, 0x0, 0x3ff}, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x4004810}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 3.998759031s ago: executing program 1 (id=6416): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETSNDBUF(r4, 0x400454d4, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) (async) 3.991580381s ago: executing program 4 (id=6417): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="d80000001e0081064e81f782db44b9040002080006007c09e8fe11a10a0015c00200142603600e120800080024000000a80009001100014003001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r3}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.965420473s ago: executing program 0 (id=6418): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x4, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000180)=r6, 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2b, 'net_prio'}, {0x2d, 'io'}, {0x2b, 'net_prio'}, {0x2b, 'io'}]}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3.898700728s ago: executing program 3 (id=6419): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x110000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0), 0x1}, 0x10140) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000e80)="7393a636aa9d61a257fe86a7f10cfdd6d39ab251b167e86ba8861eb0ac0664eb9229b5bf94e8de371591654265c10a442ec7d8424fc888064c544a83551b4785c9aaeb3e970c2b4262a23993129c8f8617c0dc316b0c96584017be1d4b035c6cf6f6b5d4188dd86e7c", 0x69}, {0x0}], 0x2, 0x0, 0x0, 0x20000080}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={&(0x7f0000001680)="73978b4b8bc4ba2d4e484a7418728b9fe5c71317955ccede8dfac526cc3ef5a933a2d47c3564386af3db793d5f53c58826aeef7e4d158d267826e79a62d2c2bed7ca4d88774c400ac655f80a9839f1a52bed36e9ab20d52b6a229e5067283d1767be54a8c70c47e30f5879dbb71a25ef2478008462cc256401d68e2ce9b5cced9864a00638139f183a0fc2fe602d11bc42e0f1f1211b50a517477d5506919db31bd5084c7c94194eceaf06d10d2a32855ed1be0c46a2e3065d90cd859b63b7072ed333cbae7a592d3b6127d2d3ad697b3cffc7", &(0x7f0000001780)=""/95, &(0x7f0000001800)="e657387d8ebfb89c12f1764446d3726664e674f5e962c2889b776b95a176366399b90f047cd91142b87beb6b593e097af5fca451ef5934587756190cbc6195d2d868d7ca7503eea15cd13a98851c99f8faa0809ebe49ac26371abecf0c9b4989b882b7efbdb9beb8cb098fb0dbffd77fa6", &(0x7f0000001880)="65bc60b6a76865149255fbd1e3d370622bba10b39839c7080f6019c119e0df878fcfeb4d80e0c46ea2a0980f252ccd7680899526bccdd1018ebdd619b8370103cea5064f88ae63965cefa1d1b598be31e2d30f7c11b43ed4e49874c526cd87e8217b2262f86b63f75172fda3bb0097c1b633b7a179e3b16ac0235b348eee8d5719c4af4745fbbb4f9c93947f464c83e27cb0dc86c1172fd2738dfda0d7302efb863bc74e9af966f3d0cbedae42a58f35e8bb34dc8f4d9b5522dad833f87b9528", 0x0, r3, 0x4}, 0x38) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r5, 0x0, 0xc, 0x0, 0x45) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x20bf68ae, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x7fffffff}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) 3.478702276s ago: executing program 1 (id=6420): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e01ba1ddcc0000001807000000000000000000000700000007063cea90d30000"], 0x38}, 0x20002800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0xa}, {0x1000000a, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000005c0)="a75f04ebffffff6f2f3534fdb867", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032f00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="2e00000011008188040f80ec59acbc04005e140602000000000e0027001000004556df17f9000200000000000000", 0x2e}], 0x1}, 0x0) 3.402454321s ago: executing program 0 (id=6421): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') (async, rerun: 64) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000), 0x8) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) (async) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) (async) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="000000000000e2b3e5b2ea0000000000040000003ebc1a3ab142e4226bc9726a4ef36ab4f6e10aaf25acc4cef50372af4f138b65cba1b1b234ab24804fbd01b9da49c33f0c06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r7, &(0x7f0000000940)}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.882939386s ago: executing program 0 (id=6422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0x3}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001ce6ffffff000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084000000070000009404000044100000000000000000000000000000000000001100000000000000000001160100"/76], 0x98}, 0x4dc) 293.14508ms ago: executing program 3 (id=6423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x0, 0x9, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa1000000000000070100"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r6, @ANYBLOB="00000000000000003f93000000e6ff00b50300000000000085000000761d0000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r5) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 264.454832ms ago: executing program 0 (id=6424): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000089000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/82, 0x52}, {&(0x7f00000008c0)=""/76, 0x4c}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/176, 0xb0}], 0x5}, 0x12001) recvmsg(0xffffffffffffffff, 0x0, 0x1f02) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000400)=""/125, 0xcc, 0x7d, 0x0, 0x4, 0x10000}, 0x28) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x3, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0xc}, 0x0, 0x2000007fff, 0x0, 0x6, 0xaf3, 0x6, 0x0, 0x0, 0x1000000, 0x0, 0x401}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 168.936959ms ago: executing program 1 (id=6425): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xffffffffffff8000, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="000000dfef825b8d020014000000000000009d5e", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}, 0x40800) 0s ago: executing program 0 (id=6426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000440)=[{0x27, 0x7, 0x0, 0xfffff038}]}) kernel console output (not intermixed with test programs): ': attribute type 9 has an invalid length. [ 969.792645][T24942] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5308'. [ 969.813795][T24943] netlink: zone id is out of range [ 969.835035][T24943] netlink: zone id is out of range [ 969.863512][T24943] netlink: zone id is out of range [ 969.874199][T24936] netlink: 'syz.1.5308': attribute type 6 has an invalid length. [ 969.900656][T24944] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5307'. [ 969.928974][T24943] netlink: zone id is out of range [ 969.955849][T24944] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5307'. [ 969.963299][T24943] netlink: zone id is out of range [ 969.972962][T24943] netlink: zone id is out of range [ 969.978378][T24943] netlink: zone id is out of range [ 969.996972][T24940] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5307'. [ 970.032838][T24943] netlink: zone id is out of range [ 970.038447][T24943] netlink: zone id is out of range [ 970.089661][T24943] netlink: zone id is out of range [ 970.487359][T24961] syz.3.5314[24961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.487557][T24961] syz.3.5314[24961] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 970.668188][T24966] netlink: 'syz.4.5319': attribute type 9 has an invalid length. [ 970.843644][T24972] netlink: 'syz.1.5320': attribute type 1 has an invalid length. [ 973.733282][T25018] netlink: 'syz.1.5335': attribute type 33 has an invalid length. [ 973.741240][T25018] __nla_validate_parse: 1 callbacks suppressed [ 973.741255][T25018] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5335'. [ 973.896370][T25014] netlink: 'syz.3.5333': attribute type 10 has an invalid length. [ 973.922991][T25014] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5333'. [ 974.589203][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 974.602590][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 974.611287][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.625316][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.657172][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 974.664941][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.772080][ T7646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.984580][ T7646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.178030][ T7646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.349807][ T7646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.608578][T25049] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 975.698554][T25049] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 975.749813][T25051] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 975.817036][T25028] chnl_net:caif_netlink_parms(): no params data found [ 976.023329][T25056] delete_channel: no stack [ 976.031103][T25056] delete_channel: no stack [ 976.066762][T25056] delete_channel: no stack [ 976.263674][T25064] netlink: 'syz.1.5344': attribute type 10 has an invalid length. [ 976.618078][T25028] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.641661][T25028] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.676978][T25028] bridge_slave_0: entered allmulticast mode [ 976.701384][T25028] bridge_slave_0: entered promiscuous mode [ 976.732792][ T5779] Bluetooth: hci3: command tx timeout [ 976.750763][T25055] delete_channel: no stack [ 976.761704][T25028] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.795118][T25028] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.832628][T25028] bridge_slave_1: entered allmulticast mode [ 976.840099][T25028] bridge_slave_1: entered promiscuous mode [ 977.130820][T25086] netlink: 'syz.1.5348': attribute type 4 has an invalid length. [ 977.162460][T25086] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5348'. [ 977.237051][ T7646] ip6gretap0 (unregistering): left allmulticast mode [ 977.258253][ T7646] ip6gretap0 (unregistering): left promiscuous mode [ 977.271807][ T7646] Ÿë: port 1(ip6gretap0) entered disabled state [ 977.372557][T25028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.706929][T25028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.045539][T25028] team0: Port device team_slave_0 added [ 978.095161][T25028] team0: Port device team_slave_1 added [ 978.338539][T25028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.353443][T25028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.384764][T25113] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5354'. [ 978.412274][T25028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.573913][T25028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.580946][T25028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.640119][T25126] netlink: 'syz.3.5357': attribute type 3 has an invalid length. [ 978.655499][T25028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.700807][T25126] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.5357'. [ 978.813688][ T5779] Bluetooth: hci3: command tx timeout [ 978.905155][T25131] veth1_macvtap: entered allmulticast mode [ 979.161351][T25139] netlink: 'syz.4.5359': attribute type 9 has an invalid length. [ 979.192415][T25139] netlink: 399 bytes leftover after parsing attributes in process `syz.4.5359'. [ 979.214832][ T49] tipc: Subscription rejected, illegal request [ 979.296854][T25028] hsr_slave_0: entered promiscuous mode [ 979.324137][T25028] hsr_slave_1: entered promiscuous mode [ 979.354394][T25028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.384260][T25028] Cannot create hsr debugfs directory [ 979.395057][T25144] netlink: 'syz.1.5361': attribute type 10 has an invalid length. [ 979.789551][T25157] C: renamed from team_slave_0 (while UP) [ 979.866472][T25157] netlink: 'syz.4.5362': attribute type 1 has an invalid length. [ 979.902351][T25157] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5362'. [ 979.922376][T25157] net_ratelimit: 352 callbacks suppressed [ 979.922393][T25157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 980.147531][T25157] netlink: 'syz.4.5362': attribute type 4 has an invalid length. [ 980.580673][T25175] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5365'. [ 980.902609][ T5779] Bluetooth: hci3: command tx timeout [ 981.659517][T25202] netlink: 'syz.3.5371': attribute type 9 has an invalid length. [ 981.718763][T25202] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5371'. [ 982.435657][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.456528][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.502933][ T7646] bridge0: port 2(batadv0) entered disabled state [ 982.529459][ T7646] bridge_slave_0: left promiscuous mode [ 982.552512][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.618815][ T7646] veth1_macvtap: left promiscuous mode [ 982.628654][ T7646] veth0_macvtap: left promiscuous mode [ 982.654027][T25226] netlink: 'syz.1.5375': attribute type 9 has an invalid length. [ 982.672705][T25226] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.5375'. [ 982.730420][T25226] netlink: 'syz.1.5375': attribute type 1 has an invalid length. [ 982.749628][T25226] netlink: 'syz.1.5375': attribute type 3 has an invalid length. [ 982.758638][T25226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5375'. [ 982.972982][ T5084] Bluetooth: hci3: command tx timeout [ 983.126703][ T7646] geneve1 (unregistering): left promiscuous mode [ 983.141514][ T7646] team0 (unregistering): Port device geneve1 removed [ 983.494657][ T7646] team_slave_1 (unregistering): left promiscuous mode [ 983.504678][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 983.559844][ T7646] team_slave_0 (unregistering): left promiscuous mode [ 983.570287][ T7646] team0 (unregistering): Port device team_slave_0 removed [ 983.711368][ T7646] bridge_slave_1 (unregistering): left promiscuous mode [ 983.719968][ T7646] team0 (unregistering): Port device bridge_slave_1 removed [ 984.078158][T25226] netlink: 'syz.1.5375': attribute type 10 has an invalid length. [ 984.108207][T25226] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5375'. [ 984.196850][T25028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 984.224166][T25028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 984.245607][T25028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 984.364060][T25028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 984.814766][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 985.060024][T25028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.204668][T25028] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.249780][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.257051][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.296672][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.303904][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.646120][T25261] netlink: 'syz.3.5381': attribute type 7 has an invalid length. [ 985.733039][T25261] netlink: 'syz.3.5381': attribute type 1 has an invalid length. [ 985.801141][T25261] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5381'. [ 986.066420][T25253] syzkaller0: entered promiscuous mode [ 986.072026][T25253] syzkaller0: entered allmulticast mode [ 986.399903][ T5779] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 986.685496][T25287] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5386'. [ 988.555048][T25028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.735755][T25028] veth0_vlan: entered promiscuous mode [ 988.791715][T25028] veth1_vlan: entered promiscuous mode [ 988.920385][T25028] veth0_macvtap: entered promiscuous mode [ 988.969766][T25028] veth1_macvtap: entered promiscuous mode [ 989.021258][T25309] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.5392'. [ 989.064867][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.076235][T25309] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 989.098772][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.118524][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.143831][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.175060][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.190594][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.201037][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.215593][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.232136][T25028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.260837][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.286009][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.308771][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 989.329487][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.343503][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.354488][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.364949][T25028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.376671][T25028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.423952][T25028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.456863][T25028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.517062][T25028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.619603][T25028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.635631][T25028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.852720][T25322] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5396'. [ 989.932870][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 990.056975][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.083651][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.173372][T25333] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 990.189760][T14188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.218647][T14188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.115702][T25359] netlink: 'syz.3.5403': attribute type 10 has an invalid length. [ 991.153421][T25359] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5403'. [ 991.275308][T25372] netlink: 'syz.4.5406': attribute type 8 has an invalid length. [ 991.311293][T25372] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.5406'. [ 991.549455][T25384] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.5407'. [ 992.546225][T25398] delete_channel: no stack [ 992.567634][T25402] netlink: 'syz.0.5410': attribute type 29 has an invalid length. [ 992.623568][T25402] netlink: 'syz.0.5410': attribute type 29 has an invalid length. [ 993.055623][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.061993][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.768640][T25430] delete_channel: no stack [ 995.019286][T25437] netlink: 'syz.0.5418': attribute type 39 has an invalid length. [ 995.339297][T25437] hsr_slave_1 (unregistering): left promiscuous mode [ 995.899913][T25464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.330024][T25480] netlink: 'syz.1.5431': attribute type 9 has an invalid length. [ 996.351585][T25480] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5431'. [ 996.610904][T25480] netlink: 'syz.1.5431': attribute type 13 has an invalid length. [ 996.621526][T25480] netlink: 'syz.1.5431': attribute type 58 has an invalid length. [ 996.631896][T25480] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5431'. [ 996.915634][T25483] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.5432'. [ 996.931555][T25484] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.5432'. [ 996.961628][T25483] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.5432'. [ 997.402111][T25507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 997.479234][T25513] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5442'. [ 997.489414][T25513] netlink: zone id is out of range [ 997.495040][T25513] netlink: zone id is out of range [ 997.500432][T25513] netlink: zone id is out of range [ 997.509451][T25513] netlink: zone id is out of range [ 997.515014][T25513] netlink: zone id is out of range [ 997.520158][T25513] netlink: zone id is out of range [ 997.526520][T25513] netlink: zone id is out of range [ 997.531673][T25513] netlink: zone id is out of range [ 997.708822][T25523] netlink: 'syz.4.5443': attribute type 9 has an invalid length. [ 997.725412][T25523] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5443'. [ 998.166745][T12917] tipc: Subscription rejected, illegal request [ 999.712197][T25576] netlink: 'syz.0.5460': attribute type 21 has an invalid length. [ 999.727483][T25576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5460'. [ 999.739159][T25576] netlink: 'syz.0.5460': attribute type 4 has an invalid length. [ 999.752439][T25576] netlink: 'syz.0.5460': attribute type 3 has an invalid length. [ 999.766321][T25576] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5460'. [ 999.791890][T25574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1000.423647][T25580] netlink: 'syz.4.5461': attribute type 2 has an invalid length. [ 1000.431488][T25580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5461'. [ 1001.981103][T25638] netlink: 'syz.3.5479': attribute type 10 has an invalid length. [ 1002.368771][T25659] __nla_validate_parse: 66 callbacks suppressed [ 1002.368792][T25659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1003.117310][T25685] netlink: 'syz.3.5493': attribute type 2 has an invalid length. [ 1004.159715][T25712] netlink: 'syz.4.5503': attribute type 4 has an invalid length. [ 1004.474304][T25724] netlink: 'syz.3.5507': attribute type 9 has an invalid length. [ 1004.493711][T25724] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1004.667763][T25730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1005.048347][T25725] netlink: 'syz.1.5508': attribute type 10 has an invalid length. [ 1005.101649][T25729] netlink: 'syz.1.5508': attribute type 41 has an invalid length. [ 1005.144416][T25730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1005.186905][T25733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1005.211006][T25734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1005.347602][T25746] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5511'. [ 1005.746075][T25761] netlink: 'syz.3.5516': attribute type 21 has an invalid length. [ 1005.790679][T25761] IPv6: NLM_F_CREATE should be specified when creating new route [ 1005.806259][T25761] IPv6: Can't replace route, no match found [ 1005.938234][T25758] netlink: 'syz.1.5514': attribute type 10 has an invalid length. [ 1005.962716][T25758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5514'. [ 1005.972162][T25758] ipvlan1: entered promiscuous mode [ 1006.003032][T25758] ipvlan1: entered allmulticast mode [ 1006.024658][T25758] veth0_vlan: entered allmulticast mode [ 1006.091716][T25758] bridge0: port 3(ipvlan1) entered blocking state [ 1006.100152][T25758] bridge0: port 3(ipvlan1) entered disabled state [ 1006.115728][T25758] net_ratelimit: 333 callbacks suppressed [ 1006.115742][T25758] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1006.144207][T25767] netlink: 'syz.4.5525': attribute type 21 has an invalid length. [ 1006.156980][T25767] IPv6: Can't replace route, no match found [ 1006.624779][ T5779] Bluetooth: hci1: adv larger than maximum supported [ 1006.624846][ T5779] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1007.047208][T25793] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1007.099504][T25794] netlink: 'syz.1.5526': attribute type 6 has an invalid length. [ 1007.135741][T25794] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1007.193611][T25793] netlink: 'syz.1.5526': attribute type 6 has an invalid length. [ 1009.462393][ T787] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1010.153880][T25806] netlink: 'syz.3.5527': attribute type 19 has an invalid length. [ 1010.161858][T25806] __nla_validate_parse: 1 callbacks suppressed [ 1010.161867][T25806] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5527'. [ 1010.179778][T25807] netlink: 'syz.1.5529': attribute type 21 has an invalid length. [ 1010.191426][T25807] IPv6: NLM_F_CREATE should be specified when creating new route [ 1010.199762][T25807] IPv6: Can't replace route, no match found [ 1010.339783][T25815] netlink: 'syz.1.5531': attribute type 33 has an invalid length. [ 1010.368387][T25815] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5531'. [ 1011.252991][T25842] netlink: 'syz.0.5539': attribute type 21 has an invalid length. [ 1011.272526][T25842] IPv6: NLM_F_CREATE should be specified when creating new route [ 1011.287502][T25842] IPv6: Can't replace route, no match found [ 1012.102110][T25854] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1012.170624][T25854] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1012.220231][T25862] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5546'. [ 1012.504791][T25870] netlink: 'syz.1.5550': attribute type 21 has an invalid length. [ 1012.529692][T25870] IPv6: Can't replace route, no match found [ 1012.713801][T25873] netlink: 'syz.3.5551': attribute type 19 has an invalid length. [ 1012.871228][T25878] netlink: 'syz.3.5551': attribute type 19 has an invalid length. [ 1013.777458][T25902] netlink: 'syz.4.5562': attribute type 21 has an invalid length. [ 1013.807631][T25902] IPv6: Can't replace route, no match found [ 1013.930620][T25911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5565'. [ 1013.931385][T25908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5565'. [ 1013.996481][T25911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5565'. [ 1014.011841][T25913] netlink: 'syz.1.5564': attribute type 39 has an invalid length. [ 1014.596594][T25936] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1014.753651][T25942] netlink: 'syz.4.5573': attribute type 13 has an invalid length. [ 1014.761532][T25942] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1014.806886][T25944] netlink: 'syz.4.5573': attribute type 13 has an invalid length. [ 1014.831140][T25944] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5573'. [ 1014.870124][T25939] netlink: 'syz.1.5574': attribute type 2 has an invalid length. [ 1014.887535][T25948] netlink: 'syz.3.5575': attribute type 21 has an invalid length. [ 1014.912659][T25948] IPv6: Can't replace route, no match found [ 1015.570313][T25967] netlink: 'syz.4.5580': attribute type 4 has an invalid length. [ 1015.589269][T25967] __nla_validate_parse: 1 callbacks suppressed [ 1015.589286][T25967] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5580'. [ 1015.667483][T25967] .`: renamed from bond0 (while UP) [ 1016.224007][T25993] IPv6: Can't replace route, no match found [ 1016.261345][T25995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.283686][T25995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.467836][T25995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.486344][T25995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.848456][T25995] bridge0: port 3(batadv0) entered disabled state [ 1016.982123][T26012] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1017.287753][T26026] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1017.325568][T26027] IPv6: Can't replace route, no match found [ 1017.684974][T26042] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5602'. [ 1017.848196][T26050] can: request_module (can-proto-5) failed. [ 1017.935241][T26052] can: request_module (can-proto-5) failed. [ 1017.966352][T26052] validate_nla: 2 callbacks suppressed [ 1017.966369][T26052] netlink: 'syz.1.5604': attribute type 27 has an invalid length. [ 1018.006686][T26052] netlink: 'syz.1.5604': attribute type 4 has an invalid length. [ 1018.016360][T26052] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1018.065985][T26055] netlink: 'syz.1.5604': attribute type 27 has an invalid length. [ 1018.113018][T26055] netlink: 'syz.1.5604': attribute type 4 has an invalid length. [ 1018.123821][T26055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1018.944451][T26074] netlink: 'syz.4.5610': attribute type 21 has an invalid length. [ 1018.962705][T26074] IPv6: Can't replace route, no match found [ 1019.669351][T26110] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1019.693361][T26109] netlink: 'syz.0.5621': attribute type 21 has an invalid length. [ 1019.724379][T26109] IPv6: Can't replace route, no match found [ 1020.234646][T26127] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.5626'. [ 1020.292854][T26136] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 1023.120537][T26146] netlink: 'syz.0.5632': attribute type 21 has an invalid length. [ 1023.138844][T26146] IPv6: Can't replace route, no match found [ 1024.506591][T26168] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5637'. [ 1024.800872][T26188] netlink: 'syz.1.5641': attribute type 21 has an invalid length. [ 1024.842462][T26190] netlink: 'syz.4.5643': attribute type 21 has an invalid length. [ 1024.857120][T26190] IPv6: Can't replace route, no match found [ 1025.494629][T26205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.771936][T26221] netlink: 'syz.4.5654': attribute type 21 has an invalid length. [ 1025.786785][T26221] IPv6: Can't replace route, no match found [ 1026.130499][T26232] netlink: 'syz.0.5655': attribute type 21 has an invalid length. [ 1026.192393][T26232] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5655'. [ 1026.999717][T26245] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5660'. [ 1027.671881][T26266] netlink: 'syz.4.5666': attribute type 21 has an invalid length. [ 1027.702658][T26266] IPv6: Can't replace route, no match found [ 1028.199265][T26282] tap0: tun_chr_ioctl cmd 1074025675 [ 1028.217552][T26282] tap0: persist enabled [ 1028.486323][T26282] tap1: tun_chr_ioctl cmd 1074025677 [ 1028.497883][T26282] tap1: linktype set to 778 [ 1028.514366][T26284] tap0: tun_chr_ioctl cmd 1074025675 [ 1028.519764][T26284] tap0: persist enabled [ 1028.725643][T26288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5672'. [ 1028.758065][T26287] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5672'. [ 1029.110749][T26306] netlink: 'syz.1.5675': attribute type 10 has an invalid length. [ 1029.132621][T26306] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1029.162134][T26305] netlink: 'syz.4.5677': attribute type 2 has an invalid length. [ 1029.164726][T26305] netlink: 'syz.4.5677': attribute type 8 has an invalid length. [ 1029.165131][T26305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1029.359773][T26313] netlink: 'syz.3.5678': attribute type 21 has an invalid length. [ 1029.382689][T26313] IPv6: Can't replace route, no match found [ 1030.048027][T26332] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5685'. [ 1030.070544][T26332] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1030.094114][T26333] macvlan1: entered promiscuous mode [ 1030.312801][T26345] netlink: 'syz.1.5689': attribute type 21 has an invalid length. [ 1030.321880][T26345] IPv6: Can't replace route, no match found [ 1031.112462][T26376] Ÿë: port 1(veth0_to_team) entered blocking state [ 1031.147311][T26376] Ÿë: port 1(veth0_to_team) entered disabled state [ 1031.169905][T26376] veth0_to_team: entered allmulticast mode [ 1031.188594][T26376] veth0_to_team: entered promiscuous mode [ 1031.294222][T26386] netlink: 'syz.4.5701': attribute type 21 has an invalid length. [ 1031.333737][T26386] IPv6: Can't replace route, no match found [ 1031.571277][T26398] netlink: 'syz.3.5706': attribute type 10 has an invalid length. [ 1031.634028][T26398] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1031.890024][T26417] sock: sock_set_timeout: `syz.4.5709' (pid 26417) tries to set negative timeout [ 1032.021327][T26417] netlink: 'syz.4.5709': attribute type 1 has an invalid length. [ 1032.043672][T26417] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5709'. [ 1032.208988][T26426] netlink: 'syz.3.5713': attribute type 21 has an invalid length. [ 1032.260238][T26426] IPv6: Can't replace route, no match found [ 1032.458255][T26436] netlink: 'syz.3.5716': attribute type 1 has an invalid length. [ 1032.471344][T26436] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.5716'. [ 1032.537324][T26433] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.5714'. [ 1032.559399][T26433] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.5714'. [ 1033.116423][T26433] veth0_macvtap: left promiscuous mode [ 1034.394383][T26463] validate_nla: 2 callbacks suppressed [ 1034.394410][T26463] netlink: 'syz.3.5724': attribute type 21 has an invalid length. [ 1034.455842][T26463] IPv6: Can't replace route, no match found [ 1034.662822][T26470] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1034.912042][T26481] netlink: 'syz.1.5729': attribute type 2 has an invalid length. [ 1034.942423][T26481] netlink: 'syz.1.5729': attribute type 8 has an invalid length. [ 1034.970821][T26481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5729'. [ 1035.169638][T26495] netlink: 'syz.4.5734': attribute type 6 has an invalid length. [ 1035.190132][T26495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5734'. [ 1035.214935][T26499] netlink: 'syz.0.5736': attribute type 21 has an invalid length. [ 1035.237763][T26499] IPv6: Can't replace route, no match found [ 1035.605372][T26512] netlink: 'syz.1.5740': attribute type 4 has an invalid length. [ 1035.632274][T26512] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1036.219208][T26527] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5744'. [ 1036.265129][T26527] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1036.550341][T26537] netlink: 'syz.3.5748': attribute type 21 has an invalid length. [ 1036.578173][T26537] IPv6: Can't replace route, no match found [ 1037.164371][T26556] netlink: 'syz.0.5755': attribute type 6 has an invalid length. [ 1037.186812][T26556] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1037.393836][T26564] netlink: 'syz.4.5756': attribute type 10 has an invalid length. [ 1037.450246][T26564] veth1_macvtap: left promiscuous mode [ 1038.564494][T26569] 6: renamed from veth0_vlan (while UP) [ 1038.585150][T26573] netlink: 'syz.1.5758': attribute type 16 has an invalid length. [ 1038.602321][T26573] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1038.632513][T26572] IPv6: Can't replace route, no match found [ 1038.649475][T26575] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1039.106162][T26580] mac80211_hwsim hwsim77 wlan1: entered promiscuous mode [ 1039.131011][T26580] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode [ 1039.174856][T26580] team0: Port device wlan1 added [ 1039.689530][T26604] validate_nla: 3 callbacks suppressed [ 1039.689548][T26604] netlink: 'syz.0.5769': attribute type 33 has an invalid length. [ 1039.754695][T26604] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1039.812737][T26605] netlink: 'syz.0.5769': attribute type 33 has an invalid length. [ 1039.843321][T26605] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1039.899505][T26612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5770'. [ 1039.951105][T26614] netlink: 'syz.1.5771': attribute type 21 has an invalid length. [ 1039.982264][T26614] IPv6: Can't replace route, no match found [ 1041.262157][T26650] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1042.108201][T26660] netlink: 'syz.1.5784': attribute type 21 has an invalid length. [ 1042.141796][T26660] IPv6: Can't replace route, no match found [ 1042.156885][T26661] netlink: 'syz.3.5783': attribute type 2 has an invalid length. [ 1042.172830][T26661] netlink: 'syz.3.5783': attribute type 8 has an invalid length. [ 1042.192526][T26661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5783'. [ 1042.639902][T26684] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5790'. [ 1043.086788][T26691] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1043.412600][T26698] netlink: 'syz.1.5796': attribute type 21 has an invalid length. [ 1043.423104][T26698] IPv6: Can't replace route, no match found [ 1043.678116][T26705] netlink: 'syz.1.5799': attribute type 10 has an invalid length. [ 1043.704110][T26705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.711952][T26705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.828315][T26705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.835648][T26705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.843398][T26705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.850689][T26705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.914927][T26705] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1044.560128][T26724] netlink: 'syz.4.5804': attribute type 6 has an invalid length. [ 1044.579874][T26724] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5804'. [ 1044.822924][T26731] netlink: 'syz.4.5807': attribute type 21 has an invalid length. [ 1044.831812][T26731] IPv6: Can't replace route, no match found [ 1045.637085][T26755] bridge_slave_1: left allmulticast mode [ 1045.663094][T26755] bridge_slave_1: left promiscuous mode [ 1045.689195][T26755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.732901][T26755] bridge_slave_0: left allmulticast mode [ 1045.739142][T26755] bridge_slave_0: left promiscuous mode [ 1045.750647][T26755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.861816][T12919] wlan1: Trigger new scan to find an IBSS to join [ 1045.939163][T26750] delete_channel: no stack [ 1046.597714][T26776] netlink: 'syz.0.5819': attribute type 21 has an invalid length. [ 1046.613567][T26776] IPv6: Can't replace route, no match found [ 1047.028048][T26793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5822'. [ 1047.062493][T26789] sctp: [Deprecated]: syz.0.5824 (pid 26789) Use of int in maxseg socket option. [ 1047.062493][T26789] Use struct sctp_assoc_value instead [ 1047.308098][T26097] tipc: Subscription rejected, illegal request [ 1047.614734][T26805] netlink: 'syz.3.5829': attribute type 21 has an invalid length. [ 1047.663053][T26805] IPv6: Can't replace route, no match found [ 1049.144034][T26831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.266838][T26835] netlink: 'syz.3.5838': attribute type 2 has an invalid length. [ 1049.426975][T26842] netlink: 'syz.0.5841': attribute type 21 has an invalid length. [ 1049.463075][T26842] IPv6: Can't replace route, no match found [ 1049.878558][T26097] wlan1: Trigger new scan to find an IBSS to join [ 1050.071377][T26869] netlink: 'syz.4.5849': attribute type 21 has an invalid length. [ 1050.085365][T26869] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5849'. [ 1050.469053][T26096] wlan1: Creating new IBSS network, BSSID ce:a1:7f:57:eb:d8 [ 1050.591307][T26876] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1050.611254][T26876] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1051.068773][T26880] netlink: 'syz.0.5853': attribute type 21 has an invalid length. [ 1051.112683][T26880] IPv6: Can't replace route, no match found [ 1051.359914][T26893] netlink: 'syz.4.5858': attribute type 10 has an invalid length. [ 1051.606325][T26901] netlink: 'syz.4.5860': attribute type 7 has an invalid length. [ 1052.129403][T26917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1052.136768][T26917] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.611277][T26926] netlink: 'syz.4.5866': attribute type 21 has an invalid length. [ 1052.668171][T26926] IPv6: Can't replace route, no match found [ 1052.804802][T26932] netlink: 'syz.3.5868': attribute type 2 has an invalid length. [ 1052.829896][T26932] netlink: 'syz.3.5868': attribute type 3 has an invalid length. [ 1052.847025][T26932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1053.171914][T26936] netlink: 'syz.3.5868': attribute type 21 has an invalid length. [ 1053.186938][T26936] netlink: 'syz.3.5868': attribute type 30 has an invalid length. [ 1053.259591][T26941] netlink: 'syz.0.5870': attribute type 21 has an invalid length. [ 1053.853615][T26960] IPv6: Can't replace route, no match found [ 1054.312918][T26982] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1054.418750][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.425744][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.534920][T26998] IPv6: Can't replace route, no match found [ 1054.690468][T27003] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1055.446058][T27010] validate_nla: 5 callbacks suppressed [ 1055.446095][T27010] netlink: 'syz.4.5893': attribute type 21 has an invalid length. [ 1055.550192][T27013] netlink: 'syz.3.5894': attribute type 39 has an invalid length. [ 1056.023401][T27033] netlink: 'syz.0.5901': attribute type 21 has an invalid length. [ 1056.037221][T27033] IPv6: Can't replace route, no match found [ 1056.128294][T27037] netlink: 'syz.4.5903': attribute type 21 has an invalid length. [ 1056.136978][T27037] IPv6: Can't replace route, no match found [ 1056.198985][T27044] FAULT_INJECTION: forcing a failure. [ 1056.198985][T27044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.237555][T27044] CPU: 1 PID: 27044 Comm: syz.1.5904 Not tainted syzkaller #0 [ 1056.245096][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1056.255183][T27044] Call Trace: [ 1056.258497][T27044] [ 1056.261474][T27044] dump_stack_lvl+0x18c/0x250 [ 1056.266209][T27044] ? show_regs_print_info+0x20/0x20 [ 1056.271503][T27044] ? load_image+0x420/0x420 [ 1056.276063][T27044] ? __might_fault+0xaa/0x120 [ 1056.280793][T27044] ? __lock_acquire+0x7d40/0x7d40 [ 1056.285866][T27044] should_fail_ex+0x39d/0x4d0 [ 1056.290644][T27044] _copy_from_user+0x2f/0xe0 [ 1056.295291][T27044] ___sys_sendmsg+0x1c7/0x360 [ 1056.300039][T27044] ? get_pid_task+0x20/0x1e0 [ 1056.304688][T27044] ? __sys_sendmsg+0x2a0/0x2a0 [ 1056.309512][T27044] ? __lock_acquire+0x7d40/0x7d40 [ 1056.314643][T27044] __se_sys_sendmsg+0x1c2/0x2b0 [ 1056.319538][T27044] ? __x64_sys_sendmsg+0x80/0x80 [ 1056.324539][T27044] ? lockdep_hardirqs_on+0x98/0x150 [ 1056.329788][T27044] do_syscall_64+0x55/0xa0 [ 1056.334238][T27044] ? clear_bhb_loop+0x40/0x90 [ 1056.338961][T27044] ? clear_bhb_loop+0x40/0x90 [ 1056.343689][T27044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.349720][T27044] RIP: 0033:0x7f73a399c819 [ 1056.354175][T27044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.373822][T27044] RSP: 002b:00007f73a483a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.382294][T27044] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1056.390332][T27044] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1056.398344][T27044] RBP: 00007f73a483a090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.406355][T27044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.414352][T27044] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1056.422365][T27044] [ 1056.594320][T27056] netlink: 'syz.1.5909': attribute type 41 has an invalid length. [ 1056.761584][T27061] syzkaller0: entered allmulticast mode [ 1056.920432][T27067] netlink: 'syz.1.5913': attribute type 21 has an invalid length. [ 1056.946368][T27067] IPv6: Can't replace route, no match found [ 1057.269056][T27079] netlink: 'syz.1.5916': attribute type 21 has an invalid length. [ 1057.302656][T27079] IPv6: Can't replace route, no match found [ 1057.463302][T27087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5917'. [ 1057.734234][T27094] FAULT_INJECTION: forcing a failure. [ 1057.734234][T27094] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.750349][T27094] CPU: 1 PID: 27094 Comm: syz.1.5920 Not tainted syzkaller #0 [ 1057.757877][T27094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1057.767988][T27094] Call Trace: [ 1057.771311][T27094] [ 1057.774283][T27094] dump_stack_lvl+0x18c/0x250 [ 1057.779032][T27094] ? show_regs_print_info+0x20/0x20 [ 1057.784275][T27094] ? load_image+0x420/0x420 [ 1057.788834][T27094] ? __might_sleep+0xe0/0xe0 [ 1057.793454][T27094] ? __lock_acquire+0x7d40/0x7d40 [ 1057.798514][T27094] should_fail_ex+0x39d/0x4d0 [ 1057.803234][T27094] should_failslab+0x9/0x20 [ 1057.807772][T27094] slab_pre_alloc_hook+0x59/0x310 [ 1057.812832][T27094] ? __lock_acquire+0x7d40/0x7d40 [ 1057.817885][T27094] kmem_cache_alloc_node+0x60/0x320 [ 1057.823118][T27094] ? __alloc_skb+0x103/0x2c0 [ 1057.827735][T27094] __alloc_skb+0x103/0x2c0 [ 1057.832182][T27094] netlink_sendmsg+0x66a/0xbf0 [ 1057.837020][T27094] ? netlink_getsockopt+0x590/0x590 [ 1057.842260][T27094] ? aa_sock_msg_perm+0x94/0x150 [ 1057.847233][T27094] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1057.852558][T27094] ? security_socket_sendmsg+0x80/0xa0 [ 1057.858048][T27094] ? netlink_getsockopt+0x590/0x590 [ 1057.863289][T27094] ____sys_sendmsg+0x5ba/0x960 [ 1057.868091][T27094] ? __asan_memset+0x22/0x40 [ 1057.872733][T27094] ? __sys_sendmsg_sock+0x30/0x30 [ 1057.877782][T27094] ? __import_iovec+0x5f2/0x850 [ 1057.882672][T27094] ? import_iovec+0x73/0xa0 [ 1057.887210][T27094] ___sys_sendmsg+0x2a6/0x360 [ 1057.891911][T27094] ? get_pid_task+0x20/0x1e0 [ 1057.896529][T27094] ? __sys_sendmsg+0x2a0/0x2a0 [ 1057.901328][T27094] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.907534][T27094] __se_sys_sendmsg+0x1c2/0x2b0 [ 1057.912445][T27094] ? __x64_sys_sendmsg+0x80/0x80 [ 1057.917426][T27094] ? lockdep_hardirqs_on+0x98/0x150 [ 1057.922659][T27094] do_syscall_64+0x55/0xa0 [ 1057.927145][T27094] ? clear_bhb_loop+0x40/0x90 [ 1057.931853][T27094] ? clear_bhb_loop+0x40/0x90 [ 1057.936567][T27094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.942497][T27094] RIP: 0033:0x7f73a399c819 [ 1057.946948][T27094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.966594][T27094] RSP: 002b:00007f73a483a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1057.975036][T27094] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1057.983036][T27094] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1057.991036][T27094] RBP: 00007f73a483a090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.999049][T27094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.007038][T27094] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1058.015045][T27094] [ 1059.765556][T27087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5917'. [ 1060.008478][T27110] netlink: 'syz.3.5924': attribute type 21 has an invalid length. [ 1060.042845][T27110] IPv6: Can't replace route, no match found [ 1060.089544][T27117] netlink: 'syz.1.5927': attribute type 21 has an invalid length. [ 1060.102745][T27117] IPv6: Can't replace route, no match found [ 1060.301101][T27122] netlink: 'syz.0.5928': attribute type 9 has an invalid length. [ 1060.332532][T27122] netlink: 399 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1060.982621][T27141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5934'. [ 1061.070102][T27146] netlink: 'syz.1.5937': attribute type 21 has an invalid length. [ 1061.090917][T27146] IPv6: Can't replace route, no match found [ 1061.197278][T27150] netlink: 'syz.4.5938': attribute type 6 has an invalid length. [ 1061.214295][T27150] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5938'. [ 1061.239190][T27150] netlink: 'syz.4.5938': attribute type 10 has an invalid length. [ 1061.249752][T27150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5938'. [ 1061.265279][T27153] FAULT_INJECTION: forcing a failure. [ 1061.265279][T27153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.292358][T27150] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1061.312374][T27153] CPU: 1 PID: 27153 Comm: syz.1.5940 Not tainted syzkaller #0 [ 1061.319972][T27153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1061.330065][T27153] Call Trace: [ 1061.333372][T27153] [ 1061.336323][T27153] dump_stack_lvl+0x18c/0x250 [ 1061.341048][T27153] ? show_regs_print_info+0x20/0x20 [ 1061.346275][T27153] ? load_image+0x420/0x420 [ 1061.350814][T27153] ? __might_fault+0xaa/0x120 [ 1061.355511][T27153] ? __lock_acquire+0x7d40/0x7d40 [ 1061.360578][T27153] should_fail_ex+0x39d/0x4d0 [ 1061.365276][T27153] _copy_from_iter+0x1d9/0x12e0 [ 1061.370154][T27153] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1061.375459][T27153] ? __virt_addr_valid+0x18c/0x540 [ 1061.380587][T27153] ? __lock_acquire+0x7d40/0x7d40 [ 1061.385647][T27153] ? rcu_is_watching+0x15/0xb0 [ 1061.390458][T27153] ? copyout_mc+0x70/0x70 [ 1061.394819][T27153] ? __virt_addr_valid+0x18c/0x540 [ 1061.399964][T27153] ? __virt_addr_valid+0x18c/0x540 [ 1061.405108][T27153] ? __virt_addr_valid+0x469/0x540 [ 1061.410257][T27153] ? __check_object_size+0x506/0xa20 [ 1061.415571][T27153] netlink_sendmsg+0x76b/0xbf0 [ 1061.420371][T27153] ? netlink_getsockopt+0x590/0x590 [ 1061.425603][T27153] ? aa_sock_msg_perm+0x94/0x150 [ 1061.430582][T27153] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1061.435911][T27153] ? security_socket_sendmsg+0x80/0xa0 [ 1061.441403][T27153] ? netlink_getsockopt+0x590/0x590 [ 1061.446661][T27153] ____sys_sendmsg+0x5ba/0x960 [ 1061.451490][T27153] ? __asan_memset+0x22/0x40 [ 1061.456124][T27153] ? __sys_sendmsg_sock+0x30/0x30 [ 1061.461197][T27153] ? __import_iovec+0x5f2/0x850 [ 1061.466091][T27153] ? import_iovec+0x73/0xa0 [ 1061.470680][T27153] ___sys_sendmsg+0x2a6/0x360 [ 1061.475408][T27153] ? __sys_sendmsg+0x2a0/0x2a0 [ 1061.480224][T27153] ? __lock_acquire+0x7d40/0x7d40 [ 1061.485299][T27153] __se_sys_sendmsg+0x1c2/0x2b0 [ 1061.490181][T27153] ? __x64_sys_sendmsg+0x80/0x80 [ 1061.495185][T27153] ? lockdep_hardirqs_on+0x98/0x150 [ 1061.500421][T27153] do_syscall_64+0x55/0xa0 [ 1061.504862][T27153] ? clear_bhb_loop+0x40/0x90 [ 1061.509570][T27153] ? clear_bhb_loop+0x40/0x90 [ 1061.514281][T27153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.520208][T27153] RIP: 0033:0x7f73a399c819 [ 1061.524653][T27153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.544397][T27153] RSP: 002b:00007f73a483a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.552836][T27153] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1061.560831][T27153] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1061.568839][T27153] RBP: 00007f73a483a090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.576833][T27153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.584825][T27153] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1061.592867][T27153] [ 1061.603183][T27154] netlink: 'syz.0.5939': attribute type 21 has an invalid length. [ 1061.629498][T27154] IPv6: Can't replace route, no match found [ 1061.640314][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.928225][T27162] netlink: 'syz.1.5944': attribute type 4 has an invalid length. [ 1062.239500][T27176] netlink: 'syz.3.5947': attribute type 4 has an invalid length. [ 1062.268591][T27176] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5947'. [ 1062.370413][T27186] netlink: 'syz.0.5949': attribute type 21 has an invalid length. [ 1062.386847][T27186] IPv6: Can't replace route, no match found [ 1062.395889][T27188] netlink: 'syz.1.5950': attribute type 21 has an invalid length. [ 1062.415200][T27188] FAULT_INJECTION: forcing a failure. [ 1062.415200][T27188] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.434208][T27188] CPU: 0 PID: 27188 Comm: syz.1.5950 Not tainted syzkaller #0 [ 1062.441867][T27188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1062.451960][T27188] Call Trace: [ 1062.455277][T27188] [ 1062.458238][T27188] dump_stack_lvl+0x18c/0x250 [ 1062.462970][T27188] ? show_regs_print_info+0x20/0x20 [ 1062.468212][T27188] ? load_image+0x420/0x420 [ 1062.472746][T27188] ? __might_sleep+0xe0/0xe0 [ 1062.477360][T27188] ? __lock_acquire+0x7d40/0x7d40 [ 1062.482407][T27188] ? mark_lock+0x94/0x320 [ 1062.486768][T27188] should_fail_ex+0x39d/0x4d0 [ 1062.491490][T27188] should_failslab+0x9/0x20 [ 1062.496026][T27188] slab_pre_alloc_hook+0x59/0x310 [ 1062.501076][T27188] ? fib6_get_table+0x39/0x260 [ 1062.505866][T27188] ? fib6_info_alloc+0x30/0xf0 [ 1062.510646][T27188] ? fib6_info_alloc+0x30/0xf0 [ 1062.515450][T27188] __kmem_cache_alloc_node+0x53/0x250 [ 1062.520849][T27188] ? fib6_info_alloc+0x30/0xf0 [ 1062.525632][T27188] __kmalloc+0xa4/0x230 [ 1062.529811][T27188] fib6_info_alloc+0x30/0xf0 [ 1062.534435][T27188] ip6_route_info_create+0x44f/0x1240 [ 1062.539843][T27188] ip6_route_add+0x28/0x160 [ 1062.544369][T27188] inet6_rtm_newroute+0x2ba/0x1c90 [ 1062.549507][T27188] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 1062.555517][T27188] ? __mutex_lock+0x94c/0xcc0 [ 1062.560220][T27188] ? __lock_acquire+0x7d40/0x7d40 [ 1062.565256][T27188] ? do_raw_spin_lock+0x11f/0x2c0 [ 1062.570304][T27188] ? __rwlock_init+0x150/0x150 [ 1062.575087][T27188] ? do_raw_spin_unlock+0x121/0x230 [ 1062.580312][T27188] ? __mutex_lock+0x956/0xcc0 [ 1062.585028][T27188] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1062.590161][T27188] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1062.595289][T27188] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 1062.601209][T27188] rtnetlink_rcv_msg+0x869/0xfa0 [ 1062.606173][T27188] ? perf_trace_buf_alloc+0x290/0x290 [ 1062.611568][T27188] ? rtnetlink_bind+0x80/0x80 [ 1062.616282][T27188] ? mark_lock+0x94/0x320 [ 1062.620635][T27188] ? __lock_acquire+0x1273/0x7d40 [ 1062.625683][T27188] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 1062.631525][T27188] ? mark_lock+0x94/0x320 [ 1062.635903][T27188] ? mark_lock+0x94/0x320 [ 1062.640268][T27188] ? __lock_acquire+0x1273/0x7d40 [ 1062.645324][T27188] ? kmalloc_reserve+0x95/0x240 [ 1062.650198][T27188] ? verify_lock_unused+0x140/0x140 [ 1062.655433][T27188] ? verify_lock_unused+0x140/0x140 [ 1062.660702][T27188] netlink_rcv_skb+0x241/0x4d0 [ 1062.665491][T27188] ? rtnetlink_bind+0x80/0x80 [ 1062.670224][T27188] ? netlink_ack+0x1180/0x1180 [ 1062.675030][T27188] ? __lock_acquire+0x7d40/0x7d40 [ 1062.680089][T27188] ? net_generic+0x1e/0x240 [ 1062.684625][T27188] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.689851][T27188] netlink_unicast+0x751/0x8d0 [ 1062.694665][T27188] netlink_sendmsg+0x8d0/0xbf0 [ 1062.699469][T27188] ? lockdep_hardirqs_on+0x98/0x150 [ 1062.704699][T27188] ? netlink_getsockopt+0x590/0x590 [ 1062.709949][T27188] ? aa_sock_msg_perm+0x94/0x150 [ 1062.714923][T27188] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1062.720257][T27188] ? security_socket_sendmsg+0x80/0xa0 [ 1062.725744][T27188] ? netlink_getsockopt+0x590/0x590 [ 1062.730975][T27188] ____sys_sendmsg+0x5ba/0x960 [ 1062.735771][T27188] ? __asan_memset+0x22/0x40 [ 1062.740389][T27188] ? __sys_sendmsg_sock+0x30/0x30 [ 1062.745435][T27188] ? __import_iovec+0x5f2/0x850 [ 1062.750321][T27188] ? import_iovec+0x73/0xa0 [ 1062.754853][T27188] ___sys_sendmsg+0x2a6/0x360 [ 1062.759555][T27188] ? __sys_sendmsg+0x2a0/0x2a0 [ 1062.764377][T27188] __se_sys_sendmsg+0x1c2/0x2b0 [ 1062.769250][T27188] ? __x64_sys_sendmsg+0x80/0x80 [ 1062.774224][T27188] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1062.780143][T27188] do_syscall_64+0x55/0xa0 [ 1062.784580][T27188] ? clear_bhb_loop+0x40/0x90 [ 1062.789302][T27188] ? clear_bhb_loop+0x40/0x90 [ 1062.794027][T27188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.799957][T27188] RIP: 0033:0x7f73a399c819 [ 1062.804397][T27188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.824039][T27188] RSP: 002b:00007f73a483a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.832493][T27188] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1062.840497][T27188] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1062.848498][T27188] RBP: 00007f73a483a090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.856505][T27188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.864497][T27188] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1062.872508][T27188] [ 1063.038983][T27193] netlink: 'syz.1.5952': attribute type 21 has an invalid length. [ 1063.059916][T27193] IPv6: NLM_F_CREATE should be specified when creating new route [ 1063.080535][T27193] IPv6: Can't replace route, no match found [ 1063.098617][T27195] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1063.174912][T27200] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.5955'. [ 1063.386021][T27207] netlink: 'syz.4.5958': attribute type 27 has an invalid length. [ 1063.436809][T27208] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1063.476956][T27208] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1063.573125][T27210] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1063.611941][T27210] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1063.698990][T27208] .`: renamed from bond0 (while UP) [ 1063.800689][T27212] FAULT_INJECTION: forcing a failure. [ 1063.800689][T27212] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.821109][T27212] CPU: 1 PID: 27212 Comm: syz.4.5960 Not tainted syzkaller #0 [ 1063.828637][T27212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1063.838747][T27212] Call Trace: [ 1063.842062][T27212] [ 1063.845039][T27212] dump_stack_lvl+0x18c/0x250 [ 1063.849773][T27212] ? show_regs_print_info+0x20/0x20 [ 1063.855027][T27212] ? load_image+0x420/0x420 [ 1063.859576][T27212] ? __might_sleep+0xe0/0xe0 [ 1063.864210][T27212] ? __lock_acquire+0x7d40/0x7d40 [ 1063.869273][T27212] ? mark_lock+0x94/0x320 [ 1063.873672][T27212] should_fail_ex+0x39d/0x4d0 [ 1063.878413][T27212] should_failslab+0x9/0x20 [ 1063.882979][T27212] slab_pre_alloc_hook+0x59/0x310 [ 1063.888051][T27212] ? fib6_get_table+0x39/0x260 [ 1063.892889][T27212] ? fib6_info_alloc+0x30/0xf0 [ 1063.897709][T27212] ? fib6_info_alloc+0x30/0xf0 [ 1063.902524][T27212] __kmem_cache_alloc_node+0x53/0x250 [ 1063.907950][T27212] ? fib6_info_alloc+0x30/0xf0 [ 1063.912763][T27212] __kmalloc+0xa4/0x230 [ 1063.916979][T27212] fib6_info_alloc+0x30/0xf0 [ 1063.921618][T27212] ip6_route_info_create+0x44f/0x1240 [ 1063.927062][T27212] ip6_route_add+0x28/0x160 [ 1063.931620][T27212] inet6_rtm_newroute+0x2ba/0x1c90 [ 1063.936785][T27212] ? arch_stack_walk+0x160/0x190 [ 1063.941874][T27212] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 1063.947827][T27212] ? __mutex_trylock_common+0x159/0x260 [ 1063.953424][T27212] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1063.959619][T27212] ? perf_trace_preemptirq_template+0xac/0x330 [ 1063.965846][T27212] ? rcu_is_watching+0x15/0xb0 [ 1063.970671][T27212] ? trace_contention_end+0x39/0xe0 [ 1063.975925][T27212] ? __mutex_lock+0x315/0xcc0 [ 1063.980667][T27212] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1063.985822][T27212] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1063.990974][T27212] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 1063.996925][T27212] rtnetlink_rcv_msg+0x869/0xfa0 [ 1064.001917][T27212] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.007169][T27212] ? rtnetlink_bind+0x80/0x80 [ 1064.011896][T27212] ? perf_trace_preemptirq_template+0xac/0x330 [ 1064.018118][T27212] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1064.024176][T27212] ? lock_chain_count+0x20/0x20 [ 1064.029076][T27212] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1064.034502][T27212] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.039766][T27212] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1064.045188][T27212] ? _local_bh_enable+0xa0/0xa0 [ 1064.050089][T27212] ? __dev_queue_xmit+0x265/0x3660 [ 1064.055249][T27212] ? __dev_queue_xmit+0x265/0x3660 [ 1064.060406][T27212] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1064.065756][T27212] ? __dev_queue_xmit+0x265/0x3660 [ 1064.070948][T27212] ? ref_tracker_free+0x690/0x840 [ 1064.076029][T27212] netlink_rcv_skb+0x241/0x4d0 [ 1064.080837][T27212] ? rtnetlink_bind+0x80/0x80 [ 1064.085556][T27212] ? netlink_ack+0x1180/0x1180 [ 1064.090389][T27212] ? __lock_acquire+0x7d40/0x7d40 [ 1064.095465][T27212] ? netlink_deliver_tap+0x2e/0x1b0 [ 1064.100729][T27212] netlink_unicast+0x751/0x8d0 [ 1064.105552][T27212] netlink_sendmsg+0x8d0/0xbf0 [ 1064.110370][T27212] ? netlink_getsockopt+0x590/0x590 [ 1064.115615][T27212] ? aa_sock_msg_perm+0x94/0x150 [ 1064.120628][T27212] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1064.125957][T27212] ? security_socket_sendmsg+0x80/0xa0 [ 1064.131457][T27212] ? netlink_getsockopt+0x590/0x590 [ 1064.136701][T27212] ____sys_sendmsg+0x5ba/0x960 [ 1064.141509][T27212] ? __asan_memset+0x22/0x40 [ 1064.146143][T27212] ? __sys_sendmsg_sock+0x30/0x30 [ 1064.151208][T27212] ? __import_iovec+0x5f2/0x850 [ 1064.156110][T27212] ? import_iovec+0x73/0xa0 [ 1064.160684][T27212] ___sys_sendmsg+0x2a6/0x360 [ 1064.165403][T27212] ? get_pid_task+0x20/0x1e0 [ 1064.170045][T27212] ? __sys_sendmsg+0x2a0/0x2a0 [ 1064.174908][T27212] __se_sys_sendmsg+0x1c2/0x2b0 [ 1064.179805][T27212] ? __x64_sys_sendmsg+0x80/0x80 [ 1064.184794][T27212] ? lockdep_hardirqs_on+0x98/0x150 [ 1064.190039][T27212] do_syscall_64+0x55/0xa0 [ 1064.194487][T27212] ? clear_bhb_loop+0x40/0x90 [ 1064.199183][T27212] ? clear_bhb_loop+0x40/0x90 [ 1064.203889][T27212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.209816][T27212] RIP: 0033:0x7f7d4539c819 [ 1064.214250][T27212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.233965][T27212] RSP: 002b:00007f7d462c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.242453][T27212] RAX: ffffffffffffffda RBX: 00007f7d45615fa0 RCX: 00007f7d4539c819 [ 1064.250472][T27212] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1064.258565][T27212] RBP: 00007f7d462c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.266582][T27212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.274587][T27212] R13: 00007f7d45616038 R14: 00007f7d45615fa0 R15: 00007ffed695f738 [ 1064.282591][T27212] [ 1064.469421][T27221] IPv6: Can't replace route, no match found [ 1064.580154][T27228] IPv6: Can't replace route, no match found [ 1064.949053][T27243] IPv6: Can't replace route, no match found [ 1065.071728][T27246] IPv6: Can't replace route, no match found [ 1065.369167][T27248] __nla_validate_parse: 1 callbacks suppressed [ 1065.369206][T27248] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1065.398926][T27248] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1065.425013][T27253] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1065.898132][T27259] IPv6: NLM_F_CREATE should be specified when creating new route [ 1065.955213][T27259] IPv6: Can't replace route, no match found [ 1066.146433][ T5084] Bluetooth: hci1: ISO packet for unknown connection handle 14 [ 1066.368560][T27268] FAULT_INJECTION: forcing a failure. [ 1066.368560][T27268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.402679][T27268] CPU: 0 PID: 27268 Comm: syz.0.5982 Not tainted syzkaller #0 [ 1066.410263][T27268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1066.420361][T27268] Call Trace: [ 1066.423685][T27268] [ 1066.426663][T27268] dump_stack_lvl+0x18c/0x250 [ 1066.431402][T27268] ? show_regs_print_info+0x20/0x20 [ 1066.436672][T27268] ? load_image+0x420/0x420 [ 1066.441230][T27268] ? __might_fault+0xaa/0x120 [ 1066.445957][T27268] ? __lock_acquire+0x7d40/0x7d40 [ 1066.451031][T27268] should_fail_ex+0x39d/0x4d0 [ 1066.455767][T27268] _copy_from_user+0x2f/0xe0 [ 1066.460417][T27268] __sys_bpf+0x23e/0x890 [ 1066.464728][T27268] ? bpf_link_show_fdinfo+0x390/0x390 [ 1066.470169][T27268] ? lock_chain_count+0x20/0x20 [ 1066.475074][T27268] __x64_sys_bpf+0x7c/0x90 [ 1066.479543][T27268] do_syscall_64+0x55/0xa0 [ 1066.484026][T27268] ? clear_bhb_loop+0x40/0x90 [ 1066.488754][T27268] ? clear_bhb_loop+0x40/0x90 [ 1066.493492][T27268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1066.499436][T27268] RIP: 0033:0x7faa1af9c819 [ 1066.503900][T27268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.523559][T27268] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.532011][T27268] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1066.540009][T27268] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1066.548008][T27268] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.556003][T27268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.564001][T27268] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1066.572014][T27268] [ 1066.715407][T27274] validate_nla: 8 callbacks suppressed [ 1066.715445][T27274] netlink: 'syz.3.5984': attribute type 21 has an invalid length. [ 1066.795226][T27274] IPv6: Can't replace route, no match found [ 1066.999988][T27278] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1067.158893][T27282] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.5987'. [ 1067.581130][T27294] netlink: 'syz.4.5990': attribute type 21 has an invalid length. [ 1067.592695][T27294] IPv6: Can't replace route, no match found [ 1067.665072][T27297] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5991'. [ 1067.769160][T27299] netlink: 'syz.3.5992': attribute type 1 has an invalid length. [ 1067.910937][T27309] FAULT_INJECTION: forcing a failure. [ 1067.910937][T27309] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.936836][T27309] CPU: 1 PID: 27309 Comm: syz.3.5996 Not tainted syzkaller #0 [ 1067.944443][T27309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1067.954531][T27309] Call Trace: [ 1067.957848][T27309] [ 1067.960815][T27309] dump_stack_lvl+0x18c/0x250 [ 1067.965548][T27309] ? show_regs_print_info+0x20/0x20 [ 1067.970792][T27309] ? load_image+0x420/0x420 [ 1067.975344][T27309] ? __lock_acquire+0x7d40/0x7d40 [ 1067.980419][T27309] should_fail_ex+0x39d/0x4d0 [ 1067.985145][T27309] should_failslab+0x9/0x20 [ 1067.989688][T27309] slab_pre_alloc_hook+0x59/0x310 [ 1067.994751][T27309] ? bpf_test_init+0x9f/0x140 [ 1067.999506][T27309] ? bpf_test_init+0x9f/0x140 [ 1068.004219][T27309] __kmem_cache_alloc_node+0x53/0x250 [ 1068.009642][T27309] ? bpf_test_init+0x9f/0x140 [ 1068.014353][T27309] __kmalloc+0xa4/0x230 [ 1068.018547][T27309] bpf_test_init+0x9f/0x140 [ 1068.023080][T27309] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1068.028491][T27309] ? dev_put+0x80/0x80 [ 1068.032612][T27309] ? dev_put+0x80/0x80 [ 1068.036711][T27309] bpf_prog_test_run+0x321/0x390 [ 1068.041671][T27309] __sys_bpf+0x49d/0x890 [ 1068.045937][T27309] ? bpf_link_show_fdinfo+0x390/0x390 [ 1068.051350][T27309] ? lock_chain_count+0x20/0x20 [ 1068.056359][T27309] __x64_sys_bpf+0x7c/0x90 [ 1068.060806][T27309] do_syscall_64+0x55/0xa0 [ 1068.065252][T27309] ? clear_bhb_loop+0x40/0x90 [ 1068.069961][T27309] ? clear_bhb_loop+0x40/0x90 [ 1068.074673][T27309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.080587][T27309] RIP: 0033:0x7ff075d9c819 [ 1068.085026][T27309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.104680][T27309] RSP: 002b:00007ff073ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1068.113119][T27309] RAX: ffffffffffffffda RBX: 00007ff076015fa0 RCX: 00007ff075d9c819 [ 1068.121106][T27309] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1068.129101][T27309] RBP: 00007ff073ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.137087][T27309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.145082][T27309] R13: 00007ff076016038 R14: 00007ff076015fa0 R15: 00007fffa4db9c88 [ 1068.153100][T27309] [ 1068.201778][T27313] netlink: 'syz.4.5997': attribute type 21 has an invalid length. [ 1068.210538][T27313] IPv6: Can't replace route, no match found [ 1068.220268][T27313] FAULT_INJECTION: forcing a failure. [ 1068.220268][T27313] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.242720][T27313] CPU: 1 PID: 27313 Comm: syz.4.5997 Not tainted syzkaller #0 [ 1068.250250][T27313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1068.260345][T27313] Call Trace: [ 1068.263660][T27313] [ 1068.266621][T27313] dump_stack_lvl+0x18c/0x250 [ 1068.271359][T27313] ? show_regs_print_info+0x20/0x20 [ 1068.276602][T27313] ? load_image+0x420/0x420 [ 1068.281154][T27313] ? verify_lock_unused+0x140/0x140 [ 1068.286403][T27313] should_fail_ex+0x39d/0x4d0 [ 1068.291147][T27313] should_failslab+0x9/0x20 [ 1068.295708][T27313] slab_pre_alloc_hook+0x59/0x310 [ 1068.300793][T27313] kmem_cache_alloc+0x5a/0x2d0 [ 1068.305615][T27313] ? skb_clone+0x1eb/0x370 [ 1068.310074][T27313] skb_clone+0x1eb/0x370 [ 1068.314358][T27313] __netlink_deliver_tap+0x41c/0x830 [ 1068.319703][T27313] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.324942][T27313] netlink_deliver_tap+0x19c/0x1b0 [ 1068.330092][T27313] netlink_sendskb+0x68/0x130 [ 1068.334819][T27313] netlink_ack+0xce1/0x1180 [ 1068.339396][T27313] ? netlink_dump+0xe50/0xe50 [ 1068.344105][T27313] ? ref_tracker_free+0x690/0x840 [ 1068.349239][T27313] ? exc_int3+0xe/0x70 [ 1068.353331][T27313] netlink_rcv_skb+0x2c5/0x4d0 [ 1068.358150][T27313] ? rtnetlink_bind+0x80/0x80 [ 1068.362860][T27313] ? netlink_ack+0x1180/0x1180 [ 1068.367678][T27313] ? __lock_acquire+0x7d40/0x7d40 [ 1068.372738][T27313] ? netlink_deliver_tap+0x2e/0x1b0 [ 1068.377969][T27313] netlink_unicast+0x751/0x8d0 [ 1068.382780][T27313] netlink_sendmsg+0x8d0/0xbf0 [ 1068.387608][T27313] ? netlink_getsockopt+0x590/0x590 [ 1068.392857][T27313] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1068.398167][T27313] ? security_socket_sendmsg+0x80/0xa0 [ 1068.403656][T27313] ? netlink_getsockopt+0x590/0x590 [ 1068.408873][T27313] ____sys_sendmsg+0x5ba/0x960 [ 1068.413655][T27313] ? __asan_memset+0x22/0x40 [ 1068.418265][T27313] ? __sys_sendmsg_sock+0x30/0x30 [ 1068.423321][T27313] ? __import_iovec+0x5f2/0x850 [ 1068.428201][T27313] ? import_iovec+0x73/0xa0 [ 1068.432727][T27313] ___sys_sendmsg+0x2a6/0x360 [ 1068.437418][T27313] ? __sys_sendmsg+0x2a0/0x2a0 [ 1068.442233][T27313] ? __lock_acquire+0x7d40/0x7d40 [ 1068.447304][T27313] __se_sys_sendmsg+0x1c2/0x2b0 [ 1068.452173][T27313] ? __x64_sys_sendmsg+0x80/0x80 [ 1068.457142][T27313] ? lockdep_hardirqs_on+0x98/0x150 [ 1068.462365][T27313] do_syscall_64+0x55/0xa0 [ 1068.466797][T27313] ? clear_bhb_loop+0x40/0x90 [ 1068.471521][T27313] ? clear_bhb_loop+0x40/0x90 [ 1068.476223][T27313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.482135][T27313] RIP: 0033:0x7f7d4539c819 [ 1068.486579][T27313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.506207][T27313] RSP: 002b:00007f7d462c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.514644][T27313] RAX: ffffffffffffffda RBX: 00007f7d45615fa0 RCX: 00007f7d4539c819 [ 1068.522640][T27313] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1068.530618][T27313] RBP: 00007f7d462c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.538693][T27313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.546697][T27313] R13: 00007f7d45616038 R14: 00007f7d45615fa0 R15: 00007ffed695f738 [ 1068.554713][T27313] [ 1068.639362][T27317] C: renamed from team_slave_0 (while UP) [ 1068.710181][T27317] netlink: 'syz.3.5998': attribute type 3 has an invalid length. [ 1068.719361][T27317] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1068.739328][T27317] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1068.768569][T27318] netlink: 'syz.1.5999': attribute type 21 has an invalid length. [ 1068.786045][T27318] IPv6: Can't replace route, no match found [ 1068.815875][T27321] netlink: 'syz.3.5998': attribute type 10 has an invalid length. [ 1068.835107][T27326] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6001'. [ 1068.844684][T27321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1068.856089][T27326] netlink: 'syz.4.6001': attribute type 3 has an invalid length. [ 1068.864948][T27321] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1068.875392][T27326] netlink: 'syz.4.6001': attribute type 4 has an invalid length. [ 1068.885582][T27326] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.6001'. [ 1068.895437][T27321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.975522][T27330] netlink: 'syz.1.6002': attribute type 21 has an invalid length. [ 1068.987643][T27330] IPv6: Can't replace route, no match found [ 1069.584929][T27357] IPv6: Can't replace route, no match found [ 1069.610390][T27357] FAULT_INJECTION: forcing a failure. [ 1069.610390][T27357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.650238][T27357] CPU: 0 PID: 27357 Comm: syz.0.6011 Not tainted syzkaller #0 [ 1069.657796][T27357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1069.667897][T27357] Call Trace: [ 1069.671208][T27357] [ 1069.674164][T27357] dump_stack_lvl+0x18c/0x250 [ 1069.678906][T27357] ? show_regs_print_info+0x20/0x20 [ 1069.684235][T27357] ? load_image+0x420/0x420 [ 1069.688805][T27357] ? __lock_acquire+0x7d40/0x7d40 [ 1069.693896][T27357] ? snprintf+0xe9/0x140 [ 1069.698221][T27357] should_fail_ex+0x39d/0x4d0 [ 1069.702947][T27357] _copy_to_user+0x2f/0xa0 [ 1069.707394][T27357] simple_read_from_buffer+0xe7/0x150 [ 1069.712823][T27357] proc_fail_nth_read+0x1e8/0x260 [ 1069.717910][T27357] ? proc_fault_inject_write+0x360/0x360 [ 1069.723595][T27357] ? fsnotify_perm+0x271/0x5e0 [ 1069.728424][T27357] ? proc_fault_inject_write+0x360/0x360 [ 1069.734113][T27357] vfs_read+0x28b/0x970 [ 1069.738317][T27357] ? kernel_read+0x1e0/0x1e0 [ 1069.742957][T27357] ? __fget_files+0x28/0x4b0 [ 1069.747577][T27357] ? __fget_files+0x28/0x4b0 [ 1069.752244][T27357] ? __fget_files+0x43d/0x4b0 [ 1069.756972][T27357] ? __fdget_pos+0x2a3/0x330 [ 1069.761598][T27357] ? ksys_read+0x75/0x260 [ 1069.765970][T27357] ksys_read+0x150/0x260 [ 1069.770283][T27357] ? vfs_write+0x990/0x990 [ 1069.774758][T27357] ? lockdep_hardirqs_on+0x98/0x150 [ 1069.779995][T27357] do_syscall_64+0x55/0xa0 [ 1069.784460][T27357] ? clear_bhb_loop+0x40/0x90 [ 1069.789199][T27357] ? clear_bhb_loop+0x40/0x90 [ 1069.793919][T27357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.799855][T27357] RIP: 0033:0x7faa1af5d04e [ 1069.804318][T27357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1069.823987][T27357] RSP: 002b:00007faa1bdf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1069.832529][T27357] RAX: ffffffffffffffda RBX: 00007faa1bdfa6c0 RCX: 00007faa1af5d04e [ 1069.840540][T27357] RDX: 000000000000000f RSI: 00007faa1bdfa0a0 RDI: 0000000000000007 [ 1069.848557][T27357] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.856568][T27357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.864562][T27357] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1069.872583][T27357] [ 1069.898215][T27361] IPv6: Can't replace route, no match found [ 1069.913249][T27363] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 1070.644708][T27383] FAULT_INJECTION: forcing a failure. [ 1070.644708][T27383] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.672355][T27383] CPU: 1 PID: 27383 Comm: syz.0.6018 Not tainted syzkaller #0 [ 1070.679903][T27383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1070.690007][T27383] Call Trace: [ 1070.693344][T27383] [ 1070.696322][T27383] dump_stack_lvl+0x18c/0x250 [ 1070.701061][T27383] ? show_regs_print_info+0x20/0x20 [ 1070.706318][T27383] ? load_image+0x420/0x420 [ 1070.710917][T27383] ? __might_sleep+0xe0/0xe0 [ 1070.715542][T27383] ? __lock_acquire+0x7d40/0x7d40 [ 1070.720618][T27383] should_fail_ex+0x39d/0x4d0 [ 1070.725353][T27383] should_failslab+0x9/0x20 [ 1070.729903][T27383] slab_pre_alloc_hook+0x59/0x310 [ 1070.734981][T27383] ? __lock_acquire+0x7d40/0x7d40 [ 1070.740048][T27383] ? kvmalloc_node+0x70/0x180 [ 1070.744755][T27383] ? kvmalloc_node+0x70/0x180 [ 1070.749474][T27383] __kmem_cache_alloc_node+0x53/0x250 [ 1070.754887][T27383] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1070.761262][T27383] ? kvmalloc_node+0x70/0x180 [ 1070.766005][T27383] __kmalloc_node+0xa4/0x230 [ 1070.770640][T27383] kvmalloc_node+0x70/0x180 [ 1070.775178][T27383] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 1070.780590][T27383] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1070.785899][T27383] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1070.791208][T27383] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1070.797129][T27383] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1070.802470][T27383] ? xdp_convert_md_to_buff+0x330/0x330 [ 1070.808084][T27383] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1070.814374][T27383] ? _copy_from_user+0xa5/0xe0 [ 1070.819177][T27383] ? bpf_test_init+0x119/0x140 [ 1070.823976][T27383] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1070.829466][T27383] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1070.834879][T27383] ? dev_put+0x80/0x80 [ 1070.839020][T27383] ? dev_put+0x80/0x80 [ 1070.843123][T27383] bpf_prog_test_run+0x321/0x390 [ 1070.848098][T27383] __sys_bpf+0x49d/0x890 [ 1070.852410][T27383] ? bpf_link_show_fdinfo+0x390/0x390 [ 1070.857816][T27383] ? lock_chain_count+0x20/0x20 [ 1070.862697][T27383] __x64_sys_bpf+0x7c/0x90 [ 1070.867145][T27383] do_syscall_64+0x55/0xa0 [ 1070.871595][T27383] ? clear_bhb_loop+0x40/0x90 [ 1070.876318][T27383] ? clear_bhb_loop+0x40/0x90 [ 1070.881024][T27383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1070.886948][T27383] RIP: 0033:0x7faa1af9c819 [ 1070.891381][T27383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.911010][T27383] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1070.919467][T27383] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1070.927457][T27383] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1070.935467][T27383] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.943468][T27383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.951457][T27383] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1070.959555][T27383] [ 1071.289539][T27393] IPv6: Can't replace route, no match found [ 1072.511738][T27414] FAULT_INJECTION: forcing a failure. [ 1072.511738][T27414] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.550059][T27414] CPU: 1 PID: 27414 Comm: syz.1.6029 Not tainted syzkaller #0 [ 1072.557622][T27414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1072.567719][T27414] Call Trace: [ 1072.571043][T27414] [ 1072.574013][T27414] dump_stack_lvl+0x18c/0x250 [ 1072.578741][T27414] ? show_regs_print_info+0x20/0x20 [ 1072.584016][T27414] ? load_image+0x420/0x420 [ 1072.588570][T27414] ? __might_sleep+0xe0/0xe0 [ 1072.593201][T27414] ? __lock_acquire+0x7d40/0x7d40 [ 1072.598254][T27414] should_fail_ex+0x39d/0x4d0 [ 1072.602962][T27414] should_failslab+0x9/0x20 [ 1072.607509][T27414] slab_pre_alloc_hook+0x59/0x310 [ 1072.612573][T27414] ? kvmalloc_node+0x70/0x180 [ 1072.617275][T27414] ? kvmalloc_node+0x70/0x180 [ 1072.621972][T27414] __kmem_cache_alloc_node+0x53/0x250 [ 1072.627386][T27414] ? kvmalloc_node+0x70/0x180 [ 1072.632089][T27414] __kmalloc_node+0xa4/0x230 [ 1072.636798][T27414] kvmalloc_node+0x70/0x180 [ 1072.641372][T27414] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 1072.646790][T27414] ? 0xffffffffa00044c0 [ 1072.650969][T27414] ? 0xffffffffa00044c0 [ 1072.655171][T27414] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1072.661096][T27414] ? 0xffffffffa00044c0 [ 1072.665273][T27414] ? xdp_convert_md_to_buff+0x330/0x330 [ 1072.670868][T27414] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1072.677146][T27414] ? _copy_from_user+0xa5/0xe0 [ 1072.681933][T27414] ? bpf_test_init+0x119/0x140 [ 1072.686712][T27414] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1072.692192][T27414] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1072.697629][T27414] ? dev_put+0x80/0x80 [ 1072.701734][T27414] ? dev_put+0x80/0x80 [ 1072.705828][T27414] bpf_prog_test_run+0x321/0x390 [ 1072.710803][T27414] __sys_bpf+0x49d/0x890 [ 1072.715155][T27414] ? bpf_link_show_fdinfo+0x390/0x390 [ 1072.720554][T27414] ? lock_chain_count+0x20/0x20 [ 1072.725425][T27414] __x64_sys_bpf+0x7c/0x90 [ 1072.729878][T27414] do_syscall_64+0x55/0xa0 [ 1072.734307][T27414] ? clear_bhb_loop+0x40/0x90 [ 1072.739004][T27414] ? clear_bhb_loop+0x40/0x90 [ 1072.743712][T27414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1072.749620][T27414] RIP: 0033:0x7f73a399c819 [ 1072.754052][T27414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.773670][T27414] RSP: 002b:00007f73a4819028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1072.782116][T27414] RAX: ffffffffffffffda RBX: 00007f73a3c16090 RCX: 00007f73a399c819 [ 1072.790116][T27414] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1072.798102][T27414] RBP: 00007f73a4819090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.806100][T27414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.814091][T27414] R13: 00007f73a3c16128 R14: 00007f73a3c16090 R15: 00007ffeca5b0388 [ 1072.822096][T27414] [ 1075.200587][T27427] validate_nla: 3 callbacks suppressed [ 1075.200633][T27427] netlink: 'syz.0.6033': attribute type 21 has an invalid length. [ 1075.258258][T27427] IPv6: Can't replace route, no match found [ 1075.414206][T27432] netlink: 'syz.1.6035': attribute type 10 has an invalid length. [ 1075.512141][T27432] team0: Port device geneve1 added [ 1075.614199][T27437] netpci0: tun_chr_ioctl cmd 2147767519 [ 1075.621181][T27437] __nla_validate_parse: 2 callbacks suppressed [ 1075.621196][T27437] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1075.741919][T27432] netlink: 'syz.1.6035': attribute type 9 has an invalid length. [ 1075.767273][T27432] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1075.969570][T27433] netlink: 'syz.1.6035': attribute type 9 has an invalid length. [ 1075.999744][T27433] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6035'. [ 1076.159400][T27444] FAULT_INJECTION: forcing a failure. [ 1076.159400][T27444] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.212512][T27444] CPU: 0 PID: 27444 Comm: syz.0.6039 Not tainted syzkaller #0 [ 1076.220047][T27444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1076.230148][T27444] Call Trace: [ 1076.233456][T27444] [ 1076.236423][T27444] dump_stack_lvl+0x18c/0x250 [ 1076.241133][T27444] ? show_regs_print_info+0x20/0x20 [ 1076.246362][T27444] ? load_image+0x420/0x420 [ 1076.250945][T27444] ? __might_sleep+0xe0/0xe0 [ 1076.255603][T27444] ? __lock_acquire+0x7d40/0x7d40 [ 1076.260675][T27444] should_fail_ex+0x39d/0x4d0 [ 1076.265393][T27444] should_failslab+0x9/0x20 [ 1076.269924][T27444] slab_pre_alloc_hook+0x59/0x310 [ 1076.274985][T27444] ? page_pool_create+0x71/0x5c0 [ 1076.279954][T27444] __kmem_cache_alloc_node+0x53/0x250 [ 1076.285361][T27444] ? page_pool_create+0x71/0x5c0 [ 1076.290340][T27444] kmalloc_node_trace+0x26/0xe0 [ 1076.295225][T27444] page_pool_create+0x71/0x5c0 [ 1076.300018][T27444] bpf_test_run_xdp_live+0x203/0x1b20 [ 1076.305431][T27444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1076.310747][T27444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1076.316077][T27444] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1076.321999][T27444] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1076.327313][T27444] ? xdp_convert_md_to_buff+0x330/0x330 [ 1076.332925][T27444] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1076.339207][T27444] ? _copy_from_user+0xa5/0xe0 [ 1076.344022][T27444] ? bpf_test_init+0x119/0x140 [ 1076.348822][T27444] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1076.354312][T27444] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1076.359728][T27444] ? dev_put+0x80/0x80 [ 1076.363851][T27444] ? dev_put+0x80/0x80 [ 1076.367956][T27444] bpf_prog_test_run+0x321/0x390 [ 1076.372950][T27444] __sys_bpf+0x49d/0x890 [ 1076.377224][T27444] ? bpf_link_show_fdinfo+0x390/0x390 [ 1076.382643][T27444] ? lock_chain_count+0x20/0x20 [ 1076.387529][T27444] __x64_sys_bpf+0x7c/0x90 [ 1076.391970][T27444] do_syscall_64+0x55/0xa0 [ 1076.396420][T27444] ? clear_bhb_loop+0x40/0x90 [ 1076.401128][T27444] ? clear_bhb_loop+0x40/0x90 [ 1076.405823][T27444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.411734][T27444] RIP: 0033:0x7faa1af9c819 [ 1076.416173][T27444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.435799][T27444] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1076.444231][T27444] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1076.452232][T27444] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1076.460225][T27444] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.468225][T27444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.476224][T27444] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1076.484238][T27444] [ 1076.808210][T27458] netlink: 'syz.1.6044': attribute type 21 has an invalid length. [ 1076.848339][T27458] IPv6: Can't replace route, no match found [ 1076.915499][T27464] tap0: tun_chr_ioctl cmd 1074025680 [ 1077.053548][T27471] : renamed from veth0_to_bond (while UP) [ 1077.114187][T27474] netlink: 'syz.0.6048': attribute type 21 has an invalid length. [ 1077.127955][T27474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1077.248063][T27484] FAULT_INJECTION: forcing a failure. [ 1077.248063][T27484] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.262684][T27483] IPv6: Can't replace route, no match found [ 1077.269126][T27484] CPU: 0 PID: 27484 Comm: syz.0.6051 Not tainted syzkaller #0 [ 1077.276635][T27484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1077.286730][T27484] Call Trace: [ 1077.290043][T27484] [ 1077.293017][T27484] dump_stack_lvl+0x18c/0x250 [ 1077.297758][T27484] ? show_regs_print_info+0x20/0x20 [ 1077.303019][T27484] ? load_image+0x420/0x420 [ 1077.307589][T27484] ? __might_sleep+0xe0/0xe0 [ 1077.312237][T27484] ? __lock_acquire+0x7d40/0x7d40 [ 1077.317313][T27484] should_fail_ex+0x39d/0x4d0 [ 1077.322058][T27484] should_failslab+0x9/0x20 [ 1077.326614][T27484] slab_pre_alloc_hook+0x59/0x310 [ 1077.331721][T27484] ? kvmalloc_node+0x70/0x180 [ 1077.336458][T27484] ? kvmalloc_node+0x70/0x180 [ 1077.341187][T27484] __kmem_cache_alloc_node+0x53/0x250 [ 1077.346622][T27484] ? kvmalloc_node+0x70/0x180 [ 1077.351358][T27484] __kmalloc_node+0xa4/0x230 [ 1077.355977][T27484] kvmalloc_node+0x70/0x180 [ 1077.360505][T27484] page_pool_create+0x1eb/0x5c0 [ 1077.365397][T27484] bpf_test_run_xdp_live+0x203/0x1b20 [ 1077.370800][T27484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1077.376110][T27484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1077.381429][T27484] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1077.387348][T27484] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1077.392658][T27484] ? xdp_convert_md_to_buff+0x330/0x330 [ 1077.398260][T27484] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1077.404530][T27484] ? _copy_from_user+0xa5/0xe0 [ 1077.409335][T27484] ? bpf_test_init+0x119/0x140 [ 1077.414119][T27484] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1077.419605][T27484] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1077.425029][T27484] ? dev_put+0x80/0x80 [ 1077.429143][T27484] ? dev_put+0x80/0x80 [ 1077.433234][T27484] bpf_prog_test_run+0x321/0x390 [ 1077.438204][T27484] __sys_bpf+0x49d/0x890 [ 1077.442475][T27484] ? bpf_link_show_fdinfo+0x390/0x390 [ 1077.447889][T27484] ? lock_chain_count+0x20/0x20 [ 1077.452782][T27484] __x64_sys_bpf+0x7c/0x90 [ 1077.457221][T27484] do_syscall_64+0x55/0xa0 [ 1077.461659][T27484] ? clear_bhb_loop+0x40/0x90 [ 1077.466357][T27484] ? clear_bhb_loop+0x40/0x90 [ 1077.471055][T27484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1077.476973][T27484] RIP: 0033:0x7faa1af9c819 [ 1077.481409][T27484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.501046][T27484] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1077.509485][T27484] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1077.517486][T27484] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1077.525475][T27484] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.533490][T27484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.541481][T27484] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1077.549482][T27484] [ 1077.573884][ T9] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1077.593239][T27484] page_pool_create() gave up with errno -12 [ 1077.947859][T27498] veth1_to_bond: entered promiscuous mode [ 1077.975923][T27498] netlink: 'syz.3.6056': attribute type 21 has an invalid length. [ 1077.998986][T27498] IPv6: Can't replace route, no match found [ 1078.258188][T27508] netlink: 826 bytes leftover after parsing attributes in process `syz.3.6061'. [ 1078.364242][T27509] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1078.395389][T27511] FAULT_INJECTION: forcing a failure. [ 1078.395389][T27511] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.432490][T27511] CPU: 0 PID: 27511 Comm: syz.4.6062 Not tainted syzkaller #0 [ 1078.440114][T27511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1078.450223][T27511] Call Trace: [ 1078.453552][T27511] [ 1078.456545][T27511] dump_stack_lvl+0x18c/0x250 [ 1078.461291][T27511] ? show_regs_print_info+0x20/0x20 [ 1078.466544][T27511] ? load_image+0x420/0x420 [ 1078.471099][T27511] ? __might_sleep+0xe0/0xe0 [ 1078.471126][T27511] ? __lock_acquire+0x7d40/0x7d40 [ 1078.471153][T27511] should_fail_ex+0x39d/0x4d0 [ 1078.471187][T27511] should_failslab+0x9/0x20 [ 1078.471214][T27511] slab_pre_alloc_hook+0x59/0x310 [ 1078.495136][T27511] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1078.500479][T27511] __kmem_cache_alloc_node+0x53/0x250 [ 1078.505912][T27511] ? __asan_memset+0x22/0x40 [ 1078.510574][T27511] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1078.515919][T27511] kmalloc_trace+0x2a/0xe0 [ 1078.520374][T27511] __xdp_reg_mem_model+0x1e4/0x5c0 [ 1078.525529][T27511] ? kvmalloc_node+0x70/0x180 [ 1078.530270][T27511] ? kvmalloc_node+0x70/0x180 [ 1078.535007][T27511] ? xdp_reg_mem_model+0x40/0x40 [ 1078.540006][T27511] xdp_reg_mem_model+0x22/0x40 [ 1078.544818][T27511] bpf_test_run_xdp_live+0x262/0x1b20 [ 1078.550260][T27511] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1078.555586][T27511] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1078.560901][T27511] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1078.566820][T27511] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1078.572149][T27511] ? xdp_convert_md_to_buff+0x330/0x330 [ 1078.577752][T27511] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1078.584020][T27511] ? _copy_from_user+0xa5/0xe0 [ 1078.588845][T27511] ? bpf_test_init+0x119/0x140 [ 1078.593634][T27511] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1078.599123][T27511] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1078.604531][T27511] ? dev_put+0x80/0x80 [ 1078.608639][T27511] ? dev_put+0x80/0x80 [ 1078.612734][T27511] bpf_prog_test_run+0x321/0x390 [ 1078.617704][T27511] __sys_bpf+0x49d/0x890 [ 1078.621970][T27511] ? bpf_link_show_fdinfo+0x390/0x390 [ 1078.627369][T27511] ? lock_chain_count+0x20/0x20 [ 1078.632261][T27511] __x64_sys_bpf+0x7c/0x90 [ 1078.636693][T27511] do_syscall_64+0x55/0xa0 [ 1078.641139][T27511] ? clear_bhb_loop+0x40/0x90 [ 1078.645841][T27511] ? clear_bhb_loop+0x40/0x90 [ 1078.650548][T27511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.656471][T27511] RIP: 0033:0x7f7d4539c819 [ 1078.660906][T27511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.680530][T27511] RSP: 002b:00007f7d462c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1078.689006][T27511] RAX: ffffffffffffffda RBX: 00007f7d45615fa0 RCX: 00007f7d4539c819 [ 1078.697003][T27511] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1078.704988][T27511] RBP: 00007f7d462c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.712983][T27511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.720973][T27511] R13: 00007f7d45616038 R14: 00007f7d45615fa0 R15: 00007ffed695f738 [ 1078.728980][T27511] [ 1078.829469][T27513] netlink: 'syz.3.6063': attribute type 21 has an invalid length. [ 1078.840239][T27513] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1078.919344][T27513] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1079.153006][T27520] netlink: 'syz.0.6066': attribute type 22 has an invalid length. [ 1079.300067][T27526] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1079.325287][T27526] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1079.386534][T27529] netlink: 'syz.3.6069': attribute type 21 has an invalid length. [ 1079.400809][T27529] IPv6: Can't replace route, no match found [ 1079.491333][T27533] netlink: 5454 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1080.618819][T27573] validate_nla: 2 callbacks suppressed [ 1080.618852][T27573] netlink: 'syz.3.6081': attribute type 21 has an invalid length. [ 1080.635310][T27573] IPv6: Can't replace route, no match found [ 1080.656261][T27574] FAULT_INJECTION: forcing a failure. [ 1080.656261][T27574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.673592][T27574] CPU: 1 PID: 27574 Comm: syz.0.6082 Not tainted syzkaller #0 [ 1080.681125][T27574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1080.691269][T27574] Call Trace: [ 1080.694591][T27574] [ 1080.697558][T27574] dump_stack_lvl+0x18c/0x250 [ 1080.702358][T27574] ? show_regs_print_info+0x20/0x20 [ 1080.707643][T27574] ? load_image+0x420/0x420 [ 1080.712206][T27574] ? __might_fault+0xaa/0x120 [ 1080.716929][T27574] ? __lock_acquire+0x7d40/0x7d40 [ 1080.721975][T27574] should_fail_ex+0x39d/0x4d0 [ 1080.726679][T27574] _copy_to_user+0x2f/0xa0 [ 1080.731117][T27574] bpf_test_finish+0x19f/0x650 [ 1080.735910][T27574] ? convert_skb_to___skb+0x420/0x420 [ 1080.741327][T27574] ? _copy_from_user+0xa5/0xe0 [ 1080.746122][T27574] ? bpf_test_init+0x119/0x140 [ 1080.750894][T27574] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 1080.756302][T27574] ? dev_put+0x80/0x80 [ 1080.760433][T27574] ? dev_put+0x80/0x80 [ 1080.764530][T27574] bpf_prog_test_run+0x321/0x390 [ 1080.769536][T27574] __sys_bpf+0x49d/0x890 [ 1080.773819][T27574] ? bpf_link_show_fdinfo+0x390/0x390 [ 1080.779255][T27574] ? lock_chain_count+0x20/0x20 [ 1080.784163][T27574] __x64_sys_bpf+0x7c/0x90 [ 1080.788636][T27574] do_syscall_64+0x55/0xa0 [ 1080.793107][T27574] ? clear_bhb_loop+0x40/0x90 [ 1080.797837][T27574] ? clear_bhb_loop+0x40/0x90 [ 1080.802575][T27574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.808538][T27574] RIP: 0033:0x7faa1af9c819 [ 1080.812995][T27574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.832760][T27574] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.841225][T27574] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1080.849257][T27574] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1080.857279][T27574] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.865295][T27574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1080.873355][T27574] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1080.881404][T27574] [ 1080.931416][T27578] __nla_validate_parse: 3 callbacks suppressed [ 1080.931434][T27578] netlink: 3076 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1080.955871][T27578] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6084'. [ 1081.227604][T27585] netlink: 'syz.4.6085': attribute type 21 has an invalid length. [ 1081.235977][T27585] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1081.273953][T27585] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6085'. [ 1081.321926][T27587] netlink: 'syz.0.6087': attribute type 22 has an invalid length. [ 1081.333139][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1081.404304][T27587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1081.468158][T27592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6089'. [ 1082.268602][T27605] netlink: 'syz.3.6092': attribute type 21 has an invalid length. [ 1082.283091][T27605] IPv6: Can't replace route, no match found [ 1082.356375][T27608] FAULT_INJECTION: forcing a failure. [ 1082.356375][T27608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.382388][T27608] CPU: 1 PID: 27608 Comm: syz.0.6094 Not tainted syzkaller #0 [ 1082.390015][T27608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1082.400127][T27608] Call Trace: [ 1082.403450][T27608] [ 1082.406419][T27608] dump_stack_lvl+0x18c/0x250 [ 1082.411150][T27608] ? show_regs_print_info+0x20/0x20 [ 1082.416395][T27608] ? load_image+0x420/0x420 [ 1082.420947][T27608] ? __might_fault+0xaa/0x120 [ 1082.425681][T27608] ? __lock_acquire+0x7d40/0x7d40 [ 1082.430772][T27608] should_fail_ex+0x39d/0x4d0 [ 1082.435504][T27608] _copy_to_user+0x2f/0xa0 [ 1082.439965][T27608] bpf_test_finish+0x25a/0x650 [ 1082.444771][T27608] ? convert_skb_to___skb+0x420/0x420 [ 1082.450178][T27608] ? _copy_from_user+0xa5/0xe0 [ 1082.454991][T27608] ? bpf_test_init+0x119/0x140 [ 1082.459788][T27608] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 1082.465205][T27608] ? dev_put+0x80/0x80 [ 1082.469310][T27608] ? dev_put+0x80/0x80 [ 1082.473410][T27608] bpf_prog_test_run+0x321/0x390 [ 1082.478381][T27608] __sys_bpf+0x49d/0x890 [ 1082.482659][T27608] ? bpf_link_show_fdinfo+0x390/0x390 [ 1082.488067][T27608] ? lock_chain_count+0x20/0x20 [ 1082.493040][T27608] __x64_sys_bpf+0x7c/0x90 [ 1082.497485][T27608] do_syscall_64+0x55/0xa0 [ 1082.501929][T27608] ? clear_bhb_loop+0x40/0x90 [ 1082.506636][T27608] ? clear_bhb_loop+0x40/0x90 [ 1082.511358][T27608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1082.517285][T27608] RIP: 0033:0x7faa1af9c819 [ 1082.521739][T27608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.541395][T27608] RSP: 002b:00007faa1bdfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1082.549845][T27608] RAX: ffffffffffffffda RBX: 00007faa1b215fa0 RCX: 00007faa1af9c819 [ 1082.557861][T27608] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1082.565871][T27608] RBP: 00007faa1bdfa090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.573869][T27608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.581859][T27608] R13: 00007faa1b216038 R14: 00007faa1b215fa0 R15: 00007fff9a274dd8 [ 1082.589873][T27608] [ 1082.802485][T27618] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6098'. [ 1082.884841][T27618] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6098'. [ 1082.911988][T27620] netlink: 'syz.3.6106': attribute type 1 has an invalid length. [ 1082.932906][T27621] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6098'. [ 1083.057767][T27626] netlink: 'syz.1.6099': attribute type 21 has an invalid length. [ 1083.079186][T27627] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1083.743481][T27642] FAULT_INJECTION: forcing a failure. [ 1083.743481][T27642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.760094][T27642] CPU: 0 PID: 27642 Comm: syz.3.6105 Not tainted syzkaller #0 [ 1083.767702][T27642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1083.777891][T27642] Call Trace: [ 1083.781208][T27642] [ 1083.784175][T27642] dump_stack_lvl+0x18c/0x250 [ 1083.788910][T27642] ? show_regs_print_info+0x20/0x20 [ 1083.794239][T27642] ? load_image+0x420/0x420 [ 1083.798792][T27642] ? __might_fault+0xaa/0x120 [ 1083.803520][T27642] ? __lock_acquire+0x7d40/0x7d40 [ 1083.808589][T27642] should_fail_ex+0x39d/0x4d0 [ 1083.813336][T27642] _copy_to_user+0x2f/0xa0 [ 1083.817798][T27642] bpf_test_finish+0x4e7/0x650 [ 1083.822639][T27642] ? convert_skb_to___skb+0x420/0x420 [ 1083.828049][T27642] ? _copy_from_user+0xa5/0xe0 [ 1083.832855][T27642] ? bpf_test_init+0x119/0x140 [ 1083.837657][T27642] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 1083.843086][T27642] ? dev_put+0x80/0x80 [ 1083.847185][T27642] ? dev_put+0x80/0x80 [ 1083.851293][T27642] bpf_prog_test_run+0x321/0x390 [ 1083.856260][T27642] __sys_bpf+0x49d/0x890 [ 1083.860534][T27642] ? bpf_link_show_fdinfo+0x390/0x390 [ 1083.865947][T27642] ? lock_chain_count+0x20/0x20 [ 1083.870837][T27642] __x64_sys_bpf+0x7c/0x90 [ 1083.875276][T27642] do_syscall_64+0x55/0xa0 [ 1083.879716][T27642] ? clear_bhb_loop+0x40/0x90 [ 1083.884422][T27642] ? clear_bhb_loop+0x40/0x90 [ 1083.889134][T27642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1083.895085][T27642] RIP: 0033:0x7ff075d9c819 [ 1083.899549][T27642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.919192][T27642] RSP: 002b:00007ff073ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1083.927656][T27642] RAX: ffffffffffffffda RBX: 00007ff076015fa0 RCX: 00007ff075d9c819 [ 1083.935656][T27642] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1083.943651][T27642] RBP: 00007ff073ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.951650][T27642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.959658][T27642] R13: 00007ff076016038 R14: 00007ff076015fa0 R15: 00007fffa4db9c88 [ 1083.967752][T27642] [ 1084.006476][T27643] netlink: 'syz.1.6104': attribute type 21 has an invalid length. [ 1084.019565][T27643] IPv6: Can't replace route, no match found [ 1084.368175][T27653] syzkaller0: entered promiscuous mode [ 1084.377534][T27653] syzkaller0: entered allmulticast mode [ 1084.384944][T27656] netlink: 'syz.3.6111': attribute type 10 has an invalid length. [ 1084.393024][T27656] vcan0: entered promiscuous mode [ 1084.398499][T27656] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1084.971502][T27678] netlink: 'syz.4.6117': attribute type 33 has an invalid length. [ 1085.776760][T27686] FAULT_INJECTION: forcing a failure. [ 1085.776760][T27686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.805290][T27686] CPU: 0 PID: 27686 Comm: syz.4.6119 Not tainted syzkaller #0 [ 1085.812840][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1085.822932][T27686] Call Trace: [ 1085.826259][T27686] [ 1085.829216][T27686] dump_stack_lvl+0x18c/0x250 [ 1085.833947][T27686] ? show_regs_print_info+0x20/0x20 [ 1085.839182][T27686] ? load_image+0x420/0x420 [ 1085.843823][T27686] ? __lock_acquire+0x7d40/0x7d40 [ 1085.848900][T27686] ? snprintf+0xe9/0x140 [ 1085.853211][T27686] should_fail_ex+0x39d/0x4d0 [ 1085.857936][T27686] _copy_to_user+0x2f/0xa0 [ 1085.862403][T27686] simple_read_from_buffer+0xe7/0x150 [ 1085.867845][T27686] proc_fail_nth_read+0x1e8/0x260 [ 1085.872917][T27686] ? proc_fault_inject_write+0x360/0x360 [ 1085.878603][T27686] ? fsnotify_perm+0x271/0x5e0 [ 1085.883429][T27686] ? proc_fault_inject_write+0x360/0x360 [ 1085.889109][T27686] vfs_read+0x28b/0x970 [ 1085.893323][T27686] ? kernel_read+0x1e0/0x1e0 [ 1085.897959][T27686] ? __fget_files+0x28/0x4b0 [ 1085.902582][T27686] ? __fget_files+0x28/0x4b0 [ 1085.907202][T27686] ? __fget_files+0x43d/0x4b0 [ 1085.911920][T27686] ? __fdget_pos+0x2a3/0x330 [ 1085.916549][T27686] ? ksys_read+0x75/0x260 [ 1085.920912][T27686] ksys_read+0x150/0x260 [ 1085.925198][T27686] ? vfs_write+0x990/0x990 [ 1085.929663][T27686] ? lockdep_hardirqs_on+0x98/0x150 [ 1085.934900][T27686] do_syscall_64+0x55/0xa0 [ 1085.939353][T27686] ? clear_bhb_loop+0x40/0x90 [ 1085.944067][T27686] ? clear_bhb_loop+0x40/0x90 [ 1085.948879][T27686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.954810][T27686] RIP: 0033:0x7f7d4535d04e [ 1085.959269][T27686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1085.978915][T27686] RSP: 002b:00007f7d462a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1085.987369][T27686] RAX: ffffffffffffffda RBX: 00007f7d462a26c0 RCX: 00007f7d4535d04e [ 1085.995378][T27686] RDX: 000000000000000f RSI: 00007f7d462a20a0 RDI: 0000000000000006 [ 1086.003374][T27686] RBP: 00007f7d462a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.011379][T27686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.019379][T27686] R13: 00007f7d45616128 R14: 00007f7d45616090 R15: 00007ffed695f738 [ 1086.027396][T27686] [ 1087.164948][T27689] __nla_validate_parse: 6 callbacks suppressed [ 1087.164968][T27689] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1087.257283][T27689] netlink: 'syz.0.6120': attribute type 10 has an invalid length. [ 1087.291042][T27689] team0: Port device geneve1 added [ 1087.536199][T27696] netlink: 'syz.4.6121': attribute type 10 has an invalid length. [ 1087.836441][T27711] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6127'. [ 1087.969819][T27714] netlink: 'syz.0.6128': attribute type 21 has an invalid length. [ 1087.980117][T27714] IPv6: Can't replace route, no match found [ 1088.173570][T27716] netlink: 'syz.0.6129': attribute type 39 has an invalid length. [ 1088.301956][T27719] netlink: 'syz.1.6130': attribute type 9 has an invalid length. [ 1088.322247][T27719] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1088.429848][T27725] netlink: 'syz.4.6132': attribute type 10 has an invalid length. [ 1088.477989][T27725] netlink: 'syz.4.6132': attribute type 3 has an invalid length. [ 1088.502296][T27725] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1088.553463][T27731] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1088.755580][T27739] netlink: 'syz.0.6137': attribute type 21 has an invalid length. [ 1088.764678][T27739] IPv6: Can't replace route, no match found [ 1090.014732][T27765] netlink: 'syz.4.6145': attribute type 5 has an invalid length. [ 1090.049960][T27766] netlink: 'syz.1.6146': attribute type 21 has an invalid length. [ 1090.065515][T27765] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.6145'. [ 1090.071256][T27766] IPv6: Can't replace route, no match found [ 1090.829176][T27796] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1091.460277][T27796] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1091.483245][T27790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.620318][T27806] IPv6: Can't replace route, no match found [ 1092.273957][T27841] validate_nla: 3 callbacks suppressed [ 1092.273993][T27841] netlink: 'syz.1.6168': attribute type 21 has an invalid length. [ 1092.308832][T27841] IPv6: Can't replace route, no match found [ 1092.350918][T27838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1093.446957][T27859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.709811][T27880] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6180'. [ 1093.738078][T27883] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1093.760834][T27886] netlink: 'syz.4.6181': attribute type 21 has an invalid length. [ 1093.786617][T27886] IPv6: Can't replace route, no match found [ 1094.361322][T27907] netlink: 'syz.0.6186': attribute type 10 has an invalid length. [ 1095.159251][T27935] netlink: 'syz.0.6191': attribute type 2 has an invalid length. [ 1095.167345][T27935] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6191'. [ 1096.805387][T27948] netlink: 'syz.4.6195': attribute type 19 has an invalid length. [ 1096.832804][T27948] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1096.874052][T27950] netlink: 'syz.0.6197': attribute type 27 has an invalid length. [ 1096.901267][T27950] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1097.452516][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 1098.892449][ T7659] wlan1: Trigger new scan to find an IBSS to join [ 1099.811577][T27955] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1100.015737][T27979] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6201'. [ 1100.538690][T28006] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.6207'. [ 1100.811868][T28019] netlink: 'syz.0.6210': attribute type 3 has an invalid length. [ 1101.000400][T28024] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6212'. [ 1101.049660][T28030] netlink: 'syz.0.6220': attribute type 21 has an invalid length. [ 1101.078780][T28030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1101.079128][T28027] netlink: 'syz.4.6213': attribute type 9 has an invalid length. [ 1101.079156][T28027] netlink: 399 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1101.875602][T14195] wlan1: Trigger new scan to find an IBSS to join [ 1102.584877][T28052] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1102.998693][T28069] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1103.090028][T28066] tap1: tun_chr_ioctl cmd 1074025677 [ 1103.112317][T28066] tap1: linktype set to 778 [ 1103.121622][T28067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1103.149656][T28067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1103.160796][T28067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6225'. [ 1103.197178][T28074] syzkaller0: entered promiscuous mode [ 1103.203138][T28074] syzkaller0: entered allmulticast mode [ 1103.363645][T28083] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1103.728783][T28096] netlink: 'syz.1.6233': attribute type 10 has an invalid length. [ 1103.783446][T28096] team0: Device hsr_slave_0 failed to register rx_handler [ 1104.534027][T28119] netlink: 'syz.4.6241': attribute type 39 has an invalid length. [ 1104.956740][T28132] netlink: 'syz.0.6246': attribute type 5 has an invalid length. [ 1105.090693][T28135] __nla_validate_parse: 6 callbacks suppressed [ 1105.090714][T28135] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6247'. [ 1105.121590][T28135] netlink: 204740 bytes leftover after parsing attributes in process `syz.4.6247'. [ 1105.355600][T28151] netlink: 'syz.0.6252': attribute type 3 has an invalid length. [ 1105.382041][T28151] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6252'. [ 1105.505863][T28152] netlink: 'syz.1.6250': attribute type 10 has an invalid length. [ 1105.522837][T28152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1105.562270][T28152] team0: entered promiscuous mode [ 1105.567499][T28152] team_slave_0: entered promiscuous mode [ 1105.574311][T28152] team_slave_1: entered promiscuous mode [ 1105.580115][T28152] geneve1: entered promiscuous mode [ 1105.587951][T28152] team0: entered allmulticast mode [ 1105.594604][T28152] team_slave_0: entered allmulticast mode [ 1105.600356][T28152] team_slave_1: entered allmulticast mode [ 1105.608787][T28152] geneve1: entered allmulticast mode [ 1105.616797][T28152] bridge0: port 3(team0) entered blocking state [ 1105.630721][T28152] bridge0: port 3(team0) entered disabled state [ 1105.639624][T28152] bridge0: port 3(team0) entered blocking state [ 1105.645994][T28152] bridge0: port 3(team0) entered forwarding state [ 1105.732127][T28156] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1105.856975][T28165] netlink: 'syz.0.6253': attribute type 10 has an invalid length. [ 1105.900325][T28165] team0: Device veth1_macvtap failed to register rx_handler [ 1106.023213][T28170] netlink: set zone limit has 8 unknown bytes [ 1106.375222][T28184] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6260'. [ 1106.506431][T28188] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1106.524021][T28188] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.6262'. [ 1106.634495][T28194] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6272'. [ 1106.648490][T28194] openvswitch: netlink: Flow key attribute not present in set flow. [ 1106.788120][T28198] netlink: 'syz.3.6264': attribute type 10 has an invalid length. [ 1106.881807][T28198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6264'. [ 1106.898239][T28198] team0: entered promiscuous mode [ 1106.911056][T28198] C: entered promiscuous mode [ 1106.928513][T28198] team_slave_1: entered promiscuous mode [ 1106.938861][T28198] team0: entered allmulticast mode [ 1106.945503][T28198] C: entered allmulticast mode [ 1106.950454][T28198] team_slave_1: entered allmulticast mode [ 1107.014087][T28198] .`: (slave team0): Releasing backup interface [ 1107.055920][T28198] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1107.083173][T28203] netlink: 'syz.0.6265': attribute type 10 has an invalid length. [ 1108.235100][T28242] netlink: 'syz.0.6278': attribute type 10 has an invalid length. [ 1108.287784][T28242] team0: entered promiscuous mode [ 1108.323651][T28242] team_slave_0: entered promiscuous mode [ 1108.330807][T28242] team_slave_1: entered promiscuous mode [ 1108.337351][T28242] geneve1: entered promiscuous mode [ 1108.343123][T28242] team0: entered allmulticast mode [ 1108.348610][T28242] team_slave_0: entered allmulticast mode [ 1108.363852][T28242] team_slave_1: entered allmulticast mode [ 1108.371040][T28242] geneve1: entered allmulticast mode [ 1108.385378][T28242] bridge0: port 3(team0) entered blocking state [ 1108.392552][T28242] bridge0: port 3(team0) entered disabled state [ 1108.800197][T28249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1110.234361][T28269] __nla_validate_parse: 2 callbacks suppressed [ 1110.234398][T28269] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6286'. [ 1110.304169][T28269] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1110.342003][T28269] CPU: 1 PID: 28269 Comm: syz.3.6286 Not tainted syzkaller #0 [ 1110.349531][T28269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1110.359629][T28269] Call Trace: [ 1110.362956][T28269] [ 1110.365927][T28269] dump_stack_lvl+0x18c/0x250 [ 1110.370700][T28269] ? show_regs_print_info+0x20/0x20 [ 1110.375971][T28269] ? load_image+0x420/0x420 [ 1110.380566][T28269] sysfs_warn_dup+0x8e/0xa0 [ 1110.385111][T28269] sysfs_do_create_link_sd+0xc0/0x110 [ 1110.390516][T28269] device_add_class_symlinks+0x1cf/0x240 [ 1110.396188][T28269] device_add+0x507/0xc20 [ 1110.400567][T28269] wiphy_register+0x1dad/0x2ae0 [ 1110.405482][T28269] ? cfg80211_event_work+0x40/0x40 [ 1110.410627][T28269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.416833][T28269] ieee80211_register_hw+0x3464/0x4250 [ 1110.422354][T28269] ? ieee80211_tasklet_handler+0x20/0x20 [ 1110.428009][T28269] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1110.433953][T28269] ? __debug_object_init+0xec/0x450 [ 1110.439199][T28269] ? __asan_memset+0x22/0x40 [ 1110.443838][T28269] ? __hrtimer_init+0x186/0x270 [ 1110.448715][T28269] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1110.454496][T28269] ? mac80211_hwsim_free+0x220/0x220 [ 1110.459808][T28269] ? rcu_is_watching+0x15/0xb0 [ 1110.464606][T28269] ? kstrndup+0xbd/0x140 [ 1110.468904][T28269] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1110.474087][T28269] ? mark_lock+0x94/0x320 [ 1110.478455][T28269] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1110.484816][T28269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.491028][T28269] ? lockdep_hardirqs_on+0x98/0x150 [ 1110.496277][T28269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1110.502473][T28269] genl_family_rcv_msg_doit+0x211/0x310 [ 1110.508043][T28269] ? end_current_label_crit_section+0x170/0x170 [ 1110.514332][T28269] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1110.520259][T28269] ? bpf_lsm_capable+0x9/0x10 [ 1110.524958][T28269] ? security_capable+0x89/0xb0 [ 1110.529839][T28269] genl_rcv_msg+0x619/0x7a0 [ 1110.534396][T28269] ? genl_bind+0x360/0x360 [ 1110.538853][T28269] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1110.544856][T28269] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1110.551204][T28269] ? ref_tracker_free+0x690/0x840 [ 1110.556286][T28269] netlink_rcv_skb+0x241/0x4d0 [ 1110.561090][T28269] ? genl_bind+0x360/0x360 [ 1110.565533][T28269] ? netlink_ack+0x1180/0x1180 [ 1110.570341][T28269] ? __lock_acquire+0x7d40/0x7d40 [ 1110.575395][T28269] ? down_read+0x1ac/0x2e0 [ 1110.579833][T28269] genl_rcv+0x28/0x40 [ 1110.583838][T28269] netlink_unicast+0x751/0x8d0 [ 1110.588643][T28269] netlink_sendmsg+0x8d0/0xbf0 [ 1110.593442][T28269] ? lockdep_hardirqs_on+0x98/0x150 [ 1110.598672][T28269] ? netlink_getsockopt+0x590/0x590 [ 1110.603903][T28269] ? aa_sock_msg_perm+0x94/0x150 [ 1110.608877][T28269] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1110.614189][T28269] ? security_socket_sendmsg+0x80/0xa0 [ 1110.619690][T28269] ? netlink_getsockopt+0x590/0x590 [ 1110.624910][T28269] ____sys_sendmsg+0x5ba/0x960 [ 1110.629697][T28269] ? __asan_memset+0x22/0x40 [ 1110.634305][T28269] ? __sys_sendmsg_sock+0x30/0x30 [ 1110.639345][T28269] ? __import_iovec+0x5f2/0x850 [ 1110.644221][T28269] ? import_iovec+0x73/0xa0 [ 1110.648745][T28269] ___sys_sendmsg+0x2a6/0x360 [ 1110.653461][T28269] ? __sys_sendmsg+0x2a0/0x2a0 [ 1110.658268][T28269] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1110.664553][T28269] __se_sys_sendmsg+0x1c2/0x2b0 [ 1110.669423][T28269] ? __x64_sys_sendmsg+0x80/0x80 [ 1110.674398][T28269] ? lockdep_hardirqs_on+0x98/0x150 [ 1110.679613][T28269] do_syscall_64+0x55/0xa0 [ 1110.684053][T28269] ? clear_bhb_loop+0x40/0x90 [ 1110.688754][T28269] ? clear_bhb_loop+0x40/0x90 [ 1110.693479][T28269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1110.699387][T28269] RIP: 0033:0x7ff075d9c819 [ 1110.703820][T28269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.723444][T28269] RSP: 002b:00007ff073fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.731968][T28269] RAX: ffffffffffffffda RBX: 00007ff076016090 RCX: 00007ff075d9c819 [ 1110.739975][T28269] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1110.747996][T28269] RBP: 00007ff075e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1110.755998][T28269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.763999][T28269] R13: 00007ff076016128 R14: 00007ff076016090 R15: 00007fffa4db9c88 [ 1110.772016][T28269] [ 1111.105347][T28292] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 1111.132548][T28292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.338221][ T5084] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 1115.043051][T28324] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6304'. [ 1115.860942][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.867442][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.353378][T28371] netlink: 'syz.3.6316': attribute type 10 has an invalid length. [ 1117.405736][T28371] wlan1: mtu less than device minimum [ 1117.411218][T28371] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 1118.086463][T28398] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1118.135104][T28398] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1118.459458][T28417] netlink: 'syz.0.6331': attribute type 29 has an invalid length. [ 1118.489690][T28417] netlink: 'syz.0.6331': attribute type 29 has an invalid length. [ 1118.521919][T28416] netlink: 'syz.1.6332': attribute type 3 has an invalid length. [ 1119.133995][T28438] netlink: 703 bytes leftover after parsing attributes in process `syz.1.6338'. [ 1119.526934][T28455] netlink: 'syz.0.6345': attribute type 51 has an invalid length. [ 1119.578543][T28457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1119.846206][T28460] delete_channel: no stack [ 1120.000504][T28475] netlink: 'syz.3.6352': attribute type 9 has an invalid length. [ 1120.014162][T28477] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1120.071007][T28477] ±ÿ: renamed from team_slave_1 (while UP) [ 1121.477939][T28489] netlink: 'syz.0.6361': attribute type 9 has an invalid length. [ 1121.896804][T28499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1121.932981][T28499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1121.994720][T28502] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6358'. [ 1122.033905][T28501] netlink: 'syz.1.6359': attribute type 15 has an invalid length. [ 1122.459504][T28508] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1122.658697][T28508] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6362'. [ 1123.263432][T28524] netlink: 'syz.4.6368': attribute type 3 has an invalid length. [ 1123.295279][T28524] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6368'. [ 1123.633156][T28535] netlink: 'syz.1.6371': attribute type 10 has an invalid length. [ 1123.642110][T28535] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1123.653514][T28535] bond0: entered promiscuous mode [ 1123.658926][T28535] bond_slave_0: entered promiscuous mode [ 1123.682477][T28535] bond_slave_1: entered promiscuous mode [ 1123.690106][T28535] bridge0: entered promiscuous mode [ 1123.690143][T28540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1123.706700][T28535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1123.723370][T28535] bridge0: port 4(bond0) entered blocking state [ 1123.729849][T28535] bridge0: port 4(bond0) entered disabled state [ 1123.753125][T28535] bond0: entered allmulticast mode [ 1123.758324][T28535] bond_slave_0: entered allmulticast mode [ 1123.775173][T28535] bond_slave_1: entered allmulticast mode [ 1123.780977][T28535] bridge0: entered allmulticast mode [ 1123.803686][T28535] bond0: left allmulticast mode [ 1123.808621][T28535] bond_slave_0: left allmulticast mode [ 1123.816500][T28535] bond_slave_1: left allmulticast mode [ 1123.822057][T28535] bridge0: left allmulticast mode [ 1123.841853][T28540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1124.475684][T28553] netlink: 'syz.1.6376': attribute type 1 has an invalid length. [ 1124.532936][T28553] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6376'. [ 1125.163493][T28571] netlink: 822 bytes leftover after parsing attributes in process `syz.4.6382'. [ 1125.183317][T28571] veth0_to_bond: invalid flags given to default FDB implementation [ 1125.233372][T28576] netlink: 'syz.0.6384': attribute type 10 has an invalid length. [ 1125.258639][T28576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1125.291433][T28578] netlink: 'syz.3.6385': attribute type 9 has an invalid length. [ 1125.311355][T28578] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1125.385845][T28578] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 1125.402381][T28578] netlink: 'syz.3.6385': attribute type 3 has an invalid length. [ 1125.411063][T28578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1125.443728][T28585] netlink: 'syz.3.6385': attribute type 10 has an invalid length. [ 1125.481013][T28585] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1125.503342][T28587] ksmbd: Unknown IPC event: 0, ignore. [ 1127.217225][T28631] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1128.387009][T28650] validate_nla: 5 callbacks suppressed [ 1128.387028][T28650] netlink: 'syz.0.6401': attribute type 12 has an invalid length. [ 1128.405518][T28650] __nla_validate_parse: 8 callbacks suppressed [ 1128.405533][T28650] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1128.839054][T28657] netlink: 'syz.4.6403': attribute type 9 has an invalid length. [ 1128.847311][T28657] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1128.890371][T28657] netlink: 'syz.4.6403': attribute type 1 has an invalid length. [ 1128.901925][T28657] netlink: 'syz.4.6403': attribute type 3 has an invalid length. [ 1128.910773][T28657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1128.945962][T28658] netlink: 'syz.4.6403': attribute type 10 has an invalid length. [ 1128.963390][T28658] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6403'. [ 1129.655092][T28669] netlink: 'syz.1.6408': attribute type 10 has an invalid length. [ 1129.674762][T28668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.715016][T28673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.823698][ T5084] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1129.844339][T28677] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1129.995996][T28683] netlink: 'syz.4.6414': attribute type 11 has an invalid length. [ 1130.007185][T28683] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6414'. [ 1130.144651][T28689] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1130.299388][T28694] netlink: 'syz.4.6417': attribute type 9 has an invalid length. [ 1130.591454][T28699] netlink: 'syz.3.6419': attribute type 10 has an invalid length. [ 1130.633322][T28699] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1130.811102][T28705] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1130.868873][T28705] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1130.890446][T28709] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1131.852432][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 1134.210812][T28719] ================================================================== [ 1134.218952][T28719] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1134.226822][T28719] Write of size 40 at addr ffff888061648510 by task syz.1.6425/28719 [ 1134.234916][T28719] [ 1134.237269][T28719] CPU: 1 PID: 28719 Comm: syz.1.6425 Not tainted syzkaller #0 [ 1134.244759][T28719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1134.254843][T28719] Call Trace: [ 1134.258157][T28719] [ 1134.261127][T28719] dump_stack_lvl+0x18c/0x250 [ 1134.265860][T28719] ? read_lock_is_recursive+0x20/0x20 [ 1134.271285][T28719] ? show_regs_print_info+0x20/0x20 [ 1134.276567][T28719] ? load_image+0x420/0x420 [ 1134.281195][T28719] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1134.286718][T28719] ? __virt_addr_valid+0x18c/0x540 [ 1134.291881][T28719] ? __virt_addr_valid+0x469/0x540 [ 1134.297043][T28719] print_report+0xa8/0x210 [ 1134.301505][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1134.306658][T28719] kasan_report+0x117/0x150 [ 1134.311210][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1134.316385][T28719] kasan_check_range+0x241/0x290 [ 1134.321369][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1134.326509][T28719] __asan_memcpy+0x40/0x70 [ 1134.330979][T28719] __bpf_get_stackid+0x6bf/0x900 [ 1134.335967][T28719] bpf_get_stackid_pe+0x343/0x410 [ 1134.341056][T28719] bpf_prog_1649ecc1a5870555+0x29/0x39 [ 1134.346568][T28719] bpf_overflow_handler+0x43f/0x510 [ 1134.351833][T28719] ? bpf_overflow_handler+0xde/0x510 [ 1134.357163][T28719] ? tp_perf_event_destroy+0x20/0x20 [ 1134.362506][T28719] ? perf_trace_preemptirq_template+0x144/0x330 [ 1134.368802][T28719] ? __perf_event_account_interrupt+0x187/0x280 [ 1134.375100][T28719] __perf_event_overflow+0x447/0x630 [ 1134.380434][T28719] perf_swevent_event+0x319/0x570 [ 1134.385512][T28719] ? perf_tp_event+0x1520/0x1520 [ 1134.390489][T28719] ? perf_tp_event+0x13d7/0x1520 [ 1134.395465][T28719] ___perf_sw_event+0x4a7/0x730 [ 1134.400352][T28719] ? ___perf_sw_event+0x199/0x730 [ 1134.405413][T28719] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1134.411876][T28719] ? __put_user_4+0x11/0x20 [ 1134.416440][T28719] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1134.422457][T28719] ? lock_chain_count+0x20/0x20 [ 1134.427336][T28719] __perf_sw_event+0x139/0x270 [ 1134.432142][T28719] do_user_addr_fault+0x123e/0x12c0 [ 1134.437375][T28719] ? rcu_is_watching+0x15/0xb0 [ 1134.442175][T28719] exc_page_fault+0x64/0x100 [ 1134.446803][T28719] asm_exc_page_fault+0x26/0x30 [ 1134.451663][T28719] RIP: 0010:__put_user_4+0x11/0x20 [ 1134.456794][T28719] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1134.476435][T28719] RSP: 0018:ffffc90011e07c58 EFLAGS: 00050246 [ 1134.482536][T28719] RAX: 00000000000003df RBX: 0000000000000000 RCX: 0000000000000000 [ 1134.490534][T28719] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 1134.498538][T28719] RBP: ffffc90011e07d90 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 1134.506536][T28719] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 1ffff920023c0f94 [ 1134.514512][T28719] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 00000000000003df [ 1134.522509][T28719] kernel_clone+0x36c/0x8a0 [ 1134.527082][T28719] ? create_io_thread+0x190/0x190 [ 1134.532165][T28719] ? perf_trace_preemptirq_template+0x269/0x330 [ 1134.538475][T28719] __x64_sys_clone+0x1b7/0x230 [ 1134.543282][T28719] ? __ia32_sys_vfork+0x140/0x140 [ 1134.548354][T28719] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1134.554296][T28719] do_syscall_64+0x55/0xa0 [ 1134.558755][T28719] ? clear_bhb_loop+0x40/0x90 [ 1134.563492][T28719] ? clear_bhb_loop+0x40/0x90 [ 1134.568223][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.574167][T28719] RIP: 0033:0x7f73a399c819 [ 1134.578604][T28719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.598232][T28719] RSP: 002b:00007f73a4839fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1134.606675][T28719] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1134.614673][T28719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 1134.622670][T28719] RBP: 00007f73a3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1134.630664][T28719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1134.638637][T28719] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1134.646637][T28719] [ 1134.649684][T28719] [ 1134.652028][T28719] Allocated by task 28719: [ 1134.656464][T28719] kasan_set_track+0x4e/0x70 [ 1134.661069][T28719] __kasan_kmalloc+0x8f/0xa0 [ 1134.665696][T28719] __kmalloc_node+0xb4/0x230 [ 1134.670328][T28719] bpf_map_area_alloc+0x5e/0x110 [ 1134.675300][T28719] prealloc_elems_and_freelist+0x86/0x1c0 [ 1134.681030][T28719] stack_map_alloc+0x33a/0x4c0 [ 1134.685805][T28719] map_create+0x877/0x12f0 [ 1134.690238][T28719] __sys_bpf+0x651/0x890 [ 1134.694500][T28719] __x64_sys_bpf+0x7c/0x90 [ 1134.698922][T28719] do_syscall_64+0x55/0xa0 [ 1134.703357][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.709271][T28719] [ 1134.711612][T28719] Last potentially related work creation: [ 1134.717360][T28719] kasan_save_stack+0x3e/0x60 [ 1134.722051][T28719] __kasan_record_aux_stack+0xaf/0xc0 [ 1134.727468][T28719] call_rcu+0x153/0x950 [ 1134.731669][T28719] nf_unregister_net_hooks+0xcb/0x130 [ 1134.737106][T28719] nf_defrag_ipv4_disable+0x95/0xe0 [ 1134.742331][T28719] nf_ct_netns_put+0x2da/0x520 [ 1134.747122][T28719] nf_conncount_destroy+0x41/0x150 [ 1134.752255][T28719] ovs_ct_exit+0x9c/0x200 [ 1134.756639][T28719] ovs_exit_net+0xed/0x7a0 [ 1134.761072][T28719] setup_net+0x7e7/0xa30 [ 1134.765331][T28719] copy_net_ns+0x36d/0x5e0 [ 1134.769768][T28719] create_new_namespaces+0x3d3/0x6f0 [ 1134.775060][T28719] copy_namespaces+0x430/0x4a0 [ 1134.779844][T28719] copy_process+0x1724/0x3d80 [ 1134.784576][T28719] kernel_clone+0x24b/0x8a0 [ 1134.789119][T28719] __x64_sys_clone+0x1b7/0x230 [ 1134.794001][T28719] do_syscall_64+0x55/0xa0 [ 1134.798459][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1134.804389][T28719] [ 1134.806744][T28719] Second to last potentially related work creation: [ 1134.813382][T28719] kasan_save_stack+0x3e/0x60 [ 1134.818088][T28719] __kasan_record_aux_stack+0xaf/0xc0 [ 1134.823490][T28719] call_rcu+0x153/0x950 [ 1134.827700][T28719] nf_unregister_net_hooks+0xcb/0x130 [ 1134.833100][T28719] nf_ct_netns_put+0x36d/0x520 [ 1134.837893][T28719] nf_conncount_destroy+0x41/0x150 [ 1134.843033][T28719] ovs_ct_exit+0x9c/0x200 [ 1134.847397][T28719] ovs_exit_net+0xed/0x7a0 [ 1134.851848][T28719] cleanup_net+0x70a/0xbb0 [ 1134.856315][T28719] process_scheduled_works+0xa5d/0x15d0 [ 1134.861889][T28719] worker_thread+0xa55/0xfc0 [ 1134.866515][T28719] kthread+0x2fa/0x390 [ 1134.870613][T28719] ret_from_fork+0x48/0x80 [ 1134.875060][T28719] ret_from_fork_asm+0x11/0x20 [ 1134.879938][T28719] [ 1134.882281][T28719] The buggy address belongs to the object at ffff888061648500 [ 1134.882281][T28719] which belongs to the cache kmalloc-cg-64 of size 64 [ 1134.896462][T28719] The buggy address is located 16 bytes inside of [ 1134.896462][T28719] allocated 40-byte region [ffff888061648500, ffff888061648528) [ 1134.910463][T28719] [ 1134.912835][T28719] The buggy address belongs to the physical page: [ 1134.919271][T28719] page:ffffea0001859200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61648 [ 1134.929438][T28719] memcg:ffff888069efb601 [ 1134.933700][T28719] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1134.941268][T28719] page_type: 0xffffffff() [ 1134.945620][T28719] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c5ee80 dead000000000008 [ 1134.954222][T28719] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff888069efb601 [ 1134.962823][T28719] page dumped because: kasan: bad access detected [ 1134.969249][T28719] page_owner tracks the page as allocated [ 1134.974976][T28719] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 16956, tgid 16953 (syz.1.2990), ts 605573018827, free_ts 605515712316 [ 1134.993396][T28719] post_alloc_hook+0x1c1/0x200 [ 1134.998190][T28719] get_page_from_freelist+0x1951/0x19e0 [ 1135.003751][T28719] __alloc_pages+0x1f0/0x460 [ 1135.008358][T28719] alloc_slab_page+0x5d/0x160 [ 1135.013058][T28719] new_slab+0x87/0x2d0 [ 1135.017135][T28719] ___slab_alloc+0xc5d/0x12f0 [ 1135.021851][T28719] __kmem_cache_alloc_node+0x19e/0x250 [ 1135.027331][T28719] kmalloc_trace+0x2a/0xe0 [ 1135.031770][T28719] alloc_fdtable+0xca/0x2c0 [ 1135.036297][T28719] dup_fd+0x786/0xa50 [ 1135.040295][T28719] copy_files+0xc3/0x120 [ 1135.044553][T28719] copy_process+0x15ab/0x3d80 [ 1135.049267][T28719] kernel_clone+0x24b/0x8a0 [ 1135.053785][T28719] __x64_sys_clone+0x1b7/0x230 [ 1135.058558][T28719] do_syscall_64+0x55/0xa0 [ 1135.062989][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.068894][T28719] page last free stack trace: [ 1135.073588][T28719] free_unref_page_prepare+0x7b2/0x8c0 [ 1135.079078][T28719] free_unref_page_list+0xbe/0x860 [ 1135.084208][T28719] release_pages+0x1f7a/0x2200 [ 1135.088983][T28719] tlb_flush_mmu+0x379/0x510 [ 1135.093630][T28719] tlb_finish_mmu+0xf9/0x220 [ 1135.098244][T28719] exit_mmap+0x428/0xb90 [ 1135.102523][T28719] __mmput+0x118/0x3c0 [ 1135.106607][T28719] exit_mm+0x1f2/0x2c0 [ 1135.110698][T28719] do_exit+0x8dd/0x2460 [ 1135.114875][T28719] do_group_exit+0x21b/0x2d0 [ 1135.119523][T28719] __x64_sys_exit_group+0x3f/0x40 [ 1135.124568][T28719] do_syscall_64+0x55/0xa0 [ 1135.129004][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.134926][T28719] [ 1135.137261][T28719] Memory state around the buggy address: [ 1135.142917][T28719] ffff888061648400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1135.150997][T28719] ffff888061648480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1135.159068][T28719] >ffff888061648500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1135.167145][T28719] ^ [ 1135.172529][T28719] ffff888061648580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1135.180595][T28719] ffff888061648600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1135.188667][T28719] ================================================================== [ 1135.196751][T28719] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1135.203949][T28719] CPU: 1 PID: 28719 Comm: syz.1.6425 Not tainted syzkaller #0 [ 1135.211419][T28719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1135.221495][T28719] Call Trace: [ 1135.224799][T28719] [ 1135.227749][T28719] dump_stack_lvl+0x18c/0x250 [ 1135.232464][T28719] ? show_regs_print_info+0x20/0x20 [ 1135.237718][T28719] ? load_image+0x420/0x420 [ 1135.242251][T28719] panic+0x2dc/0x730 [ 1135.246177][T28719] ? __lock_acquire+0x7d40/0x7d40 [ 1135.251225][T28719] ? bpf_jit_dump+0xd0/0xd0 [ 1135.255761][T28719] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1135.261679][T28719] ? _raw_spin_unlock+0x40/0x40 [ 1135.266555][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1135.271697][T28719] check_panic_on_warn+0x84/0xa0 [ 1135.276663][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1135.281811][T28719] end_report+0x6f/0x130 [ 1135.286073][T28719] kasan_report+0x128/0x150 [ 1135.290605][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1135.295746][T28719] kasan_check_range+0x241/0x290 [ 1135.300704][T28719] ? __bpf_get_stackid+0x6bf/0x900 [ 1135.305832][T28719] __asan_memcpy+0x40/0x70 [ 1135.310268][T28719] __bpf_get_stackid+0x6bf/0x900 [ 1135.315234][T28719] bpf_get_stackid_pe+0x343/0x410 [ 1135.320285][T28719] bpf_prog_1649ecc1a5870555+0x29/0x39 [ 1135.325786][T28719] bpf_overflow_handler+0x43f/0x510 [ 1135.331009][T28719] ? bpf_overflow_handler+0xde/0x510 [ 1135.336321][T28719] ? tp_perf_event_destroy+0x20/0x20 [ 1135.341628][T28719] ? perf_trace_preemptirq_template+0x144/0x330 [ 1135.347906][T28719] ? __perf_event_account_interrupt+0x187/0x280 [ 1135.355127][T28719] __perf_event_overflow+0x447/0x630 [ 1135.360441][T28719] perf_swevent_event+0x319/0x570 [ 1135.365495][T28719] ? perf_tp_event+0x1520/0x1520 [ 1135.370462][T28719] ? perf_tp_event+0x13d7/0x1520 [ 1135.375462][T28719] ___perf_sw_event+0x4a7/0x730 [ 1135.380355][T28719] ? ___perf_sw_event+0x199/0x730 [ 1135.385425][T28719] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1135.391858][T28719] ? __put_user_4+0x11/0x20 [ 1135.396391][T28719] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1135.402398][T28719] ? lock_chain_count+0x20/0x20 [ 1135.407268][T28719] __perf_sw_event+0x139/0x270 [ 1135.412049][T28719] do_user_addr_fault+0x123e/0x12c0 [ 1135.417285][T28719] ? rcu_is_watching+0x15/0xb0 [ 1135.422068][T28719] exc_page_fault+0x64/0x100 [ 1135.426677][T28719] asm_exc_page_fault+0x26/0x30 [ 1135.431555][T28719] RIP: 0010:__put_user_4+0x11/0x20 [ 1135.436722][T28719] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1135.456349][T28719] RSP: 0018:ffffc90011e07c58 EFLAGS: 00050246 [ 1135.462454][T28719] RAX: 00000000000003df RBX: 0000000000000000 RCX: 0000000000000000 [ 1135.470474][T28719] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 1135.478468][T28719] RBP: ffffc90011e07d90 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 1135.486463][T28719] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 1ffff920023c0f94 [ 1135.494459][T28719] R13: dffffc0000000000 R14: 00000000ae12e400 R15: 00000000000003df [ 1135.502456][T28719] kernel_clone+0x36c/0x8a0 [ 1135.506987][T28719] ? create_io_thread+0x190/0x190 [ 1135.512034][T28719] ? perf_trace_preemptirq_template+0x269/0x330 [ 1135.518306][T28719] __x64_sys_clone+0x1b7/0x230 [ 1135.523096][T28719] ? __ia32_sys_vfork+0x140/0x140 [ 1135.528157][T28719] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1135.534077][T28719] do_syscall_64+0x55/0xa0 [ 1135.538511][T28719] ? clear_bhb_loop+0x40/0x90 [ 1135.543220][T28719] ? clear_bhb_loop+0x40/0x90 [ 1135.547922][T28719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.553842][T28719] RIP: 0033:0x7f73a399c819 [ 1135.558279][T28719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.577993][T28719] RSP: 002b:00007f73a4839fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1135.586426][T28719] RAX: ffffffffffffffda RBX: 00007f73a3c15fa0 RCX: 00007f73a399c819 [ 1135.594419][T28719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ae12e400 [ 1135.602409][T28719] RBP: 00007f73a3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1135.610405][T28719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1135.618399][T28719] R13: 00007f73a3c16038 R14: 00007f73a3c15fa0 R15: 00007ffeca5b0388 [ 1135.626408][T28719] [ 1135.630047][T28719] Kernel Offset: disabled [ 1135.634411][T28719] Rebooting in 86400 seconds..