last executing test programs: 24.529225067s ago: executing program 1 (id=1694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504fa5340000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10001001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 24.383652573s ago: executing program 1 (id=1697): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000400000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 24.138274584s ago: executing program 1 (id=1699): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r2], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000000000100ff7f00007f00000001000000b1f758c3d4d9d1e6857db329a48c55e62cd2c81784b78d66fb0467472aed13686a372e6d0ca119ad0282eab7e14afc54c85aaa6fad70a8a641d6f86a4a0637504d670a5a819e7d07909f3e4dab45d88cb624cb5c06849844625c2b0bc7baca322ec851fbe1c08bd6383be7dc404c85d92a26814fc8d3d7fa3b521bfbaf660356f9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x9, &(0x7f0000000c40)=r9, 0x4) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000080040000b0000000d000000a6640100", @ANYRES32=r7, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000300"/24, @ANYRES32=r11, @ANYBLOB], 0x50) 23.452456104s ago: executing program 3 (id=1705): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x1011000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.292415266s ago: executing program 3 (id=1707): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x1011000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 19.97636903s ago: executing program 3 (id=1709): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x82, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), 0x0, 0x0, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, 0xffffffffffffffff, 0x15, 0x2a, r0, @void, @void, @void, @value=r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140), 0x16) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040), 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 19.96702716s ago: executing program 1 (id=1711): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0xa, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = socket$kcm(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x8000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000000)="91c9fdd197f3ab9720584ce609f33903e6b5d0fcc1b29fb28462", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 19.632362405s ago: executing program 0 (id=1713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x50, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x38}, 0x0) close(0x3) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc202, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r3, r3}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000002740)={0x0, 0x39, &(0x7f0000000380)=[{&(0x7f0000000180)="2cd5", 0x2}], 0x1}, 0x24000801) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0={0x18, 0x0, 0x0, 0xf1}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x1b, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$sock_attach_bpf(r1, 0x6, 0xa, &(0x7f0000000100)=r0, 0x4) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_pressure(r0, &(0x7f0000000100)={'some', 0x20, 0x8, 0x20, 0x4}, 0x2f) 19.30257036s ago: executing program 0 (id=1715): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x0, 0x7266218f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.30185368s ago: executing program 4 (id=1716): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x5c17) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 19.29987792s ago: executing program 3 (id=1726): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x82, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r1 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000140), 0x16) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 19.211554034s ago: executing program 1 (id=1717): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_clone(0x82800, &(0x7f0000000500)="5d18cc705c29a39acb4c7c87d6c80271866f9676aef9f9c6ee7d8a95def5d50b8198dc7834dcf78fa2f5f21af9cb0f11b40675d17decc361dd2dcba9490cf2d62adb971de1dcf38b570d7db2a2099c31e805ae6f11c3ed5e401822092359804ac5041270ab05cefff8764cc4b4742d28a812100ef41a5f69af21168cd940ecdb8a1c3697271757474b068489640aa1ceaea9fc2971521a4cd58ed489ba0e06d9ab551b91d059a6ac50130ef65fc97e70af0f8e4db91d917ebf7a", 0xba, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000740)="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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffd15, 0x9}, 0x0, 0xc8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xf) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000002b00), 0x2, 0x0) close(r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0x8, 0x5, 0x4}, {0x7, 0x9c, 0x1}, {0x1, 0x0, 0xc}, {0xfff8, 0xb, 0x7, 0xd}]}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) 18.898306328s ago: executing program 2 (id=1718): perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff02000000ff8d000000000000000001"], 0xfdef) 18.62691054s ago: executing program 2 (id=1720): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x82, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, 0xffffffffffffffff, 0x15, 0x2a, r0, @void, @void, @void, @value=r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140), 0x16) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040), 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 18.62630699s ago: executing program 3 (id=1721): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000000)=@raw=[@generic={0xfc, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1, 0x0, 0x500}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, 0x0, 0x2040) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000), 0x8) 18.62566606s ago: executing program 4 (id=1722): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x2, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x6d}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x3}, {0x2, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x6d}, 0x28) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x2d}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@:D'], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@:D'], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8a82, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r8, 0x28, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300)}, 0x108000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffefffeffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 18.523075685s ago: executing program 0 (id=1723): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4000}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0xffffffb0}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.183805219s ago: executing program 0 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504fa5340000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10001001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 18.095881474s ago: executing program 2 (id=1725): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c8050000000038002900000003"], 0x5c8}, 0x0) 18.006523998s ago: executing program 1 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000600"/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', r0}, 0x18) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair(0x6, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000200), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async, rerun: 64) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) (rerun: 64) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x8, 0x1, 0x4d, 0xd, 0x0, 0x8083, 0x46e40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x61d, 0x2}, 0x100, 0x9, 0x101, 0x9, 0x2, 0xffff, 0xb509, 0x0, 0x1d29, 0x0, 0x8000}, r13, 0x5, r1, 0x1) 18.005609198s ago: executing program 0 (id=1728): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x40000000}, 0x94) 17.918759702s ago: executing program 3 (id=1729): r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000, 0x0, 0x23, &(0x7f0000000040), &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a", 0x0, 0x3}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000befd5022dffffffff9506a902d3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c810000000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x20, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 17.917804132s ago: executing program 2 (id=1739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000069006bcd8e3fe3dc6e000000008c000000007280", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504fa5340000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10001001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 17.860709584s ago: executing program 0 (id=1730): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0xa, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = socket$kcm(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x8000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000000)="91c9fdd197f3ab9720584ce609f33903e6b5d0fcc1b29fb28462", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 17.803478417s ago: executing program 4 (id=1731): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x82, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r1, 0xffffffffffffffff, 0x15, 0x2a, r0, @void, @void, @void, @value=r2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140), 0x16) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040), 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.112190096s ago: executing program 32 (id=1730): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0xa, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r3, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a40)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = socket$kcm(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x8000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1a, 0x0, &(0x7f0000000000)="91c9fdd197f3ab9720584ce609f33903e6b5d0fcc1b29fb28462", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) 1.976175792s ago: executing program 33 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000001000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000600"/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', r0}, 0x18) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair(0x6, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000200), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async, rerun: 64) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) (rerun: 64) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x8, 0x1, 0x4d, 0xd, 0x0, 0x8083, 0x46e40, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x61d, 0x2}, 0x100, 0x9, 0x101, 0x9, 0x2, 0xffff, 0xb509, 0x0, 0x1d29, 0x0, 0x8000}, r13, 0x5, r1, 0x1) 1.474742795s ago: executing program 2 (id=1734): r0 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f00000043c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r1}, 0x38) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r3 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x1, 0x2, 0x3, 0x8, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x2, 0x5, 0xd, 0x9}, {0x1, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x3, 0x200, 0x1, 0x2100, r2, 0x3d3, '\x00', r4, r5, 0x0, 0x3, 0x2}, 0x50) socket$kcm(0xa, 0x2, 0x73) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000043c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r1}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000, r1}, 0x38) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (async) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x1, 0x2, 0x3, 0x8, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x2, 0x5, 0xd, 0x9}, {0x1, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x3, 0x200, 0x1, 0x2100, r2, 0x3d3, '\x00', r4, r5, 0x0, 0x3, 0x2}, 0x50) (async) 845.618163ms ago: executing program 34 (id=1729): r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000, 0x0, 0x23, &(0x7f0000000040), &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a", 0x0, 0x3}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000befd5022dffffffff9506a902d3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c810000000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x20, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 648.908542ms ago: executing program 4 (id=1736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000001018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 510.846528ms ago: executing program 2 (id=1737): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x43, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_clone(0x82800, &(0x7f0000000500)="5d18cc705c29a39acb4c7c87d6c80271866f9676aef9f9c6ee7d8a95def5d50b8198dc7834dcf78fa2f5f21af9cb0f11b40675d17decc361dd2dcba9490cf2d62adb971de1dcf38b570d7db2a2099c31e805ae6f11c3ed5e401822092359804ac5041270ab05cefff8764cc4b4742d28a812100ef41a5f69af21168cd940ecdb8a1c3697271757474b068489640aa1ceaea9fc2971521a4cd58ed489ba0e06d9ab551b91d059a6ac50130ef65fc97e70af0f8e4db91d917ebf7a", 0xba, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000740)="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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffd15, 0x9}, 0x0, 0xc8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5b}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xf) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000002b00), 0x2, 0x0) close(r5) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0x8, 0x5, 0x4}, {0x7, 0x9c, 0x1}, {0x1, 0x0, 0xc}, {0xfff8, 0xb, 0x7, 0xd}]}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) 70.998197ms ago: executing program 4 (id=1738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000002018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 4 (id=1740): socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x85}], 0x1}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/time\x00') (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xfd, 0xfffffffffffffffc, &(0x7f0000000a40)="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", &(0x7f0000000140)=""/13, 0x0, 0x0, 0xad, 0x112, &(0x7f0000000240)="9cdc57e4a9c7fcb9b186c9bd43fa44b38bef6138ca1f6f08cdaacbcffe9a2ae0343debf4e6ce7818ec4261022c63c5174dbf51c34fd98db73c55431a897423936fe486079d14be4fdaa264f27421f79a60f4c7f8d297d74bc790de34386008fc17b9ca14491f71bbc7fd8367ce56a3fb28ba9d6d3b2c24568f8b891c71cab31229da7ca3687c49e4e9d44410b7fa88e3f5f4e437b5e143240b3bec30863d4b722b6ad3c8d882037a7daebcb362", &(0x7f0000000880)="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", 0x1, 0x0, 0x2}, 0x9) kernel console output (not intermixed with test programs): _0 [ 62.321230][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.347542][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.374630][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.391560][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.401069][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.408005][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.436581][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.447959][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.455434][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.463265][ T4286] device bridge_slave_0 entered promiscuous mode [ 62.476430][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.483534][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.491528][ T4286] device bridge_slave_1 entered promiscuous mode [ 62.530658][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.537793][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.545796][ T4275] device bridge_slave_0 entered promiscuous mode [ 62.556717][ T4284] team0: Port device team_slave_0 added [ 62.564385][ T4284] team0: Port device team_slave_1 added [ 62.587227][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.594474][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.602214][ T4275] device bridge_slave_1 entered promiscuous mode [ 62.624856][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.643677][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.665587][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.679942][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.687203][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.713320][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.730234][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.737869][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.746031][ T4277] device bridge_slave_0 entered promiscuous mode [ 62.755025][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.767081][ T4276] device hsr_slave_0 entered promiscuous mode [ 62.774197][ T4276] device hsr_slave_1 entered promiscuous mode [ 62.781506][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.788446][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.816158][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.832820][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.839869][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.849944][ T4277] device bridge_slave_1 entered promiscuous mode [ 62.881292][ T4286] team0: Port device team_slave_0 added [ 62.889555][ T4286] team0: Port device team_slave_1 added [ 62.907096][ T4275] team0: Port device team_slave_0 added [ 62.943686][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.953852][ T4275] team0: Port device team_slave_1 added [ 62.961028][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.017583][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.027203][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.053512][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.067652][ T4284] device hsr_slave_0 entered promiscuous mode [ 63.074849][ T4284] device hsr_slave_1 entered promiscuous mode [ 63.081434][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.089093][ T4284] Cannot create hsr debugfs directory [ 63.095151][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.102158][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.128110][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.141021][ T4277] team0: Port device team_slave_0 added [ 63.151983][ T4277] team0: Port device team_slave_1 added [ 63.158040][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.165137][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.191317][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.206519][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.213652][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.239625][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.315702][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.327305][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.353601][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.385621][ T4286] device hsr_slave_0 entered promiscuous mode [ 63.392658][ T4286] device hsr_slave_1 entered promiscuous mode [ 63.399039][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.406665][ T4286] Cannot create hsr debugfs directory [ 63.412585][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.419523][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.446379][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.481637][ T4275] device hsr_slave_0 entered promiscuous mode [ 63.488154][ T4275] device hsr_slave_1 entered promiscuous mode [ 63.494917][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.502600][ T4275] Cannot create hsr debugfs directory [ 63.567823][ T4277] device hsr_slave_0 entered promiscuous mode [ 63.574948][ T4277] device hsr_slave_1 entered promiscuous mode [ 63.581964][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.589516][ T4277] Cannot create hsr debugfs directory [ 63.611376][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 63.611386][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 63.611532][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 63.617544][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 63.623623][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 63.762329][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.778826][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.803353][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.825357][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.888616][ T4284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.909205][ T4284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.918430][ T4284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.943697][ T4284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.994317][ T4286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.016681][ T4286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.035753][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.046762][ T4286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.060086][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.074470][ T4286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.084280][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.094896][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.103743][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.112711][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.137325][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.145755][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.199268][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.208528][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.218742][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.225972][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.237857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.268488][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.280393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.290088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.299786][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306899][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.314900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.332562][ T4275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.361064][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.367935][ T4275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.377433][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.387439][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.396644][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.406698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.414559][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.422684][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.438289][ T4275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.451564][ T4275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.474467][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.483662][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.492547][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.500690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.509223][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.518176][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.526867][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.533962][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.546185][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.559157][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.590192][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.597292][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.606469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.615107][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.623577][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.633179][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.642094][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.649151][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.656715][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.684342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.733155][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.743026][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.751084][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.759627][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.769576][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.778603][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.788024][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.797694][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.806215][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.815076][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.823684][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.838835][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.854118][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.868114][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.888482][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.898478][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.914598][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.921725][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.960323][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.969309][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.993395][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.008076][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.017271][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.024407][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.038216][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.046388][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.059636][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.083052][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.098605][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.116481][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.131782][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.151939][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.158987][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.175992][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.185683][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.194503][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.202473][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.210571][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.220575][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.238206][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.267570][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.276269][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.284069][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.294636][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.303863][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.310992][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.341811][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.352301][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.363315][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.374591][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.385620][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.394714][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.402316][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.410995][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.419203][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.427818][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.436636][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.445402][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.454444][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.463051][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.479027][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.492911][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.522484][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.530314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.540249][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.549116][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.557914][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.567819][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.576394][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.584978][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.593794][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.602568][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.609657][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.617544][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.627038][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.635408][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.642467][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.650296][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.658944][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.667469][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.675239][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.691078][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 65.691113][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 65.697077][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 65.703259][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 65.709456][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 65.739982][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.761907][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.773414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.783741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.792126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.801753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.810422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.821260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.829747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.838133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.847265][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.856820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.865230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.890066][ T4276] device veth0_vlan entered promiscuous mode [ 65.905482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.915366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.930535][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.948381][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.989076][ T4284] device veth0_vlan entered promiscuous mode [ 66.019321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.044021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.057480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.066108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.074524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.084364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.093615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.101674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.109388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.121821][ T4284] device veth1_vlan entered promiscuous mode [ 66.138321][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.146632][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.157251][ T4276] device veth1_vlan entered promiscuous mode [ 66.196385][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.236140][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.252677][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.282998][ T4284] device veth0_macvtap entered promiscuous mode [ 66.293890][ T4284] device veth1_macvtap entered promiscuous mode [ 66.319350][ T4276] device veth0_macvtap entered promiscuous mode [ 66.336820][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.346595][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.357183][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.366374][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.376901][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.387253][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.422665][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.433371][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.442909][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.451268][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.460477][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.471319][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.479921][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.488926][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.498741][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.507614][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.515503][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.525963][ T4276] device veth1_macvtap entered promiscuous mode [ 66.542468][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.552322][ T4284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.567362][ T4284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.578971][ T4284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.594459][ T4284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.607334][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.621584][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.629345][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.638589][ T4286] device veth0_vlan entered promiscuous mode [ 66.672470][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.683738][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.696150][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.719300][ T4286] device veth1_vlan entered promiscuous mode [ 66.738367][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.747516][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.755658][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.764514][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.779549][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.795242][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.807834][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.828791][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.851192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.858594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.867286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.876309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.889136][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.898805][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.908096][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.918488][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.944515][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.958919][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.009532][ T4286] device veth0_macvtap entered promiscuous mode [ 67.027815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.037939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.047615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.074167][ T4286] device veth1_macvtap entered promiscuous mode [ 67.112067][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.132504][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.156796][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.181749][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.190380][ T4275] device veth0_vlan entered promiscuous mode [ 67.199008][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.207070][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.223221][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.236906][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.247759][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.250438][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.259193][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.277613][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.288204][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.299342][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.326636][ T4275] device veth1_vlan entered promiscuous mode [ 67.339202][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.347333][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.355811][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.364663][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.384098][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.394958][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.395456][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.409601][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.413095][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.430525][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.442093][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.468303][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.476547][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.484731][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.485006][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.500074][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.509129][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.517992][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.526968][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.536590][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.549804][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.561323][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.569994][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.579255][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.607001][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.617453][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.638882][ T4277] device veth0_vlan entered promiscuous mode [ 67.663033][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.672755][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.684717][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.694072][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.704476][ T4275] device veth0_macvtap entered promiscuous mode [ 67.718609][ T4277] device veth1_vlan entered promiscuous mode [ 67.752618][ T4275] device veth1_macvtap entered promiscuous mode [ 67.771583][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 67.777592][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 67.782275][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 67.785078][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 67.789751][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 67.860171][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.871456][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.886042][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.896524][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.906568][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.917866][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.928981][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.944783][ T4356] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 67.952960][ T4356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 67.964523][ T4356] device dummy0 entered promiscuous mode [ 67.972610][ T4356] bridge0: port 3(dummy0) entered blocking state [ 67.979083][ T4356] bridge0: port 3(dummy0) entered disabled state [ 67.986941][ T4356] bridge0: port 3(dummy0) entered blocking state [ 67.993472][ T4356] bridge0: port 3(dummy0) entered forwarding state [ 68.005456][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.016404][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.032902][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.062101][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.070272][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.086413][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.117169][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.118717][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.141640][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.143235][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.169390][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.181847][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.193292][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.203900][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.216259][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.250621][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.280158][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.290086][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.302531][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312537][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.321279][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.330044][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.363042][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.373802][ T4277] device veth0_macvtap entered promiscuous mode [ 68.376657][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.388937][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.412564][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.424955][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.437108][ T4368] netlink: 'syz.1.8': attribute type 11 has an invalid length. [ 68.447559][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.455379][ T4368] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.468721][ T4277] device veth1_macvtap entered promiscuous mode [ 68.544210][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.574465][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.585593][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.596437][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.607808][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.618559][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.628844][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.658010][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.670506][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.695122][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.700779][ C1] hrtimer: interrupt took 52343 ns [ 68.705893][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.722647][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.742058][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.755016][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.765575][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.776588][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.786752][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.797480][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.807902][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.831788][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.854606][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.873185][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.878809][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.892673][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.902748][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.917182][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.927254][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.940022][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.949115][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.967289][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.014906][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.045609][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.065694][ T4385] sctp: [Deprecated]: syz.3.10 (pid 4385) Use of int in max_burst socket option deprecated. [ 69.065694][ T4385] Use struct sctp_assoc_value instead [ 69.094923][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.123676][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.138012][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.166723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.190287][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.208167][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.244667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.265587][ T4367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.851548][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 69.851716][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 69.857592][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 69.863688][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 69.869571][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 71.139194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145803][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.781884][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.789647][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976310][ T4422] netlink: 'syz.0.18': attribute type 16 has an invalid length. [ 73.050319][ T4422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18'. [ 76.861043][ T4452] Zero length message leads to an empty skb [ 77.022335][ T4459] sctp: [Deprecated]: syz.1.29 (pid 4459) Use of int in max_burst socket option deprecated. [ 77.022335][ T4459] Use struct sctp_assoc_value instead [ 77.740550][ T4479] netlink: 'syz.2.36': attribute type 10 has an invalid length. [ 77.804766][ T4479] team0: Device veth1_vlan failed to register rx_handler [ 81.033365][ T4502] netlink: 'syz.4.44': attribute type 10 has an invalid length. [ 81.052906][ T4502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.44'. [ 81.124777][ T4502] device dummy0 entered promiscuous mode [ 81.144463][ T4502] bridge0: port 3(dummy0) entered blocking state [ 81.156158][ T4502] bridge0: port 3(dummy0) entered disabled state [ 81.174869][ T4502] bridge0: port 3(dummy0) entered blocking state [ 81.181582][ T4502] bridge0: port 3(dummy0) entered forwarding state [ 81.309470][ T4509] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.48'. [ 81.374681][ T22] cfg80211: failed to load regulatory.db [ 82.080745][ T4523] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.992901][ T4544] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 84.399896][ T4544] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.412987][ T4544] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.849459][ T4567] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 84.861454][ T4567] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.67'. [ 85.314968][ T4281] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 89.003423][ T4620] netlink: 'syz.4.84': attribute type 41 has an invalid length. [ 89.570025][ T4644] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.90'. [ 89.609096][ T4645] FAULT_INJECTION: forcing a failure. [ 89.609096][ T4645] name failslab, interval 1, probability 0, space 0, times 1 [ 89.630686][ T4647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.87'. [ 89.641068][ T4645] CPU: 1 PID: 4645 Comm: syz.1.89 Not tainted syzkaller #0 [ 89.642280][ T4639] netlink: 'syz.4.88': attribute type 7 has an invalid length. [ 89.648275][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.665886][ T4645] Call Trace: [ 89.669175][ T4645] [ 89.672117][ T4645] dump_stack_lvl+0x188/0x24e [ 89.676820][ T4645] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.682994][ T4645] ? show_regs_print_info+0x12/0x12 [ 89.688201][ T4645] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 89.694386][ T4645] should_fail_ex+0x390/0x4c0 [ 89.699090][ T4645] should_failslab+0x5/0x20 [ 89.703604][ T4645] slab_pre_alloc_hook+0x59/0x300 [ 89.708636][ T4645] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 89.714885][ T4645] kmem_cache_alloc+0x56/0x2f0 [ 89.719645][ T4645] ? skb_clone+0x1e7/0x370 [ 89.724067][ T4645] skb_clone+0x1e7/0x370 [ 89.728308][ T4645] bpf_clone_redirect+0x169/0x4a0 [ 89.733328][ T4645] ? ktime_get+0x247/0x270 [ 89.737743][ T4645] bpf_prog_6768863863774967+0x19/0x1d [ 89.743211][ T4645] bpf_test_run+0x2b6/0x830 [ 89.747728][ T4645] ? dst_hold+0xb0/0xb0 [ 89.751884][ T4645] ? eth_get_headlen+0x200/0x200 [ 89.756815][ T4645] ? __build_skb+0x24b/0x3b0 [ 89.761401][ T4645] ? convert___skb_to_skb+0x3d/0x580 [ 89.766684][ T4645] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 89.772074][ T4645] ? cpu_online+0xa0/0xa0 [ 89.776398][ T4645] bpf_prog_test_run+0x31c/0x390 [ 89.781334][ T4645] __sys_bpf+0x62b/0x780 [ 89.785580][ T4645] ? bpf_link_show_fdinfo+0x380/0x380 [ 89.790964][ T4645] ? lock_chain_count+0x20/0x20 [ 89.795819][ T4645] __x64_sys_bpf+0x78/0x90 [ 89.800239][ T4645] do_syscall_64+0x4c/0xa0 [ 89.804651][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 89.809322][ T4645] ? clear_bhb_loop+0x60/0xb0 [ 89.813996][ T4645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.819891][ T4645] RIP: 0033:0x7fc8a839e159 [ 89.824301][ T4645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.843897][ T4645] RSP: 002b:00007fc8a65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.852303][ T4645] RAX: ffffffffffffffda RBX: 00007fc8a8625fa0 RCX: 00007fc8a839e159 [ 89.860267][ T4645] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 89.868229][ T4645] RBP: 00007fc8a65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 89.876193][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.884156][ T4645] R13: 00007fc8a8626038 R14: 00007fc8a8625fa0 R15: 00007ffd120066e8 [ 89.892139][ T4645] [ 89.908857][ T4639] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.88'. [ 90.241458][ T4656] netlink: 'syz.3.93': attribute type 20 has an invalid length. [ 90.326716][ T4657] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.93'. [ 90.388794][ T4657] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.93'. [ 90.448904][ T4656] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.93'. [ 92.780353][ T4666] netlink: 'syz.0.95': attribute type 3 has an invalid length. [ 92.805938][ T4666] netlink: 'syz.0.95': attribute type 16 has an invalid length. [ 92.828260][ T4666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'. [ 92.852477][ T4667] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 92.883781][ T4669] device wlan1 entered promiscuous mode [ 92.918865][ T4667] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.97'. [ 93.259268][ T4663] syz.4.97 (4663) used greatest stack depth: 18128 bytes left [ 93.312606][ T4685] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.102'. [ 93.609377][ T4692] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 93.671998][ T4692] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.106'. [ 93.976084][ T4711] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 94.126955][ T4711] team0: Device wg1 is of different type [ 94.179475][ T4714] netlink: 'syz.2.112': attribute type 21 has an invalid length. [ 94.198867][ T4714] netlink: 'syz.2.112': attribute type 5 has an invalid length. [ 94.217935][ T4714] netlink: 'syz.2.112': attribute type 6 has an invalid length. [ 94.251539][ T4721] netlink: 'syz.1.116': attribute type 1 has an invalid length. [ 94.493046][ T4732] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 94.636021][ T4737] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 98.574620][ T4737] team0: Device nlmon0 is of different type [ 98.657111][ T4748] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 98.672555][ T4754] __nla_validate_parse: 6 callbacks suppressed [ 98.672568][ T4754] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.127'. [ 98.704157][ T4748] team0: Device vxcan1 is of different type [ 98.786203][ T4760] netlink: 152 bytes leftover after parsing attributes in process `syz.1.128'. [ 98.917662][ T4764] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.131'. [ 99.075978][ T4777] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 99.124363][ T4777] device macvlan0 entered promiscuous mode [ 99.175446][ T4777] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 99.243630][ T4783] device wlan1 entered promiscuous mode [ 99.331863][ T4786] IPv6: pim6reg1: Disabled Multicast RS [ 100.344374][ T4827] netlink: 132 bytes leftover after parsing attributes in process `syz.4.152'. [ 100.404525][ T4831] netlink: 'syz.4.152': attribute type 12 has an invalid length. [ 100.427299][ T4831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.152'. [ 100.456237][ T4832] netlink: 'syz.0.153': attribute type 4 has an invalid length. [ 100.475538][ T4832] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.153'. [ 101.069972][ T4843] sctp: [Deprecated]: syz.1.157 (pid 4843) Use of int in max_burst socket option deprecated. [ 101.069972][ T4843] Use struct sctp_assoc_value instead [ 104.437737][ T4905] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 105.192210][ T4905] device macvlan0 entered promiscuous mode [ 105.292366][ T4905] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 105.701404][ T4918] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 105.748223][ T4918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.182'. [ 107.185414][ T4938] netlink: 'syz.3.187': attribute type 10 has an invalid length. [ 107.259647][ T4938] device macvlan0 entered promiscuous mode [ 107.292963][ T4938] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 107.355182][ T4938] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 107.438983][ T4941] netlink: 'syz.4.190': attribute type 10 has an invalid length. [ 107.586648][ T4941] team0: Port device geneve1 added [ 107.605553][ T4944] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.189'. [ 107.727354][ T4949] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.192'. [ 107.846594][ T4952] netlink: 'syz.3.192': attribute type 10 has an invalid length. [ 107.873001][ T4952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.192'. [ 107.957537][ T4956] netlink: 14 bytes leftover after parsing attributes in process `syz.0.195'. [ 108.031895][ T4956] device bond0 entered promiscuous mode [ 108.105795][ T4956] device bond_slave_0 entered promiscuous mode [ 108.142371][ T4956] device bond_slave_1 entered promiscuous mode [ 108.228367][ T4966] netlink: 'syz.4.198': attribute type 10 has an invalid length. [ 108.261002][ T4966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 108.554265][ T4975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.202'. [ 108.662304][ T4975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.202'. [ 108.760155][ T4976] netlink: 60 bytes leftover after parsing attributes in process `syz.4.202'. [ 108.811648][ T4985] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.206'. [ 109.500663][ T4993] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 109.619651][ T4999] netlink: 'syz.3.212': attribute type 27 has an invalid length. [ 109.676964][ T4999] netlink: 'syz.3.212': attribute type 3 has an invalid length. [ 109.819381][ T4996] delete_channel: no stack [ 113.850434][ T5047] netlink: 'syz.0.222': attribute type 3 has an invalid length. [ 113.966217][ T5047] __nla_validate_parse: 8 callbacks suppressed [ 113.966231][ T5047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.222'. [ 115.076433][ T5061] netlink: 'syz.3.229': attribute type 4 has an invalid length. [ 115.090573][ T5061] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.229'. [ 115.214397][ T5052] netlink: 'syz.1.227': attribute type 10 has an invalid length. [ 115.241011][ T5052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.227'. [ 115.252138][ T5052] batman_adv: batadv0: Adding interface: veth0_vlan [ 115.272086][ T5052] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.402251][ T5052] batman_adv: batadv0: Interface activated: veth0_vlan [ 115.434590][ T5054] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 115.460691][ T5054] netlink: 'syz.1.227': attribute type 8 has an invalid length. [ 115.482360][ T5054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.227'. [ 115.510162][ T5065] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 115.558297][ T5065] team0: Device vxcan1 is of different type [ 116.221097][ T5089] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 116.228787][ T5089] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.241'. [ 116.352979][ T5073] delete_channel: no stack [ 116.501041][ T5092] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 117.044747][ T5116] netlink: 'syz.4.252': attribute type 6 has an invalid length. [ 117.070833][ T5116] netlink: 140 bytes leftover after parsing attributes in process `syz.4.252'. [ 117.210622][ T5123] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 117.435190][ T5131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.258'. [ 117.659186][ T5142] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 118.719879][ T5169] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.273'. [ 118.844120][ T5174] netlink: 144 bytes leftover after parsing attributes in process `syz.0.275'. [ 119.485231][ T5195] validate_nla: 2 callbacks suppressed [ 119.485264][ T5195] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 119.557914][ T5195] netlink: 119 bytes leftover after parsing attributes in process `syz.4.285'. [ 119.673946][ T5201] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 119.698475][ T5201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.286'. [ 119.745312][ T5201] bridge0: port 3(dummy0) entered blocking state [ 119.756539][ T5201] bridge0: port 3(dummy0) entered disabled state [ 119.764428][ T5201] device dummy0 entered promiscuous mode [ 119.770588][ T5201] bridge0: port 3(dummy0) entered blocking state [ 119.777070][ T5201] bridge0: port 3(dummy0) entered forwarding state [ 120.030532][ T5213] netlink: 'syz.2.290': attribute type 16 has an invalid length. [ 120.061975][ T5213] netlink: 156 bytes leftover after parsing attributes in process `syz.2.290'. [ 120.230352][ T5217] netlink: 'syz.2.290': attribute type 16 has an invalid length. [ 120.264258][ T5217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.290'. [ 120.477292][ T5226] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.297'. [ 120.532068][ T5228] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.297'. [ 121.647586][ T5253] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.304'. [ 121.664689][ T5252] netlink: 'syz.1.306': attribute type 10 has an invalid length. [ 121.712322][ T5252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 121.779027][ T5252] device team0 entered promiscuous mode [ 121.807316][ T5252] device team_slave_0 entered promiscuous mode [ 121.839583][ T5252] device team_slave_1 entered promiscuous mode [ 121.890757][ T5252] bridge0: port 3(team0) entered blocking state [ 121.921206][ T5252] bridge0: port 3(team0) entered disabled state [ 124.765037][ T5285] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 124.793009][ T5291] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.318'. [ 124.843456][ T5285] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 124.959672][ T5290] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 124.969699][ T5293] netlink: 'syz.0.316': attribute type 29 has an invalid length. [ 125.125608][ T5296] netlink: 'syz.1.320': attribute type 10 has an invalid length. [ 125.153883][ T5296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'. [ 125.193337][ T5296] device dummy0 entered promiscuous mode [ 125.237390][ T5296] bridge0: port 4(dummy0) entered blocking state [ 125.260061][ T5296] bridge0: port 4(dummy0) entered disabled state [ 125.656858][ T5319] netlink: 'syz.4.328': attribute type 21 has an invalid length. [ 125.672241][ T5319] netlink: 156 bytes leftover after parsing attributes in process `syz.4.328'. [ 125.724446][ T5319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.328'. [ 126.520289][ T5325] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.330'. [ 128.934892][ T5359] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 128.971719][ T5363] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.341'. [ 129.184257][ T5368] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 129.219650][ T5368] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 129.764714][ T5386] netlink: 'syz.4.350': attribute type 21 has an invalid length. [ 129.792084][ T5386] netlink: 156 bytes leftover after parsing attributes in process `syz.4.350'. [ 129.999692][ T5404] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.355'. [ 130.372362][ T5411] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 130.392483][ T5411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.357'. [ 130.539052][ T5418] netlink: 830 bytes leftover after parsing attributes in process `syz.0.361'. [ 130.583743][ T5418] netlink: 'syz.0.361': attribute type 21 has an invalid length. [ 130.602851][ T5418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 130.616120][ T5418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 131.107239][ T5430] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.366'. [ 131.627468][ T5432] netlink: 'syz.0.368': attribute type 4 has an invalid length. [ 131.661689][ T5432] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.368'. [ 131.960103][ T5442] netlink: 'syz.2.371': attribute type 3 has an invalid length. [ 132.029699][ T5442] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.371'. [ 132.088533][ T5462] raw_sendmsg: syz.4.373 forgot to set AF_INET. Fix it! [ 132.201542][ T5473] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 132.474567][ T5473] team0: Device vxcan1 is of different type [ 132.573932][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.580279][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.739418][ T5483] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.378'. [ 132.810930][ T5485] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 132.859140][ T5485] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.379'. [ 132.928800][ T5494] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 132.979347][ T5498] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 133.028138][ T5492] IPv6: Can't replace route, no match found [ 133.537241][ T5515] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 133.857155][ T5523] netlink: 'syz.3.392': attribute type 11 has an invalid length. [ 134.133047][ T5515] device wg1 entered promiscuous mode [ 134.162621][ T5515] team0: Device wg1 is of different type [ 134.293776][ T5522] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 134.950451][ T5541] : port 1(ip6gretap0) entered blocking state [ 134.992345][ T5541] : port 1(ip6gretap0) entered disabled state [ 135.048202][ T5541] device ip6gretap0 entered promiscuous mode [ 135.190737][ T5557] __nla_validate_parse: 6 callbacks suppressed [ 135.218249][ T5557] netlink: 103 bytes leftover after parsing attributes in process `syz.4.405'. [ 135.253470][ T5546] device ip6gretap0 left promiscuous mode [ 135.261329][ T5546] : port 1(ip6gretap0) entered disabled state [ 135.394781][ T5560] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 135.523792][ T5560] team0: Port device geneve1 added [ 135.625317][ T5568] bridge0: port 4(batadv0) entered blocking state [ 135.653055][ T5568] bridge0: port 4(batadv0) entered disabled state [ 135.698825][ T5568] device batadv0 entered promiscuous mode [ 135.708144][ T5568] bridge0: port 4(batadv0) entered blocking state [ 135.715092][ T5568] bridge0: port 4(batadv0) entered forwarding state [ 135.742403][ T5573] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.410'. [ 135.891174][ T4752] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 135.900626][ T4752] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 139.095277][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.103540][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.220440][ T5624] tap0: tun_chr_ioctl cmd 1074025677 [ 139.242942][ T5624] tap0: linktype set to 778 [ 139.489575][ T5633] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 139.529188][ T5633] pim6reg0: linktype set to 780 [ 140.170580][ T5656] sctp: [Deprecated]: syz.1.434 (pid 5656) Use of int in max_burst socket option deprecated. [ 140.170580][ T5656] Use struct sctp_assoc_value instead [ 140.757310][ T5663] netlink: 'syz.0.436': attribute type 29 has an invalid length. [ 140.851538][ T5663] netlink: 'syz.0.436': attribute type 29 has an invalid length. [ 140.901834][ T5666] netlink: 'syz.0.436': attribute type 29 has an invalid length. [ 141.232465][ T5683] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 141.281377][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.341382][ T5683] device bridge_slave_1 left promiscuous mode [ 141.358441][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.426180][ T5683] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.472466][ T5686] netlink: 'syz.0.443': attribute type 10 has an invalid length. [ 141.501518][ T5686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.443'. [ 141.521040][ T5699] netlink: 'syz.4.444': attribute type 11 has an invalid length. [ 141.581903][ T5699] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.444'. [ 141.592071][ T5686] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.605397][ T5686] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.774549][ T5686] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 142.506133][ T5727] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 142.581599][ T5727] team0: Port device geneve1 added [ 142.616685][ T5728] tap0: tun_chr_ioctl cmd 1074025677 [ 142.661285][ T5728] tap0: linktype set to 778 [ 143.076089][ T5744] Dead loop on virtual device ip6_vti0, fix it urgently! [ 143.341183][ T5749] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 144.634200][ T5761] netlink: 'syz.1.464': attribute type 5 has an invalid length. [ 144.925825][ T5773] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.466'. [ 145.066621][ T5777] tap0: tun_chr_ioctl cmd 1074025677 [ 145.092103][ T5777] tap0: linktype set to 778 [ 148.364940][ T5823] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.483'. [ 148.574814][ T5839] tap0: tun_chr_ioctl cmd 1074025677 [ 148.632669][ T5839] tap0: linktype set to 778 [ 149.208867][ T5852] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 151.910013][ T5922] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 151.938009][ T5922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.512'. [ 152.209688][ T5932] : port 1(ip6gretap0) entered blocking state [ 152.272879][ T5932] : port 1(ip6gretap0) entered disabled state [ 152.294617][ T5932] device ip6gretap0 entered promiscuous mode [ 152.374504][ T5936] device ip6gretap0 left promiscuous mode [ 152.416945][ T5936] : port 1(ip6gretap0) entered disabled state [ 152.558225][ T5945] netlink: 'syz.4.520': attribute type 3 has an invalid length. [ 152.682094][ T5945] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.520'. [ 152.760260][ T5942] netlink: 'syz.1.522': attribute type 1 has an invalid length. [ 152.787678][ T5942] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.522'. [ 153.185860][ T5963] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 153.275312][ T5967] netlink: 152 bytes leftover after parsing attributes in process `syz.4.528'. [ 153.340402][ T5964] netlink: 'syz.0.530': attribute type 11 has an invalid length. [ 153.391830][ T5964] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.530'. [ 153.461438][ T5960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.586256][ T5963] device wlan1 entered promiscuous mode [ 153.652063][ T5963] team0: Port device wlan1 added [ 154.609545][ T5997] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 154.883390][ T5997] team0: Device wg1 is of different type [ 155.042504][ T6012] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.546'. [ 155.509030][ T6032] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 155.530142][ T6032] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 155.555413][ T6032] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.551'. [ 155.606405][ T6032] nr0: port 1(hsr0) entered blocking state [ 155.629937][ T6032] nr0: port 1(hsr0) entered disabled state [ 155.661917][ T6032] device hsr0 entered promiscuous mode [ 155.679680][ T6033] nr0: port 1(hsr0) entered blocking state [ 155.685653][ T6033] nr0: port 1(hsr0) entered forwarding state [ 158.097219][ T6047] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 158.287787][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.305256][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.485435][ T6056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.492951][ T6056] IPv6: NLM_F_CREATE should be set when creating new route [ 158.500567][ T6056] IPv6: NLM_F_CREATE should be set when creating new route [ 158.508170][ T6056] IPv6: NLM_F_CREATE should be set when creating new route [ 158.828273][ T6064] netlink: 'syz.1.560': attribute type 10 has an invalid length. [ 158.879865][ T6064] team0: Device wg1 is of different type [ 158.960560][ T6066] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 159.038975][ T6067] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.570'. [ 159.735774][ T6101] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 160.315001][ T6111] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.576'. [ 160.668714][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.712090][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.741405][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.807414][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.876674][ T6124] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 160.892247][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.933632][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 160.971040][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 161.001539][ T6120] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.580'. [ 161.131751][ T6133] Dead loop on virtual device ip6_vti0, fix it urgently! [ 161.552518][ T6142] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 162.537150][ T6175] netlink: 'syz.2.603': attribute type 10 has an invalid length. [ 163.790120][ T6192] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 163.825926][ T6192] netlink: 'syz.1.607': attribute type 15 has an invalid length. [ 163.835196][ T6192] netlink: 'syz.1.607': attribute type 16 has an invalid length. [ 163.844498][ T6192] netlink: 'syz.1.607': attribute type 6 has an invalid length. [ 163.874060][ T6195] device bond0 entered promiscuous mode [ 163.879722][ T6195] device bond_slave_0 entered promiscuous mode [ 163.905692][ T6192] netlink: 'syz.1.607': attribute type 15 has an invalid length. [ 163.914507][ T6195] device bond_slave_1 entered promiscuous mode [ 163.935305][ T6192] netlink: 'syz.1.607': attribute type 16 has an invalid length. [ 163.937000][ T6195] device team0 entered promiscuous mode [ 163.959068][ T6195] device team_slave_0 entered promiscuous mode [ 163.979372][ T6195] device team_slave_1 entered promiscuous mode [ 164.041142][ T6192] netlink: 'syz.1.607': attribute type 20 has an invalid length. [ 164.048937][ T6192] netlink: 'syz.1.607': attribute type 21 has an invalid length. [ 164.060855][ T6192] __nla_validate_parse: 63 callbacks suppressed [ 164.060866][ T6192] netlink: 13226 bytes leftover after parsing attributes in process `syz.1.607'. [ 164.620260][ T6224] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.685867][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.619'. [ 165.158512][ T6237] netlink: 147828 bytes leftover after parsing attributes in process `syz.4.623'. [ 165.377052][ T6255] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.631'. [ 165.628607][ T6261] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.643'. [ 165.753806][ T6266] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.633'. [ 166.046898][ T6276] validate_nla: 6 callbacks suppressed [ 166.046913][ T6276] netlink: 'syz.2.639': attribute type 29 has an invalid length. [ 166.074960][ T6276] netlink: 'syz.2.639': attribute type 3 has an invalid length. [ 166.111200][ T6276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.639'. [ 168.124189][ T4281] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 168.131819][ T4281] Bluetooth: hci1: Invalid handle: 0x5393 > 0x0eff [ 170.034450][ T6296] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.647'. [ 170.051231][ T6318] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.656'. [ 170.062894][ T6324] netlink: 'syz.4.656': attribute type 10 has an invalid length. [ 170.070637][ T6324] netlink: 156 bytes leftover after parsing attributes in process `syz.4.656'. [ 170.798477][ T6376] Ÿ: renamed from syzkaller0 [ 170.923578][ T6386] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.677'. [ 170.956876][ T6388] FAULT_INJECTION: forcing a failure. [ 170.956876][ T6388] name failslab, interval 1, probability 0, space 0, times 0 [ 171.000410][ T6388] CPU: 1 PID: 6388 Comm: syz.0.679 Not tainted syzkaller #0 [ 171.007731][ T6388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.017808][ T6388] Call Trace: [ 171.021100][ T6388] [ 171.024042][ T6388] dump_stack_lvl+0x188/0x24e [ 171.028743][ T6388] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 171.034915][ T6388] ? show_regs_print_info+0x12/0x12 [ 171.040130][ T6388] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 171.046307][ T6388] should_fail_ex+0x390/0x4c0 [ 171.051008][ T6388] should_failslab+0x5/0x20 [ 171.055524][ T6388] slab_pre_alloc_hook+0x59/0x300 [ 171.060564][ T6388] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 171.066127][ T6388] __kmem_cache_alloc_node+0x4f/0x270 [ 171.071509][ T6388] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 171.077051][ T6388] __kmalloc+0xa3/0x240 [ 171.081207][ T6388] bpf_prog_test_run_skb+0x23e/0x18e0 [ 171.086573][ T6388] ? __fget_files+0x28/0x460 [ 171.091165][ T6388] ? __fget_files+0x3fc/0x460 [ 171.095841][ T6388] ? cpu_online+0xa0/0xa0 [ 171.100162][ T6388] bpf_prog_test_run+0x31c/0x390 [ 171.105096][ T6388] __sys_bpf+0x62b/0x780 [ 171.109343][ T6388] ? bpf_link_show_fdinfo+0x380/0x380 [ 171.114720][ T6388] ? lock_chain_count+0x20/0x20 [ 171.119569][ T6388] __x64_sys_bpf+0x78/0x90 [ 171.123986][ T6388] do_syscall_64+0x4c/0xa0 [ 171.128392][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 171.133059][ T6388] ? clear_bhb_loop+0x60/0xb0 [ 171.137725][ T6388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.143623][ T6388] RIP: 0033:0x7f8a58b9e159 [ 171.148029][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.167624][ T6388] RSP: 002b:00007f8a59a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.176037][ T6388] RAX: ffffffffffffffda RBX: 00007f8a58e25fa0 RCX: 00007f8a58b9e159 [ 171.183996][ T6388] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 171.191956][ T6388] RBP: 00007f8a59a40090 R08: 0000000000000000 R09: 0000000000000000 [ 171.199916][ T6388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.207874][ T6388] R13: 00007f8a58e26038 R14: 00007f8a58e25fa0 R15: 00007ffdc461ec38 [ 171.215842][ T6388] [ 171.582375][ T6404] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 171.609022][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.681'. [ 172.620165][ T6410] netlink: 'syz.0.684': attribute type 7 has an invalid length. [ 172.632944][ T6410] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.684'. [ 174.200551][ T6424] netlink: 'syz.3.689': attribute type 4 has an invalid length. [ 174.229827][ T6424] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.689'. [ 174.275924][ T6426] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.690'. [ 175.229951][ T6452] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 175.266946][ T6452] device vxcan1 entered promiscuous mode [ 175.283261][ T6452] team0: Device vxcan1 is of different type [ 175.538088][ T6467] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.704'. [ 175.602538][ T6462] netlink: 'syz.3.705': attribute type 4 has an invalid length. [ 175.620413][ T6462] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.705'. [ 175.877157][ T6476] netlink: 'syz.2.710': attribute type 10 has an invalid length. [ 175.938152][ T6476] device hsr0 entered promiscuous mode [ 176.040749][ T6476] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.054316][ T6476] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 176.083106][ T6476] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 176.122987][ T6476] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 176.634767][ T6508] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 176.675818][ T6508] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.720'. [ 176.818717][ T6519] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.825395][ T6519] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.831810][ T6520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.834554][ T6521] netlink: 'syz.1.721': attribute type 3 has an invalid length. [ 176.838177][ T6520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.910095][ T6521] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.721'. [ 176.947116][ T6515] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.722'. [ 177.257230][ T6534] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 178.039100][ T6534] device wg1 entered promiscuous mode [ 178.071619][ T6534] team0: Device wg1 is of different type [ 178.439018][ T6566] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.738'. [ 178.470298][ T6562] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.736'. [ 178.529610][ T6568] netlink: 152 bytes leftover after parsing attributes in process `syz.2.739'. [ 179.235549][ T6588] netlink: 'syz.4.748': attribute type 10 has an invalid length. [ 179.407147][ T6589] netlink: 'syz.3.747': attribute type 3 has an invalid length. [ 179.407315][ T6588] team0: Device wg1 is of different type [ 179.424370][ T6589] netlink: 'syz.3.747': attribute type 304 has an invalid length. [ 179.667971][ T6598] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.751'. [ 179.906133][ T6608] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.755'. [ 180.091372][ T6614] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 180.365020][ T6625] netlink: 'syz.0.763': attribute type 16 has an invalid length. [ 180.393704][ T6625] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 181.564186][ T6667] __nla_validate_parse: 3 callbacks suppressed [ 181.564216][ T6667] netlink: 2631 bytes leftover after parsing attributes in process `syz.3.781'. [ 181.608486][ T6671] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.782'. [ 181.849691][ T6678] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.787'. [ 182.227812][ T6694] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 182.255442][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.790'. [ 183.944196][ T6715] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.796'. [ 184.070014][ T6717] sctp: [Deprecated]: syz.1.797 (pid 6717) Use of int in max_burst socket option deprecated. [ 184.070014][ T6717] Use struct sctp_assoc_value instead [ 184.398258][ T6730] netlink: 'syz.4.803': attribute type 2 has an invalid length. [ 184.429880][ T6730] device 0 entered promiscuous mode [ 184.846821][ T6744] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.808'. [ 185.140337][ T4281] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 185.387873][ T6762] Dead loop on virtual device ip6_vti0, fix it urgently! [ 185.845323][ T6774] delete_channel: no stack [ 185.854905][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 185.864666][ T6787] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.822'. [ 185.931197][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 185.937243][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 185.943515][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 185.943674][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 186.622305][ T6807] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.831'. [ 186.717057][ T6810] netlink: 'syz.1.833': attribute type 10 has an invalid length. [ 188.496745][ T6810] device geneve1 entered promiscuous mode [ 188.531784][ T6810] team0: Port device geneve1 added [ 188.538325][ T6818] netlink: 'syz.4.834': attribute type 10 has an invalid length. [ 188.601018][ T6818] team0: Device wg1 is of different type [ 188.774714][ T6825] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.836'. [ 189.306669][ T6838] netlink: 14 bytes leftover after parsing attributes in process `syz.2.841'. [ 191.687976][ T6838] device bond0 entered promiscuous mode [ 191.693969][ T6838] device bond_slave_0 entered promiscuous mode [ 191.700368][ T6838] device bond_slave_1 entered promiscuous mode [ 191.746661][ T6838] device bridge_slave_1 entered promiscuous mode [ 192.177097][ T6853] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 192.221822][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.847'. [ 193.153096][ T6862] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.850'. [ 193.413734][ T6880] netlink: 'syz.3.856': attribute type 21 has an invalid length. [ 193.816395][ T6898] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.865'. [ 193.881949][ T6902] netlink: 128 bytes leftover after parsing attributes in process `syz.1.866'. [ 193.939976][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 193.971674][ T6902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.015657][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.021991][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.112744][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.129532][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.148289][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.159359][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.171343][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.182205][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.866'. [ 194.316407][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 194.952743][ T6933] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 196.797763][ T6990] netlink: 'syz.2.898': attribute type 3 has an invalid length. [ 198.038851][ T6970] __nla_validate_parse: 30 callbacks suppressed [ 198.038861][ T6970] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.891'. [ 198.054948][ T6975] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 198.064667][ T6975] netlink: 156 bytes leftover after parsing attributes in process `syz.3.891'. [ 198.077731][ T6978] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.894'. [ 198.105305][ T6996] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 198.472807][ T7006] netlink: 'syz.2.904': attribute type 10 has an invalid length. [ 198.705289][ T7006] team0: Device wg1 is of different type [ 198.856187][ T7021] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 199.186193][ T7036] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.914'. [ 199.234036][ T7038] FAULT_INJECTION: forcing a failure. [ 199.234036][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.316212][ T7038] CPU: 1 PID: 7038 Comm: syz.2.915 Not tainted syzkaller #0 [ 199.323532][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.333594][ T7038] Call Trace: [ 199.336877][ T7038] [ 199.339815][ T7038] dump_stack_lvl+0x188/0x24e [ 199.344505][ T7038] ? show_regs_print_info+0x12/0x12 [ 199.349713][ T7038] ? load_image+0x410/0x410 [ 199.354229][ T7038] ? __lock_acquire+0x7c40/0x7c40 [ 199.359278][ T7038] should_fail_ex+0x390/0x4c0 [ 199.363973][ T7038] _copy_from_user+0x2c/0x170 [ 199.368662][ T7038] bpf_prog_test_run_skb+0x263/0x18e0 [ 199.374046][ T7038] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 199.380205][ T7038] ? lockdep_hardirqs_on+0x94/0x140 [ 199.385418][ T7038] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 199.391598][ T7038] ? cpu_online+0xa0/0xa0 [ 199.395942][ T7038] bpf_prog_test_run+0x31c/0x390 [ 199.400895][ T7038] __sys_bpf+0x62b/0x780 [ 199.405151][ T7038] ? bpf_link_show_fdinfo+0x380/0x380 [ 199.410552][ T7038] ? lock_chain_count+0x20/0x20 [ 199.415411][ T7038] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 199.421415][ T7038] __x64_sys_bpf+0x78/0x90 [ 199.425844][ T7038] do_syscall_64+0x4c/0xa0 [ 199.430268][ T7038] ? clear_bhb_loop+0x60/0xb0 [ 199.434952][ T7038] ? clear_bhb_loop+0x60/0xb0 [ 199.439640][ T7038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.445545][ T7038] RIP: 0033:0x7fe3e299e159 [ 199.449973][ T7038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.469586][ T7038] RSP: 002b:00007fe3e3946028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.478010][ T7038] RAX: ffffffffffffffda RBX: 00007fe3e2c25fa0 RCX: 00007fe3e299e159 [ 199.485985][ T7038] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 199.493965][ T7038] RBP: 00007fe3e3946090 R08: 0000000000000000 R09: 0000000000000000 [ 199.501941][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.509917][ T7038] R13: 00007fe3e2c26038 R14: 00007fe3e2c25fa0 R15: 00007ffca29540c8 [ 199.517911][ T7038] [ 200.252460][ T7049] netlink: 'syz.3.918': attribute type 7 has an invalid length. [ 200.300514][ T7049] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.918'. [ 200.724589][ T7053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.919'. [ 202.737157][ T7066] netlink: 'syz.0.922': attribute type 4 has an invalid length. [ 202.891174][ T7066] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.922'. [ 203.046425][ T7071] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.927'. [ 203.347472][ T7075] netlink: 'syz.4.929': attribute type 2 has an invalid length. [ 203.421981][ T7090] netlink: 144 bytes leftover after parsing attributes in process `syz.3.934'. [ 203.473027][ T7088] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 203.498373][ T7088] team0: Device vxcan1 is of different type [ 203.814802][ T7107] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.940'. [ 204.248837][ T7114] netlink: 'syz.0.943': attribute type 4 has an invalid length. [ 204.331029][ T7114] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.943'. [ 204.433428][ T7123] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.947'. [ 204.973977][ T7139] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.950'. [ 205.142244][ T7145] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.953'. [ 205.166286][ T7148] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 205.193567][ T7148] netlink: 156 bytes leftover after parsing attributes in process `syz.1.954'. [ 205.259765][ T7133] netlink: 'syz.0.950': attribute type 21 has an invalid length. [ 205.281117][ T7133] netlink: 'syz.0.950': attribute type 7 has an invalid length. [ 205.823153][ T7161] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 205.848148][ T7161] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.958'. [ 205.943042][ T7167] netlink: 'syz.0.960': attribute type 3 has an invalid length. [ 205.950722][ T7167] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.960'. [ 206.528066][ T7185] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 206.911814][ T7185] team0: Device wg1 is of different type [ 206.973349][ T7191] netlink: 'syz.0.969': attribute type 39 has an invalid length. [ 207.087431][ T7191] device hsr_slave_1 left promiscuous mode [ 207.433921][ T7199] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 207.473426][ T7199] openvswitch: netlink: Flow key attr not present in new flow. [ 208.220505][ T7211] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.244921][ T7213] __nla_validate_parse: 3 callbacks suppressed [ 208.244934][ T7213] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.980'. [ 209.337848][ T7256] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.995'. [ 210.571938][ T5667] wlan1: Trigger new scan to find an IBSS to join [ 211.046702][ T7293] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1008'. [ 211.280652][ T7298] netlink: 'syz.2.1012': attribute type 17 has an invalid length. [ 211.300197][ T7298] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1012'. [ 211.650668][ T7317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1018'. [ 212.098335][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.117392][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.209052][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.240203][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.297105][ T7323] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 212.326639][ T7323] batman_adv: batadv0: Removing interface: veth0_vlan [ 212.640448][ T7328] netlink: 'syz.1.1021': attribute type 21 has an invalid length. [ 212.671092][ T7328] netlink: 'syz.1.1021': attribute type 4 has an invalid length. [ 212.681355][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1021'. [ 212.722902][ T7332] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1024'. [ 212.735583][ T7336] netlink: 'syz.2.1025': attribute type 10 has an invalid length. [ 212.765296][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1025'. [ 213.215267][ T7350] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1031'. [ 213.640886][ T5667] wlan1: Trigger new scan to find an IBSS to join [ 214.014127][ T7366] sctp: [Deprecated]: syz.0.1036 (pid 7366) Use of int in max_burst socket option deprecated. [ 214.014127][ T7366] Use struct sctp_assoc_value instead [ 214.406685][ T7371] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1038'. [ 215.426996][ T7401] netlink: 'syz.0.1049': attribute type 19 has an invalid length. [ 215.471973][ T7401] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1049'. [ 215.513120][ T7403] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1050'. [ 215.849584][ T7417] netlink: 'syz.1.1053': attribute type 4 has an invalid length. [ 215.901267][ T7417] netlink: 'syz.1.1053': attribute type 26 has an invalid length. [ 215.927684][ T7417] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1053'. [ 216.024002][ T7419] netlink: 'syz.2.1055': attribute type 10 has an invalid length. [ 216.232869][ T7431] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.657301][ T4752] wlan1: Trigger new scan to find an IBSS to join [ 216.915874][ T7445] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1064'. [ 217.318092][ T7458] netlink: 'syz.2.1068': attribute type 3 has an invalid length. [ 217.397373][ T7458] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1068'. [ 218.636068][ T4752] wlan1: Creating new IBSS network, BSSID 46:22:fd:4c:dc:a6 [ 219.119129][ T7494] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 219.160488][ T7497] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1078'. [ 221.946799][ T7539] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1091'. [ 222.533409][ T7548] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 222.560958][ T7548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1093'. [ 223.488456][ T7571] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1104'. [ 224.155467][ T7581] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1107'. [ 224.235408][ T7581] tc_dump_action: action bad kind [ 224.577568][ T7588] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1109'. [ 228.606429][ T7625] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 228.907100][ T7628] delete_channel: no stack [ 229.046176][ T7637] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1117'. [ 232.964629][ T7677] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1139'. [ 233.140563][ T7685] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1142'. [ 236.715299][ T7714] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 236.728119][ T7713] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1152'. [ 236.789682][ T7712] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1153'. [ 236.899420][ T7716] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 236.910988][ T7716] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1153'. [ 237.038685][ T7722] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1157'. [ 237.055375][ T7727] netlink: 'syz.2.1159': attribute type 10 has an invalid length. [ 237.230298][ T7733] FAULT_INJECTION: forcing a failure. [ 237.230298][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 237.256085][ T7733] CPU: 1 PID: 7733 Comm: syz.3.1162 Not tainted syzkaller #0 [ 237.263487][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.273550][ T7733] Call Trace: [ 237.276840][ T7733] [ 237.279778][ T7733] dump_stack_lvl+0x188/0x24e [ 237.284474][ T7733] ? show_regs_print_info+0x12/0x12 [ 237.289689][ T7733] ? load_image+0x410/0x410 [ 237.294212][ T7733] ? __might_sleep+0xd0/0xd0 [ 237.298816][ T7733] ? __lock_acquire+0x7c40/0x7c40 [ 237.303864][ T7733] should_fail_ex+0x390/0x4c0 [ 237.308574][ T7733] should_failslab+0x5/0x20 [ 237.313091][ T7733] slab_pre_alloc_hook+0x59/0x300 [ 237.318135][ T7733] ? sk_prot_alloc+0xe7/0x210 [ 237.322835][ T7733] __kmem_cache_alloc_node+0x4f/0x270 [ 237.328220][ T7733] ? sk_prot_alloc+0xe7/0x210 [ 237.332910][ T7733] __kmalloc+0xa3/0x240 [ 237.337082][ T7733] sk_prot_alloc+0xe7/0x210 [ 237.341596][ T7733] ? sk_alloc+0x20/0x330 [ 237.345852][ T7733] sk_alloc+0x36/0x330 [ 237.349935][ T7733] ? bpf_ctx_init+0x154/0x190 [ 237.354629][ T7733] bpf_prog_test_run_skb+0x36d/0x18e0 [ 237.360022][ T7733] ? lockdep_hardirqs_on+0x94/0x140 [ 237.365256][ T7733] ? cpu_online+0xa0/0xa0 [ 237.369599][ T7733] bpf_prog_test_run+0x31c/0x390 [ 237.374561][ T7733] __sys_bpf+0x62b/0x780 [ 237.378821][ T7733] ? bpf_link_show_fdinfo+0x380/0x380 [ 237.384219][ T7733] ? lock_chain_count+0x20/0x20 [ 237.389091][ T7733] __x64_sys_bpf+0x78/0x90 [ 237.393517][ T7733] do_syscall_64+0x4c/0xa0 [ 237.397948][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 237.402636][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 237.407323][ T7733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.413233][ T7733] RIP: 0033:0x7f9fb9b9e159 [ 237.417659][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.437274][ T7733] RSP: 002b:00007f9fbaa6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.445702][ T7733] RAX: ffffffffffffffda RBX: 00007f9fb9e25fa0 RCX: 00007f9fb9b9e159 [ 237.453683][ T7733] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 237.461665][ T7733] RBP: 00007f9fbaa6d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.469642][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.477622][ T7733] R13: 00007f9fb9e26038 R14: 00007f9fb9e25fa0 R15: 00007fffe228f538 [ 237.485619][ T7733] [ 237.875811][ T7751] netlink: 'syz.3.1166': attribute type 7 has an invalid length. [ 237.902966][ T7751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1166'. [ 238.371155][ T7757] netlink: 'syz.4.1167': attribute type 4 has an invalid length. [ 238.379838][ T7757] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1167'. [ 238.836121][ T7766] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1170'. [ 239.962179][ T7792] netlink: 'syz.4.1175': attribute type 2 has an invalid length. [ 240.074319][ T7797] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1180'. [ 240.482557][ T7810] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 240.502107][ T7810] team0: Device vxcan1 is of different type [ 240.686697][ T7809] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1184'. [ 240.748730][ T7815] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 240.900506][ T7815] device geneve1 entered promiscuous mode [ 240.985514][ T7815] team0: Port device geneve1 added [ 241.003953][ T7817] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 241.437946][ T7833] netlink: 'syz.0.1191': attribute type 4 has an invalid length. [ 241.456331][ T7833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1191'. [ 241.972713][ T7857] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1200'. [ 242.088816][ T7861] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 242.121147][ T7861] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1202'. [ 243.060461][ T7872] netlink: 'syz.3.1207': attribute type 3 has an invalid length. [ 243.088519][ T7872] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1207'. [ 243.396085][ T7889] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1213'. [ 243.535642][ T7891] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 243.568084][ T7891] team0: Device wg1 is of different type [ 244.225712][ T7910] sock: sock_set_timeout: `syz.2.1220' (pid 7910) tries to set negative timeout [ 244.354657][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 244.625525][ T7925] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1227'. [ 244.648772][ T7926] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1225'. [ 247.019616][ T7941] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 247.045210][ T7941] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.054424][ T7941] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.063530][ T7941] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.073188][ T7941] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.380116][ T7946] netlink: 'syz.4.1232': attribute type 10 has an invalid length. [ 247.526404][ T7946] team0: Device wg1 is of different type [ 247.622330][ T7951] device wlan1 entered promiscuous mode [ 247.881105][ T7965] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1239'. [ 248.448243][ T7983] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 248.576986][ T7983] team0: Device wg1 is of different type [ 249.077259][ T7999] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1253'. [ 250.314896][ T8047] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1267'. [ 250.619266][ T8058] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 250.640936][ T8058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1272'. [ 250.723360][ T8062] sctp: [Deprecated]: syz.3.1275 (pid 8062) Use of int in max_burst socket option deprecated. [ 250.723360][ T8062] Use struct sctp_assoc_value instead [ 251.103382][ T8080] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1278'. [ 252.410299][ T8098] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1284'. [ 253.406321][ T8123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.912222][ T8139] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1297'. [ 254.478387][ T8155] Dead loop on virtual device ip6_vti0, fix it urgently! [ 254.729444][ T8152] À: port 1(vlan0) entered blocking state [ 254.745671][ T8152] À: port 1(vlan0) entered disabled state [ 254.794674][ T8152] device vlan0 entered promiscuous mode [ 254.876447][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 254.966402][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.042246][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.095596][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.131369][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.180599][ T8175] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1310'. [ 255.195560][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.229073][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.253048][ T8164] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1307'. [ 255.453574][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.459930][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.940105][ T4285] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 256.873973][ T8214] netlink: 'syz.3.1323': attribute type 10 has an invalid length. [ 257.315214][ T8233] netlink: 'syz.3.1330': attribute type 5 has an invalid length. [ 259.134021][ T8259] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 259.341168][ T8260] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 260.195362][ T8259] netlink: 'syz.2.1336': attribute type 29 has an invalid length. [ 260.650552][ T8274] __nla_validate_parse: 59 callbacks suppressed [ 260.650570][ T8274] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1341'. [ 260.812808][ T8282] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 260.842972][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1343'. [ 260.896497][ T8282] device dummy0 entered promiscuous mode [ 260.912051][ T8282] bridge0: port 3(dummy0) entered blocking state [ 260.924361][ T8282] bridge0: port 3(dummy0) entered disabled state [ 261.323153][ T8299] netlink: 'syz.0.1347': attribute type 29 has an invalid length. [ 261.396987][ T8299] netlink: 'syz.0.1347': attribute type 3 has an invalid length. [ 261.481152][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1347'. [ 261.683344][ T8309] netlink: 'syz.2.1352': attribute type 3 has an invalid length. [ 261.726881][ T8309] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1352'. [ 262.062113][ T8320] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1356'. [ 262.333176][ T8333] netlink: 'syz.4.1359': attribute type 10 has an invalid length. [ 262.365360][ T8329] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1358'. [ 262.366982][ T8333] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1359'. [ 263.440476][ T8357] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 263.472093][ T8359] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1371'. [ 265.313160][ T8407] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1387'. [ 266.430395][ T8446] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1401'. [ 266.830904][ T8455] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 267.477777][ T8469] FAULT_INJECTION: forcing a failure. [ 267.477777][ T8469] name failslab, interval 1, probability 0, space 0, times 0 [ 267.491032][ T8469] CPU: 0 PID: 8469 Comm: syz.0.1408 Not tainted syzkaller #0 [ 267.498423][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.508489][ T8469] Call Trace: [ 267.511780][ T8469] [ 267.514720][ T8469] dump_stack_lvl+0x188/0x24e [ 267.519414][ T8469] ? show_regs_print_info+0x12/0x12 [ 267.524628][ T8469] ? load_image+0x410/0x410 [ 267.529153][ T8469] ? __lock_acquire+0x7c40/0x7c40 [ 267.534211][ T8469] should_fail_ex+0x390/0x4c0 [ 267.538910][ T8469] should_failslab+0x5/0x20 [ 267.543422][ T8469] slab_pre_alloc_hook+0x59/0x300 [ 267.548463][ T8469] ? security_sk_alloc+0x47/0x130 [ 267.553511][ T8469] __kmem_cache_alloc_node+0x4f/0x270 [ 267.558902][ T8469] ? security_sk_alloc+0x47/0x130 [ 267.563945][ T8469] __kmalloc+0xa3/0x240 [ 267.568119][ T8469] ? sk_prot_alloc+0xe7/0x210 [ 267.572819][ T8469] security_sk_alloc+0x47/0x130 [ 267.577694][ T8469] sk_prot_alloc+0x101/0x210 [ 267.582299][ T8469] ? sk_alloc+0x20/0x330 [ 267.586559][ T8469] sk_alloc+0x36/0x330 [ 267.590644][ T8469] ? bpf_ctx_init+0x154/0x190 [ 267.595340][ T8469] bpf_prog_test_run_skb+0x36d/0x18e0 [ 267.600729][ T8469] ? __fget_files+0x28/0x460 [ 267.605328][ T8469] ? __fget_files+0x3fc/0x460 [ 267.610009][ T8469] ? cpu_online+0xa0/0xa0 [ 267.614333][ T8469] bpf_prog_test_run+0x31c/0x390 [ 267.619267][ T8469] __sys_bpf+0x62b/0x780 [ 267.623502][ T8469] ? bpf_link_show_fdinfo+0x380/0x380 [ 267.628874][ T8469] ? lock_chain_count+0x20/0x20 [ 267.633724][ T8469] __x64_sys_bpf+0x78/0x90 [ 267.638131][ T8469] do_syscall_64+0x4c/0xa0 [ 267.642546][ T8469] ? clear_bhb_loop+0x60/0xb0 [ 267.647213][ T8469] ? clear_bhb_loop+0x60/0xb0 [ 267.651880][ T8469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.657767][ T8469] RIP: 0033:0x7f8a58b9e159 [ 267.662179][ T8469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.681771][ T8469] RSP: 002b:00007f8a59a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.690179][ T8469] RAX: ffffffffffffffda RBX: 00007f8a58e25fa0 RCX: 00007f8a58b9e159 [ 267.698140][ T8469] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 267.706104][ T8469] RBP: 00007f8a59a40090 R08: 0000000000000000 R09: 0000000000000000 [ 267.714063][ T8469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.722021][ T8469] R13: 00007f8a58e26038 R14: 00007f8a58e25fa0 R15: 00007ffdc461ec38 [ 267.729990][ T8469] [ 268.286502][ T8468] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 268.467607][ T8477] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1412'. [ 268.523092][ T8485] netlink: 'syz.0.1413': attribute type 7 has an invalid length. [ 268.548543][ T8485] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1413'. [ 268.568304][ T8489] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 268.607239][ T8489] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1412'. [ 268.665426][ T8487] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1415'. [ 272.880892][ T8527] bridge0: port 2(batadv0) entered blocking state [ 272.887404][ T8527] bridge0: port 2(batadv0) entered disabled state [ 272.896717][ T8527] device batadv0 entered promiscuous mode [ 272.903258][ T8527] bridge0: port 2(batadv0) entered blocking state [ 272.909793][ T8527] bridge0: port 2(batadv0) entered forwarding state [ 272.967928][ T8533] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1429'. [ 273.045282][ T7089] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 273.054702][ T7089] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 273.155604][ T8541] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1433'. [ 273.229185][ T8541] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 273.240974][ T8548] netlink: 'syz.1.1435': attribute type 10 has an invalid length. [ 273.249793][ T8548] team0: Device vxcan1 is of different type [ 273.486126][ T8561] netlink: 'syz.3.1439': attribute type 4 has an invalid length. [ 273.511860][ T8561] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1439'. [ 273.720311][ T8571] syz.3.1443[8571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.787366][ T8582] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1446'. [ 273.984925][ T8584] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 274.007194][ T8584] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1447'. [ 274.745343][ T8602] netlink: 'syz.0.1454': attribute type 3 has an invalid length. [ 274.765792][ T8602] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 274.882097][ T8605] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 274.901902][ T8605] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 274.961241][ T8609] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 275.011108][ T8605] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 275.121403][ T8605] netlink: 'syz.1.1455': attribute type 29 has an invalid length. [ 275.151850][ T8617] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1458'. [ 275.203697][ T8616] netlink: 'syz.3.1459': attribute type 27 has an invalid length. [ 275.241544][ T8616] netlink: 'syz.3.1459': attribute type 25 has an invalid length. [ 276.504551][ T8634] team0: Device wg1 is of different type [ 277.883371][ T8692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1474'. [ 278.051811][ T8698] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1473'. [ 280.342185][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1480'. [ 281.989547][ T8766] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1488'. [ 282.503697][ T8773] device syzkaller0 entered promiscuous mode [ 289.282713][ T8810] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1502'. [ 289.872105][ T8835] sctp: [Deprecated]: syz.1.1513 (pid 8835) Use of int in max_burst socket option deprecated. [ 289.872105][ T8835] Use struct sctp_assoc_value instead [ 291.950115][ T8829] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1511'. [ 291.970817][ T8833] validate_nla: 2 callbacks suppressed [ 291.970829][ T8833] netlink: 'syz.4.1512': attribute type 10 has an invalid length. [ 292.007133][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1512'. [ 292.065385][ T8852] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1518'. [ 292.184957][ T8857] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1520'. [ 293.762908][ T4285] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 294.013854][ T8896] netlink: 'syz.0.1531': attribute type 29 has an invalid length. [ 294.061018][ T8896] netlink: 'syz.0.1531': attribute type 29 has an invalid length. [ 294.080541][ T8900] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1533'. [ 294.101127][ T8903] netlink: 'syz.0.1531': attribute type 29 has an invalid length. [ 294.395847][ T8908] Dead loop on virtual device ip6_vti0, fix it urgently! [ 296.704097][ T8946] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1548'. [ 296.992006][ T8964] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1555'. [ 297.007652][ T8965] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 297.016045][ T8966] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1555'. [ 297.074560][ T8966] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1555'. [ 297.327894][ T8979] netlink: 'syz.4.1560': attribute type 10 has an invalid length. [ 297.389358][ T8979] device bond0 entered promiscuous mode [ 297.420420][ T8979] device bond_slave_0 entered promiscuous mode [ 297.461955][ T8979] device bond_slave_1 entered promiscuous mode [ 297.868977][ T8987] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1564'. [ 299.115196][ T9017] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1576'. [ 299.181116][ T9017] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1576'. [ 299.205530][ T9018] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1576'. [ 299.477820][ T9020] netlink: 'syz.2.1577': attribute type 10 has an invalid length. [ 299.539657][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1577'. [ 299.553638][ T9027] netlink: 'syz.1.1579': attribute type 21 has an invalid length. [ 299.568775][ T9027] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 299.585181][ T9027] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1579'. [ 299.854016][ T9036] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 299.887985][ T9036] team0: Device vxcan1 is of different type [ 300.058168][ T9045] netlink: 'syz.3.1586': attribute type 28 has an invalid length. [ 300.106800][ T9045] netlink: 'syz.3.1586': attribute type 29 has an invalid length. [ 300.774852][ T9061] netlink: 'syz.1.1594': attribute type 10 has an invalid length. [ 301.023476][ T9074] netlink: 'syz.4.1598': attribute type 2 has an invalid length. [ 302.750320][ T9105] validate_nla: 2 callbacks suppressed [ 302.750432][ T9105] netlink: 'syz.4.1610': attribute type 10 has an invalid length. [ 302.788905][ T9107] __nla_validate_parse: 7 callbacks suppressed [ 302.788921][ T9107] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1609'. [ 303.189861][ T9116] netlink: 'syz.0.1614': attribute type 2 has an invalid length. [ 303.214543][ T9116] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 303.238825][ T9116] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1614'. [ 303.282419][ T9119] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1614'. [ 304.802504][ T9153] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1626'. [ 305.150596][ T9147] netlink: 'syz.2.1625': attribute type 10 has an invalid length. [ 305.968927][ T9177] netlink: 'syz.3.1632': attribute type 2 has an invalid length. [ 306.007546][ T9177] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 306.059524][ T9177] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1632'. [ 306.126215][ T9185] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1632'. [ 306.966659][ T9199] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1644'. [ 307.184030][ T9201] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1656'. [ 307.281814][ T9203] netlink: 'syz.1.1655': attribute type 2 has an invalid length. [ 307.363294][ T9203] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 307.379736][ T9209] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 307.407318][ T9203] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1655'. [ 307.422841][ T9206] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1655'. [ 307.485411][ T9208] netlink: 'syz.4.1647': attribute type 10 has an invalid length. [ 307.781845][ T9218] FAULT_INJECTION: forcing a failure. [ 307.781845][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 307.861929][ T9218] CPU: 0 PID: 9218 Comm: syz.4.1649 Not tainted syzkaller #0 [ 307.869343][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.879421][ T9218] Call Trace: [ 307.882710][ T9218] [ 307.885650][ T9218] dump_stack_lvl+0x188/0x24e [ 307.890347][ T9218] ? show_regs_print_info+0x12/0x12 [ 307.895557][ T9218] ? load_image+0x410/0x410 [ 307.900074][ T9218] ? __lock_acquire+0x7c40/0x7c40 [ 307.905125][ T9218] should_fail_ex+0x390/0x4c0 [ 307.909832][ T9218] should_failslab+0x5/0x20 [ 307.914347][ T9218] slab_pre_alloc_hook+0x59/0x300 [ 307.919391][ T9218] ? security_sk_alloc+0x47/0x130 [ 307.924438][ T9218] __kmem_cache_alloc_node+0x4f/0x270 [ 307.929826][ T9218] ? security_sk_alloc+0x47/0x130 [ 307.934858][ T9218] __kmalloc+0xa3/0x240 [ 307.939023][ T9218] ? sk_prot_alloc+0xe7/0x210 [ 307.943711][ T9218] security_sk_alloc+0x47/0x130 [ 307.948575][ T9218] sk_prot_alloc+0x101/0x210 [ 307.953173][ T9218] ? sk_alloc+0x20/0x330 [ 307.957429][ T9218] sk_alloc+0x36/0x330 [ 307.961506][ T9218] ? bpf_ctx_init+0x154/0x190 [ 307.966193][ T9218] bpf_prog_test_run_skb+0x36d/0x18e0 [ 307.971573][ T9218] ? __fget_files+0x28/0x460 [ 307.976174][ T9218] ? __fget_files+0x3fc/0x460 [ 307.980860][ T9218] ? cpu_online+0xa0/0xa0 [ 307.985198][ T9218] bpf_prog_test_run+0x31c/0x390 [ 307.990142][ T9218] __sys_bpf+0x62b/0x780 [ 307.994392][ T9218] ? bpf_link_show_fdinfo+0x380/0x380 [ 307.999777][ T9218] ? lock_chain_count+0x20/0x20 [ 308.004632][ T9218] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 308.010620][ T9218] __x64_sys_bpf+0x78/0x90 [ 308.015044][ T9218] do_syscall_64+0x4c/0xa0 [ 308.019467][ T9218] ? clear_bhb_loop+0x60/0xb0 [ 308.024148][ T9218] ? clear_bhb_loop+0x60/0xb0 [ 308.028832][ T9218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.034730][ T9218] RIP: 0033:0x7f10c699e159 [ 308.039146][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.058748][ T9218] RSP: 002b:00007f10c78c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.067164][ T9218] RAX: ffffffffffffffda RBX: 00007f10c6c25fa0 RCX: 00007f10c699e159 [ 308.075133][ T9218] RDX: 0000000000000035 RSI: 00002000000002c0 RDI: 000000000000000a [ 308.083103][ T9218] RBP: 00007f10c78c3090 R08: 0000000000000000 R09: 0000000000000000 [ 308.091071][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.099038][ T9218] R13: 00007f10c6c26038 R14: 00007f10c6c25fa0 R15: 00007ffefc342478 [ 308.107020][ T9218] [ 309.182818][ T9261] netlink: 'syz.1.1662': attribute type 7 has an invalid length. [ 309.285345][ T9261] __nla_validate_parse: 1 callbacks suppressed [ 309.285359][ T9261] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1662'. [ 309.338531][ T9264] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1665'. [ 309.405235][ T9267] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1666'. [ 309.441262][ T9264] netlink: 'syz.4.1665': attribute type 10 has an invalid length. [ 309.450429][ T9264] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1665'. [ 310.687573][ T9292] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1674'. [ 311.097735][ T9307] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1679'. [ 311.575918][ T9326] netlink: 'syz.3.1684': attribute type 10 has an invalid length. [ 311.596282][ T9326] device vxcan1 entered promiscuous mode [ 311.602714][ T9326] team0: Device vxcan1 is of different type [ 312.970726][ T9343] netlink: 'syz.1.1690': attribute type 4 has an invalid length. [ 312.979960][ T9343] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1690'. [ 313.104870][ T9352] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1694'. [ 313.573988][ T9367] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 313.665523][ T9367] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1700'. [ 314.170346][ T9381] netlink: 'syz.2.1703': attribute type 4 has an invalid length. [ 314.260951][ T9381] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1703'. [ 316.901491][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.907853][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.316337][ T9397] FAULT_INJECTION: forcing a failure. [ 317.316337][ T9397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.365804][ T9397] CPU: 1 PID: 9397 Comm: syz.3.1707 Not tainted syzkaller #0 [ 317.373214][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.383288][ T9397] Call Trace: [ 317.386580][ T9397] [ 317.389517][ T9397] dump_stack_lvl+0x188/0x24e [ 317.394213][ T9397] ? show_regs_print_info+0x12/0x12 [ 317.399436][ T9397] ? load_image+0x410/0x410 [ 317.402013][ T9399] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1708'. [ 317.403941][ T9397] ? __lock_acquire+0x7c40/0x7c40 [ 317.418153][ T9397] should_fail_ex+0x390/0x4c0 [ 317.422852][ T9397] _copy_from_user+0x2c/0x170 [ 317.427546][ T9397] __sys_bpf+0x2ea/0x780 [ 317.431809][ T9397] ? bpf_link_show_fdinfo+0x380/0x380 [ 317.437210][ T9397] ? lock_chain_count+0x20/0x20 [ 317.442087][ T9397] __x64_sys_bpf+0x78/0x90 [ 317.446521][ T9397] do_syscall_64+0x4c/0xa0 [ 317.450950][ T9397] ? clear_bhb_loop+0x60/0xb0 [ 317.455638][ T9397] ? clear_bhb_loop+0x60/0xb0 [ 317.460323][ T9397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.466233][ T9397] RIP: 0033:0x7f9fb9b9e159 [ 317.470652][ T9397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.490264][ T9397] RSP: 002b:00007f9fbaa6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.498689][ T9397] RAX: ffffffffffffffda RBX: 00007f9fb9e25fa0 RCX: 00007f9fb9b9e159 [ 317.506666][ T9397] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 317.514645][ T9397] RBP: 00007f9fbaa6d090 R08: 0000000000000000 R09: 0000000000000000 [ 317.522627][ T9397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.530607][ T9397] R13: 00007f9fb9e26038 R14: 00007f9fb9e25fa0 R15: 00007fffe228f538 [ 317.538597][ T9397] [ 317.656715][ T9403] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1719'. [ 317.739545][ T9402] : port 1(ip6gretap0) entered blocking state [ 317.819065][ T9402] : port 1(ip6gretap0) entered disabled state [ 317.955114][ T9402] device ip6gretap0 entered promiscuous mode [ 318.080995][ T9410] device ip6gretap0 left promiscuous mode [ 318.137928][ T9410] : port 1(ip6gretap0) entered disabled state [ 318.692605][ T9424] netlink: 'syz.4.1716': attribute type 4 has an invalid length. [ 318.725736][ T9426] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1717'. [ 318.741160][ T9424] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1716'. [ 318.872424][ T9426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.963989][ T9426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.027040][ T9426] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 319.174849][ T9426] bond0 (unregistering): Released all slaves [ 319.393791][ T9433] netlink: 'syz.3.1721': attribute type 3 has an invalid length. [ 319.424875][ T9433] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1721'. [ 319.462377][ T9449] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1724'. [ 319.716069][ T9461] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1739'. [ 319.865678][ T9463] netlink: 'syz.3.1729': attribute type 10 has an invalid length. [ 319.905634][ T9463] device hsr0 entered promiscuous mode [ 320.053184][ T9463] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.081337][ T9463] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 320.100295][ T9463] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 320.121215][ T9463] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 336.753748][ T4291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.763118][ T4291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.771258][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.780383][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.788805][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 336.800996][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.832384][ T4291] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.842261][ T4291] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.850096][ T4291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.858863][ T4291] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.866868][ T4291] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.874656][ T4291] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.655386][ T4291] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.664500][ T4291] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.672768][ T4291] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.695109][ T4291] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.703106][ T4291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.710834][ T4291] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.763067][ T9512] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1740'. [ 338.841154][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 338.891100][ T4290] Bluetooth: hci6: command 0x0409 tx timeout [ 339.791095][ T4290] Bluetooth: hci7: command 0x0409 tx timeout [ 340.890951][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 340.991018][ T4290] Bluetooth: hci6: command 0x041b tx timeout [ 341.897955][ T4290] Bluetooth: hci7: command 0x041b tx timeout [ 342.991005][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 343.091004][ T4290] Bluetooth: hci6: command 0x040f tx timeout [ 343.941015][ T4290] Bluetooth: hci7: command 0x040f tx timeout [ 345.090961][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 345.141344][ T4290] Bluetooth: hci6: command 0x0419 tx timeout [ 346.041074][ T4290] Bluetooth: hci7: command 0x0419 tx timeout [ 346.991093][ T3598] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2680 jiffies s: 17861 root: 0x1/. [ 347.012302][ T3598] rcu: blocking rcu_node structures (internal RCU debug): [ 347.019480][ T3598] Sending NMI from CPU 1 to CPUs 0: [ 347.024756][ C0] NMI backtrace for cpu 0 [ 347.024765][ C0] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted syzkaller #0 [ 347.024779][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.024788][ C0] Workqueue: events pwq_unbound_release_workfn [ 347.024809][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 347.024829][ C0] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 15 f4 38 80 7e 65 8b 0d f5 38 80 7e 81 e1 00 01 ff 00 74 [ 347.024842][ C0] RSP: 0018:ffffc900000078d8 EFLAGS: 00000046 [ 347.024853][ C0] RAX: ffffffff818a4c86 RBX: 0000000000000014 RCX: 0000000000007903 [ 347.024863][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 347.024871][ C0] RBP: 0000000000000001 R08: ffff8880b8e357cb R09: 1ffff110171c6af9 [ 347.024881][ C0] R10: dffffc0000000000 R11: ffffed10171c6afa R12: ffffffff8cb80060 [ 347.024891][ C0] R13: dffffc0000000000 R14: ffffc90000007960 R15: ffffc90000007980 [ 347.024902][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 347.024914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.024923][ C0] CR2: 0000001b30012ff8 CR3: 0000000029c60000 CR4: 00000000003506f0 [ 347.024936][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.024945][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 347.024953][ C0] Call Trace: [ 347.024958][ C0] [ 347.024962][ C0] perf_trace_buf_alloc+0x76/0x300 [ 347.024984][ C0] perf_trace_preemptirq_template+0x143/0x320 [ 347.025004][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 347.025020][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 347.025040][ C0] ? __irq_exit_rcu+0x147/0x230 [ 347.025053][ C0] ? irq_exit_rcu+0x20/0x20 [ 347.025068][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 347.025082][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 347.025103][ C0] trace_hardirqs_on+0x24/0x40 [ 347.025120][ C0] asm_sysvec_irq_work+0x16/0x20 [ 347.025133][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 347.025148][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 347.025159][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 347.025170][ C0] RAX: b3de84d275d35100 RBX: 1ffff92000000f64 RCX: b3de84d275d35100 [ 347.025180][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 347.025191][ C0] RBP: ffffc90000007bd0 R08: ffffffff90b0f257 R09: 1ffffffff2161e4a [ 347.025201][ C0] R10: dffffc0000000000 R11: fffffbfff2161e4b R12: 0000000000000246 [ 347.025210][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 347.025231][ C0] ? kmem_cache_free+0xb0/0x2a0 [ 347.025249][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 347.025271][ C0] __rcu_read_unlock+0x78/0xd0 [ 347.025283][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 347.025308][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 347.025324][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 347.025350][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 347.025366][ C0] __hrtimer_run_queues+0x522/0xc90 [ 347.025385][ C0] ? hw_scan_work+0xf00/0xf00 [ 347.025404][ C0] ? hrtimer_interrupt+0x980/0x980 [ 347.025425][ C0] hrtimer_run_softirq+0x173/0x290 [ 347.025443][ C0] handle_softirqs+0x291/0x910 [ 347.025459][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 347.025475][ C0] ? do_softirq+0x210/0x210 [ 347.025487][ C0] ? hrtimer_interrupt+0x775/0x980 [ 347.025504][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 347.025520][ C0] __irq_exit_rcu+0x13b/0x230 [ 347.025533][ C0] ? irq_exit_rcu+0x20/0x20 [ 347.025552][ C0] irq_exit_rcu+0x5/0x20 [ 347.025563][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 347.025582][ C0] [ 347.025585][ C0] [ 347.025590][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 347.025603][ C0] RIP: 0010:mutex_spin_on_owner+0x26a/0x340 [ 347.025621][ C0] Code: 89 e7 be 08 00 00 00 e8 44 1d 70 00 80 3c 2b 00 74 08 4c 89 e7 e8 a6 1b 70 00 49 f7 04 24 01 00 00 00 0f 85 86 00 00 00 f3 90 <4c> 89 e7 be 08 00 00 00 e8 19 1d 70 00 80 3c 2b 00 0f 84 88 fe ff [ 347.025632][ C0] RSP: 0018:ffffc90000137520 EFLAGS: 00000246 [ 347.025642][ C0] RAX: 1ffff11027fd63c0 RBX: 1ffffffff196668a RCX: ffffffff81635b3e [ 347.025652][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88813feb1e00 [ 347.025661][ C0] RBP: dffffc0000000000 R08: ffff88813feb1e07 R09: 1ffff11027fd63c0 [ 347.025671][ C0] R10: dffffc0000000000 R11: ffffed1027fd63c1 R12: ffffffff8cb33450 [ 347.025681][ C0] R13: ffffffff8cb334a0 R14: ffffffff8cb334a0 R15: ffff88802fe3da00 [ 347.025702][ C0] ? mutex_spin_on_owner+0x19e/0x340 [ 347.025730][ C0] __mutex_lock+0x187/0xae0 [ 347.025750][ C0] ? synchronize_rcu_expedited+0x383/0x890 [ 347.025771][ C0] ? synchronize_rcu_expedited+0x3c0/0x890 [ 347.025794][ C0] ? mutex_lock_nested+0x10/0x10 [ 347.025808][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 347.025824][ C0] ? __rwlock_init+0x140/0x140 [ 347.025838][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 347.025854][ C0] synchronize_rcu_expedited+0x3c0/0x890 [ 347.025878][ C0] ? synchronize_rcu+0x3f0/0x3f0 [ 347.025898][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 347.025920][ C0] ? migrate_enable+0x148/0x220 [ 347.025938][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 347.025964][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 347.025986][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 347.026004][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 347.026033][ C0] synchronize_rcu+0x128/0x3f0 [ 347.026053][ C0] ? schedule_delayed_monitor_work+0x160/0x160 [ 347.026075][ C0] ? lock_chain_count+0x20/0x20 [ 347.026097][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 347.026111][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 347.026129][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 347.026152][ C0] lockdep_unregister_key+0x4d2/0x550 [ 347.026173][ C0] ? lockdep_reset_lock+0x300/0x300 [ 347.026194][ C0] ? read_lock_is_recursive+0x10/0x10 [ 347.026212][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.026232][ C0] ? _raw_spin_unlock+0x40/0x40 [ 347.026253][ C0] pwq_unbound_release_workfn+0x262/0x2b0 [ 347.026270][ C0] ? process_one_work+0x7b4/0x1160 [ 347.026287][ C0] process_one_work+0x8ab/0x1160 [ 347.026311][ C0] ? worker_detach_from_pool+0x240/0x240 [ 347.026327][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 347.026348][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 347.026366][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 347.026387][ C0] ? wq_worker_running+0x97/0x190 [ 347.026402][ C0] worker_thread+0xaf5/0x12a0 [ 347.026427][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 347.026453][ C0] kthread+0x29d/0x330 [ 347.026464][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 347.026480][ C0] ? kthread_blkcg+0xd0/0xd0 [ 347.026493][ C0] ret_from_fork+0x1f/0x30 [ 347.026520][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)