last executing test programs: 2m19.166929789s ago: executing program 2 (id=2973): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20000005) close(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2m18.828321367s ago: executing program 2 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0xffffffff, 0x12}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f80e", 0x2}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10", 0x2b}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000600)={0x5, 0x80, 0x9, 0xc, 0x7, 0x2, 0x0, 0x4, 0xf982b4b1bbb95ce9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x800, 0xff67}, 0x4000, 0x2, 0x8, 0x9, 0x7fff, 0x0, 0x8939, 0x0, 0x8000, 0x0, 0x643a38e0}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m18.580490153s ago: executing program 2 (id=2981): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB='\n\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB, @ANYRES16], 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="9feb01001800000000000000fe000000fe0000000500000001000000000000101400000006000000040000130400000007000000dc080000030000000a00000000080000030000000d00000003000000800000000f00000005000000950000000700000003000005870000000f00000005000000030000000300000003000000f5000000040000000200000001000000010000000a00000f020000000400000008000000ff0700000300000004000000f1ffffff0200000006000000300f000004000000080000000d0000000300000007000000030000000300000001800000fbffffff05000000040000000300000001000000004000000800000002000000444000"], &(0x7f0000002100)=""/134, 0x11d, 0x86, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000002200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002240)={0x4, 0x0, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x4, 0x0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xcc, &(0x7f0000001200)=""/204, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x1, &(0x7f0000001400), &(0x7f0000001440)=[{0x2, 0x3, 0x5}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=@base={0x6, 0x1000004, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.262983967s ago: executing program 2 (id=2996): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20000005) close(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2m16.249299907s ago: executing program 0 (id=2997): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x4000) 2m16.144842479s ago: executing program 0 (id=2999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0xffffffff, 0x12}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f80e", 0x2}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10", 0x2b}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000600)={0x5, 0x80, 0x9, 0xc, 0x7, 0x2, 0x0, 0x4, 0xf982b4b1bbb95ce9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x800, 0xff67}, 0x4000, 0x2, 0x8, 0x9, 0x7fff, 0x0, 0x8939, 0x0, 0x8000, 0x0, 0x643a38e0}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m16.026210812s ago: executing program 0 (id=3000): socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xcb}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a10a0009000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) 2m16.006709273s ago: executing program 2 (id=3001): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB='\n\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB, @ANYRES16], 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)=""/134, 0x11d, 0x86, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000002200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002240)={0x4, 0x0, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x4, 0x0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xcc, &(0x7f0000001200)=""/204, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x1, &(0x7f0000001400), &(0x7f0000001440)=[{0x2, 0x3, 0x5}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=@base={0x6, 0x1000004, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.906614225s ago: executing program 3 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2m15.772281528s ago: executing program 0 (id=3003): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x12, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0}, 0x40) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x8, 0x6, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff2}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x79}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x8001, 0x1d, &(0x7f0000000900)=""/29, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x8005, 0x101}, 0x10, 0x255ff, 0xffffffffffffffff, 0x6, &(0x7f0000000a40)=[0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x5, 0x6, 0x6}, {0x4, 0x4, 0xc, 0xa}, {0x3, 0x5, 0x6, 0xa}, {0x3, 0x5, 0x3, 0x5}, {0x2, 0x5, 0xd, 0x9}, {0x0, 0x3, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="2f00000004000000", @ANYRES32=r0, @ANYBLOB="0861387ef71a4fb018aa2f47a82ad89e068c4d3b24e742f22d90ff317c6f1018a4e1daaa82be08d1f25ffdbf6f16837d5780d34a29999e598a34ab0314eca913e23f9d7e08cc5f53e433a2e35453a1ae12e1176314fa7e844536def54f32a7ceb30a4906a0b400000000000000000000000000005076e7ebaae91fb7770bfbed311b65f735e238523516f8560f9b81225243f7107907ac3b03c27cb66360eb4791fea9fbee901e8dc8020cc0b1781ef726b9ac735fd846e174689baa54288e96184b3fdec9372fcfeb09fa7bf74ef02dff486c82254d752d0b14", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r2], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r9, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='\x00') openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 2m15.67476799s ago: executing program 3 (id=3004): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c40)={r0, &(0x7f0000000840)="0ac4376463e686f2a211822f3a1fb7541d715c5ea2fe5dc7d6f5afb329c15f1d12c2035e620e4355e471c1df7b33a79d1415d2c29337b56602254d4de6fea08e779fc2d1cb394a6ba8324d6007384f63c3ecf17b084ca73e1bd3af17ace354b3dbc6142d87e109321e6c30236ec8ba9a27da741154e62e0787b517b5db0a0a12b239cdd014fbea40b9d35fb7ca2de54c3b5341cbded5e5414942aeec05d8f54043dc28e1dd3e5f966fbe5316d2ca14b29257c0977445685f04f47ddf51874fe3d77309cc2660890dee1f", &(0x7f0000000c40)=""/4096}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m13.665353117s ago: executing program 1 (id=3005): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82200, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 2m13.665146587s ago: executing program 3 (id=3006): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) 2m13.608673098s ago: executing program 0 (id=3007): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x4000) 2m13.550309169s ago: executing program 1 (id=3008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0xffffffff, 0x12}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f80e", 0x2}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10", 0x2b}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000600)={0x5, 0x80, 0x9, 0xc, 0x7, 0x2, 0x0, 0x4, 0xf982b4b1bbb95ce9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x800, 0xff67}, 0x4000, 0x2, 0x8, 0x9, 0x7fff, 0x0, 0x8939, 0x0, 0x8000, 0x0, 0x643a38e0}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m13.494604061s ago: executing program 3 (id=3009): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20000005) close(r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2m13.445133282s ago: executing program 0 (id=3010): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB='\n\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB, @ANYRES16], 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="9feb01001800000000000000fe000000fe0000000500000001000000000000101400000006000000040000130400000007000000dc080000030000000a00000000080000030000000d00000003000000800000000f00000005000000950000000700000003000005870000000f00000005000000030000000300000003000000f5000000040000000200000001000000010000000a00000f020000000400000008000000ff0700000300000004000000f1ffffff0200000006000000300f000004000000080000000d0000000300000007000000030000000300000001800000fbffffff05000000040000000300000001000000004000000800000002000000444000"], &(0x7f0000002100)=""/134, 0x11d, 0x86, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000002200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002240)={0x4, 0x0, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x4, 0x0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xcc, &(0x7f0000001200)=""/204, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x1, &(0x7f0000001400), &(0x7f0000001440)=[{0x2, 0x3, 0x5}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=@base={0x6, 0x1000004, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.393302173s ago: executing program 1 (id=3011): socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xcb}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffd, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a10a0009000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) 2m13.242064367s ago: executing program 3 (id=3012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2m13.184087078s ago: executing program 1 (id=3013): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c40)={r0, &(0x7f0000000840)="0ac4376463e686f2a211822f3a1fb7541d715c5ea2fe5dc7d6f5afb329c15f1d12c2035e620e4355e471c1df7b33a79d1415d2c29337b56602254d4de6fea08e779fc2d1cb394a6ba8324d6007384f63c3ecf17b084ca73e1bd3af17ace354b3dbc6142d87e109321e6c30236ec8ba9a27da741154e62e0787b517b5db0a0a12b239cdd014fbea40b9d35fb7ca2de54c3b5341cbded5e5414942aeec05d8f54043dc28e1dd3e5f966fbe5316d2ca14b29257c0977445685f04f47ddf51874fe3d77309cc2660890dee1f", &(0x7f0000000c40)=""/4096}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m12.875996415s ago: executing program 1 (id=3014): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bond_slave_0\x00', @random='\\\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20000005) close(r2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)}, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 2m12.875803165s ago: executing program 3 (id=3015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10080, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0xb, 0xf, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x4}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x9, 0x0, 0x0, 0x0, 0x7}, r1, 0x100000000000, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 2m12.510948373s ago: executing program 1 (id=3016): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x12, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0}, 0x40) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x8, 0x6, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff2}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x79}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x8001, 0x1d, &(0x7f0000000900)=""/29, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x8005, 0x101}, 0x10, 0x255ff, 0xffffffffffffffff, 0x6, &(0x7f0000000a40)=[0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x5, 0x6, 0x6}, {0x4, 0x4, 0xc, 0xa}, {0x3, 0x5, 0x6, 0xa}, {0x3, 0x5, 0x3, 0x5}, {0x2, 0x5, 0xd, 0x9}, {0x0, 0x3, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="2f00000004000000", @ANYRES32=r0, @ANYBLOB="0861387ef71a4fb018aa2f47a82ad89e068c4d3b24e742f22d90ff317c6f1018a4e1daaa82be08d1f25ffdbf6f16837d5780d34a29999e598a34ab0314eca913e23f9d7e08cc5f53e433a2e35453a1ae12e1176314fa7e844536def54f32a7ceb30a4906a0b400000000000000000000000000005076e7ebaae91fb7770bfbed311b65f735e238523516f8560f9b81225243f7107907ac3b03c27cb66360eb4791fea9fbee901e8dc8020cc0b1781ef726b9ac735fd846e174689baa54288e96184b3fdec9372fcfeb09fa7bf74ef02dff486c82254d752d0b14", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r2], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r9, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='\x00') openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 1m55.240976393s ago: executing program 2 (id=3017): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) 37.546421611s ago: executing program 32 (id=3010): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x32, 0x1843, 0x3, 0x9, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) close(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYBLOB='\n\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB, @ANYRES16], 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000021c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)=""/134, 0x11d, 0x86, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, r2, 0x8, &(0x7f0000002200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002240)={0x4, 0x0, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x4, 0x0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0xf, &(0x7f0000001040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0xcc, &(0x7f0000001200)=""/204, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r1, 0x1, &(0x7f0000001400), &(0x7f0000001440)=[{0x2, 0x3, 0x5}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000500)=@base={0x6, 0x1000004, 0x37ad, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) 37.543570171s ago: executing program 33 (id=3016): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x12, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0}, 0x40) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x8, 0x6, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff2}, @ldst={0x2, 0x1, 0x4, 0xb, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x79}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x8001, 0x1d, &(0x7f0000000900)=""/29, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x8005, 0x101}, 0x10, 0x255ff, 0xffffffffffffffff, 0x6, &(0x7f0000000a40)=[0xffffffffffffffff], &(0x7f0000000a80)=[{0x5, 0x5, 0x6, 0x6}, {0x4, 0x4, 0xc, 0xa}, {0x3, 0x5, 0x6, 0xa}, {0x3, 0x5, 0x3, 0x5}, {0x2, 0x5, 0xd, 0x9}, {0x0, 0x3, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="2f00000004000000", @ANYRES32=r0, @ANYBLOB="0861387ef71a4fb018aa2f47a82ad89e068c4d3b24e742f22d90ff317c6f1018a4e1daaa82be08d1f25ffdbf6f16837d5780d34a29999e598a34ab0314eca913e23f9d7e08cc5f53e433a2e35453a1ae12e1176314fa7e844536def54f32a7ceb30a4906a0b400000000000000000000000000005076e7ebaae91fb7770bfbed311b65f735e238523516f8560f9b81225243f7107907ac3b03c27cb66360eb4791fea9fbee901e8dc8020cc0b1781ef726b9ac735fd846e174689baa54288e96184b3fdec9372fcfeb09fa7bf74ef02dff486c82254d752d0b14", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r2], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r9, &(0x7f00000038c0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff0f}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x101) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000400)='\x00') openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 31.266862206s ago: executing program 34 (id=3017): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) 0s ago: executing program 35 (id=3015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10080, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0xb, 0xf, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x4}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x9, 0x0, 0x0, 0x0, 0x7}, r1, 0x100000000000, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbcc, 0xb0000}, 0x10806, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): 00000000001 [ 381.409645][T10939] R13: 00007fc0aca26038 R14: 00007fc0aca25fa0 R15: 00007fff2c3bfb18 [ 381.417649][T10939] [ 382.716789][T10960] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1781'. [ 382.821628][T10960] net_ratelimit: 42 callbacks suppressed [ 382.821648][T10960] netlink: zone id is out of range [ 382.914020][T10960] netlink: zone id is out of range [ 382.942215][T10960] netlink: zone id is out of range [ 382.947425][T10960] netlink: zone id is out of range [ 383.006472][T10960] netlink: zone id is out of range [ 383.011674][T10960] netlink: zone id is out of range [ 383.082310][T10960] netlink: zone id is out of range [ 383.087509][T10960] netlink: zone id is out of range [ 383.162271][T10960] netlink: zone id is out of range [ 383.167470][T10960] netlink: zone id is out of range [ 383.527583][T10966] netlink: 'syz.3.1781': attribute type 7 has an invalid length. [ 383.655340][T10966] netlink: 'syz.3.1781': attribute type 6 has an invalid length. [ 384.674172][T10972] netlink: 'syz.2.1784': attribute type 9 has an invalid length. [ 384.681960][T10972] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1784'. [ 385.096109][T10974] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 386.043851][T10992] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 386.102270][T10992] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 386.171481][T10992] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1788'. [ 386.596493][T10999] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1793'. [ 387.129510][T11002] netlink: 'syz.0.1793': attribute type 7 has an invalid length. [ 387.182556][T11002] netlink: 'syz.0.1793': attribute type 6 has an invalid length. [ 388.096294][ T5774] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 389.476329][T11032] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 389.516760][T11032] netlink: 'syz.0.1803': attribute type 4 has an invalid length. [ 389.537800][T11032] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1803'. [ 389.966097][T11038] netlink: 'syz.0.1806': attribute type 9 has an invalid length. [ 390.002255][T11038] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1806'. [ 390.916344][T11041] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 391.145127][ T5774] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 392.174511][ T5774] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 392.190532][ T5774] Bluetooth: hci1: Injecting HCI hardware error event [ 392.198711][ T5773] Bluetooth: hci1: hardware error 0x00 [ 392.928529][T11075] netlink: 'syz.2.1817': attribute type 9 has an invalid length. [ 392.936496][T11075] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1817'. [ 393.787437][T11080] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 394.332315][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 395.222307][ T5773] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 395.230899][ T5773] Bluetooth: hci3: Injecting HCI hardware error event [ 395.239551][ T5774] Bluetooth: hci3: hardware error 0x00 [ 395.240991][T11115] netlink: 'syz.3.1829': attribute type 9 has an invalid length. [ 395.316506][T11115] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1829'. [ 395.873989][T11120] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 397.382523][ T5774] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 397.395258][T11141] netlink: 'syz.1.1839': attribute type 9 has an invalid length. [ 397.413856][T11141] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1839'. [ 397.607229][T11142] netlink: 'syz.1.1839': attribute type 9 has an invalid length. [ 397.632651][T11142] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1839'. [ 400.542328][T11192] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 400.571363][T11192] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 400.624343][T11192] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1855'. [ 402.463238][T11220] netlink: 'syz.3.1864': attribute type 9 has an invalid length. [ 402.510407][T11220] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1864'. [ 402.780841][T11221] netlink: 'syz.3.1864': attribute type 9 has an invalid length. [ 402.819517][T11221] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1864'. [ 403.326669][T11230] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 403.337968][T11230] netlink: 'syz.3.1867': attribute type 4 has an invalid length. [ 403.359246][T11230] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1867'. [ 406.175892][T11270] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 406.222942][T11270] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1878'. [ 406.821582][T11290] netlink: 'syz.0.1885': attribute type 9 has an invalid length. [ 406.864911][T11290] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1885'. [ 407.702242][T11290] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 409.104911][T11310] netlink: 'syz.0.1897': attribute type 9 has an invalid length. [ 409.153279][T11310] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1897'. [ 409.653738][T11313] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 410.092569][T11318] netlink: 'syz.0.1891': attribute type 1 has an invalid length. [ 410.119735][T11318] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1891'. [ 411.418651][T11338] netlink: 'syz.2.1900': attribute type 9 has an invalid length. [ 411.457078][T11338] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1900'. [ 412.345299][T11341] netlink: 'syz.2.1900': attribute type 10 has an invalid length. [ 413.061281][T11359] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 413.073885][T11359] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1907'. [ 414.974941][T11385] netlink: 'syz.3.1914': attribute type 9 has an invalid length. [ 415.012862][T11385] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1914'. [ 415.502218][T11385] netlink: 'syz.3.1914': attribute type 10 has an invalid length. [ 415.586445][T11389] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 415.602690][T11389] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1917'. [ 417.719099][T11427] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 417.730293][T11427] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1927'. [ 418.658840][T11436] netlink: 'syz.0.1930': attribute type 9 has an invalid length. [ 418.702501][T11436] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1930'. [ 418.987784][T11437] netlink: 'syz.0.1930': attribute type 9 has an invalid length. [ 419.032246][T11437] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1930'. [ 420.272683][T11455] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 420.294605][T11455] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1937'. [ 421.423691][T11470] netlink: 'syz.2.1942': attribute type 9 has an invalid length. [ 421.439706][T11470] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1942'. [ 421.556932][T11473] netlink: 'syz.2.1942': attribute type 9 has an invalid length. [ 421.582426][T11473] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1942'. [ 424.707822][T11512] netlink: 'syz.0.1954': attribute type 9 has an invalid length. [ 424.743955][T11512] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1954'. [ 425.042888][T11513] netlink: 'syz.0.1954': attribute type 9 has an invalid length. [ 425.088521][T11513] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1954'. [ 425.621493][T11522] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 425.692384][T11522] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1956'. [ 427.233435][T11546] netlink: 'syz.0.1963': attribute type 9 has an invalid length. [ 427.257191][T11546] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1963'. [ 427.406871][T11545] netlink: 'syz.0.1963': attribute type 9 has an invalid length. [ 427.435719][T11545] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1963'. [ 428.327189][T11558] netlink: 'syz.3.1966': attribute type 9 has an invalid length. [ 428.359000][T11558] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1966'. [ 428.635263][T11562] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 428.669920][T11562] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1967'. [ 428.783471][T11559] netlink: 'syz.3.1966': attribute type 9 has an invalid length. [ 428.849381][T11559] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1966'. [ 430.647508][T11593] netlink: 'syz.3.1975': attribute type 9 has an invalid length. [ 430.657871][T11593] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1975'. [ 430.806053][T11592] netlink: 'syz.3.1975': attribute type 9 has an invalid length. [ 430.825971][T11592] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1975'. [ 431.097682][T11599] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 431.110396][T11599] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1977'. [ 431.343273][T11604] netlink: 'syz.3.1979': attribute type 9 has an invalid length. [ 431.381929][T11604] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1979'. [ 431.603596][T11605] netlink: 'syz.3.1979': attribute type 9 has an invalid length. [ 431.611374][T11605] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1979'. [ 432.083389][T11610] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 432.091163][T11610] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1980'. [ 432.316107][T11613] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 432.346986][T11613] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1980'. [ 434.390323][T11643] netlink: 'syz.3.1989': attribute type 9 has an invalid length. [ 434.412259][T11643] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1989'. [ 434.556395][T11647] netlink: 'syz.3.1989': attribute type 9 has an invalid length. [ 434.572529][T11647] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1989'. [ 434.810775][T11657] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 434.843720][T11655] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1999'. [ 435.781484][T11665] validate_nla: 2 callbacks suppressed [ 435.781503][T11665] netlink: 'syz.0.1994': attribute type 9 has an invalid length. [ 435.867253][T11665] __nla_validate_parse: 1 callbacks suppressed [ 435.867272][T11665] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1994'. [ 437.667795][T11681] netlink: 'syz.0.1998': attribute type 9 has an invalid length. [ 437.696163][T11681] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1998'. [ 437.914777][T11688] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 437.932451][T11688] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2001'. [ 437.956765][T11690] netlink: 'syz.3.2002': attribute type 9 has an invalid length. [ 437.982440][T11690] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2002'. [ 438.249622][T11681] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 438.261186][T11691] netlink: 'syz.3.2002': attribute type 9 has an invalid length. [ 438.279957][T11691] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2002'. [ 438.297118][T11695] netlink: 'syz.2.2003': attribute type 9 has an invalid length. [ 438.313436][T11695] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2003'. [ 438.608996][T11700] netlink: 'syz.2.2003': attribute type 10 has an invalid length. [ 439.853339][T11716] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 439.875926][T11716] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2011'. [ 440.097784][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.104218][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.155532][T11722] netlink: 'syz.1.2012': attribute type 9 has an invalid length. [ 440.176336][T11722] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2012'. [ 440.411059][T11726] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2014'. [ 440.648433][T11728] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2014'. [ 440.825547][T11727] validate_nla: 2 callbacks suppressed [ 440.825564][T11727] netlink: 'syz.1.2012': attribute type 9 has an invalid length. [ 441.029466][T11737] netlink: 'syz.0.2015': attribute type 9 has an invalid length. [ 441.052188][T11737] __nla_validate_parse: 1 callbacks suppressed [ 441.052204][T11737] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2015'. [ 441.240457][T11746] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 441.256655][T11741] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 441.257432][T11742] netlink: 'syz.1.2016': attribute type 9 has an invalid length. [ 441.294422][T11742] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2016'. [ 441.529124][T11751] netlink: 'syz.0.2028': attribute type 9 has an invalid length. [ 441.541564][T11751] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2028'. [ 441.695264][T11751] netlink: 'syz.0.2028': attribute type 10 has an invalid length. [ 441.875814][T11756] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 441.892506][T11756] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2021'. [ 442.174498][T11762] netlink: 'syz.2.2024': attribute type 9 has an invalid length. [ 442.232339][T11762] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2024'. [ 442.371615][T11764] netlink: 'syz.2.2024': attribute type 9 has an invalid length. [ 442.390105][T11764] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2024'. [ 442.628581][ T5774] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 443.136556][T11779] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2029'. [ 443.334072][T11784] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2031'. [ 443.471223][T11787] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2032'. [ 443.596826][T11793] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2035'. [ 443.740612][ T5774] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 445.099711][ T5774] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 445.846793][T11849] validate_nla: 15 callbacks suppressed [ 445.846810][T11849] netlink: 'syz.1.2053': attribute type 9 has an invalid length. [ 445.943327][T11850] netlink: 'syz.1.2053': attribute type 9 has an invalid length. [ 446.282794][T11857] netlink: 'syz.3.2055': attribute type 9 has an invalid length. [ 446.290732][T11857] __nla_validate_parse: 9 callbacks suppressed [ 446.290746][T11857] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2055'. [ 446.464505][ T5774] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 446.469565][T11858] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 446.670890][T11865] netlink: 'syz.3.2057': attribute type 9 has an invalid length. [ 446.681583][T11865] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2057'. [ 446.771305][T11866] netlink: 'syz.3.2057': attribute type 9 has an invalid length. [ 446.783472][T11866] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2057'. [ 447.935766][T11890] netlink: 'syz.2.2065': attribute type 9 has an invalid length. [ 447.944119][T11890] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2065'. [ 448.057733][T11894] netlink: 'syz.3.2067': attribute type 9 has an invalid length. [ 448.074371][T11894] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2067'. [ 448.088369][T11890] netlink: 'syz.2.2065': attribute type 10 has an invalid length. [ 448.157932][T11895] netlink: 'syz.3.2067': attribute type 9 has an invalid length. [ 448.169474][T11895] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2067'. [ 448.196909][ T5774] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 449.203936][T11927] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2078'. [ 449.447284][T11935] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2079'. [ 449.565045][T11936] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2079'. [ 449.645731][T11938] FAULT_INJECTION: forcing a failure. [ 449.645731][T11938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.670275][T11938] CPU: 0 PID: 11938 Comm: syz.2.2082 Not tainted syzkaller #0 [ 449.677781][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.687853][T11938] Call Trace: [ 449.691152][T11938] [ 449.694098][T11938] dump_stack_lvl+0x18c/0x250 [ 449.698817][T11938] ? show_regs_print_info+0x20/0x20 [ 449.704044][T11938] ? load_image+0x420/0x420 [ 449.708555][T11938] ? __might_fault+0xaa/0x120 [ 449.713234][T11938] ? __lock_acquire+0x7d80/0x7d80 [ 449.718257][T11938] ? perf_trace_lock_acquire+0x105/0x400 [ 449.723898][T11938] should_fail_ex+0x394/0x4c0 [ 449.728578][T11938] _copy_from_user+0x2f/0xe0 [ 449.733169][T11938] ___sys_sendmsg+0x1c7/0x360 [ 449.737853][T11938] ? __sys_sendmsg+0x2b0/0x2b0 [ 449.742632][T11938] ? ktime_get+0x7f/0x280 [ 449.746980][T11938] __se_sys_sendmsg+0x1d0/0x2c0 [ 449.751834][T11938] ? __x64_sys_sendmsg+0x80/0x80 [ 449.756791][T11938] ? lockdep_hardirqs_on+0x98/0x150 [ 449.762000][T11938] do_syscall_64+0x55/0xb0 [ 449.766420][T11938] ? clear_bhb_loop+0x40/0x90 [ 449.771114][T11938] ? clear_bhb_loop+0x40/0x90 [ 449.775802][T11938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.781710][T11938] RIP: 0033:0x7f549339de59 [ 449.786128][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.805736][T11938] RSP: 002b:00007f5494292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.814152][T11938] RAX: ffffffffffffffda RBX: 00007f5493625fa0 RCX: 00007f549339de59 [ 449.822124][T11938] RDX: 00000000200ce0c0 RSI: 0000200000000340 RDI: 0000000000000006 [ 449.830095][T11938] RBP: 00007f5494292090 R08: 0000000000000000 R09: 0000000000000000 [ 449.838065][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.846033][T11938] R13: 00007f5493626038 R14: 00007f5493625fa0 R15: 00007ffc515fcac8 [ 449.854021][T11938] [ 449.862305][T11942] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.2083'. [ 450.081851][ T5774] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 450.492247][ T5774] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 450.510730][ T5774] Bluetooth: hci0: Injecting HCI hardware error event [ 450.519438][ T5773] Bluetooth: hci0: hardware error 0x00 [ 451.030409][T11969] validate_nla: 5 callbacks suppressed [ 451.030428][T11969] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 451.217169][T11976] netlink: 'syz.1.2095': attribute type 9 has an invalid length. [ 451.471899][T11980] netlink: 'syz.3.2094': attribute type 9 has an invalid length. [ 451.483806][T11983] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 451.492029][T11980] __nla_validate_parse: 2 callbacks suppressed [ 451.492043][T11980] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2094'. [ 451.748406][T11982] netlink: 'syz.3.2094': attribute type 9 has an invalid length. [ 451.789950][T11982] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2094'. [ 452.039216][T11999] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 452.047385][T11999] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.2101'. [ 452.252281][ T5774] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 452.260877][ T5774] Bluetooth: hci2: Injecting HCI hardware error event [ 452.270073][ T5774] Bluetooth: hci2: hardware error 0x00 [ 452.652333][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 453.000036][T12021] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 453.048516][T12021] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2107'. [ 453.114842][T12027] FAULT_INJECTION: forcing a failure. [ 453.114842][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 453.154043][T12027] CPU: 0 PID: 12027 Comm: syz.2.2108 Not tainted syzkaller #0 [ 453.161555][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.171624][T12027] Call Trace: [ 453.174928][T12027] [ 453.177869][T12027] dump_stack_lvl+0x18c/0x250 [ 453.182578][T12027] ? show_regs_print_info+0x20/0x20 [ 453.187802][T12027] ? load_image+0x420/0x420 [ 453.192329][T12027] ? __might_sleep+0xe0/0xe0 [ 453.196973][T12027] ? __lock_acquire+0x7d80/0x7d80 [ 453.202020][T12027] should_fail_ex+0x394/0x4c0 [ 453.206733][T12027] should_failslab+0x9/0x20 [ 453.211256][T12027] slab_pre_alloc_hook+0x59/0x300 [ 453.216305][T12027] ? tomoyo_encode+0x2ad/0x570 [ 453.221177][T12027] ? tomoyo_encode+0x2ad/0x570 [ 453.225963][T12027] __kmem_cache_alloc_node+0x53/0x250 [ 453.231364][T12027] ? tomoyo_encode+0x2ad/0x570 [ 453.236147][T12027] __kmalloc+0xa7/0x240 [ 453.240322][T12027] tomoyo_encode+0x2ad/0x570 [ 453.244939][T12027] tomoyo_realpath_from_path+0x57c/0x5c0 [ 453.250596][T12027] ? tomoyo_domain+0xd6/0x120 [ 453.255301][T12027] tomoyo_path_number_perm+0x248/0x5e0 [ 453.260780][T12027] ? tomoyo_path_number_perm+0x217/0x5e0 [ 453.266433][T12027] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 453.271912][T12027] ? trace_call_bpf+0xc3/0x6c0 [ 453.276728][T12027] ? trace_call_bpf+0xc3/0x6c0 [ 453.281512][T12027] ? trace_call_bpf+0x5e9/0x6c0 [ 453.286414][T12027] ? __fget_files+0x28/0x460 [ 453.291035][T12027] security_file_ioctl+0x70/0xa0 [ 453.295992][T12027] __se_sys_ioctl+0x48/0x170 [ 453.300604][T12027] do_syscall_64+0x55/0xb0 [ 453.305043][T12027] ? clear_bhb_loop+0x40/0x90 [ 453.309734][T12027] ? clear_bhb_loop+0x40/0x90 [ 453.314419][T12027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.320313][T12027] RIP: 0033:0x7f549339de59 [ 453.324723][T12027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.344327][T12027] RSP: 002b:00007f5494292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.352740][T12027] RAX: ffffffffffffffda RBX: 00007f5493625fa0 RCX: 00007f549339de59 [ 453.360706][T12027] RDX: 0000200000000040 RSI: 00000000000089fb RDI: 0000000000000003 [ 453.368670][T12027] RBP: 00007f5494292090 R08: 0000000000000000 R09: 0000000000000000 [ 453.376631][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.384599][T12027] R13: 00007f5493626038 R14: 00007f5493625fa0 R15: 00007ffc515fcac8 [ 453.392582][T12027] [ 453.449212][T12027] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.495748][T12029] netlink: 'syz.1.2109': attribute type 9 has an invalid length. [ 453.552022][T12029] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2109'. [ 453.791168][T12032] netlink: 'syz.1.2109': attribute type 9 has an invalid length. [ 453.814534][T12032] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2109'. [ 454.127438][T12049] netlink: 'syz.1.2117': attribute type 7 has an invalid length. [ 454.334302][ T5774] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 454.655147][T12058] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2120'. [ 454.702531][T12058] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2120'. [ 454.725154][T12058] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2120'. [ 455.069099][T12066] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2122'. [ 455.752650][T12072] syzkaller0: entered promiscuous mode [ 455.768483][T12072] syzkaller0: entered allmulticast mode [ 458.445290][T12101] validate_nla: 2 callbacks suppressed [ 458.445302][T12101] netlink: 'syz.1.2133': attribute type 9 has an invalid length. [ 458.462826][T12101] __nla_validate_parse: 2 callbacks suppressed [ 458.462840][T12101] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2133'. [ 458.769073][T12105] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 458.863842][T12108] netlink: 'syz.1.2134': attribute type 9 has an invalid length. [ 458.871781][T12108] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2134'. [ 459.187316][T12112] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2144'. [ 459.797301][T12124] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2140'. [ 459.848580][T12124] net_ratelimit: 94 callbacks suppressed [ 459.848667][T12124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.885234][T12125] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2140'. [ 459.911195][T12125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.081739][T12134] netlink: 'syz.0.2142': attribute type 9 has an invalid length. [ 460.106838][T12134] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2142'. [ 460.542525][T12137] netlink: 'syz.0.2142': attribute type 10 has an invalid length. [ 460.650464][T12136] netlink: 'syz.1.2143': attribute type 9 has an invalid length. [ 460.662337][T12136] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2143'. [ 461.673884][T12164] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 461.690936][T12164] netlink: 'syz.3.2150': attribute type 4 has an invalid length. [ 461.706030][T12164] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2150'. [ 462.191254][T12175] netlink: 'syz.2.2154': attribute type 9 has an invalid length. [ 462.230534][T12175] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2154'. [ 462.515744][T12179] netlink: 'syz.0.2155': attribute type 9 has an invalid length. [ 462.618003][T12179] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2155'. [ 464.889994][T12204] validate_nla: 1 callbacks suppressed [ 464.890010][T12204] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 464.904200][T12204] netlink: 'syz.2.2162': attribute type 4 has an invalid length. [ 464.911945][T12204] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2162'. [ 465.068875][T12211] netlink: 'syz.0.2164': attribute type 9 has an invalid length. [ 465.082320][T12211] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2164'. [ 466.412607][T12243] netlink: 'syz.3.2173': attribute type 9 has an invalid length. [ 466.447489][T12243] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2173'. [ 470.437630][T12311] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2195'. [ 472.368168][T12335] netlink: 'syz.2.2204': attribute type 9 has an invalid length. [ 472.404068][T12335] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2204'. [ 472.475217][T12340] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2206'. [ 472.657094][T12335] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 472.686144][T12345] netlink: 'syz.3.2208': attribute type 9 has an invalid length. [ 472.697073][T12345] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2208'. [ 473.030181][T12346] netlink: 'syz.3.2208': attribute type 10 has an invalid length. [ 474.299460][T12370] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2215'. [ 475.204726][T12392] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2225'. [ 475.226539][T12394] netlink: 'syz.1.2224': attribute type 9 has an invalid length. [ 475.252553][T12394] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2224'. [ 475.908446][T12397] netlink: 'syz.1.2224': attribute type 10 has an invalid length. [ 477.271865][T12404] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2226'. [ 478.100162][T12415] netlink: 'syz.3.2228': attribute type 10 has an invalid length. [ 478.123170][T12414] netlink: 'syz.1.2237': attribute type 39 has an invalid length. [ 478.206619][T12422] IPv6: Can't replace route, no match found [ 478.402450][T12426] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2233'. [ 479.457179][T12446] netlink: 'syz.1.2241': attribute type 10 has an invalid length. [ 479.930839][T12450] netlink: 'syz.3.2242': attribute type 9 has an invalid length. [ 479.938857][T12450] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2242'. [ 480.193163][T12450] netlink: 'syz.3.2242': attribute type 10 has an invalid length. [ 480.910462][T12466] netlink: 'syz.2.2245': attribute type 39 has an invalid length. [ 481.466639][T12484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2253'. [ 481.877661][T12495] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2259'. [ 482.506793][T12504] netlink: 'syz.1.2268': attribute type 10 has an invalid length. [ 483.318588][T12522] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2267'. [ 483.349555][T12522] syz.2.2267[12522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.349843][T12522] syz.2.2267[12522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.476481][T12524] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2269'. [ 483.647294][T12531] netlink: 'syz.3.2272': attribute type 9 has an invalid length. [ 483.659848][T12531] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2272'. [ 483.881366][T12531] netlink: 'syz.3.2272': attribute type 10 has an invalid length. [ 485.099540][T12559] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2280'. [ 485.244553][T12565] netlink: 'syz.3.2283': attribute type 9 has an invalid length. [ 485.256361][T12565] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2283'. [ 485.737840][T12573] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 485.755305][T12572] netlink: 'syz.0.2284': attribute type 10 has an invalid length. [ 485.768551][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2284'. [ 485.778721][T12572] team0: entered promiscuous mode [ 485.784569][T12572] team_slave_0: entered promiscuous mode [ 485.795206][T12572] team_slave_1: entered promiscuous mode [ 485.824932][T12572] geneve1: entered promiscuous mode [ 485.843896][T12572] team0: entered allmulticast mode [ 485.849480][T12572] team_slave_0: entered allmulticast mode [ 485.871119][T12572] team_slave_1: entered allmulticast mode [ 485.877606][T12572] geneve1: entered allmulticast mode [ 485.900908][T12572] bridge0: port 3(team0) entered blocking state [ 485.911498][T12572] bridge0: port 3(team0) entered disabled state [ 485.951768][T12572] bridge0: port 3(team0) entered blocking state [ 485.959689][T12572] bridge0: port 3(team0) entered forwarding state [ 486.386525][T12590] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2291'. [ 487.989797][T12612] netlink: 'syz.0.2297': attribute type 9 has an invalid length. [ 488.027447][T12612] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2297'. [ 488.299080][T12612] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 490.074423][T12619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2298'. [ 490.146510][T12623] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2300'. [ 490.749318][T12643] netlink: 'syz.3.2308': attribute type 9 has an invalid length. [ 490.769648][T12643] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2308'. [ 491.109581][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 491.119495][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 491.129867][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 491.139951][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 491.162385][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 491.175701][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.587461][T12647] netlink: 'syz.3.2308': attribute type 10 has an invalid length. [ 491.610730][T10589] bond0: (slave syz_tun): Releasing backup interface [ 491.796257][T12659] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2310'. [ 492.182988][T12649] chnl_net:caif_netlink_parms(): no params data found [ 492.661413][T12649] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.684919][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.705511][T12649] bridge_slave_0: entered allmulticast mode [ 492.714667][T12649] bridge_slave_0: entered promiscuous mode [ 492.735556][T12649] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.759324][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.776816][T12649] bridge_slave_1: entered allmulticast mode [ 492.793522][T12649] bridge_slave_1: entered promiscuous mode [ 492.844704][T12684] netlink: 'syz.2.2318': attribute type 9 has an invalid length. [ 492.877412][T12684] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2318'. [ 492.948888][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.975499][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.138022][ T9943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.214943][ T5773] Bluetooth: hci4: command tx timeout [ 493.737569][T12686] netlink: 'syz.2.2318': attribute type 10 has an invalid length. [ 493.774715][T12649] team0: Port device team_slave_0 added [ 493.832959][ T9943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.923458][T12649] team0: Port device team_slave_1 added [ 494.056556][T12694] FAULT_INJECTION: forcing a failure. [ 494.056556][T12694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.079347][ T9943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.103305][T12694] CPU: 1 PID: 12694 Comm: syz.1.2320 Not tainted syzkaller #0 [ 494.110814][T12694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.120891][T12694] Call Trace: [ 494.124195][T12694] [ 494.127146][T12694] dump_stack_lvl+0x18c/0x250 [ 494.131859][T12694] ? show_regs_print_info+0x20/0x20 [ 494.137086][T12694] ? load_image+0x420/0x420 [ 494.141598][T12694] ? __lock_acquire+0x7d80/0x7d80 [ 494.146626][T12694] should_fail_ex+0x394/0x4c0 [ 494.151305][T12694] _copy_to_user+0x2f/0xa0 [ 494.155718][T12694] simple_read_from_buffer+0xe7/0x150 [ 494.161095][T12694] proc_fail_nth_read+0x1e8/0x260 [ 494.166152][T12694] ? proc_fault_inject_write+0x360/0x360 [ 494.171791][T12694] ? fsnotify_perm+0x271/0x5e0 [ 494.176568][T12694] ? proc_fault_inject_write+0x360/0x360 [ 494.182205][T12694] vfs_read+0x298/0x990 [ 494.186365][T12694] ? kernel_read+0x1e0/0x1e0 [ 494.190953][T12694] ? __fget_files+0x28/0x460 [ 494.195548][T12694] ? __fget_files+0x3fc/0x460 [ 494.200233][T12694] ? __fdget_pos+0x2a3/0x330 [ 494.204822][T12694] ? ksys_read+0x74/0x260 [ 494.209153][T12694] ksys_read+0x151/0x260 [ 494.213397][T12694] ? vfs_write+0x9a0/0x9a0 [ 494.217813][T12694] ? syscall_enter_from_user_mode+0x2e/0x80 [ 494.223706][T12694] do_syscall_64+0x55/0xb0 [ 494.228121][T12694] ? clear_bhb_loop+0x40/0x90 [ 494.232798][T12694] ? clear_bhb_loop+0x40/0x90 [ 494.237488][T12694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.243405][T12694] RIP: 0033:0x7fc0ac75e68e [ 494.247824][T12694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.267436][T12694] RSP: 002b:00007fc0ad721fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.275851][T12694] RAX: ffffffffffffffda RBX: 00007fc0ad7226c0 RCX: 00007fc0ac75e68e [ 494.283819][T12694] RDX: 000000000000000f RSI: 00007fc0ad7220a0 RDI: 0000000000000007 [ 494.291787][T12694] RBP: 00007fc0ad722090 R08: 0000000000000000 R09: 0000000000000000 [ 494.299756][T12694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.307722][T12694] R13: 00007fc0aca26038 R14: 00007fc0aca25fa0 R15: 00007fff2c3bfb18 [ 494.315717][T12694] [ 494.374917][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.405434][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.504422][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.569894][ T9943] bond0: (slave netdevsim0): Releasing backup interface [ 494.591995][ T9943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.648820][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.655973][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.739525][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.857757][T12649] hsr_slave_0: entered promiscuous mode [ 494.864319][T12649] hsr_slave_1: entered promiscuous mode [ 494.870485][T12649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.878227][T12649] Cannot create hsr debugfs directory [ 495.292346][ T5773] Bluetooth: hci4: command tx timeout [ 495.606603][T12724] netlink: 'syz.1.2326': attribute type 9 has an invalid length. [ 495.625920][T12724] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2326'. [ 496.370929][T12735] netlink: 'syz.1.2326': attribute type 10 has an invalid length. [ 496.530754][T12743] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.2329'. [ 496.541977][T12743] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.2329'. [ 496.621746][T12744] netlink: 'syz.3.2329': attribute type 5 has an invalid length. [ 496.819607][T12649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.855177][T12649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.874536][T12649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.913928][T12649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.372151][ T5773] Bluetooth: hci4: command tx timeout [ 498.264595][T12649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.361242][T12649] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.391604][T12785] netlink: 'syz.2.2337': attribute type 9 has an invalid length. [ 498.402971][T12785] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2337'. [ 498.452608][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.459800][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.488789][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.495988][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.050489][T12789] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2338'. [ 499.138067][T12791] netlink: 'syz.2.2337': attribute type 10 has an invalid length. [ 499.458955][ T5773] Bluetooth: hci4: command tx timeout [ 500.191236][T12649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.358306][T12800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2341'. [ 500.382615][T12800] syz.1.2341[12800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.383550][T12800] syz.1.2341[12800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.649978][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.679790][T12805] netlink: 'syz.2.2342': attribute type 153 has an invalid length. [ 500.698721][T12805] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2342'. [ 500.799140][T12649] veth0_vlan: entered promiscuous mode [ 500.813074][T12649] veth1_vlan: entered promiscuous mode [ 500.864701][T12649] veth0_macvtap: entered promiscuous mode [ 500.874633][T12649] veth1_macvtap: entered promiscuous mode [ 500.957202][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.972248][T12813] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.2350'. [ 501.027175][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.055115][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.097518][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.119225][T12649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.142766][T12649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.166527][T12649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.194681][T12649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.569193][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.576615][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.064248][T12831] netlink: 'syz.3.2349': attribute type 9 has an invalid length. [ 502.072031][T12831] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2349'. [ 502.389050][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.452173][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.612203][T12836] netlink: 'syz.3.2349': attribute type 10 has an invalid length. [ 503.090765][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.130035][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.273687][T12843] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2351'. [ 503.308762][T12843] syz.2.2351[12843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.309045][T12843] syz.2.2351[12843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.537885][ T9943] hsr_slave_0: left promiscuous mode [ 505.592009][ T9943] hsr_slave_1: left promiscuous mode [ 505.652551][ T9943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.681628][ T9943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.724180][ T9943] bridge0: port 3(team0) entered disabled state [ 505.769037][ T9943] bridge_slave_1: left allmulticast mode [ 505.775997][ T9943] bridge_slave_1: left promiscuous mode [ 505.782872][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.793382][ T9943] bridge_slave_0: left promiscuous mode [ 505.800767][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.920406][ T9943] veth1_macvtap: left promiscuous mode [ 505.927459][ T9943] veth0_macvtap: left promiscuous mode [ 506.132380][ T9943] geneve1 (unregistering): left promiscuous mode [ 506.139275][ T9943] geneve1 (unregistering): left allmulticast mode [ 506.154783][ T9943] team0 (unregistering): Port device geneve1 removed [ 506.189678][ T9943] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 506.663724][ T9943] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 506.740941][ T9943] team_slave_1 (unregistering): left promiscuous mode [ 506.748245][ T9943] team_slave_1 (unregistering): left allmulticast mode [ 506.760446][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 506.819942][ T9943] team_slave_0 (unregistering): left promiscuous mode [ 506.827951][ T9943] team_slave_0 (unregistering): left allmulticast mode [ 506.838531][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 506.890002][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.938810][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.215573][ T9943] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 507.226210][ T9943] bond0 (unregistering): Released all slaves [ 508.031963][T12916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2374'. [ 508.121900][T12916] syz.0.2374[12916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.124397][T12916] syz.0.2374[12916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.436984][T12920] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 508.482174][T12920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'. [ 508.697496][T12920] ipvlan1: entered promiscuous mode [ 508.742217][T12926] netlink: 'syz.1.2376': attribute type 9 has an invalid length. [ 508.761810][T12920] ipvlan1: entered allmulticast mode [ 508.786917][T12926] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2376'. [ 508.807169][T12920] veth0_vlan: entered allmulticast mode [ 508.889140][T12920] bridge0: port 3(ipvlan1) entered blocking state [ 508.930027][T12920] bridge0: port 3(ipvlan1) entered disabled state [ 508.996507][T12920] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 509.718890][T12931] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 509.806766][T12935] syz.0.2378[12935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.807024][T12935] syz.0.2378[12935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.876611][T12934] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2378'. [ 510.208790][T12949] netlink: 'syz.1.2381': attribute type 13 has an invalid length. [ 510.219200][T12949] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2381'. [ 510.250323][T12949] erspan0: refused to change device tx_queue_len [ 510.258434][T12949] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 511.027144][T12957] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2384'. [ 511.092401][T12957] syz.3.2384[12957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.093596][T12957] syz.3.2384[12957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.513667][T12966] netlink: 'syz.3.2388': attribute type 16 has an invalid length. [ 511.573132][T12966] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2388'. [ 511.625562][T12965] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2388'. [ 512.036176][T12969] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2389'. [ 512.173371][T12969] syz.3.2389[12969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.174631][T12969] syz.3.2389[12969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.309871][ T5767] bond0: (slave syz_tun): Releasing backup interface [ 512.329243][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 512.339395][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 512.348074][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 512.364038][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 512.379654][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 512.388218][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 512.407208][T12974] netlink: 'syz.3.2390': attribute type 9 has an invalid length. [ 512.444388][T12974] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2390'. [ 513.100410][T12974] netlink: 'syz.3.2390': attribute type 10 has an invalid length. [ 513.267007][T12980] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2391'. [ 513.281327][T12982] syz.3.2391[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.281608][T12982] syz.3.2391[12982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.635135][T12971] chnl_net:caif_netlink_parms(): no params data found [ 513.915811][T12971] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.924784][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.932393][T12971] bridge_slave_0: entered allmulticast mode [ 513.940932][T12971] bridge_slave_0: entered promiscuous mode [ 513.951272][T12971] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.960661][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.968161][T12971] bridge_slave_1: entered allmulticast mode [ 513.976153][T12971] bridge_slave_1: entered promiscuous mode [ 514.134855][ T9943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.206523][T12971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.269146][T12971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.347670][ T9943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.412474][ T5774] Bluetooth: hci0: command tx timeout [ 514.490008][ T9943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.530499][T12971] team0: Port device team_slave_0 added [ 514.558704][T13004] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2398'. [ 514.585578][T12971] team0: Port device team_slave_1 added [ 514.654108][T13004] syz.2.2398[13004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.655155][T13004] syz.2.2398[13004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.677538][ T9943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.798181][T12971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.808078][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.845147][T12971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.940740][T12971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.948023][T12971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.987217][T12971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.089604][T13013] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2400'. [ 515.370195][T12971] hsr_slave_0: entered promiscuous mode [ 515.384554][T12971] hsr_slave_1: entered promiscuous mode [ 515.397752][T12971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.405927][T12971] Cannot create hsr debugfs directory [ 515.903728][T13018] netlink: 'syz.2.2401': attribute type 10 has an invalid length. [ 516.492763][ T5774] Bluetooth: hci0: command tx timeout [ 517.344581][T12971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.361256][T12971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.394494][T12971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.457920][T12971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.926985][T13059] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2407'. [ 518.020747][T13059] syz.2.2407[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.071625][T13059] syz.2.2407[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.558978][T13070] netlink: 'syz.2.2410': attribute type 9 has an invalid length. [ 518.572451][ T5774] Bluetooth: hci0: command tx timeout [ 518.602204][T13070] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2410'. [ 518.624487][T12971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.007624][T13079] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 519.052949][T13082] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 519.495069][T13082] syz_tun: entered promiscuous mode [ 519.513142][T13082] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 519.562962][T13076] netlink: 'syz.0.2411': attribute type 9 has an invalid length. [ 519.574991][T12971] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.593402][T13076] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2411'. [ 519.646461][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.653641][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.809925][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.817148][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.652465][ T5774] Bluetooth: hci0: command tx timeout [ 520.946636][T13107] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2418'. [ 520.987529][T12971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.050402][T12971] veth0_vlan: entered promiscuous mode [ 521.085386][T12971] veth1_vlan: entered promiscuous mode [ 521.225711][T12971] veth0_macvtap: entered promiscuous mode [ 521.242285][T12971] veth1_macvtap: entered promiscuous mode [ 521.335782][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.351756][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.363979][T12971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.416694][T12971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.429271][T12971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.455092][T12971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.477585][T12971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.532320][T12971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.541066][T12971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.582160][T12971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.777511][T13122] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2424'. [ 522.465869][T13125] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2424'. [ 522.496600][T13122] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2424'. [ 522.548043][T13123] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2424'. [ 522.670132][ T9943] hsr_slave_0: left promiscuous mode [ 522.684167][ T9943] hsr_slave_1: left promiscuous mode [ 522.694306][ T9943] bridge0: port 3(team0) entered disabled state [ 522.704749][ T9943] bridge_slave_1: left allmulticast mode [ 522.710422][ T9943] bridge_slave_1: left promiscuous mode [ 522.721072][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.732826][ T9943] bridge_slave_0: left promiscuous mode [ 522.739289][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.777405][ T9943] veth1_macvtap: left promiscuous mode [ 522.784876][ T9943] veth0_macvtap: left promiscuous mode [ 522.793129][ T9943] veth1_vlan: left promiscuous mode [ 522.798826][ T9943] veth0_vlan: left promiscuous mode [ 522.995579][ T9943] geneve1 (unregistering): left promiscuous mode [ 523.002605][ T9943] geneve1 (unregistering): left allmulticast mode [ 523.004021][T13133] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2426'. [ 523.020466][ T9943] team0 (unregistering): Port device geneve1 removed [ 523.498965][ T9943] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 523.539843][ T9943] team_slave_1 (unregistering): left promiscuous mode [ 523.546689][ T9943] team_slave_1 (unregistering): left allmulticast mode [ 523.555829][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 523.591379][ T9943] team_slave_0 (unregistering): left promiscuous mode [ 523.598218][ T9943] team_slave_0 (unregistering): left allmulticast mode [ 523.608011][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 523.644073][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.689934][ T9943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.880742][ T9943] bond0 (unregistering): Released all slaves [ 524.248554][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.275680][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.313182][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.321019][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.342555][T13143] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2430'. [ 524.355869][T13143] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2430'. [ 524.655435][T13149] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2433'. [ 524.688498][T13149] syz.3.2433[13149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.701586][T13149] syz.3.2433[13149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.083598][T13155] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2436'. [ 525.803297][T13166] netlink: 'syz.1.2441': attribute type 9 has an invalid length. [ 525.811074][T13166] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2441'. [ 525.869079][ T5769] bond0: (slave syz_tun): Releasing backup interface [ 525.921464][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.930208][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.948935][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.957295][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.969336][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.977334][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.303603][T13174] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 526.313049][T13174] syz_tun: entered promiscuous mode [ 526.335230][T13174] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 526.846960][T13170] chnl_net:caif_netlink_parms(): no params data found [ 526.932678][ T9943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.148083][ T9943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.340945][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.354216][T13170] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.369278][T13170] bridge_slave_0: entered allmulticast mode [ 527.377162][T13170] bridge_slave_0: entered promiscuous mode [ 527.424045][ T9943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.477780][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.490072][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.509642][T13170] bridge_slave_1: entered allmulticast mode [ 527.553744][T13170] bridge_slave_1: entered promiscuous mode [ 527.567821][T13196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2447'. [ 527.641278][ T9943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.669579][T13196] syz.1.2447[13196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.671135][T13196] syz.1.2447[13196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.795385][T13170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.839026][T13170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.918416][T13199] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 527.927915][T13199] netlink: 'syz.1.2448': attribute type 4 has an invalid length. [ 527.937575][T13199] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2448'. [ 527.984600][T13170] team0: Port device team_slave_0 added [ 527.993700][T13170] team0: Port device team_slave_1 added [ 528.012393][ T5774] Bluetooth: hci2: command tx timeout [ 528.071468][T13170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.078994][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.106922][T13170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.121163][T13170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.128194][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.156259][T13170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.546891][T13170] hsr_slave_0: entered promiscuous mode [ 528.559480][T13170] hsr_slave_1: entered promiscuous mode [ 528.617221][T13203] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 528.633346][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2451'. [ 529.039700][T13223] netlink: 'syz.1.2455': attribute type 4 has an invalid length. [ 529.060212][T13223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2455'. [ 529.085805][T13223] .`: renamed from bond0 (while UP) [ 529.091299][T13223] FAULT_INJECTION: forcing a failure. [ 529.091299][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 529.104745][T13223] CPU: 1 PID: 13223 Comm: syz.1.2455 Not tainted syzkaller #0 [ 529.112238][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.122310][T13223] Call Trace: [ 529.125605][T13223] [ 529.128562][T13223] dump_stack_lvl+0x18c/0x250 [ 529.133271][T13223] ? show_regs_print_info+0x20/0x20 [ 529.138512][T13223] ? load_image+0x420/0x420 [ 529.143045][T13223] ? __might_sleep+0xe0/0xe0 [ 529.147664][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 529.152718][T13223] should_fail_ex+0x394/0x4c0 [ 529.157423][T13223] should_failslab+0x9/0x20 [ 529.161951][T13223] slab_pre_alloc_hook+0x59/0x300 [ 529.167002][T13223] ? slab_free_freelist_hook+0x130/0x1a0 [ 529.172642][T13223] ? kobject_uevent_env+0x27c/0x890 [ 529.177856][T13223] __kmem_cache_alloc_node+0x53/0x250 [ 529.183224][T13223] ? kobject_uevent_env+0x27c/0x890 [ 529.188419][T13223] kmalloc_trace+0x2a/0xe0 [ 529.192831][T13223] ? dev_uevent_filter+0xb0/0xb0 [ 529.197805][T13223] kobject_uevent_env+0x27c/0x890 [ 529.202824][T13223] kobject_rename+0x3f6/0x4f0 [ 529.207510][T13223] ? kobject_init_and_add+0x1a0/0x1a0 [ 529.212885][T13223] ? sysfs_rename_link_ns+0x17f/0x1b0 [ 529.218267][T13223] device_rename+0x15d/0x1e0 [ 529.222850][T13223] dev_change_name+0x308/0x8e0 [ 529.227602][T13223] ? dev_validate_mtu+0x170/0x170 [ 529.232678][T13223] ? __wake_up_klogd+0xd9/0x100 [ 529.237520][T13223] ? vprintk_emit+0x53d/0x610 [ 529.242188][T13223] ? dev_alloc_name+0x1d0/0x1d0 [ 529.247024][T13223] ? printk_sprint+0x460/0x460 [ 529.251778][T13223] ? nla_strscpy+0x109/0x160 [ 529.256359][T13223] do_setlink+0x925/0x3f40 [ 529.260825][T13223] ? load_image+0x420/0x420 [ 529.265330][T13223] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 529.271488][T13223] ? stack_trace_save+0xaa/0x100 [ 529.276420][T13223] ? rcu_is_watching+0x15/0xb0 [ 529.281175][T13223] ? do_trace_netlink_extack+0x7e/0x1a0 [ 529.286721][T13223] ? __nla_validate+0x50/0x50 [ 529.291403][T13223] ? validate_linkmsg+0x719/0x910 [ 529.296417][T13223] rtnl_newlink+0x1848/0x2170 [ 529.301094][T13223] ? rtnl_newlink+0x451/0x2170 [ 529.305865][T13223] ? rtnl_setlink+0x4e0/0x4e0 [ 529.310541][T13223] ? __rwlock_init+0x150/0x150 [ 529.315310][T13223] ? mutex_spin_on_owner+0x26a/0x330 [ 529.320620][T13223] ? do_raw_spin_unlock+0x121/0x230 [ 529.325839][T13223] ? __mutex_lock+0x923/0xc80 [ 529.330594][T13223] ? __mutex_lock+0x4d2/0xc80 [ 529.335295][T13223] ? rtnl_setlink+0x4e0/0x4e0 [ 529.339980][T13223] rtnetlink_rcv_msg+0x843/0xf90 [ 529.344921][T13223] ? rtnetlink_rcv_msg+0x220/0xf90 [ 529.350028][T13223] ? rtnetlink_bind+0x80/0x80 [ 529.354697][T13223] ? perf_trace_preemptirq_template+0xac/0x330 [ 529.360846][T13223] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 529.366830][T13223] ? lock_chain_count+0x20/0x20 [ 529.371694][T13223] ? __local_bh_enable_ip+0x13a/0x1c0 [ 529.377053][T13223] ? lockdep_hardirqs_on+0x98/0x150 [ 529.382241][T13223] ? __local_bh_enable_ip+0x13a/0x1c0 [ 529.387600][T13223] ? _local_bh_enable+0xa0/0xa0 [ 529.392454][T13223] ? __dev_queue_xmit+0x275/0x3630 [ 529.397554][T13223] ? __dev_queue_xmit+0x1bc2/0x3630 [ 529.402740][T13223] ? __dev_queue_xmit+0x275/0x3630 [ 529.407864][T13223] ? ref_tracker_free+0x686/0x830 [ 529.412911][T13223] netlink_rcv_skb+0x235/0x4c0 [ 529.417702][T13223] ? rtnetlink_bind+0x80/0x80 [ 529.422392][T13223] ? netlink_ack+0x1160/0x1160 [ 529.427181][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 529.432225][T13223] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.437420][T13223] netlink_unicast+0x7b1/0x930 [ 529.442182][T13223] netlink_sendmsg+0x8d0/0xbf0 [ 529.446955][T13223] ? netlink_getsockopt+0x590/0x590 [ 529.452172][T13223] ? apparmor_socket_sendmsg+0x170/0x330 [ 529.457794][T13223] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 529.463081][T13223] ? security_socket_sendmsg+0x80/0xa0 [ 529.468550][T13223] ? netlink_getsockopt+0x590/0x590 [ 529.473745][T13223] ____sys_sendmsg+0x61b/0x980 [ 529.478505][T13223] ? __asan_memset+0x22/0x40 [ 529.483101][T13223] ? __sys_sendmsg_sock+0x30/0x30 [ 529.488116][T13223] ? __import_iovec+0x5f2/0x850 [ 529.492961][T13223] ? import_iovec+0x73/0xa0 [ 529.497456][T13223] ___sys_sendmsg+0x2a6/0x360 [ 529.502121][T13223] ? get_pid_task+0x20/0x1e0 [ 529.506706][T13223] ? __sys_sendmsg+0x2b0/0x2b0 [ 529.511468][T13223] ? __lock_acquire+0x7d80/0x7d80 [ 529.516518][T13223] __se_sys_sendmsg+0x1d0/0x2c0 [ 529.521382][T13223] ? __x64_sys_sendmsg+0x80/0x80 [ 529.526317][T13223] ? lockdep_hardirqs_on+0x98/0x150 [ 529.531509][T13223] do_syscall_64+0x55/0xb0 [ 529.535929][T13223] ? clear_bhb_loop+0x40/0x90 [ 529.540592][T13223] ? clear_bhb_loop+0x40/0x90 [ 529.545260][T13223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.551151][T13223] RIP: 0033:0x7fbee439de59 [ 529.555579][T13223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.575177][T13223] RSP: 002b:00007fbee51a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.583597][T13223] RAX: ffffffffffffffda RBX: 00007fbee4625fa0 RCX: 00007fbee439de59 [ 529.591571][T13223] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 529.599533][T13223] RBP: 00007fbee51a3090 R08: 0000000000000000 R09: 0000000000000000 [ 529.607490][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 529.615465][T13223] R13: 00007fbee4626038 R14: 00007fbee4625fa0 R15: 00007ffd55bcbb18 [ 529.623450][T13223] [ 529.731367][T13230] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 529.744088][T13230] netlink: 'syz.1.2457': attribute type 4 has an invalid length. [ 529.751929][T13230] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2457'. [ 530.093985][ T5774] Bluetooth: hci2: command tx timeout [ 530.998286][T13170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.023089][T13170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.041741][T13170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.099240][T13170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.367163][T13170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.440700][T13170] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.461644][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.468833][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.511729][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.518943][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.736151][T13170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.175194][ T5774] Bluetooth: hci2: command tx timeout [ 532.259488][T13284] netlink: 'syz.0.2465': attribute type 1 has an invalid length. [ 532.285052][T13284] netlink: 'syz.0.2465': attribute type 4 has an invalid length. [ 532.321078][T13284] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2465'. [ 532.430479][T13170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.091175][T13170] veth0_vlan: entered promiscuous mode [ 533.111870][T13305] netlink: 'syz.3.2470': attribute type 9 has an invalid length. [ 533.139751][T13305] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2470'. [ 533.199743][T13170] veth1_vlan: entered promiscuous mode [ 533.825101][T13315] netlink: 'syz.3.2470': attribute type 10 has an invalid length. [ 534.252293][ T5774] Bluetooth: hci2: command tx timeout [ 534.271998][ T9943] bridge_slave_1: left allmulticast mode [ 534.278152][ T9943] bridge_slave_1: left promiscuous mode [ 534.284879][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.297845][ T9943] bridge_slave_0: left promiscuous mode [ 534.304581][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.325597][ T9943] veth1_macvtap: left promiscuous mode [ 534.332152][ T9943] veth0_macvtap: left promiscuous mode [ 534.468159][ T9943] team0 (unregistering): Port device geneve1 removed [ 534.490887][ T9943] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 534.722629][ T9943] team0 (unregistering): Port device team_slave_1 removed [ 534.759906][ T9943] team0 (unregistering): Port device team_slave_0 removed [ 534.795656][ T9943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.012189][ T9943] team0 (unregistering): Port device bond0 removed [ 535.037446][ T9943] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 535.047318][ T9943] bond0 (unregistering): Released all slaves [ 535.144727][T13170] veth0_macvtap: entered promiscuous mode [ 535.158894][T13170] veth1_macvtap: entered promiscuous mode [ 535.261543][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.276837][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.290108][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.307288][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.319139][T13170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.366691][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.377700][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.388154][T13170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.398989][T13170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.418486][T13170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.436242][T13170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.445093][T13170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.454779][T13170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.467687][T13170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.671512][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.702139][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.747851][T13348] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 535.757212][T13348] netlink: 'syz.1.2474': attribute type 4 has an invalid length. [ 535.765558][T13348] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2474'. [ 535.799725][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.817291][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.979445][T13352] netlink: 'syz.1.2475': attribute type 9 has an invalid length. [ 535.990439][T13352] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2475'. [ 536.908572][T13364] netlink: 'syz.1.2475': attribute type 10 has an invalid length. [ 537.310319][T13373] netlink: 'syz.1.2480': attribute type 9 has an invalid length. [ 537.352908][T13373] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2480'. [ 537.801914][ T5774] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 538.077923][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.095378][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.104791][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.116893][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.127485][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 538.135635][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.194852][T13378] netlink: 'syz.1.2480': attribute type 10 has an invalid length. [ 538.227462][T10713] bond0: (slave syz_tun): Releasing backup interface [ 538.319392][T13386] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 538.327701][T13386] netlink: 'syz.1.2484': attribute type 4 has an invalid length. [ 538.336746][T13386] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2484'. [ 538.536345][T13383] chnl_net:caif_netlink_parms(): no params data found [ 538.832001][T13404] netlink: 'syz.2.2488': attribute type 9 has an invalid length. [ 538.849168][T13404] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2488'. [ 538.860684][ T4316] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.903354][T13383] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.910775][T13383] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.919147][T13383] bridge_slave_0: entered allmulticast mode [ 538.927638][T13383] bridge_slave_0: entered promiscuous mode [ 538.939001][T13383] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.968076][T13383] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.975659][T13383] bridge_slave_1: entered allmulticast mode [ 538.983187][T13383] bridge_slave_1: entered promiscuous mode [ 539.304722][ T4316] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.360838][T13408] netlink: 'syz.2.2488': attribute type 10 has an invalid length. [ 539.374467][T13408] syz_tun: entered promiscuous mode [ 539.400245][T13408] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 539.435447][ T4316] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.462767][T13383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.475853][T13383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.587514][ T4316] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.617659][T13383] team0: Port device team_slave_0 added [ 539.674696][T13383] team0: Port device team_slave_1 added [ 539.750632][T13383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.759941][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.802604][T13383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.834371][T13383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.841348][T13383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.884439][T13383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.208772][T13383] hsr_slave_0: entered promiscuous mode [ 540.219163][T13383] hsr_slave_1: entered promiscuous mode [ 540.229624][T13383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.240754][T13383] Cannot create hsr debugfs directory [ 540.253171][ T5774] Bluetooth: hci1: command tx timeout [ 541.041285][T13425] netlink: 'syz.0.2491': attribute type 9 has an invalid length. [ 541.049202][T13425] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2491'. [ 541.635987][T13433] netlink: 'syz.0.2491': attribute type 10 has an invalid length. [ 541.852231][ T5774] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 541.860790][ T5774] Bluetooth: hci2: Injecting HCI hardware error event [ 541.868891][ T5774] Bluetooth: hci2: hardware error 0x00 [ 541.959415][T13444] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 541.967273][T13444] netlink: 'syz.0.2493': attribute type 4 has an invalid length. [ 541.975084][T13444] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2493'. [ 542.333282][ T5773] Bluetooth: hci1: command tx timeout [ 542.588256][T13383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.635972][T13463] netlink: 'syz.0.2498': attribute type 9 has an invalid length. [ 542.643935][T13463] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2498'. [ 543.032745][T13383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.046658][T13383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.110565][T13468] netlink: 'syz.0.2498': attribute type 10 has an invalid length. [ 543.123045][T13383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.343815][T13476] netlink: 'syz.2.2501': attribute type 9 has an invalid length. [ 543.364577][T13476] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2501'. [ 543.558558][T13484] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 543.580497][T13484] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 543.622212][T13484] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2503'. [ 543.750063][T13482] netlink: 'syz.2.2501': attribute type 10 has an invalid length. [ 543.780886][ T5773] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 543.932411][ T5774] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 544.121743][ T5774] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 544.306050][T13383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.414457][ T5774] Bluetooth: hci1: command tx timeout [ 544.453741][T13383] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.540957][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.548209][ T9943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.573365][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.580553][ T9943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.036836][T13383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.310353][T13383] veth0_vlan: entered promiscuous mode [ 546.337205][T13383] veth1_vlan: entered promiscuous mode [ 546.428208][T13383] veth0_macvtap: entered promiscuous mode [ 546.445057][T13383] veth1_macvtap: entered promiscuous mode [ 546.492493][ T5774] Bluetooth: hci1: command tx timeout [ 546.539221][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.552768][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.565098][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.577151][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.591450][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.607577][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.620263][T13383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.724750][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.739189][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.749087][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.759648][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.769722][T13383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.783594][T13383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.796224][T13383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.829210][T13383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.838834][T13383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.849237][T13383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.858154][T13383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.153134][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.175192][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.281977][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.300718][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.359802][T13550] netlink: 'syz.1.2515': attribute type 9 has an invalid length. [ 547.368057][T13550] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2515'. [ 547.523872][T13552] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2479'. [ 547.622787][T13554] netlink: 'syz.1.2515': attribute type 10 has an invalid length. [ 547.862320][ T5774] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 547.871052][ T5774] Bluetooth: hci0: Injecting HCI hardware error event [ 547.879896][ T5773] Bluetooth: hci0: hardware error 0x00 [ 548.173736][ T5774] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 548.183477][ T5774] Bluetooth: hci4: Injecting HCI hardware error event [ 548.191550][ T5774] Bluetooth: hci4: hardware error 0x00 [ 548.314217][T13567] sock: sock_set_timeout: `syz.2.2519' (pid 13567) tries to set negative timeout [ 548.317815][T13565] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 549.118652][T13580] netlink: 'syz.1.2526': attribute type 9 has an invalid length. [ 549.135005][T13580] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2526'. [ 549.499606][T13584] netlink: 'syz.1.2526': attribute type 10 has an invalid length. [ 549.543381][T13586] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2527'. [ 550.026144][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 550.252791][ T5774] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 550.291789][T13597] netlink: 'syz.3.2530': attribute type 3 has an invalid length. [ 550.302475][T13597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2530'. [ 550.581702][ T4316] veth1_macvtap: left promiscuous mode [ 550.587641][ T4316] veth0_macvtap: left promiscuous mode [ 550.867773][ T4316] team0 (unregistering): Port device geneve1 removed [ 550.899944][ T4316] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 551.081584][ T4316] team0 (unregistering): Port device hsr_slave_0 removed [ 551.153408][ T4316] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 551.199789][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 551.241385][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 551.279977][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.600544][ T4316] bond0 (unregistering): Released all slaves [ 551.748977][T13619] netlink: 'syz.1.2537': attribute type 9 has an invalid length. [ 551.772380][T13619] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2537'. [ 551.971165][T13621] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2538'. [ 552.019567][T13619] netlink: 'syz.1.2537': attribute type 10 has an invalid length. [ 552.333796][ T5774] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 552.343219][ T5774] Bluetooth: hci1: Injecting HCI hardware error event [ 552.351190][ T5774] Bluetooth: hci1: hardware error 0x00 [ 552.613316][T13633] mac80211_hwsim hwsim211 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 554.653844][ T5774] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 554.972455][ T49] wlan1: Trigger new scan to find an IBSS to join [ 556.101230][T13736] netlink: 'syz.2.2581': attribute type 9 has an invalid length. [ 556.146001][T13736] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2581'. [ 556.382886][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2583'. [ 556.828951][T13745] netlink: 'syz.2.2581': attribute type 10 has an invalid length. [ 558.295288][T13778] netlink: 'syz.3.2593': attribute type 9 has an invalid length. [ 558.303766][T13778] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2593'. [ 558.480274][T13782] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2594'. [ 558.691567][T13779] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 558.713094][T13779] syz_tun: entered promiscuous mode [ 558.780212][T13779] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 558.891615][T13789] netlink: 'syz.3.2596': attribute type 10 has an invalid length. [ 558.910343][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2596'. [ 558.923619][T13789] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 559.047741][T13792] FAULT_INJECTION: forcing a failure. [ 559.047741][T13792] name failslab, interval 1, probability 0, space 0, times 0 [ 559.070205][T13792] CPU: 0 PID: 13792 Comm: syz.3.2597 Not tainted syzkaller #0 [ 559.077704][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.087780][T13792] Call Trace: [ 559.091081][T13792] [ 559.094030][T13792] dump_stack_lvl+0x18c/0x250 [ 559.098741][T13792] ? show_regs_print_info+0x20/0x20 [ 559.103964][T13792] ? load_image+0x420/0x420 [ 559.108503][T13792] ? __might_sleep+0xe0/0xe0 [ 559.113124][T13792] ? __lock_acquire+0x7d80/0x7d80 [ 559.118182][T13792] should_fail_ex+0x394/0x4c0 [ 559.122897][T13792] should_failslab+0x9/0x20 [ 559.127430][T13792] slab_pre_alloc_hook+0x59/0x300 [ 559.132476][T13792] ? __lock_acquire+0x7d80/0x7d80 [ 559.137526][T13792] kmem_cache_alloc_node+0x5e/0x310 [ 559.142733][T13792] ? __alloc_skb+0x103/0x2c0 [ 559.147329][T13792] __alloc_skb+0x103/0x2c0 [ 559.151748][T13792] netlink_sendmsg+0x66a/0xbf0 [ 559.156523][T13792] ? netlink_getsockopt+0x590/0x590 [ 559.161723][T13792] ? apparmor_socket_sendmsg+0x170/0x330 [ 559.167353][T13792] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 559.172641][T13792] ? security_socket_sendmsg+0x80/0xa0 [ 559.178098][T13792] ? netlink_getsockopt+0x590/0x590 [ 559.183294][T13792] ____sys_sendmsg+0x61b/0x980 [ 559.188062][T13792] ? __asan_memset+0x22/0x40 [ 559.192651][T13792] ? __sys_sendmsg_sock+0x30/0x30 [ 559.197671][T13792] ? __import_iovec+0x5f2/0x850 [ 559.202527][T13792] ? import_iovec+0x73/0xa0 [ 559.207033][T13792] ___sys_sendmsg+0x2a6/0x360 [ 559.211717][T13792] ? __sys_sendmsg+0x2b0/0x2b0 [ 559.216499][T13792] ? __lock_acquire+0x7d80/0x7d80 [ 559.221542][T13792] __se_sys_sendmsg+0x1d0/0x2c0 [ 559.226404][T13792] ? __x64_sys_sendmsg+0x80/0x80 [ 559.231349][T13792] ? lockdep_hardirqs_on+0x98/0x150 [ 559.236551][T13792] do_syscall_64+0x55/0xb0 [ 559.240967][T13792] ? clear_bhb_loop+0x40/0x90 [ 559.245637][T13792] ? clear_bhb_loop+0x40/0x90 [ 559.250306][T13792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.256203][T13792] RIP: 0033:0x7fd30cb9de59 [ 559.260616][T13792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.280216][T13792] RSP: 002b:00007fd30da23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.288624][T13792] RAX: ffffffffffffffda RBX: 00007fd30ce25fa0 RCX: 00007fd30cb9de59 [ 559.296589][T13792] RDX: 00000000240000c4 RSI: 00002000000000c0 RDI: 0000000000000003 [ 559.304551][T13792] RBP: 00007fd30da23090 R08: 0000000000000000 R09: 0000000000000000 [ 559.312515][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.320482][T13792] R13: 00007fd30ce26038 R14: 00007fd30ce25fa0 R15: 00007ffc1b7a05f8 [ 559.328461][T13792] [ 559.901698][T13806] netlink: 'syz.0.2603': attribute type 1 has an invalid length. [ 559.924419][T13806] netlink: 'syz.0.2603': attribute type 4 has an invalid length. [ 559.932502][ T13] wlan1: Trigger new scan to find an IBSS to join [ 559.934005][T13808] netlink: 'syz.2.2604': attribute type 9 has an invalid length. [ 559.948229][T13806] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2603'. [ 559.962442][T13808] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2604'. [ 561.641030][ T41] wlan1: Creating new IBSS network, BSSID de:b9:be:0c:78:72 [ 561.730334][T13811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2605'. [ 561.732548][T13816] netlink: 'syz.2.2604': attribute type 10 has an invalid length. [ 561.753848][T13817] netlink: 'syz.0.2606': attribute type 10 has an invalid length. [ 561.769688][T13817] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 562.783082][T13842] netlink: 'syz.2.2614': attribute type 1 has an invalid length. [ 562.790876][T13842] netlink: 'syz.2.2614': attribute type 4 has an invalid length. [ 562.861314][T13842] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2614'. [ 562.997665][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.009994][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.131549][T13847] netlink: 'syz.2.2616': attribute type 9 has an invalid length. [ 563.139609][T13847] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2616'. [ 563.515989][T13856] netlink: 'syz.2.2616': attribute type 10 has an invalid length. [ 563.676064][T13851] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2617'. [ 564.049476][T13865] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2621'. [ 564.300144][T13871] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 564.311064][T13871] netlink: 'syz.0.2624': attribute type 4 has an invalid length. [ 564.321083][T13871] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2624'. [ 564.515866][T13878] netlink: 'syz.0.2626': attribute type 10 has an invalid length. [ 564.534034][T13879] netlink: 'syz.1.2627': attribute type 9 has an invalid length. [ 564.557019][T13878] veth1_macvtap: left promiscuous mode [ 564.568031][T13879] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2627'. [ 565.001020][T13883] veth1_to_bond: entered allmulticast mode [ 565.957181][T13919] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2636'. [ 566.035262][T13921] veth1_macvtap: left promiscuous mode [ 566.307800][T13928] FAULT_INJECTION: forcing a failure. [ 566.307800][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.331956][T13928] CPU: 0 PID: 13928 Comm: syz.2.2641 Not tainted syzkaller #0 [ 566.339456][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.349526][T13928] Call Trace: [ 566.352815][T13928] [ 566.355762][T13928] dump_stack_lvl+0x18c/0x250 [ 566.360470][T13928] ? show_regs_print_info+0x20/0x20 [ 566.365686][T13928] ? load_image+0x420/0x420 [ 566.370208][T13928] ? __might_fault+0xaa/0x120 [ 566.374900][T13928] ? __lock_acquire+0x7d80/0x7d80 [ 566.379943][T13928] should_fail_ex+0x394/0x4c0 [ 566.384643][T13928] _copy_from_iter+0x1cd/0x1290 [ 566.389509][T13928] ? lockdep_hardirqs_on+0x98/0x150 [ 566.394723][T13928] ? copyout_mc+0x70/0x70 [ 566.399061][T13928] ? __virt_addr_valid+0x10c/0x380 [ 566.404187][T13928] ? __virt_addr_valid+0x10c/0x380 [ 566.409307][T13928] ? __virt_addr_valid+0x10c/0x380 [ 566.414434][T13928] ? __check_object_size+0x4fc/0xa40 [ 566.419727][T13928] netlink_sendmsg+0x76b/0xbf0 [ 566.424514][T13928] ? netlink_getsockopt+0x590/0x590 [ 566.429727][T13928] ? apparmor_socket_sendmsg+0x8e/0x330 [ 566.435282][T13928] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 566.440577][T13928] ? security_socket_sendmsg+0x80/0xa0 [ 566.446044][T13928] ? netlink_getsockopt+0x590/0x590 [ 566.451256][T13928] ____sys_sendmsg+0x61b/0x980 [ 566.456038][T13928] ? __asan_memset+0x22/0x40 [ 566.460636][T13928] ? __sys_sendmsg_sock+0x30/0x30 [ 566.465668][T13928] ? __import_iovec+0x5f2/0x850 [ 566.470538][T13928] ? import_iovec+0x73/0xa0 [ 566.475053][T13928] ___sys_sendmsg+0x2a6/0x360 [ 566.479753][T13928] ? __sys_sendmsg+0x2b0/0x2b0 [ 566.484551][T13928] ? __lock_acquire+0x7d80/0x7d80 [ 566.489610][T13928] __se_sys_sendmsg+0x1d0/0x2c0 [ 566.494473][T13928] ? perf_trace_preemptirq_template+0x269/0x330 [ 566.500731][T13928] ? __x64_sys_sendmsg+0x80/0x80 [ 566.505693][T13928] ? lockdep_hardirqs_on+0x98/0x150 [ 566.510907][T13928] do_syscall_64+0x55/0xb0 [ 566.515333][T13928] ? clear_bhb_loop+0x40/0x90 [ 566.520017][T13928] ? clear_bhb_loop+0x40/0x90 [ 566.524703][T13928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.530611][T13928] RIP: 0033:0x7fbef7b9de59 [ 566.535031][T13928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.554688][T13928] RSP: 002b:00007fbef89f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.563127][T13928] RAX: ffffffffffffffda RBX: 00007fbef7e25fa0 RCX: 00007fbef7b9de59 [ 566.571113][T13928] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 000000000000000b [ 566.579095][T13928] RBP: 00007fbef89f7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.587077][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.595067][T13928] R13: 00007fbef7e26038 R14: 00007fbef7e25fa0 R15: 00007ffc63781fc8 [ 566.603063][T13928] [ 566.870251][T13933] validate_nla: 6 callbacks suppressed [ 566.870268][T13933] netlink: 'syz.3.2640': attribute type 9 has an invalid length. [ 567.045728][T13933] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2640'. [ 568.189058][T13947] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 568.279364][T13926] netlink: 'syz.3.2640': attribute type 9 has an invalid length. [ 568.313607][T13926] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2640'. [ 568.410930][T13950] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 568.432150][T13950] netlink: 'syz.1.2648': attribute type 4 has an invalid length. [ 568.452146][T13950] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2648'. [ 568.768767][T13961] netlink: 'syz.2.2652': attribute type 10 has an invalid length. [ 568.812963][T13961] veth1_macvtap: left promiscuous mode [ 569.103994][T13974] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 569.189402][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.235397][T13974] bridge_slave_1: left allmulticast mode [ 569.273169][T13974] bridge_slave_1: left promiscuous mode [ 569.278988][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.327733][T13974] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 569.496278][T13982] netlink: 'syz.3.2657': attribute type 10 has an invalid length. [ 570.904209][T14000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2666'. [ 570.947765][T14004] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2667'. [ 571.079373][T14008] netlink: 'syz.0.2668': attribute type 10 has an invalid length. [ 571.973721][T14030] FAULT_INJECTION: forcing a failure. [ 571.973721][T14030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.997148][T14030] CPU: 1 PID: 14030 Comm: syz.1.2678 Not tainted syzkaller #0 [ 572.004651][T14030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.014722][T14030] Call Trace: [ 572.018017][T14030] [ 572.020964][T14030] dump_stack_lvl+0x18c/0x250 [ 572.025674][T14030] ? show_regs_print_info+0x20/0x20 [ 572.030902][T14030] ? load_image+0x420/0x420 [ 572.035438][T14030] ? __might_fault+0xaa/0x120 [ 572.040138][T14030] ? __lock_acquire+0x7d80/0x7d80 [ 572.045198][T14030] should_fail_ex+0x394/0x4c0 [ 572.049907][T14030] _copy_from_user+0x2f/0xe0 [ 572.054870][T14030] __sys_bpf+0x23e/0x890 [ 572.059131][T14030] ? read_tsc+0x9/0x20 [ 572.063224][T14030] ? bpf_link_show_fdinfo+0x390/0x390 [ 572.068633][T14030] ? lock_chain_count+0x20/0x20 [ 572.073506][T14030] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 572.079522][T14030] __x64_sys_bpf+0x7c/0x90 [ 572.083964][T14030] do_syscall_64+0x55/0xb0 [ 572.088405][T14030] ? clear_bhb_loop+0x40/0x90 [ 572.093108][T14030] ? clear_bhb_loop+0x40/0x90 [ 572.097808][T14030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.103730][T14030] RIP: 0033:0x7fbee439de59 [ 572.108176][T14030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.127803][T14030] RSP: 002b:00007fbee51a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.136243][T14030] RAX: ffffffffffffffda RBX: 00007fbee4625fa0 RCX: 00007fbee439de59 [ 572.144229][T14030] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 572.152203][T14030] RBP: 00007fbee51a3090 R08: 0000000000000000 R09: 0000000000000000 [ 572.160164][T14030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.168130][T14030] R13: 00007fbee4626038 R14: 00007fbee4625fa0 R15: 00007ffd55bcbb18 [ 572.176110][T14030] [ 572.461633][T14040] netlink: 'syz.1.2679': attribute type 10 has an invalid length. [ 572.608507][T14043] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2681'. [ 572.662756][T14043] netlink: zone id is out of range [ 572.692165][T14043] netlink: zone id is out of range [ 572.697364][T14043] netlink: zone id is out of range [ 572.718747][T14043] netlink: zone id is out of range [ 572.741406][T14043] netlink: zone id is out of range [ 572.769253][T14043] netlink: zone id is out of range [ 572.792332][T14043] netlink: zone id is out of range [ 572.810554][T14043] netlink: zone id is out of range [ 572.819029][T14043] netlink: zone id is out of range [ 572.826787][T14043] netlink: zone id is out of range [ 573.159874][T14060] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2689'. [ 573.862943][T14069] veth1_to_bond: entered allmulticast mode [ 573.885713][T14071] netlink: 'syz.2.2691': attribute type 10 has an invalid length. [ 573.911466][T14066] netlink: 'syz.0.2692': attribute type 17 has an invalid length. [ 574.341500][T14083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2696'. [ 575.040849][T14102] netlink: 'syz.1.2701': attribute type 10 has an invalid length. [ 576.083421][T14135] FAULT_INJECTION: forcing a failure. [ 576.083421][T14135] name failslab, interval 1, probability 0, space 0, times 0 [ 576.127032][T14135] CPU: 0 PID: 14135 Comm: syz.3.2716 Not tainted syzkaller #0 [ 576.134541][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.144611][T14135] Call Trace: [ 576.147901][T14135] [ 576.150840][T14135] dump_stack_lvl+0x18c/0x250 [ 576.155555][T14135] ? show_regs_print_info+0x20/0x20 [ 576.160780][T14135] ? load_image+0x420/0x420 [ 576.165313][T14135] ? __might_sleep+0xe0/0xe0 [ 576.169924][T14135] ? __lock_acquire+0x7d80/0x7d80 [ 576.174968][T14135] ? mark_lock+0x94/0x320 [ 576.179324][T14135] should_fail_ex+0x394/0x4c0 [ 576.184030][T14135] should_failslab+0x9/0x20 [ 576.188554][T14135] slab_pre_alloc_hook+0x59/0x300 [ 576.193607][T14135] kmem_cache_alloc_node+0x5e/0x310 [ 576.198827][T14135] ? __alloc_skb+0x103/0x2c0 [ 576.203444][T14135] __alloc_skb+0x103/0x2c0 [ 576.207891][T14135] alloc_skb_with_frags+0xcd/0x7a0 [ 576.213024][T14135] ? mark_lock+0x94/0x320 [ 576.217375][T14135] ? __lock_acquire+0x1262/0x7d80 [ 576.222424][T14135] sock_alloc_send_pskb+0x883/0x9a0 [ 576.227663][T14135] ? sock_kzfree_s+0x50/0x50 [ 576.232278][T14135] ? verify_lock_unused+0x140/0x140 [ 576.237509][T14135] __ip6_append_data+0x2b18/0x3d40 [ 576.242706][T14135] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 576.247606][T14135] ? ip6_mtu+0x7d/0x3f0 [ 576.251863][T14135] ? ip6_setup_cork+0xff0/0xff0 [ 576.256745][T14135] ip6_append_data+0x1b0/0x350 [ 576.261546][T14135] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 576.266417][T14135] l2tp_ip6_sendmsg+0x122c/0x1680 [ 576.271536][T14135] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 576.276861][T14135] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 576.283302][T14135] ? sock_rps_record_flow+0x19/0x3f0 [ 576.288604][T14135] ? inet_sendmsg+0x7e/0x2a0 [ 576.293207][T14135] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 576.298508][T14135] ? inet_send_prepare+0x250/0x250 [ 576.303635][T14135] ____sys_sendmsg+0x61b/0x980 [ 576.308429][T14135] ? __sys_sendmsg_sock+0x30/0x30 [ 576.313470][T14135] ? __import_iovec+0x3fa/0x850 [ 576.318349][T14135] ? import_iovec+0x73/0xa0 [ 576.322879][T14135] ___sys_sendmsg+0x2a6/0x360 [ 576.327581][T14135] ? get_pid_task+0x20/0x1e0 [ 576.332196][T14135] ? __sys_sendmsg+0x2b0/0x2b0 [ 576.335465][T14136] netlink: 'syz.2.2715': attribute type 10 has an invalid length. [ 576.336983][T14135] ? __lock_acquire+0x7d80/0x7d80 [ 576.349867][T14135] __se_sys_sendmsg+0x1d0/0x2c0 [ 576.354741][T14135] ? __x64_sys_sendmsg+0x80/0x80 [ 576.359720][T14135] ? lockdep_hardirqs_on+0x98/0x150 [ 576.364938][T14135] do_syscall_64+0x55/0xb0 [ 576.369373][T14135] ? clear_bhb_loop+0x40/0x90 [ 576.374065][T14135] ? clear_bhb_loop+0x40/0x90 [ 576.378758][T14135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.384669][T14135] RIP: 0033:0x7fd30cb9de59 [ 576.389096][T14135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.408712][T14135] RSP: 002b:00007fd30da23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.417148][T14135] RAX: ffffffffffffffda RBX: 00007fd30ce25fa0 RCX: 00007fd30cb9de59 [ 576.425142][T14135] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 576.433131][T14135] RBP: 00007fd30da23090 R08: 0000000000000000 R09: 0000000000000000 [ 576.441123][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.449115][T14135] R13: 00007fd30ce26038 R14: 00007fd30ce25fa0 R15: 00007ffc1b7a05f8 [ 576.457120][T14135] [ 576.593658][T14144] netlink: 'syz.0.2721': attribute type 10 has an invalid length. [ 576.616123][T14144] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.682180][T14144] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.689576][T14144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.729303][T14144] team0: Port device bridge0 added [ 576.959602][T14158] netlink: 'syz.1.2724': attribute type 10 has an invalid length. [ 577.007226][T14158] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 577.795712][T14167] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 577.867291][T14174] FAULT_INJECTION: forcing a failure. [ 577.867291][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.883154][T14174] CPU: 1 PID: 14174 Comm: syz.2.2730 Not tainted syzkaller #0 [ 577.890646][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.900714][T14174] Call Trace: [ 577.904007][T14174] [ 577.906947][T14174] dump_stack_lvl+0x18c/0x250 [ 577.911651][T14174] ? show_regs_print_info+0x20/0x20 [ 577.916876][T14174] ? load_image+0x420/0x420 [ 577.921403][T14174] ? __might_fault+0xaa/0x120 [ 577.926098][T14174] ? __lock_acquire+0x7d80/0x7d80 [ 577.931145][T14174] should_fail_ex+0x394/0x4c0 [ 577.935841][T14174] _copy_from_user+0x2f/0xe0 [ 577.940452][T14174] __sys_bpf+0x23e/0x890 [ 577.944712][T14174] ? bpf_link_show_fdinfo+0x390/0x390 [ 577.950092][T14174] ? lock_chain_count+0x20/0x20 [ 577.954948][T14174] __x64_sys_bpf+0x7c/0x90 [ 577.959356][T14174] do_syscall_64+0x55/0xb0 [ 577.963769][T14174] ? clear_bhb_loop+0x40/0x90 [ 577.968437][T14174] ? clear_bhb_loop+0x40/0x90 [ 577.973109][T14174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.979001][T14174] RIP: 0033:0x7fbef7b9de59 [ 577.983409][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.003012][T14174] RSP: 002b:00007fbef89f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.011418][T14174] RAX: ffffffffffffffda RBX: 00007fbef7e25fa0 RCX: 00007fbef7b9de59 [ 578.019384][T14174] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 578.027360][T14174] RBP: 00007fbef89f7090 R08: 0000000000000000 R09: 0000000000000000 [ 578.035323][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.043286][T14174] R13: 00007fbef7e26038 R14: 00007fbef7e25fa0 R15: 00007ffc63781fc8 [ 578.051524][T14174] [ 578.126484][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 578.252479][T14187] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2735'. [ 578.274168][T14184] netlink: 'syz.2.2734': attribute type 21 has an invalid length. [ 578.808179][T14202] netlink: 'syz.1.2742': attribute type 10 has an invalid length. [ 579.549196][T14224] netlink: 'syz.1.2751': attribute type 11 has an invalid length. [ 579.564032][T14224] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 579.591105][T14224] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 579.619140][T14224] netlink: 'syz.1.2751': attribute type 2 has an invalid length. [ 579.648589][T14224] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.2751'. [ 579.872893][T14235] netlink: 'syz.3.2755': attribute type 10 has an invalid length. [ 580.570691][T14249] netlink: 'syz.0.2761': attribute type 21 has an invalid length. [ 580.580635][T14249] IPv6: NLM_F_CREATE should be specified when creating new route [ 580.592706][T14249] IPv6: Can't replace route, no match found [ 582.358322][T14308] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.2784'. [ 582.373577][T14308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 582.988583][T14325] netlink: 'syz.1.2792': attribute type 21 has an invalid length. [ 583.004446][T14325] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.029490][T14325] IPv6: Can't replace route, no match found [ 584.455589][T14358] netlink: 'syz.3.2806': attribute type 21 has an invalid length. [ 584.478999][T14358] IPv6: NLM_F_CREATE should be specified when creating new route [ 584.493109][T14358] IPv6: Can't replace route, no match found [ 585.843102][T14392] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2817'. [ 586.854925][T14421] FAULT_INJECTION: forcing a failure. [ 586.854925][T14421] name failslab, interval 1, probability 0, space 0, times 0 [ 586.894322][T14421] CPU: 0 PID: 14421 Comm: syz.3.2830 Not tainted syzkaller #0 [ 586.901831][T14421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.911903][T14421] Call Trace: [ 586.915201][T14421] [ 586.918146][T14421] dump_stack_lvl+0x18c/0x250 [ 586.922856][T14421] ? show_regs_print_info+0x20/0x20 [ 586.928083][T14421] ? load_image+0x420/0x420 [ 586.932608][T14421] ? mark_lock+0x94/0x320 [ 586.936952][T14421] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 586.942948][T14421] should_fail_ex+0x394/0x4c0 [ 586.947641][T14421] should_failslab+0x9/0x20 [ 586.952158][T14421] slab_pre_alloc_hook+0x59/0x300 [ 586.957200][T14421] ? lockdep_hardirqs_on+0x98/0x150 [ 586.962413][T14421] kmem_cache_alloc+0x5a/0x2c0 [ 586.967193][T14421] ? skb_clone+0x1eb/0x370 [ 586.971630][T14421] skb_clone+0x1eb/0x370 [ 586.975890][T14421] __netlink_deliver_tap+0x411/0x7f0 [ 586.981204][T14421] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.986419][T14421] netlink_deliver_tap+0x19c/0x1b0 [ 586.991548][T14421] __netlink_sendskb+0x4b/0x90 [ 586.996329][T14421] netlink_dump+0xab3/0xec0 [ 587.000858][T14421] ? netlink_lookup+0x200/0x200 [ 587.005738][T14421] ? genl_start+0x571/0x6c0 [ 587.010256][T14421] __netlink_dump_start+0x57c/0x7a0 [ 587.015475][T14421] genl_family_rcv_msg_dumpit+0x214/0x310 [ 587.021217][T14421] ? genl_rcv_msg+0x7a0/0x7a0 [ 587.025903][T14421] ? genl_get_cmd+0x693/0x930 [ 587.030599][T14421] ? genl_family_rcv_msg_doit+0x310/0x310 [ 587.036329][T14421] ? genl_start+0x6c0/0x6c0 [ 587.040836][T14421] ? genl_dumpit+0x1a0/0x1a0 [ 587.045446][T14421] genl_rcv_msg+0x5de/0x7a0 [ 587.049967][T14421] ? genl_bind+0x360/0x360 [ 587.054395][T14421] ? ethnl_default_doit+0xba0/0xba0 [ 587.059683][T14421] ? ethnl_default_start+0x560/0x560 [ 587.064981][T14421] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 587.070371][T14421] ? mark_lock+0x94/0x320 [ 587.074727][T14421] netlink_rcv_skb+0x235/0x4c0 [ 587.079508][T14421] ? genl_bind+0x360/0x360 [ 587.083945][T14421] ? netlink_ack+0x1160/0x1160 [ 587.088740][T14421] ? down_read+0x61/0x2e0 [ 587.093087][T14421] ? down_read+0x1ac/0x2e0 [ 587.097515][T14421] genl_rcv+0x28/0x40 [ 587.101514][T14421] netlink_unicast+0x7b1/0x930 [ 587.106305][T14421] netlink_sendmsg+0x8d0/0xbf0 [ 587.111092][T14421] ? netlink_getsockopt+0x590/0x590 [ 587.116304][T14421] ? apparmor_socket_sendmsg+0x8e/0x330 [ 587.121862][T14421] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 587.127160][T14421] ? security_socket_sendmsg+0x80/0xa0 [ 587.132633][T14421] ? netlink_getsockopt+0x590/0x590 [ 587.137858][T14421] ____sys_sendmsg+0x61b/0x980 [ 587.142655][T14421] ? lockdep_hardirqs_on+0x98/0x150 [ 587.147865][T14421] ? __sys_sendmsg_sock+0x30/0x30 [ 587.152911][T14421] ? ___sys_sendmsg+0x28b/0x360 [ 587.157780][T14421] ___sys_sendmsg+0x2a6/0x360 [ 587.162479][T14421] ? __sys_sendmsg+0x2b0/0x2b0 [ 587.167264][T14421] ? perf_trace_preemptirq_template+0x269/0x330 [ 587.173574][T14421] __se_sys_sendmsg+0x1d0/0x2c0 [ 587.178455][T14421] ? __x64_sys_sendmsg+0x80/0x80 [ 587.183429][T14421] ? syscall_enter_from_user_mode+0x2e/0x80 [ 587.189340][T14421] do_syscall_64+0x55/0xb0 [ 587.193772][T14421] ? clear_bhb_loop+0x40/0x90 [ 587.198462][T14421] ? clear_bhb_loop+0x40/0x90 [ 587.203147][T14421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.209050][T14421] RIP: 0033:0x7fd30cb9de59 [ 587.213478][T14421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.233101][T14421] RSP: 002b:00007fd30da23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.241529][T14421] RAX: ffffffffffffffda RBX: 00007fd30ce25fa0 RCX: 00007fd30cb9de59 [ 587.249506][T14421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 587.257495][T14421] RBP: 00007fd30da23090 R08: 0000000000000000 R09: 0000000000000000 [ 587.265475][T14421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.273459][T14421] R13: 00007fd30ce26038 R14: 00007fd30ce25fa0 R15: 00007ffc1b7a05f8 [ 587.281461][T14421] [ 587.574909][T14427] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 588.284033][T14447] netlink: 'syz.3.2840': attribute type 1 has an invalid length. [ 588.302152][T14447] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2840'. [ 588.664334][T14454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2842'. [ 588.771831][T14454] netlink: 'syz.2.2842': attribute type 12 has an invalid length. [ 588.811844][T14454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2842'. [ 588.904686][T14461] netlink: 'syz.3.2843': attribute type 10 has an invalid length. [ 589.970329][T14485] netlink: 'syz.3.2855': attribute type 10 has an invalid length. [ 591.062712][T14513] syzkaller0: entered promiscuous mode [ 591.080897][T14513] syzkaller0: entered allmulticast mode [ 591.117302][T14522] netlink: 'syz.1.2866': attribute type 10 has an invalid length. [ 591.308830][T14525] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2868'. [ 591.527427][T14525] team0: Port device team_slave_0 removed [ 591.688673][T14331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.909719][T14548] FAULT_INJECTION: forcing a failure. [ 592.909719][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.923034][T14548] CPU: 1 PID: 14548 Comm: syz.1.2879 Not tainted syzkaller #0 [ 592.930523][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.940589][T14548] Call Trace: [ 592.943865][T14548] [ 592.946789][T14548] dump_stack_lvl+0x18c/0x250 [ 592.951476][T14548] ? show_regs_print_info+0x20/0x20 [ 592.956674][T14548] ? load_image+0x420/0x420 [ 592.961177][T14548] ? __might_fault+0xaa/0x120 [ 592.965851][T14548] ? __lock_acquire+0x7d80/0x7d80 [ 592.970871][T14548] should_fail_ex+0x394/0x4c0 [ 592.975547][T14548] _copy_from_user+0x2f/0xe0 [ 592.980134][T14548] ___sys_sendmsg+0x1c7/0x360 [ 592.984816][T14548] ? get_pid_task+0x20/0x1e0 [ 592.989409][T14548] ? __sys_sendmsg+0x2b0/0x2b0 [ 592.994188][T14548] ? __lock_acquire+0x7d80/0x7d80 [ 592.999223][T14548] __se_sys_sendmsg+0x1d0/0x2c0 [ 593.004074][T14548] ? __x64_sys_sendmsg+0x80/0x80 [ 593.009020][T14548] ? lockdep_hardirqs_on+0x98/0x150 [ 593.014220][T14548] do_syscall_64+0x55/0xb0 [ 593.018637][T14548] ? clear_bhb_loop+0x40/0x90 [ 593.023307][T14548] ? clear_bhb_loop+0x40/0x90 [ 593.027974][T14548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.033865][T14548] RIP: 0033:0x7fbee439de59 [ 593.038273][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.057871][T14548] RSP: 002b:00007fbee51a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.066285][T14548] RAX: ffffffffffffffda RBX: 00007fbee4625fa0 RCX: 00007fbee439de59 [ 593.074250][T14548] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003 [ 593.082214][T14548] RBP: 00007fbee51a3090 R08: 0000000000000000 R09: 0000000000000000 [ 593.090177][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.098140][T14548] R13: 00007fbee4626038 R14: 00007fbee4625fa0 R15: 00007ffd55bcbb18 [ 593.106116][T14548] [ 594.327263][T14528] netlink: 'syz.0.2868': attribute type 10 has an invalid length. [ 594.358596][T14528] veth0_vlan: left promiscuous mode [ 594.384431][T14528] veth0_vlan: entered promiscuous mode [ 594.404254][T14528] team0: Device veth0_vlan failed to register rx_handler [ 594.454828][T14549] netlink: 'syz.3.2878': attribute type 10 has an invalid length. [ 596.547529][T14595] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2895'. [ 597.420029][T14623] FAULT_INJECTION: forcing a failure. [ 597.420029][T14623] name failslab, interval 1, probability 0, space 0, times 0 [ 597.439224][T14623] CPU: 1 PID: 14623 Comm: syz.2.2907 Not tainted syzkaller #0 [ 597.446752][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.456838][T14623] Call Trace: [ 597.460140][T14623] [ 597.463086][T14623] dump_stack_lvl+0x18c/0x250 [ 597.467779][T14623] ? show_regs_print_info+0x20/0x20 [ 597.472982][T14623] ? load_image+0x420/0x420 [ 597.477493][T14623] ? __might_sleep+0xe0/0xe0 [ 597.482108][T14623] ? __lock_acquire+0x7d80/0x7d80 [ 597.487150][T14623] should_fail_ex+0x394/0x4c0 [ 597.491837][T14623] should_failslab+0x9/0x20 [ 597.496365][T14623] slab_pre_alloc_hook+0x59/0x300 [ 597.501457][T14623] kmem_cache_alloc+0x5a/0x2c0 [ 597.506260][T14623] ? __kernfs_new_node+0xe5/0x7f0 [ 597.511349][T14623] __kernfs_new_node+0xe5/0x7f0 [ 597.516240][T14623] ? kernfs_new_node+0x260/0x260 [ 597.521190][T14623] ? perf_trace_lock+0x303/0x3b0 [ 597.526146][T14623] ? trace_event_raw_event_lock+0x240/0x240 [ 597.532062][T14623] kernfs_new_node+0x14c/0x260 [ 597.536865][T14623] __kernfs_create_file+0x4b/0x2e0 [ 597.541987][T14623] sysfs_add_file_mode_ns+0x237/0x2f0 [ 597.547427][T14623] sysfs_create_file_ns+0x12c/0x1b0 [ 597.552692][T14623] ? sysfs_add_bin_file_mode_ns+0x200/0x200 [ 597.558639][T14623] device_add+0x4d8/0xc40 [ 597.562980][T14623] netdev_register_kobject+0x188/0x320 [ 597.568522][T14623] register_netdevice+0x12aa/0x1ba0 [ 597.573758][T14623] ? netif_stacked_transfer_operstate+0x210/0x210 [ 597.580180][T14623] ? dev_addr_mod+0x2c8/0x3c0 [ 597.584870][T14623] ? tun_net_initialize+0x158/0x480 [ 597.590097][T14623] ? tun_not_capable+0x1f0/0x1f0 [ 597.595076][T14623] ? alloc_netdev_mqs+0xc23/0x1040 [ 597.600268][T14623] tun_set_iff+0x82b/0xea0 [ 597.604736][T14623] __tun_chr_ioctl+0x7e0/0x2070 [ 597.609625][T14623] ? tun_flow_create+0x310/0x310 [ 597.614612][T14623] ? bpf_lsm_file_ioctl+0x9/0x10 [ 597.619549][T14623] ? security_file_ioctl+0x80/0xa0 [ 597.624670][T14623] ? tun_chr_poll+0x630/0x630 [ 597.629352][T14623] __se_sys_ioctl+0xfd/0x170 [ 597.633951][T14623] do_syscall_64+0x55/0xb0 [ 597.638375][T14623] ? clear_bhb_loop+0x40/0x90 [ 597.643070][T14623] ? clear_bhb_loop+0x40/0x90 [ 597.647793][T14623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.653729][T14623] RIP: 0033:0x7fbef7b9de59 [ 597.658201][T14623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.677836][T14623] RSP: 002b:00007fbef89f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.686266][T14623] RAX: ffffffffffffffda RBX: 00007fbef7e25fa0 RCX: 00007fbef7b9de59 [ 597.694262][T14623] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000005 [ 597.702272][T14623] RBP: 00007fbef89f7090 R08: 0000000000000000 R09: 0000000000000000 [ 597.710263][T14623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.718238][T14623] R13: 00007fbef7e26038 R14: 00007fbef7e25fa0 R15: 00007ffc63781fc8 [ 597.726241][T14623] [ 599.570867][T14664] syzkaller0: entered promiscuous mode [ 599.580750][T14664] syzkaller0: entered allmulticast mode [ 599.889803][T14675] netlink: 'syz.2.2928': attribute type 10 has an invalid length. [ 603.292435][T14715] netlink: 'syz.0.2943': attribute type 10 has an invalid length. [ 603.468731][T14719] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 603.478375][T14719] netlink: 'syz.2.2945': attribute type 4 has an invalid length. [ 603.486853][T14719] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2945'. [ 603.762568][T14725] netlink: 'syz.2.2948': attribute type 9 has an invalid length. [ 603.770560][T14725] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2948'. [ 604.567995][T14746] netlink: 'syz.0.2955': attribute type 10 has an invalid length. [ 604.586544][T14748] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 604.611676][T14748] netlink: 'syz.3.2956': attribute type 4 has an invalid length. [ 604.633690][T14748] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2956'. [ 605.128109][T14760] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2961'. [ 605.179695][T14760] netlink: 21056 bytes leftover after parsing attributes in process `syz.0.2961'. [ 605.198305][T14760] tipc: Started in network mode [ 605.232198][T14760] tipc: Node identity 1a, cluster identity 106 [ 605.257894][T14760] tipc: Node number set to 26 [ 605.938414][T14774] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 605.950577][T14774] netlink: 'syz.3.2967': attribute type 4 has an invalid length. [ 605.958512][T14774] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2967'. [ 606.593220][T14792] netlink: 'syz.1.2977': attribute type 1 has an invalid length. [ 606.601001][T14792] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 606.629736][T14792] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2977'. [ 608.145484][T14817] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 608.153940][T14817] netlink: 'syz.0.2986': attribute type 4 has an invalid length. [ 608.163050][T14817] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2986'. [ 609.246561][T14841] netlink: 'syz.3.2995': attribute type 1 has an invalid length. [ 609.269184][T14841] netlink: 'syz.3.2995': attribute type 4 has an invalid length. [ 609.296298][T14841] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2995'. [ 611.945293][T14868] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 611.968515][T14868] netlink: 'syz.3.3006': attribute type 4 has an invalid length. [ 611.987833][T14868] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3006'. [ 638.298302][ T4316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 642.402866][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.409233][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 707.982849][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 707.989224][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.723154][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 761.733083][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 761.745550][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 767.281928][ T5773] Bluetooth: hci3: command 0x1005 tx timeout [ 767.666637][ T5774] Bluetooth: hci3: Opcode 0x1005 failed: -110 [ 767.732176][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.012575][T14914] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 779.962957][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.969327][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.373759][ T5773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 787.392177][ T5773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 787.400230][ T5773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.642301][ T5774] Bluetooth: hci5: Opcode 0x0c23 failed: -110 [ 789.649036][ T5773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 789.662507][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.670175][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.682859][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.692112][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.872283][T14919] Bluetooth: hci5: Opcode 0x0c14 failed: -110 [ 803.422270][ T28] INFO: task kworker/u4:0:9943 blocked for more than 156 seconds. [ 803.430148][ T28] Not tainted syzkaller #0 [ 808.022267][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.031019][ T28] task:kworker/u4:0 state:D stack:22096 pid:9943 ppid:2 flags:0x00004000 [ 808.392639][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 808.418413][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 808.426901][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 808.436542][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 808.458072][ T5774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 808.466072][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 808.532109][ T28] Workqueue: 0x0 (events_unbound) [ 808.537320][ T28] Call Trace: [ 808.540624][ T28] [ 808.639828][ T28] __schedule+0x15ae/0x4660 [ 808.683335][ T28] ? asan.module_dtor+0x20/0x20 [ 808.688265][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 808.772102][ T28] ? kthread_data+0x4f/0xc0 [ 808.776678][ T28] ? wq_worker_sleeping+0x63/0x240 [ 808.781832][ T28] schedule+0xbd/0x170 [ 808.852120][ T28] worker_thread+0xc17/0xfe0 [ 808.856823][ T28] kthread+0x2fa/0x390 [ 808.860926][ T28] ? pr_cont_work+0x550/0x550 [ 808.918821][ T28] ? kthread_blkcg+0xd0/0xd0 [ 808.939230][ T28] ret_from_fork+0x48/0x80 [ 808.958642][ T28] ? kthread_blkcg+0xd0/0xd0 [ 808.982127][ T28] ret_from_fork_asm+0x11/0x20 [ 808.987005][ T28] [ 809.013635][ T28] [ 809.013635][ T28] Showing all locks held in the system: [ 809.021403][ T28] 2 locks held by kworker/0:0/8: [ 809.112335][ T28] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 809.162157][ T28] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_iterate_sb+0x28/0x6a0 [ 809.202338][ T28] 2 locks held by kworker/0:1/10: [ 809.207408][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 809.292151][ T28] #1: ffffc900000f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 809.342181][ T28] 2 locks held by kworker/u4:1/13: [ 809.347350][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 809.423760][ T28] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_iterate_sb+0x28/0x6a0 [ 809.483152][ T28] 1 lock held by khungtaskd/28: [ 809.488097][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 809.544227][ T28] 6 locks held by kworker/u4:2/41: [ 809.549385][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 809.642554][ T28] #1: ffffc90000b1fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 809.692443][ T28] #2: ffff88807fa70768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 809.722112][ T28] #3: ffff8880794ecdc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 809.752786][ T28] #4: ffff88807fa717c8 (&local->sta_mtx){+.+.}-{3:3}, at: sta_info_destroy_addr+0x54/0xd0 [ 809.773796][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 809.779516][ T28] #5: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 809.793623][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 809.801746][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 809.813792][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 809.841514][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.852541][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 809.859964][ T28] 2 locks held by kworker/0:2/177: [ 809.922298][ T28] 4 locks held by kworker/u4:7/1136: [ 809.927643][ T28] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.022335][ T28] #1: ffffc9000457fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.064503][ T28] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 810.127082][ T28] #3: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1c/0x1c0 [ 810.162125][ T28] 2 locks held by getty/5524: [ 810.166849][ T28] #0: ffff88802cf470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 810.198363][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 810.229825][ T28] 4 locks held by kworker/1:3/5812: [ 810.242207][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.272111][ T28] #1: ffffc900048cfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.312080][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 810.321805][ T28] #3: ffff88805a8a0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x10a/0xd90 [ 810.360823][ T28] 3 locks held by kworker/0:4/11966: [ 810.371539][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.383110][ T28] #1: ffffc9000549fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.403469][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 810.417421][ T28] 1 lock held by syz-executor/12649: [ 810.423703][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 810.432905][ T28] 1 lock held by syz-executor/13170: [ 810.438207][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 810.458907][ T28] 2 locks held by kworker/1:5/13548: [ 810.467687][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.485521][ T28] #1: ffffc900037a7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.500116][ T28] 5 locks held by kworker/u4:5/14331: [ 810.502249][ T5773] Bluetooth: hci6: command tx timeout [ 810.511860][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.530963][ T28] #1: ffffc90004cd7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.550284][ T28] #2: ffff88805a8a0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 810.560483][ T28] #3: ffff88806786cdc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 810.583306][ T28] #4: ffff88805a8a17c8 (&local->sta_mtx){+.+.}-{3:3}, at: sta_info_destroy_addr+0x54/0xd0 [ 810.598373][ T28] 1 lock held by syz.0.3010/14876: [ 810.607667][ T28] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 810.622133][ T28] 2 locks held by syz.3.3015/14884: [ 810.627355][ T28] #0: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x342/0x5d0 [ 810.642340][ T28] #1: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x88/0x240 [ 810.657633][ T28] 1 lock held by dhcpcd/14900: [ 810.665888][ T28] #0: ffff88805cd30220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 810.676321][ T28] 1 lock held by dhcpcd/14902: [ 810.681103][ T28] #0: ffff88805cd32c20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 810.703801][ T28] 1 lock held by dhcpcd/14903: [ 810.710607][ T28] #0: ffff88805cd30e20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 810.727682][ T28] 3 locks held by kworker/u4:10/14907: [ 810.733229][ T28] #0: ffff88802c6aed38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.745125][ T28] #1: ffffc900033c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 810.765656][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 810.777225][ T28] 2 locks held by kworker/u4:12/14912: [ 810.788005][ T28] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 810.799791][ T28] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: perf_iterate_sb+0x28/0x6a0 [ 810.822107][ T28] 1 lock held by syz-executor/14923: [ 810.827426][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 810.848215][ T28] 1 lock held by syz-executor/14928: [ 810.853722][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 810.881267][ T28] [ 810.892393][ T28] ============================================= [ 810.892393][ T28] [ 810.912576][ T28] NMI backtrace for cpu 0 [ 810.916934][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 810.924136][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.934183][ T28] Call Trace: [ 810.937454][ T28] [ 810.940377][ T28] dump_stack_lvl+0x18c/0x250 [ 810.945070][ T28] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 810.950180][ T28] ? show_regs_print_info+0x20/0x20 [ 810.955381][ T28] ? load_image+0x420/0x420 [ 810.959895][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 810.964836][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 810.970987][ T28] ? load_image+0x420/0x420 [ 810.975483][ T28] ? wq_watchdog_touch+0xef/0x170 [ 810.980507][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 810.986575][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 810.992561][ T28] watchdog+0xf59/0xfa0 [ 810.996716][ T28] ? watchdog+0x1e1/0xfa0 [ 811.001043][ T28] kthread+0x2fa/0x390 [ 811.005102][ T28] ? hungtask_pm_notify+0x50/0x50 [ 811.010127][ T28] ? kthread_blkcg+0xd0/0xd0 [ 811.014719][ T28] ret_from_fork+0x48/0x80 [ 811.019139][ T28] ? kthread_blkcg+0xd0/0xd0 [ 811.023727][ T28] ret_from_fork_asm+0x11/0x20 [ 811.028499][ T28] [ 811.031662][ T28] Sending NMI from CPU 0 to CPUs 1: [ 811.037664][ C1] NMI backtrace for cpu 1 [ 811.037673][ C1] CPU: 1 PID: 14891 Comm: syz.1.3016 Not tainted syzkaller #0 [ 811.037689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.037698][ C1] RIP: 0010:unwind_get_return_address+0x1c/0xc0 [ 811.037718][ C1] Code: e9 3c ff ff ff e8 14 a5 50 09 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 24 c3 4b 00 <48> 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 6e 8b 2b 31 ff 89 ee [ 811.037730][ C1] RSP: 0018:ffffc90003297560 EFLAGS: 00000293 [ 811.037743][ C1] RAX: ffffffff813b224c RBX: ffffc90003297588 RCX: ffff88807c991e00 [ 811.037754][ C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: ffffc90003297588 [ 811.037764][ C1] RBP: ffffc90003297610 R08: ffff88807c991e00 R09: 0000000000000003 [ 811.037774][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81d2faa2 [ 811.037783][ C1] R13: 1ffff1100f93246e R14: dffffc0000000000 R15: ffffc90003297588 [ 811.037794][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 811.037807][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.037817][ C1] CR2: 000055e2990ab660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 811.037830][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 811.037839][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 811.037848][ C1] Call Trace: [ 811.037853][ C1] [ 811.037858][ C1] ? stack_trace_save+0x100/0x100 [ 811.037876][ C1] arch_stack_walk+0x11d/0x190 [ 811.037901][ C1] ? vfree+0x1a7/0x340 [ 811.037922][ C1] stack_trace_save+0xaa/0x100 [ 811.037938][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 811.037954][ C1] ? perf_trace_lock_acquire+0x105/0x400 [ 811.037980][ C1] save_stack+0x125/0x230 [ 811.037996][ C1] ? __reset_page_owner+0x190/0x190 [ 811.038016][ C1] ? free_unref_page_prepare+0x7d7/0x8f0 [ 811.038035][ C1] ? free_unref_page+0x32/0x2e0 [ 811.038064][ C1] ? page_ext_get+0x1e2/0x2b0 [ 811.038082][ C1] __reset_page_owner+0x4e/0x190 [ 811.038100][ C1] ? rcu_is_watching+0x15/0xb0 [ 811.038121][ C1] free_unref_page_prepare+0x7d7/0x8f0 [ 811.038145][ C1] free_unref_page+0x32/0x2e0 [ 811.038166][ C1] vfree+0x1a7/0x340 [ 811.038186][ C1] ? kcov_open+0x90/0x90 [ 811.038202][ C1] kcov_close+0x2b/0x50 [ 811.038218][ C1] __fput+0x221/0x940 [ 811.038238][ C1] task_work_run+0x1d4/0x260 [ 811.038259][ C1] ? task_work_cancel+0x220/0x220 [ 811.038278][ C1] ? do_exit+0x981/0x2530 [ 811.038296][ C1] ? kmem_cache_free+0xf8/0x290 [ 811.038318][ C1] do_exit+0x986/0x2530 [ 811.038343][ C1] ? put_task_struct+0xc0/0xc0 [ 811.038362][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 811.038383][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 811.038400][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 811.038421][ C1] ? lock_chain_count+0x20/0x20 [ 811.038437][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 811.038457][ C1] do_group_exit+0x22d/0x2f0 [ 811.038476][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 811.038494][ C1] get_signal+0x12a6/0x1390 [ 811.038520][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 811.038573][ C1] ? get_sigframe_size+0x20/0x20 [ 811.038603][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 811.038624][ C1] exit_to_user_mode_loop+0x70/0x110 [ 811.038643][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 811.038662][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 811.038678][ C1] do_syscall_64+0x61/0xb0 [ 811.038698][ C1] ? clear_bhb_loop+0x40/0x90 [ 811.038712][ C1] ? clear_bhb_loop+0x40/0x90 [ 811.038726][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.038747][ C1] RIP: 0033:0x7fbee439de59 [ 811.038759][ C1] Code: Unable to access opcode bytes at 0x7fbee439de2f. [ 811.038766][ C1] RSP: 002b:00007fbee51a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 811.038780][ C1] RAX: 0000000000000006 RBX: 00007fbee4625fa0 RCX: 00007fbee439de59 [ 811.038790][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000040 [ 811.038800][ C1] RBP: 00007fbee4433e6f R08: 0000000000000000 R09: 0000000000000000 [ 811.038809][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 811.038819][ C1] R13: 00007fbee4626038 R14: 00007fbee4625fa0 R15: 00007ffd55bcbb18 [ 811.038839][ C1] [ 811.172526][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 811.172541][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 811.172559][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 811.172569][ T28] Call Trace: [ 811.172576][ T28] [ 811.172583][ T28] dump_stack_lvl+0x18c/0x250 [ 811.172615][ T28] ? show_regs_print_info+0x20/0x20 [ 811.172639][ T28] ? load_image+0x420/0x420 [ 811.172672][ T28] panic+0x2ca/0x720 [ 811.172697][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 811.172716][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 811.172738][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 811.172762][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 811.172786][ T28] watchdog+0xf98/0xfa0 [ 811.172809][ T28] ? watchdog+0x1e1/0xfa0 [ 811.172836][ T28] kthread+0x2fa/0x390 [ 811.172853][ T28] ? hungtask_pm_notify+0x50/0x50 [ 811.172873][ T28] ? kthread_blkcg+0xd0/0xd0 [ 811.172897][ T28] ret_from_fork+0x48/0x80 [ 811.172915][ T28] ? kthread_blkcg+0xd0/0xd0 [ 811.172933][ T28] ret_from_fork_asm+0x11/0x20 [ 811.172966][ T28] [ 811.175215][ T28] Kernel Offset: disabled [ 811.568326][ T28] Rebooting in 86400 seconds..