last executing test programs: 34.047285174s ago: executing program 2 (id=11624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000}, r0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={0x0, 0x0, 0x86}, 0x28) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, 0x0, 0x4800) (async) close(r3) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b635ef1681c717a3c4a0ed89a5b", 0x14}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e4"], 0xffbf) (async) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) 33.794210201s ago: executing program 2 (id=11628): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1, @ANYBLOB="c26c000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000e000000000000000400000000000000"], 0x50) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, &(0x7f00000002c0), 0x0}, 0x20) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) 33.649620484s ago: executing program 2 (id=11630): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0xa0800, 0x0, 0x0, &(0x7f0000000740), &(0x7f0000000780), 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x9, 0x80, 0xc, 0x99, 0x0, 0x4, 0xfc918, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x4, 0x5}, 0x3005, 0x5, 0x5, 0x5, 0x0, 0x4, 0x187c, 0x0, 0x8001, 0x0, 0x5414}, r1, 0x2, 0xffffffffffffffff, 0x1) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x454e, 0x4, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={&(0x7f0000000a80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)=""/209, 0xd1}, {&(0x7f0000000cc0)=""/48, 0x30}, {&(0x7f0000000d00)=""/9, 0x9}, {&(0x7f0000000d40)=""/52, 0x34}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f0000000e80)=""/56, 0x38}, {&(0x7f0000000ec0)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/172, 0xac}], 0x9}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801800000000000000000000000000071123600000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f0000000a00), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a9dc059f317a9dab00000001000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 32.984227531s ago: executing program 2 (id=11635): close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r0, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) 32.614499869s ago: executing program 2 (id=11641): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='syzkaller0\x00') 31.300200411s ago: executing program 2 (id=11652): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x4}, @ringbuf_query, @tail_call, @map_fd={0x18, 0x4}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b40)={&(0x7f0000001980)="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", &(0x7f0000002980)=""/86, 0x0, &(0x7f0000002a40)="809e93f89cbe56d0371ce6281dfe00c4870e48f7db529ab499a5399c2a828ab1e9b2716f085e37345948c3d0579399d26482cdddf988d8b7ca1717681e7d284dc93289b882fdacd73bda63819ceee108a2f9758dfa9af69562beddbce0f0550292bdd662b00e7486ee246364ac2401c52fc938b673e632ed541c9c71d95d6545cc7e1b261662874e051f75b7b5d01c5de860b15c7ad9ec78120b922b3dd74f18328f30a09f63609d7a1ca318f044e7252bed9b0e9390acbf62995d03e93eb9ecc02f33deeb910c54f8c94a3ef8715e3e8356df6f483dec72303c10ec69fc70efaba79f12b794814efc70403d67", 0x1}, 0x38) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000660000000000000018000000fdffffff00000000000000009500000002000000c4030000080000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4", 0x2a}], 0x1}, 0x8001) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000003000000000300001003000000000000000000f0a4082de7b463c603884825fff1a0efad9ff2837ed03e3a656ef7c772d4ef8e2a3464"], &(0x7f0000000080)=""/252, 0x32, 0xfc, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x94}, 0x48) 19.7866345s ago: executing program 4 (id=11722): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x22, 0xf9, 0x6}, 0x28) 19.467187168s ago: executing program 4 (id=11726): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0xc2ba, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="7689e228b885f36c1997eb2fb0b704ebe7485086e72a2b789aa14da8f4e6865ffd896b34b328f69b5d6327c6a7f2b0fedb836e5c083b81b9c04f2927efded06dff2950565f6426aafaac9437626400781ae2d8e5bb4fbca400475e89eec9eb6c3639af1d3a19b2c3b674ed8c88558f39b861", 0x72}, {&(0x7f0000000200)="12e71e5d7353b03458cd512b37ea3c205d9e7a10f70abd19533b18a193f6a3d4a212b8d87669f782e53539eea7d3da79844c9b73214e03b333784baee6a3221b49233976573adcd2697b821f6f5895c692a9bfeae3cea9459d7e1d21a8f6982feb2a936cd56952a9c5ff3688a7b36c65d694174643ed1ab40467eb3d063ddfaa744cdf487e2bafcf0f56889e982d3cd53b356f", 0x93}, {&(0x7f00000002c0)="a56d8b6d99adfa8dc2471e0b8b2c3babacbb6c746087d01052f6dad983b2a52e0b000d601a7055ade7afcd743cb8942510db0272150acc7448371f8d0bc0f104df1e6f41f2cf92d48b352d927b8476bd3e8f88a566e60ac54917aeef8eca680967c9c9dbab6b2b720e8741631c02d3352fddd7c15d3daa4d71b929d937d5856297f4c9616d253c2e220fa449cc08fa0c60cfbce71d9f28f0051d3eadbd7617a9cda61586ad23e18242e7acd5a0c006190e1ae983eed2000bd9180f6da93a44d50339861866d5f10a1aeba3e867282dc5cc3ab434dc81815873e3fdbbddc3db2917", 0xe1}, {&(0x7f00000003c0)="7540cd070fbd0b186453b8fc75d0950d921ddfbe551ad00b87a398b9e24cda147e3088bf9a63c756968a7ee80f8f0e8c77b57100d5ec8ddbbe9a35482fac3946f9df6dbdbb55ae67a52067c8dd4ce3de65c18106834b4d55abedaf3b15a2dde33e2cc37168ffef3fb01c9665913d48e2b77bb1bb8c11299aac126fa66ef693738dae3691ad734326892f1810fe4e5028d935d76026367edcc080299add218dd59ce1ac0655ad3ae29986fead5176c437619775928e87364e44789c326fc4cf350100770dab54d9e3ad05d5a197979281bce6d2ffbc5c9a6f8c15ae92a263a9223b4fd3659eecff2e", 0xe8}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="40000000000000002075cdd533ee881e852d0c92407077242d16f50aa78b852c9d29195e0b24f866a2a3355e9e06fe3bd21daae18fb2087403bb0d2bae20ac0930c017000000000000"], 0x40}, 0x48000) 19.026458359s ago: executing program 4 (id=11730): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 15.985925732s ago: executing program 32 (id=11652): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x4}, @ringbuf_query, @tail_call, @map_fd={0x18, 0x4}], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b40)={&(0x7f0000001980)="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", &(0x7f0000002980)=""/86, 0x0, &(0x7f0000002a40)="809e93f89cbe56d0371ce6281dfe00c4870e48f7db529ab499a5399c2a828ab1e9b2716f085e37345948c3d0579399d26482cdddf988d8b7ca1717681e7d284dc93289b882fdacd73bda63819ceee108a2f9758dfa9af69562beddbce0f0550292bdd662b00e7486ee246364ac2401c52fc938b673e632ed541c9c71d95d6545cc7e1b261662874e051f75b7b5d01c5de860b15c7ad9ec78120b922b3dd74f18328f30a09f63609d7a1ca318f044e7252bed9b0e9390acbf62995d03e93eb9ecc02f33deeb910c54f8c94a3ef8715e3e8356df6f483dec72303c10ec69fc70efaba79f12b794814efc70403d67", 0x1}, 0x38) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="0000000000000000660000000000000018000000fdffffff00000000000000009500000002000000c4030000080000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4", 0x2a}], 0x1}, 0x8001) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000003000000000300001003000000000000000000f0a4082de7b463c603884825fff1a0efad9ff2837ed03e3a656ef7c772d4ef8e2a3464"], &(0x7f0000000080)=""/252, 0x32, 0xfc, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x94}, 0x48) 4.005587243s ago: executing program 0 (id=11788): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x2, 0x3, 0x84) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000e6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000d6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.374668048s ago: executing program 0 (id=11791): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009", 0x15}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0xfe33) 3.31278103s ago: executing program 1 (id=11792): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xb2, 0xa6, &(0x7f0000000300)="927b30e0972e5194df64e62fa7aa121b7fe0beda0824446e5050403e41a90181fabd32dcba64587d0575f24ff8eac1f6fab5a2153fa6773ea8c6dab59174843e9ba0f10468352d54530b56d9cede1a14de09abe86d38d4e4f8877a1c46a3d3e5a81c5baab0d6c8337f60baa0eb0529c6d227cf8aba1f60fe47a4c3afb5a40a1be977a91bcfab11af32f5dc9625a4f2b8050f797e1a6f3fd6ba52c34cf47ba3e1e7de7c382207f391ea5fa86ab047141a7131", &(0x7f0000000840)=""/166, 0x2, 0x0, 0xda, 0xce, &(0x7f0000000900)="aae10d99ab22fb65f8d6aab639b1e71ef12e0f6675e76b141c9cbb02f65d35a24db6fe5fc7d4b2bf0228a80ba5a5c6a58bf3ca27ea42e71fd9f8ad4aee492285cc77597380c42eff25881964bc94d32621654b7413d466cf921533afa83980baf99cee6d6d6ef24d304149d9a96b1f62d2246689cb5956701975ab18cc7ff311e1f51635c1990bc3a1ee8e1da652483d02bf18a2f7f5d6e2a4b492e19a7016f4c5081838fe1667eac12ba5c0756735101a2d7f580b30f9c4d78f5f6d3ff22a7dec7f1a1aa69e99ebb6d8073a579714f994a46a72087ef051f7a5", &(0x7f0000000a00)="9ba2538eb82c780be396aed4ea2e814956c8ed725f6565ab7bddbdc62dad73ce7848b88461c67a08bc05f237d2bfb4c7a433d6d364c894b9adee47df1dab5bf2f6e79f3ac5a71152babafb3250991dee71cc794a132c6c1b558fc6e5928eb8f4b09c431c4f8864a95914b9518f4d2c402f8ddf548bafa3127883c5607e0ce93ea780158a3806e6bfc7cd0763b3c0ea601cb471526cac2c726bf49ba8257d4ed5d042af0852b9aefdb0b58231a876154e2cd2250e41cc8231cd518e55adb0f9e63aa2ab8bff72ab1e28d56e11f549", 0x5, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000280)={0x1, 0x80, 0x9, 0x8, 0x0, 0x7, 0x0, 0x4, 0x40010, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000180), 0xa}, 0x5000, 0x7, 0x9, 0x5, 0xa4, 0x8, 0x0, 0x0, 0x10000, 0x0, 0x48}) 3.31138908s ago: executing program 3 (id=11793): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x3b7002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x101, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e00000004000000040000000100010000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000001cd300060052b5f78e1d330c0000000000000000000000000000083e0ca9a39e2f8777bf1d6e6fa859d9b85026c53d8dbb8f850cd36af5062f87089df6bea1954e6eea25e7f9e770916784110618a7d3d5fe85e70cabd0921d6a67bae32e3a10cb76182a8029de1ad8396c2847170157161122d2f835ea0c5c5197183f2bd10bb79492b4246671de4ac2240e2aaeecb07b419671409edcd5c4a8378c073761ee1df45797d41c82c5ebc6771c4e1f5f84a5cd826faf61301e576af0cfff4bd8adb88f8bab0e0e8ad5ab2c15ff64a7fa0654ac1abeaa11999b5dcd37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) 2.702688485s ago: executing program 0 (id=11794): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x4000}) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000440), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 2.702285505s ago: executing program 1 (id=11795): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x2b, 0x3, 0x0, 0x92bd, 0x585c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_bp={0x0, 0x4}, 0x1845, 0x0, 0xfffffff1, 0x6, 0x0, 0xffff0003, 0x8, 0x0, 0x0, 0x0, 0x5000020000000001}, 0x0, 0x7, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x2b, 0x3, 0x0, 0x92bd, 0x585c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_bp={0x0, 0x4}, 0x1845, 0x0, 0xfffffff1, 0x6, 0x0, 0xffff0003, 0x8, 0x0, 0x0, 0x0, 0x5000020000000001}, 0x0, 0x7, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.393209622s ago: executing program 1 (id=11796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x83, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x1, @perf_config_ext={0x8000000000}, 0x0, 0x10003, 0x80000000, 0x6, 0x2, 0x4, 0x9, 0x0, 0x6, 0x0, 0xffffffffffff7ffe}, 0x0, 0x3, r1, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500010000000100000003000000005f5f6100"], &(0x7f0000000640)=""/192, 0x35, 0xc0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x3500, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x6, 0x0, &(0x7f0000000380)="b10100000035", 0x0, 0x0, 0x700}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047459, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x260b00, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000017000000080000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0700000000000000000800000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r7}, 0x38) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0x8020000}, {0x6, 0x0, 0x0, 0x5c786f53}]}) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.115051589s ago: executing program 3 (id=11797): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400c410000002000149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r5}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r4, r5}, 0xc) (async, rerun: 32) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) (async, rerun: 32) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0xc4) (async) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) close(r0) (rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 1.908205314s ago: executing program 0 (id=11798): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tmw'], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="31b7d9e218000000000000000c0000000ce700000700000003ff0300000000000000000000302e61695f002dc0ef32a552ced7d33c8d96cc04f067ed72065d5bd7ed4e8a5c4353f8d77983b33a4e46c1b0be45db47c5e72e54f98875e64812a149f634da2e825ff376ce22c87834aea602"], &(0x7f0000000340)=""/176, 0x2b, 0xb0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="31b7d9e218000000000000000c0000000ce700000700000003ff0300000000000000000000302e61695f002dc0ef32a552ced7d33c8d96cc04f067ed72065d5bd7ed4e8a5c4353f8d77983b33a4e46c1b0be45db47c5e72e54f98875e64812a149f634da2e825ff376ce22c87834aea602"], &(0x7f0000000340)=""/176, 0x2b, 0xb0, 0x1}, 0x28) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e488a86317ce81"], 0xfdef) r3 = perf_event_open$cgroup(&(0x7f0000000500)={0x4, 0x80, 0xfc, 0xfc, 0x5, 0x7, 0x0, 0x3, 0x4208, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x60e0, 0x7f, 0x4, 0x8, 0x9, 0x228, 0x3, 0x0, 0x20000003, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0xff, 0x58, 0xc2, 0x1, 0x0, 0xfffffffff22db7f4, 0x10640, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xf0, 0x3}, 0x2800, 0x98, 0x60000000, 0x7, 0x8, 0x1, 0x93, 0x0, 0xb4, 0x0, 0xfffffffffffffff9}, r2, 0x3, r3, 0x5) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x1, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x1, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES8=r10], 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, r8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000009c0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000009c0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) 1.818178816s ago: executing program 3 (id=11799): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb6e, 0x8}, 0x420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.536927083s ago: executing program 4 (id=11736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r3 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002600000010000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x22, 0xf9, 0x6}, 0x28) 1.198719241s ago: executing program 3 (id=11800): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x866f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10c002, 0xac60}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.141160103s ago: executing program 1 (id=11801): syz_clone(0x60181000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100000000) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591c14000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000400000000000e0fc604a7620ed5469000000040000000000ead9f50f5ce60b51784e445d2abe7e731a05ee226100836bab7e9d6fd0cbc6ef54379f017397356d322b1e6372e2944fb9e8252fed55a3e33be411cc3a719801fc14a6a68ef542783d2b283b5e55f785fcc5e2dd283661098ea01ba6b07c282e", @ANYRES32=0x0, @ANYBLOB="040800"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000002000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af0ff00000000b509020000000000c38af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff1f) 1.128167423s ago: executing program 0 (id=11802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3ff, @loopback={0xff00000000000000}, 0x5}, 0x80, 0x0}, 0x4c810) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/255, 0xff}], 0x4, &(0x7f0000000800)=""/25, 0x19}, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="9d71069f725945c76ea0b81d3870a9eefe8c021ce75a1742204c03e2aebe43d534eec6d8eed9732e356d702c2cc341b3c215c1ff6b39ae995c9f08a199863ecaffe003fc5d4d0746710da3400fee06554c1255e66f903baa76e8c03b92b4e59dc2037e7d1f8395dd829f1efdb6b77740bc048a9d32fc4486eb962de3e23fb9ca53699929ebe2507779937968c132a8cded05d2dc6abb3926384d57ad19db688b8c8e9ac797f882917d086d7c0449e4dcef86", 0xb2}], 0x1}, 0x41) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 953.287267ms ago: executing program 4 (id=11803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x10c002, 0xac5d}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, r0, 0x2e, 0x2010, 0x0, @value=r0}, 0x20) 658.543995ms ago: executing program 1 (id=11804): r0 = syz_clone(0x480, &(0x7f0000000000)="5e01ecfd6bfa11007429b6cb836a7633c53ea45a8840dcf13bd8c4027b4b1ac97378bcabc80cf7c93f6be0f1f629d723a25e84b6a2c35bc14ade3ca6e24b7a9ff9c1e9b7eb77ed", 0x47, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b5c0da9f9e20c6cf8cca11a62cbf87599a48343a22ac2e11fd39311d44252d0b6d76d4ee3906962ce449bb01050d9c50f4c41f986cba74c0cc6744f412e167bed8b0229948e8f4e7c34ae74075af37c647441706f3fdccfee04826a76a36f096f428a9a1") r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0xfe, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffff, 0x1}, 0x204, 0x943, 0x7, 0x2, 0x80, 0x8, 0x5, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x3, &(0x7f0000000200)='*\'\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x12, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x9, 0x8, 0xd, 0x9, 0x15eb}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x10001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0xb2, &(0x7f0000000380)=""/178, 0x41000, 0x52, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x0, 0x6, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={r3}, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000900)='cpu.idle\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r6}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xa, 0x9, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x80, 0x2, 0x2, 0x1}]}, &(0x7f0000000ac0)='GPL\x00', 0x4, 0xfe, &(0x7f0000000b00)=""/254, 0x40e00, 0xc, '\x00', 0x0, @fallback=0x13, r10, 0x8, &(0x7f0000000c40)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0xd, 0xffffffff, 0xffff}, 0x10, r5, r2, 0x1, 0x0, &(0x7f0000000cc0)=[{0x2, 0x1, 0x6, 0x3}], 0x10, 0x7f}, 0x94) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000e00)={'veth1_virt_wifi\x00', 0x1000}) r12 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0xb5, 0x3d, 0x5, 0x8, 0x0, 0x23298509, 0x4400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000e40), 0x8}, 0x850, 0x2, 0x1, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x8f4f, 0x0, 0xd}, r0, 0xffffffffffffffff, r1, 0x1) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x7) openat$cgroup_type(r11, &(0x7f0000000f00), 0x2, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40)={r11}, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r13) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r6, 0x0, 0x41, 0x84, &(0x7f0000000f80)="626492b0b321791a04cf445913e798015778dbe45bad47bdbd058a25da058c9677768fac93fb34e3cffdbb437476f7a3f7242083190c749dbdae660f48dee6a3ff", &(0x7f0000001000)=""/132, 0x80, 0x0, 0x1c, 0x62, &(0x7f00000010c0)="606482c3b98962014fdee707e33350705b4bde5da34f326b2051ea6a", &(0x7f0000001100)="e1154fcf677122a39bcd5d70a7df355b7314ff8c9e704c74813dff38aadc64c0c5c51712cb83041f0c9c57ccf2dced4eaa8806e401c42fda476b29d6a46849a20c9a7dc6199db9392754a6520f100c31100c5e842cf67c8c81e3e8d4680e804446a9", 0x1, 0x0, 0x401}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000001240)={0x5, 0x80, 0x0, 0x7, 0xf9, 0xc4, 0x0, 0xc57, 0x400, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000001200), 0xa}, 0x100402, 0xfffffffffffff8ba, 0x6, 0x1, 0x40, 0x3abd, 0x1, 0x0, 0x0, 0x0, 0x80000001}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x5, 0xfffffffc, 0x97, 0xffff, 0x10009, r9, 0x4, '\x00', r4, r11, 0x0, 0x2, 0x2, 0x0, @void, @value, @value=r13}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002440)={r14, &(0x7f0000001340)="e860892ce57e2b6386e1149e905afed42a50dbc3931baae8302a657c98bf962a8f0875e0ca5cc62308ed0f7e679ccd26228f6601b6f517e898386f3da55ded513d5a7edaa92cfa077f000acd6839599f7337c8721d2b98baf8b5205f3dcce1eff5c51b3149516d79c46a42ed736150567dce09ea59b60e448833b83133d30f7ab427bdab2736cca3b3ce66ff0bc45f909cee0fd20d10d43f86553a55446f880a82eb75d556f094d1fd7fb618206048bd12e12e12af862331179b3c176a425386e981be0ac750", &(0x7f0000001440)=""/4096}, 0x20) ioctl$TUNSETLINK(r11, 0x400454cd, 0x2) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000002480)={r8}, 0x8) ioctl$TUNATTACHFILTER(r15, 0x401054d5, &(0x7f0000002500)={0x7, &(0x7f00000024c0)=[{0xfff9, 0x8, 0x5, 0x2}, {0x0, 0x9, 0xf4, 0x1}, {0xcf, 0xe, 0x6, 0x5}, {0x6, 0x4, 0xfc, 0x10001}, {0x6, 0x8, 0x4, 0x200}, {0x9, 0xfe, 0x1}, {0x0, 0x6, 0x7, 0x12}]}) ioctl$TUNGETFILTER(r13, 0x801054db, &(0x7f0000002540)=""/152) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000028c0)={&(0x7f0000002600), &(0x7f0000002640)=""/158, &(0x7f0000002700)="0fd7f89c9513c5c29ef33423c1704469bf9a37c24c99f17860213dea4306142befccf048b33896c8dd65236f4ca9c69125900b04eda8693cd5ba8dcfa6a213f8b17b29c98dbf750e0b9a333cac03994173dd22fc8603cadefe79e6b58b93765834bbd2ec1eed2bdd8070afe3e42e7e300dcdadad9ae718b392eeb0482d42b4e074370fe27250b37c176028826db8d6eead5a683bba8de5162ff38b6c48bea7b10213a6cc240942be8e93e007257d9afb14c5a93130834f7d9e0dbc57c2b521622ec7286edf1b1c8772e05783e968f7d141b8c091dd38b859e55f03f9aa988ad087dbe4a53d64", &(0x7f0000002800)="266fd1176b06940424c15bca73e336bd2aec39adc157813ebc96b9ee970168977dc64a8de8617b60d4413a89097516181cc23d0d1b2752ae48ceeff37f6c00f21549fb966a3ce1cea39a5648bffdf658795432415aba9ad1abe5465a3218f14657a503a5fd92a7caaefbe0e2ad1fbdcb1e7b614f5b89bd738a795f14f1461d65e8faa5c053e4731f1ea59a869cf89d2df0041cd7ad8358c1a949697c", 0x7fff, r11, 0x4}, 0x38) ioctl$PERF_EVENT_IOC_DISABLE(r11, 0x2401, 0xfffffffffffffffe) 371.262682ms ago: executing program 0 (id=11805): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) r2 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) (async) close(0xffffffffffffffff) (async) socket$kcm(0x2, 0x200000000000006, 0x0) (async) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8955, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (rerun: 64) r3 = syz_clone(0x80801000, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="2ce9375e662e46329c8e8e3c668bdf66695bdc83aa44c2b7629795f502ef88c371a94b75b456ecf158c648ba54cdd56a2f5cc503c6a98742f57b31633f850c8b9e0411f9ce9fa3d3594854ed9610b8b3a554ae631509c99d20d794eee008cb373349f0bd") perf_event_open(0x0, r3, 0x5, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x41, 0xfffff024}, {0x6}]}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039207", 0xd4}, {&(0x7f0000000040)="603ade1f", 0x4}, {&(0x7f00000001c0)}], 0x3}, 0x0) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)) 314.940263ms ago: executing program 3 (id=11806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703132f76420000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8c}, 0x94) (async) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x872, 0x0, 0x6, 0x0, 0xfffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async, rerun: 32) r5 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x5) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000a0000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200f5ffffffff34a7e60000d5c5c749b58c74600000020000"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) (async, rerun: 64) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00800000000000000000000000000000000000000000000000009fccaf6d3018eeea32fd0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r8, r2, 0x0, r0}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000340), 0x2, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x48202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r12, r7}, 0xc) 178.555116ms ago: executing program 4 (id=11807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001c80)={r4, &(0x7f0000000c80)="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"}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) 177.988346ms ago: executing program 1 (id=11808): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/63) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="ced446ecb35ae4e46cfaedd6155d13ab0b58be8418ceac3ecd2447e67a9aac1194aa35d1ef87cb57637eff8e014ffbde2ee83ca355446bd635a638f42eff7bf383e805f25bbdc8544bf9fd11aa737c80c4ab4a96049c590fa2351656cae0b40068b22155ecdf44487e71ad82d27e8a69a76c5da24fad3f5ff26962489c377560a45cb85637d6f7a5a079b14abf2bcead4450", 0x92}], 0x1, &(0x7f0000000140)=[{0x68, 0x115, 0x7, "5c571bedbef1f4137c28886d73469c54cdbd994d23902f341d3fcffef4432c89052ee93e1f0c07da9cfa9afc272056ff25656871ad309ebb36b71452107fa68b83626301560e531d4d43868b386826377a"}, {0xb0, 0x10a, 0x8001, "cec4ba183b1443aea574b4291e07ecc4f81944104f8cef244fafcbc033318a45832cef59fa24644ddbd39996cdfe9cab439e4404ab959d2b61201670c3533d92dd8b15e79c0bfc2b3f60ea23ed86441f4b42c95142000a0895a5d07ab2416b314952ebb7e20c1ca21322b322018ecf6ce5e4800413b7cb90aab3f179d55119657c718b103077c385c35e0c9e52f5780a5c77604519eb0705f4"}], 0x118}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000002c0)=""/63) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="ced446ecb35ae4e46cfaedd6155d13ab0b58be8418ceac3ecd2447e67a9aac1194aa35d1ef87cb57637eff8e014ffbde2ee83ca355446bd635a638f42eff7bf383e805f25bbdc8544bf9fd11aa737c80c4ab4a96049c590fa2351656cae0b40068b22155ecdf44487e71ad82d27e8a69a76c5da24fad3f5ff26962489c377560a45cb85637d6f7a5a079b14abf2bcead4450", 0x92}], 0x1, &(0x7f0000000140)=[{0x68, 0x115, 0x7, "5c571bedbef1f4137c28886d73469c54cdbd994d23902f341d3fcffef4432c89052ee93e1f0c07da9cfa9afc272056ff25656871ad309ebb36b71452107fa68b83626301560e531d4d43868b386826377a"}, {0xb0, 0x10a, 0x8001, "cec4ba183b1443aea574b4291e07ecc4f81944104f8cef244fafcbc033318a45832cef59fa24644ddbd39996cdfe9cab439e4404ab959d2b61201670c3533d92dd8b15e79c0bfc2b3f60ea23ed86441f4b42c95142000a0895a5d07ab2416b314952ebb7e20c1ca21322b322018ecf6ce5e4800413b7cb90aab3f179d55119657c718b103077c385c35e0c9e52f5780a5c77604519eb0705f4"}], 0x118}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 0s ago: executing program 3 (id=11809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) close(r2) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000020) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000000000000000000000070000004415"], 0x30}, 0x7e8166965e22236a) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) kernel console output (not intermixed with test programs): tlink: zone id is out of range [ 1847.288276][ T5022] netlink: zone id is out of range [ 1847.564230][ T5022] netlink: zone id is out of range [ 1847.647053][ T5022] netlink: zone id is out of range [ 1847.724913][ T5022] netlink: zone id is out of range [ 1847.810009][ T5022] netlink: zone id is out of range [ 1847.859944][ T5022] netlink: zone id is out of range [ 1847.865146][ T5022] netlink: zone id is out of range [ 1847.979496][ T5022] netlink: zone id is out of range [ 1848.084811][ T5022] netlink: zone id is out of range [ 1849.399802][ T5029] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10087'. [ 1850.606083][ T5080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1850.760187][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.612088][ T5095] netlink: 'syz.2.10101': attribute type 9 has an invalid length. [ 1851.886311][ T5095] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.10101'. [ 1852.639224][ T5080] device bridge_slave_0 left promiscuous mode [ 1852.656141][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.876947][ T5103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10102'. [ 1853.030452][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.036851][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.047272][ T5119] netlink: 'syz.0.10103': attribute type 3 has an invalid length. [ 1854.185828][ T5119] netlink: 'syz.0.10103': attribute type 1 has an invalid length. [ 1854.226594][ T5119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10103'. [ 1854.909839][ T5147] netlink: 'syz.1.10114': attribute type 10 has an invalid length. [ 1855.037053][ T5147] team0: Device nlmon0 is up. Set it down before adding it as a team port [ 1855.256598][ T5153] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10116'. [ 1855.567917][ T5165] netlink: 'syz.2.10119': attribute type 21 has an invalid length. [ 1855.617976][ T5165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10119'. [ 1855.650039][ T5165] netlink: 'syz.2.10119': attribute type 5 has an invalid length. [ 1855.721760][ T5165] netlink: 'syz.2.10119': attribute type 6 has an invalid length. [ 1855.740105][ T5165] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10119'. [ 1856.446536][ T5168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1858.418567][ T5196] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1858.525688][ T5196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1858.554717][ T5196] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1865.900516][ T5277] netlink: 'syz.3.10146': attribute type 9 has an invalid length. [ 1865.908939][ T5277] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10146'. [ 1866.215769][ T5283] netlink: 'syz.1.10147': attribute type 3 has an invalid length. [ 1866.240209][ T5283] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10147'. [ 1867.024996][ T5306] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.10156'. [ 1867.664888][ T5323] device syzkaller0 entered promiscuous mode [ 1867.880219][ T5337] netlink: 'syz.3.10160': attribute type 3 has an invalid length. [ 1867.965488][ T5332] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10161'. [ 1867.992460][ T5337] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.10160'. [ 1868.144167][ T5341] netlink: 'syz.0.10162': attribute type 3 has an invalid length. [ 1868.195545][ T5341] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10162'. [ 1870.464720][T13540] Bluetooth: hci5: command 0x0406 tx timeout [ 1871.273276][ T5355] netlink: 'syz.3.10165': attribute type 1 has an invalid length. [ 1871.302980][ T5355] netlink: 'syz.3.10165': attribute type 4 has an invalid length. [ 1871.319188][ T5355] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10165'. [ 1871.728754][ T5381] netlink: 'syz.1.10173': attribute type 21 has an invalid length. [ 1872.511819][ T5411] device syzkaller0 entered promiscuous mode [ 1872.826240][ T5409] netlink: 'syz.1.10177': attribute type 3 has an invalid length. [ 1872.835516][ T5409] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10177'. [ 1873.399812][ T5432] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1873.426016][ T5432] net_ratelimit: 3542 callbacks suppressed [ 1873.426033][ T5432] openvswitch: netlink: Flow key attr not present in new flow. [ 1878.618632][ T5460] netlink: 'syz.4.10191': attribute type 10 has an invalid length. [ 1878.655632][ T5460] team0: Device hsr_slave_0 failed to register rx_handler [ 1878.828763][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1878.852406][ T5466] netlink: 'syz.0.10193': attribute type 3 has an invalid length. [ 1878.866482][ T5466] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10193'. [ 1878.877623][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1878.932947][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1878.948026][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1878.972551][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.009791][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.063316][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.072905][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.096183][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.109549][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.129544][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.137728][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.165694][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.250245][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.302480][ T5462] netlink: 'syz.1.10192': attribute type 19 has an invalid length. [ 1879.339725][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1879.371411][ T5462] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10192'. [ 1880.185398][ T5507] tipc: Started in network mode [ 1880.190724][ T5507] tipc: Node identity 9215a268, cluster identity 4711 [ 1880.197534][ T5507] tipc: Node number set to 2450891368 [ 1880.672474][ T5514] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1880.728608][ T5514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1882.642693][ T5569] can: request_module (can-proto-0) failed. [ 1882.940759][ T5595] delete_channel: no stack [ 1883.948798][ T5644] __nla_validate_parse: 43 callbacks suppressed [ 1883.948820][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.031939][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.046434][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.065518][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.085399][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.105905][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.170791][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.210097][ T5644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.230504][ T5647] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10242'. [ 1884.270797][ T5645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10241'. [ 1884.310653][ T5654] validate_nla: 47 callbacks suppressed [ 1884.310672][ T5654] netlink: 'syz.4.10244': attribute type 2 has an invalid length. [ 1884.325653][ T5651] bond0: (slave team0): Error: Slave device does not support XDP [ 1884.344140][ T5647] netlink: 'syz.1.10242': attribute type 10 has an invalid length. [ 1884.389544][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.434403][ T5647] device bridge_slave_1 left promiscuous mode [ 1884.490055][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.555370][ T5647] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1884.579446][ T5661] delete_channel: no stack [ 1884.603610][ T5659] netlink: 'syz.0.10246': attribute type 2 has an invalid length. [ 1884.620143][ T5659] netlink: 'syz.0.10246': attribute type 8 has an invalid length. [ 1884.806659][ T5667] netlink: 'syz.2.10249': attribute type 10 has an invalid length. [ 1884.952496][ T5665] device lo entered promiscuous mode [ 1884.984491][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1888.633481][ T5742] netlink: 'syz.1.10268': attribute type 3 has an invalid length. [ 1889.364195][ T5765] netlink: 'syz.3.10275': attribute type 10 has an invalid length. [ 1889.423501][ T5765] __nla_validate_parse: 62 callbacks suppressed [ 1889.423520][ T5765] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10275'. [ 1890.031630][ T5790] netlink: 'syz.2.10281': attribute type 29 has an invalid length. [ 1890.246107][ T5790] netlink: 'syz.2.10281': attribute type 29 has an invalid length. [ 1890.607197][ T5800] netlink: 'syz.2.10285': attribute type 29 has an invalid length. [ 1890.715756][ T5800] netlink: 'syz.2.10285': attribute type 29 has an invalid length. [ 1890.802981][ T5800] netlink: 'syz.2.10285': attribute type 29 has an invalid length. [ 1890.880087][ T5802] netlink: 'syz.2.10285': attribute type 29 has an invalid length. [ 1893.310930][ T5810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10286'. [ 1894.138289][ T5833] netlink: 'syz.0.10293': attribute type 8 has an invalid length. [ 1894.278682][ T5833] netlink: 'syz.0.10293': attribute type 1 has an invalid length. [ 1894.341114][ T5833] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.10293'. [ 1894.761300][ T5848] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.10296'. [ 1895.039050][ T5852] delete_channel: no stack [ 1895.105084][ T5852] delete_channel: no stack [ 1895.115137][ T5852] delete_channel: no stack [ 1895.154985][ T5852] delete_channel: no stack [ 1895.165121][ T5852] delete_channel: no stack [ 1895.182029][ T5852] delete_channel: no stack [ 1895.186626][ T5852] delete_channel: no stack [ 1895.219856][ T5852] delete_channel: no stack [ 1895.225704][ T5852] delete_channel: no stack [ 1895.231122][ T5852] delete_channel: no stack [ 1895.235870][ T5852] delete_channel: no stack [ 1895.240723][ T5852] delete_channel: no stack [ 1895.245448][ T5852] delete_channel: no stack [ 1895.250218][ T5852] delete_channel: no stack [ 1895.254906][ T5852] delete_channel: no stack [ 1895.259577][ T5852] delete_channel: no stack [ 1895.284032][ T5852] delete_channel: no stack [ 1895.293408][ T5852] delete_channel: no stack [ 1895.301442][ T5852] delete_channel: no stack [ 1895.308369][ T5852] delete_channel: no stack [ 1895.316540][ T5852] delete_channel: no stack [ 1895.324913][ T5852] delete_channel: no stack [ 1895.333655][ T5852] delete_channel: no stack [ 1895.341803][ T5852] delete_channel: no stack [ 1895.350219][ T5852] delete_channel: no stack [ 1895.356704][ T5852] delete_channel: no stack [ 1895.374687][ T5852] delete_channel: no stack [ 1895.388374][ T5852] delete_channel: no stack [ 1895.401195][ T5852] delete_channel: no stack [ 1895.416146][ T5852] delete_channel: no stack [ 1895.438900][ T5852] delete_channel: no stack [ 1895.461370][ T5852] delete_channel: no stack [ 1895.490084][ T5852] delete_channel: no stack [ 1895.518941][ T5852] delete_channel: no stack [ 1895.540069][ T5852] delete_channel: no stack [ 1895.556111][ T5852] delete_channel: no stack [ 1895.570502][ T5852] delete_channel: no stack [ 1895.575114][ T5852] delete_channel: no stack [ 1895.670822][ T5852] delete_channel: no stack [ 1895.675569][ T5852] delete_channel: no stack [ 1895.680670][ T5852] delete_channel: no stack [ 1895.685287][ T5852] delete_channel: no stack [ 1895.690312][ T5852] delete_channel: no stack [ 1895.695710][ T5852] delete_channel: no stack [ 1895.700712][ T5852] delete_channel: no stack [ 1895.705321][ T5852] delete_channel: no stack [ 1895.710312][ T5852] delete_channel: no stack [ 1895.720484][ T5852] delete_channel: no stack [ 1895.725181][ T5852] delete_channel: no stack [ 1895.784848][ T5852] delete_channel: no stack [ 1895.789481][ T5852] delete_channel: no stack [ 1898.475150][ T5877] netlink: 'syz.3.10303': attribute type 21 has an invalid length. [ 1898.488817][ T5877] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10303'. [ 1898.499514][ T5877] netlink: 'syz.3.10303': attribute type 4 has an invalid length. [ 1898.518133][ T5886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1899.009093][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10312'. [ 1899.398806][ T5928] netlink: 'syz.0.10319': attribute type 21 has an invalid length. [ 1899.469422][ T5928] netlink: 'syz.0.10319': attribute type 7 has an invalid length. [ 1900.025024][ T5950] netlink: 'syz.3.10324': attribute type 4 has an invalid length. [ 1900.111590][ T5950] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10324'. [ 1902.983548][ T5972] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1903.020903][ T5975] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.10331'. [ 1903.425361][ T5994] netlink: 'syz.1.10337': attribute type 3 has an invalid length. [ 1903.456592][ T5994] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10337'. [ 1904.337761][ T6007] netlink: 'syz.0.10338': attribute type 7 has an invalid length. [ 1904.393777][ T5999] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1904.418151][ T6005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10340'. [ 1904.756354][ T6026] FAULT_INJECTION: forcing a failure. [ 1904.756354][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1904.828857][ T6026] CPU: 0 PID: 6026 Comm: syz.0.10345 Not tainted syzkaller #0 [ 1904.836431][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1904.846530][ T6026] Call Trace: [ 1904.849866][ T6026] [ 1904.852845][ T6026] dump_stack_lvl+0x188/0x24e [ 1904.857574][ T6026] ? show_regs_print_info+0x12/0x12 [ 1904.862809][ T6026] ? load_image+0x410/0x410 [ 1904.867364][ T6026] ? __lock_acquire+0x7c40/0x7c40 [ 1904.872429][ T6026] should_fail_ex+0x390/0x4c0 [ 1904.877145][ T6026] _copy_from_user+0x2c/0x170 [ 1904.881855][ T6026] iovec_from_user+0x143/0x360 [ 1904.886653][ T6026] __import_iovec+0x6c/0x510 [ 1904.891292][ T6026] import_iovec+0x6f/0xa0 [ 1904.895656][ T6026] ___sys_sendmsg+0x252/0x360 [ 1904.900377][ T6026] ? __sys_sendmsg+0x2a0/0x2a0 [ 1904.905211][ T6026] __se_sys_sendmsg+0x1c3/0x2b0 [ 1904.910198][ T6026] ? ct_nmi_exit+0x145/0x1c0 [ 1904.914823][ T6026] ? __x64_sys_sendmsg+0x80/0x80 [ 1904.919811][ T6026] ? lockdep_hardirqs_on+0x94/0x140 [ 1904.925077][ T6026] do_syscall_64+0x4c/0xa0 [ 1904.929530][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 1904.934248][ T6026] ? clear_bhb_loop+0x60/0xb0 [ 1904.938961][ T6026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1904.944891][ T6026] RIP: 0033:0x7f8e2699de99 [ 1904.949331][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.968963][ T6026] RSP: 002b:00007f8e277fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.977399][ T6026] RAX: ffffffffffffffda RBX: 00007f8e26c25fa0 RCX: 00007f8e2699de99 [ 1904.985403][ T6026] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1904.993409][ T6026] RBP: 00007f8e277fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.001402][ T6026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1905.009399][ T6026] R13: 00007f8e26c26038 R14: 00007f8e26c25fa0 R15: 00007ffc6f5e0428 [ 1905.017407][ T6026] [ 1906.336850][ T6058] netlink: 'syz.2.10355': attribute type 3 has an invalid length. [ 1906.441475][ T6058] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10355'. [ 1906.502791][ T6071] FAULT_INJECTION: forcing a failure. [ 1906.502791][ T6071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.543975][ T6071] CPU: 1 PID: 6071 Comm: syz.4.10359 Not tainted syzkaller #0 [ 1906.551507][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1906.561604][ T6071] Call Trace: [ 1906.564937][ T6071] [ 1906.567907][ T6071] dump_stack_lvl+0x188/0x24e [ 1906.572647][ T6071] ? show_regs_print_info+0x12/0x12 [ 1906.577910][ T6071] ? load_image+0x410/0x410 [ 1906.582475][ T6071] ? __lock_acquire+0x7c40/0x7c40 [ 1906.587554][ T6071] ? __local_bh_enable_ip+0x136/0x1c0 [ 1906.592970][ T6071] ? _local_bh_enable+0xa0/0xa0 [ 1906.597878][ T6071] should_fail_ex+0x390/0x4c0 [ 1906.602618][ T6071] copy_fpstate_to_sigframe+0xaae/0xd70 [ 1906.608221][ T6071] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 1906.613999][ T6071] ? fpregs_set+0x5f0/0x5f0 [ 1906.618565][ T6071] ? asm_sysvec_irq_work+0x16/0x20 [ 1906.623728][ T6071] ? lockdep_hardirqs_on+0x94/0x140 [ 1906.628971][ T6071] ? asm_sysvec_irq_work+0x16/0x20 [ 1906.634149][ T6071] ? fpu__alloc_mathframe+0xa3/0x120 [ 1906.639493][ T6071] arch_do_signal_or_restart+0x67a/0x1310 [ 1906.645286][ T6071] ? get_sigframe_size+0x10/0x10 [ 1906.650299][ T6071] ? exit_to_user_mode_loop+0x3b/0x110 [ 1906.655818][ T6071] exit_to_user_mode_loop+0x70/0x110 [ 1906.661159][ T6071] exit_to_user_mode_prepare+0xee/0x180 [ 1906.666766][ T6071] syscall_exit_to_user_mode+0x16/0x40 [ 1906.672272][ T6071] do_syscall_64+0x58/0xa0 [ 1906.676865][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 1906.681594][ T6071] ? clear_bhb_loop+0x60/0xb0 [ 1906.686323][ T6071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.692332][ T6071] RIP: 0033:0x7f38dbf5e6ce [ 1906.696800][ T6071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1906.716458][ T6071] RSP: 002b:00007f38dcdc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1906.724925][ T6071] RAX: 0000000000000001 RBX: 00007f38dcdc76c0 RCX: 00007f38dbf5e6ce [ 1906.732944][ T6071] RDX: 0000000000000001 RSI: 00007f38dcdc7090 RDI: 0000000000000007 [ 1906.740957][ T6071] RBP: 00007f38dcdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.748973][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.756989][ T6071] R13: 00007f38dc226038 R14: 00007f38dc225fa0 R15: 00007fffd2562518 [ 1906.765016][ T6071] [ 1906.853965][ T6075] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10360'. [ 1906.970112][ T6080] FAULT_INJECTION: forcing a failure. [ 1906.970112][ T6080] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.020205][ T6080] CPU: 0 PID: 6080 Comm: syz.0.10363 Not tainted syzkaller #0 [ 1907.027755][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1907.037851][ T6080] Call Trace: [ 1907.041178][ T6080] [ 1907.044158][ T6080] dump_stack_lvl+0x188/0x24e [ 1907.048891][ T6080] ? show_regs_print_info+0x12/0x12 [ 1907.054149][ T6080] ? load_image+0x410/0x410 [ 1907.058723][ T6080] ? __might_sleep+0xd0/0xd0 [ 1907.063369][ T6080] ? __lock_acquire+0x7c40/0x7c40 [ 1907.068462][ T6080] should_fail_ex+0x390/0x4c0 [ 1907.073201][ T6080] should_failslab+0x5/0x20 [ 1907.077753][ T6080] slab_pre_alloc_hook+0x59/0x300 [ 1907.082830][ T6080] ? __get_vm_area_node+0x122/0x330 [ 1907.088086][ T6080] __kmem_cache_alloc_node+0x4f/0x270 [ 1907.093511][ T6080] ? __get_vm_area_node+0x122/0x330 [ 1907.098747][ T6080] kmalloc_node_trace+0x22/0xe0 [ 1907.103637][ T6080] __get_vm_area_node+0x122/0x330 [ 1907.108698][ T6080] __vmalloc_node_range+0x357/0x1380 [ 1907.114022][ T6080] ? netlink_sendmsg+0x5ec/0xbd0 [ 1907.119039][ T6080] ? netlink_insert+0x28d/0x13b0 [ 1907.124045][ T6080] ? free_vm_area+0x50/0x50 [ 1907.128581][ T6080] ? netlink_sendmsg+0x5ec/0xbd0 [ 1907.133554][ T6080] vmalloc+0x75/0x80 [ 1907.137513][ T6080] ? netlink_sendmsg+0x5ec/0xbd0 [ 1907.142485][ T6080] netlink_sendmsg+0x5ec/0xbd0 [ 1907.147289][ T6080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1907.153499][ T6080] ? netlink_getsockopt+0x550/0x550 [ 1907.158744][ T6080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1907.164145][ T6080] ? security_socket_sendmsg+0x7c/0xa0 [ 1907.169636][ T6080] ? netlink_getsockopt+0x550/0x550 [ 1907.174881][ T6080] ____sys_sendmsg+0x5ed/0x9a0 [ 1907.179691][ T6080] ? __sys_sendmsg_sock+0x30/0x30 [ 1907.184747][ T6080] ? __import_iovec+0x306/0x510 [ 1907.189643][ T6080] ? import_iovec+0x6f/0xa0 [ 1907.194191][ T6080] ___sys_sendmsg+0x2a2/0x360 [ 1907.198917][ T6080] ? __sys_sendmsg+0x2a0/0x2a0 [ 1907.203768][ T6080] __se_sys_sendmsg+0x1c3/0x2b0 [ 1907.208690][ T6080] ? __x64_sys_sendmsg+0x80/0x80 [ 1907.213695][ T6080] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1907.219643][ T6080] do_syscall_64+0x4c/0xa0 [ 1907.224115][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 1907.228842][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 1907.233570][ T6080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.239512][ T6080] RIP: 0033:0x7f8e2699de99 [ 1907.244148][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.263792][ T6080] RSP: 002b:00007f8e277fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1907.272244][ T6080] RAX: ffffffffffffffda RBX: 00007f8e26c25fa0 RCX: 00007f8e2699de99 [ 1907.280271][ T6080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1907.288286][ T6080] RBP: 00007f8e277fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.296290][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.304294][ T6080] R13: 00007f8e26c26038 R14: 00007f8e26c25fa0 R15: 00007ffc6f5e0428 [ 1907.312321][ T6080] [ 1907.350190][ T6080] syz.0.10363: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1907.400457][ T6080] CPU: 1 PID: 6080 Comm: syz.0.10363 Not tainted syzkaller #0 [ 1907.407991][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1907.418098][ T6080] Call Trace: [ 1907.421424][ T6080] [ 1907.424400][ T6080] dump_stack_lvl+0x188/0x24e [ 1907.429144][ T6080] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1907.435657][ T6080] ? show_regs_print_info+0x12/0x12 [ 1907.440927][ T6080] ? load_image+0x410/0x410 [ 1907.445493][ T6080] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1907.451974][ T6080] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1907.458546][ T6080] warn_alloc+0x242/0x330 [ 1907.462952][ T6080] ? __get_vm_area_node+0x122/0x330 [ 1907.468216][ T6080] ? zone_watermark_ok_safe+0x270/0x270 [ 1907.473837][ T6080] ? rcu_is_watching+0x11/0xa0 [ 1907.478676][ T6080] ? __get_vm_area_node+0x318/0x330 [ 1907.483949][ T6080] __vmalloc_node_range+0x37c/0x1380 [ 1907.489320][ T6080] ? netlink_insert+0x28d/0x13b0 [ 1907.494342][ T6080] ? free_vm_area+0x50/0x50 [ 1907.498922][ T6080] ? netlink_sendmsg+0x5ec/0xbd0 [ 1907.503934][ T6080] vmalloc+0x75/0x80 [ 1907.507906][ T6080] ? netlink_sendmsg+0x5ec/0xbd0 [ 1907.512925][ T6080] netlink_sendmsg+0x5ec/0xbd0 [ 1907.517764][ T6080] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1907.523994][ T6080] ? netlink_getsockopt+0x550/0x550 [ 1907.529278][ T6080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1907.534626][ T6080] ? security_socket_sendmsg+0x7c/0xa0 [ 1907.540147][ T6080] ? netlink_getsockopt+0x550/0x550 [ 1907.545422][ T6080] ____sys_sendmsg+0x5ed/0x9a0 [ 1907.550262][ T6080] ? __sys_sendmsg_sock+0x30/0x30 [ 1907.555354][ T6080] ? __import_iovec+0x306/0x510 [ 1907.560279][ T6080] ? import_iovec+0x6f/0xa0 [ 1907.564872][ T6080] ___sys_sendmsg+0x2a2/0x360 [ 1907.569646][ T6080] ? __sys_sendmsg+0x2a0/0x2a0 [ 1907.574541][ T6080] __se_sys_sendmsg+0x1c3/0x2b0 [ 1907.579472][ T6080] ? __x64_sys_sendmsg+0x80/0x80 [ 1907.584490][ T6080] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1907.590442][ T6080] do_syscall_64+0x4c/0xa0 [ 1907.594912][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 1907.599645][ T6080] ? clear_bhb_loop+0x60/0xb0 [ 1907.604414][ T6080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.610359][ T6080] RIP: 0033:0x7f8e2699de99 [ 1907.614851][ T6080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.634509][ T6080] RSP: 002b:00007f8e277fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1907.642981][ T6080] RAX: ffffffffffffffda RBX: 00007f8e26c25fa0 RCX: 00007f8e2699de99 [ 1907.651002][ T6080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1907.659020][ T6080] RBP: 00007f8e277fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.667031][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.675040][ T6080] R13: 00007f8e26c26038 R14: 00007f8e26c25fa0 R15: 00007ffc6f5e0428 [ 1907.683098][ T6080] [ 1907.872106][ T6094] device wlan1 entered promiscuous mode [ 1907.897290][ T6095] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10367'. [ 1908.072457][ T6100] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.10369'. [ 1908.277388][ T6080] Mem-Info: [ 1908.292367][ T6080] active_anon:25824 inactive_anon:0 isolated_anon:0 [ 1908.292367][ T6080] active_file:21983 inactive_file:40675 isolated_file:0 [ 1908.292367][ T6080] unevictable:768 dirty:240 writeback:0 [ 1908.292367][ T6080] slab_reclaimable:21639 slab_unreclaimable:100809 [ 1908.292367][ T6080] mapped:43202 shmem:15092 pagetables:672 [ 1908.292367][ T6080] sec_pagetables:0 bounce:0 [ 1908.292367][ T6080] kernel_misc_reclaimable:0 [ 1908.292367][ T6080] free:1274810 free_pcp:11377 free_cma:0 [ 1908.467546][ T6080] Node 0 active_anon:110896kB inactive_anon:0kB active_file:87932kB inactive_file:162500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:175608kB dirty:960kB writeback:0kB shmem:66332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11268kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 1908.609667][ T6080] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1908.730396][ T6080] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1908.840055][ T6080] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1908.870109][ T6080] Node 0 DMA32 free:1168368kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:121200kB inactive_anon:0kB active_file:87932kB inactive_file:162500kB unevictable:1536kB writepending:984kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:27656kB local_pcp:13692kB free_cma:0kB [ 1908.989762][ T6080] lowmem_reserve[]: 0 0 1 1 1 [ 1908.994644][ T6080] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1909.064488][ T6080] lowmem_reserve[]: 0 0 0 0 0 [ 1909.074619][ T6080] Node 1 Normal free:3896268kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19412kB local_pcp:10940kB free_cma:0kB [ 1909.143820][ T6080] lowmem_reserve[]: 0 0 0 0 0 [ 1909.155422][ T6080] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1909.219727][ T6080] Node 0 DMA32: 1220*4kB (UME) 484*8kB (UE) 192*16kB (UE) 512*32kB (UE) 609*64kB (UE) 1606*128kB (UME) 652*256kB (UME) 245*512kB (UM) 89*1024kB (UME) 8*2048kB (UM) 119*4096kB (UM) = 1160048kB [ 1909.282519][ T6080] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1909.321571][ T6080] Node 1 Normal: 145*4kB (UME) 47*8kB (UME) 37*16kB (UME) 28*32kB (UE) 19*64kB (UME) 5*128kB (UME) 7*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 949*4096kB (ME) = 3896268kB [ 1909.375629][ T6080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.412666][ T6080] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1909.454858][ T6080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1909.488595][ T6124] netlink: 'syz.3.10376': attribute type 3 has an invalid length. [ 1909.499834][ T6080] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1909.512017][ T6124] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10376'. [ 1909.529884][ T6080] 85406 total pagecache pages [ 1909.539937][ T6080] 0 pages in swap cache [ 1909.544155][ T6080] Free swap = 124996kB [ 1909.587534][ T6127] netlink: 'syz.2.10377': attribute type 39 has an invalid length. [ 1909.589709][ T6080] Total swap = 124996kB [ 1909.646563][ T6080] 2097051 pages RAM [ 1909.662548][ T6080] 0 pages HighMem/MovableOnly [ 1909.683756][ T6080] 415222 pages reserved [ 1909.693925][ T6080] 0 pages cma reserved [ 1910.311993][ T6143] netlink: 'syz.1.10380': attribute type 13 has an invalid length. [ 1910.445145][ T6143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10380'. [ 1910.709689][ T6143] syz_tun: refused to change device tx_queue_len [ 1910.763135][ T6143] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1911.464036][ T6168] netlink: 'syz.3.10387': attribute type 3 has an invalid length. [ 1911.566515][ T6170] netlink: 'syz.4.10390': attribute type 3 has an invalid length. [ 1911.585322][ T6170] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1911.599850][ T6168] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10387'. [ 1911.786879][ T6180] netlink: 'syz.0.10391': attribute type 3 has an invalid length. [ 1911.909804][ T6180] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10391'. [ 1912.913681][ T6195] netlink: 'syz.2.10395': attribute type 3 has an invalid length. [ 1912.947260][ T6195] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10395'. [ 1914.473951][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.480736][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.880477][ T6196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1914.887772][ T6196] IPv6: NLM_F_CREATE should be set when creating new route [ 1914.895104][ T6196] IPv6: NLM_F_CREATE should be set when creating new route [ 1914.902398][ T6196] IPv6: NLM_F_CREATE should be set when creating new route [ 1915.098616][ T6203] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10397'. [ 1915.195117][ T6213] netlink: 'syz.0.10396': attribute type 2 has an invalid length. [ 1915.212040][ T6203] device hsr_slave_0 left promiscuous mode [ 1915.323394][ T6205] netlink: 'syz.1.10398': attribute type 2 has an invalid length. [ 1915.387170][ T6213] device 0 entered promiscuous mode [ 1915.623143][ T6224] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1915.698332][ T6224] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1915.795282][ T6223] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1915.971741][ T6229] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1916.216425][ T6224] device syzkaller0 entered promiscuous mode [ 1916.244003][ T6229] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1916.374521][ T6226] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1916.731922][ T6249] netlink: 'syz.0.10408': attribute type 29 has an invalid length. [ 1916.753991][ T6223] netlink: 'syz.3.10402': attribute type 29 has an invalid length. [ 1916.823099][ T6244] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10406'. [ 1916.863176][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1916.901641][ T6244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1916.908527][ T6247] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10407'. [ 1917.539020][ T6257] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10410'. [ 1919.925272][ T6253] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10407'. [ 1919.935936][ T6253] syz_tun: refused to change device tx_queue_len [ 1919.942479][ T6253] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1920.162221][ T6269] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1920.776000][ T6267] device veth0_vlan left promiscuous mode [ 1920.838275][ T6267] device veth0_vlan entered promiscuous mode [ 1920.942846][ T6267] team0: Device veth0_vlan failed to register rx_handler [ 1921.505313][ T6303] validate_nla: 6 callbacks suppressed [ 1921.505429][ T6303] netlink: 'syz.3.10423': attribute type 28 has an invalid length. [ 1921.733204][ T6308] netlink: 'syz.0.10424': attribute type 3 has an invalid length. [ 1921.771455][ T6308] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10424'. [ 1921.965664][ T6309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1921.973160][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 1921.980514][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 1921.987771][ T6309] IPv6: NLM_F_CREATE should be set when creating new route [ 1922.321487][ T6331] netlink: 'syz.0.10429': attribute type 10 has an invalid length. [ 1922.418509][ T6331] team0: Port device hsr_slave_0 added [ 1923.029199][ T6345] syz.4.10435[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1923.029432][ T6345] syz.4.10435[6345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1923.289187][ T6350] netlink: 'syz.2.10436': attribute type 28 has an invalid length. [ 1924.277822][ T6378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1924.285480][ T6378] IPv6: NLM_F_CREATE should be set when creating new route [ 1924.293424][ T6378] IPv6: NLM_F_CREATE should be set when creating new route [ 1924.301006][ T6378] IPv6: NLM_F_CREATE should be set when creating new route [ 1924.639843][ T6399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10450'. [ 1924.707592][ T6404] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.10452'. [ 1924.731697][ T6404] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.10452'. [ 1925.000781][ T6413] netlink: 'syz.3.10455': attribute type 21 has an invalid length. [ 1925.008789][ T6413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10455'. [ 1925.298598][ T6424] netlink: 'syz.4.10458': attribute type 3 has an invalid length. [ 1925.312928][ T6424] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10458'. [ 1925.386186][ T6426] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10457'. [ 1925.435479][ T6426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1925.480177][ T6426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1925.785507][ T6443] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10462'. [ 1925.831659][ T6444] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.10463'. [ 1925.878482][ T6443] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1926.186067][ T6463] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1926.300987][ T6465] netlink: 'syz.3.10469': attribute type 29 has an invalid length. [ 1926.309297][ T6465] netlink: 'syz.3.10469': attribute type 29 has an invalid length. [ 1926.448288][ T6476] sock: sock_timestamping_bind_phc: sock not bind to device [ 1926.495235][ T6477] tap0: tun_chr_ioctl cmd 1074025677 [ 1926.559994][ T6477] tap0: linktype set to 1 [ 1926.805288][ T6480] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10474'. [ 1926.921433][ T6480] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1927.007110][ T6490] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1927.378303][ T6496] can: request_module (can-proto-0) failed. [ 1928.369569][ T6533] netlink: 'syz.1.10490': attribute type 4 has an invalid length. [ 1929.259427][ T6560] netlink: 'syz.4.10497': attribute type 2 has an invalid length. [ 1930.576084][ T6590] __nla_validate_parse: 4 callbacks suppressed [ 1930.576102][ T6590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1933.633578][ T6619] netlink: 'syz.1.10514': attribute type 28 has an invalid length. [ 1933.654676][ T6621] netlink: 'syz.3.10516': attribute type 2 has an invalid length. [ 1933.693818][ T6621] netlink: 'syz.3.10516': attribute type 1 has an invalid length. [ 1933.787858][ T6621] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10516'. [ 1933.953308][ T6630] netlink: 'syz.4.10518': attribute type 3 has an invalid length. [ 1934.081486][ T6630] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.10518'. [ 1934.392131][ T6637] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10519'. [ 1934.444101][ T6643] netlink: 'syz.0.10519': attribute type 10 has an invalid length. [ 1934.500126][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): Q6`Ҙ: link becomes ready [ 1934.537979][ T6643] team0: Device Q6`Ҙ is loopback device. Loopback devices can't be added as a team port [ 1934.793097][ T6664] netlink: 'syz.4.10526': attribute type 10 has an invalid length. [ 1935.154753][ T6679] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.10529'. [ 1935.204675][ T6664] team0: Device wg1 is of different type [ 1936.669823][ T6695] netlink: 'syz.0.10532': attribute type 5 has an invalid length. [ 1937.386646][ T6722] netlink: 'syz.4.10539': attribute type 12 has an invalid length. [ 1937.394994][ T6722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10539'. [ 1937.671488][ T6725] netlink: 'syz.4.10540': attribute type 2 has an invalid length. [ 1937.721875][ T6725] device .*! entered promiscuous mode [ 1938.212910][ T6744] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10547'. [ 1938.494088][ T6748] netlink: 184 bytes leftover after parsing attributes in process `syz.4.10550'. [ 1939.093953][ T6766] netlink: 'syz.3.10552': attribute type 13 has an invalid length. [ 1939.129752][ T6766] netlink: 'syz.3.10552': attribute type 58 has an invalid length. [ 1939.149044][ T6767] netlink: 'syz.2.10553': attribute type 3 has an invalid length. [ 1939.159265][ T6767] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10553'. [ 1939.198325][ T6766] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10552'. [ 1939.773049][ T6778] netlink: 'syz.2.10557': attribute type 13 has an invalid length. [ 1939.804020][ T6778] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10557'. [ 1940.213606][ T6778] erspan0: refused to change device tx_queue_len [ 1940.253688][ T6795] netlink: 'syz.4.10561': attribute type 21 has an invalid length. [ 1940.511468][ T6800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10562'. [ 1940.734387][ T6807] netlink: 'syz.2.10564': attribute type 21 has an invalid length. [ 1940.765259][ T6807] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10564'. [ 1940.781945][ T6807] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10564'. [ 1940.807356][ T6811] netlink: 'syz.4.10565': attribute type 2 has an invalid length. [ 1940.954930][ T6811] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10565'. [ 1941.188333][ T6815] netlink: 'syz.1.10566': attribute type 10 has an invalid length. [ 1943.292403][ T6851] netlink: 'syz.3.10575': attribute type 13 has an invalid length. [ 1943.335601][ T6851] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10575'. [ 1943.415691][ T6851] erspan0: refused to change device tx_queue_len [ 1943.470318][ T6858] netlink: 'syz.4.10577': attribute type 2 has an invalid length. [ 1943.507128][ T6858] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10577'. [ 1943.552437][ T6867] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10578'. [ 1943.590051][ T6867] device hsr0 entered promiscuous mode [ 1943.596615][ T6867] bridge0: port 3(hsr0) entered blocking state [ 1943.645316][ T6867] bridge0: port 3(hsr0) entered disabled state [ 1943.676675][ T6867] bridge0: port 3(hsr0) entered blocking state [ 1943.683127][ T6867] bridge0: port 3(hsr0) entered forwarding state [ 1943.941503][ T6875] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10583'. [ 1943.994273][ T6875] syz_tun: refused to change device tx_queue_len [ 1944.052519][ T6875] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1944.405892][ T6892] validate_nla: 3 callbacks suppressed [ 1944.405914][ T6892] netlink: 'syz.4.10586': attribute type 19 has an invalid length. [ 1944.443115][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10586'. [ 1944.682280][ T6898] netlink: 'syz.2.10590': attribute type 12 has an invalid length. [ 1944.710090][ T6898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10590'. [ 1944.776502][ T6901] netlink: 'syz.3.10589': attribute type 10 has an invalid length. [ 1945.141341][ T6901] team0: Port device geneve1 added [ 1945.213606][ T6914] netlink: 'syz.0.10591': attribute type 2 has an invalid length. [ 1945.234747][ T6914] netlink: 'syz.0.10591': attribute type 8 has an invalid length. [ 1945.248652][ T6914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10591'. [ 1945.272234][ T6908] netlink: 'syz.4.10592': attribute type 13 has an invalid length. [ 1945.287045][ T6908] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10592'. [ 1945.480304][ T6908] erspan0: refused to change device tx_queue_len [ 1945.697136][ T6935] netlink: 'syz.2.10598': attribute type 3 has an invalid length. [ 1945.766689][ T6935] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10598'. [ 1945.787907][ T6933] netlink: 'syz.3.10597': attribute type 21 has an invalid length. [ 1945.915237][ T6933] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10597'. [ 1946.347521][ T6950] device syzkaller0 entered promiscuous mode [ 1947.246989][ T4289] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1949.027314][ T6964] netlink: 'syz.3.10605': attribute type 2 has an invalid length. [ 1949.035470][ T6964] netlink: 'syz.3.10605': attribute type 8 has an invalid length. [ 1949.049550][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10605'. [ 1949.059983][ T6971] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10604'. [ 1949.241319][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.293134][ T6972] device bridge_slave_1 left promiscuous mode [ 1949.304910][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.328802][ T6972] team0: Port device bridge_slave_1 added [ 1949.348712][ T6979] tipc: Started in network mode [ 1949.354433][ T6979] tipc: Node identity 9215a268, cluster identity 4711 [ 1949.361608][ T6979] tipc: Node number set to 2450891368 [ 1949.369500][ T6982] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10608'. [ 1949.698346][ T7006] validate_nla: 3 callbacks suppressed [ 1949.698383][ T7006] netlink: 'syz.3.10614': attribute type 16 has an invalid length. [ 1949.750160][ T7006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10614'. [ 1951.413990][ T7048] netlink: 'syz.1.10625': attribute type 2 has an invalid length. [ 1951.840245][ T7057] netlink: 'syz.2.10626': attribute type 2 has an invalid length. [ 1951.869821][ T7058] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10626'. [ 1952.060563][ T7050] netlink: 'syz.2.10626': attribute type 10 has an invalid length. [ 1952.091558][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.145625][ T7050] device bridge_slave_1 left promiscuous mode [ 1952.152031][ T7050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.193270][ T7050] team0: Port device bridge_slave_1 added [ 1952.224596][ T7064] netlink: 'syz.0.10631': attribute type 3 has an invalid length. [ 1952.260770][ T7064] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10631'. [ 1952.379758][T13540] Bluetooth: hci0: command 0x0406 tx timeout [ 1953.113690][ T7089] netlink: 'syz.2.10640': attribute type 41 has an invalid length. [ 1953.410621][ T7103] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1955.106987][ T7119] netlink: 'syz.0.10650': attribute type 29 has an invalid length. [ 1955.139769][ T7119] netlink: 'syz.0.10650': attribute type 3 has an invalid length. [ 1955.175206][ T7119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10650'. [ 1955.616424][ T7150] netlink: 'syz.4.10655': attribute type 10 has an invalid length. [ 1955.747509][ T7150] team0: Port device geneve1 added [ 1957.878522][ T7227] netlink: 'syz.4.10684': attribute type 11 has an invalid length. [ 1957.909780][ T7227] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10684'. [ 1958.144526][ T7242] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.10685'. [ 1958.340206][ T7247] netlink: 'syz.0.10685': attribute type 41 has an invalid length. [ 1958.697478][ T7226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1959.146995][ T7261] netlink: 'syz.0.10689': attribute type 27 has an invalid length. [ 1959.190521][ T7261] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10689'. [ 1959.410093][ T7267] netlink: 'syz.3.10690': attribute type 3 has an invalid length. [ 1959.418424][ T7267] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10690'. [ 1959.728315][ T7276] netlink: 'syz.4.10694': attribute type 13 has an invalid length. [ 1960.018729][ T7279] device sit0 entered promiscuous mode [ 1962.163839][ T7303] sctp: [Deprecated]: syz.3.10700 (pid 7303) Use of int in maxseg socket option. [ 1962.163839][ T7303] Use struct sctp_assoc_value instead [ 1963.453968][ T7315] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10703'. [ 1963.547510][ T7317] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10703'. [ 1963.785240][ T7323] netlink: 'syz.2.10705': attribute type 3 has an invalid length. [ 1963.837061][ T7323] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10705'. [ 1964.086360][ T7340] netlink: 'syz.0.10711': attribute type 29 has an invalid length. [ 1964.151878][ T7340] netlink: 'syz.0.10711': attribute type 29 has an invalid length. [ 1964.203037][ T7344] netlink: 'syz.0.10711': attribute type 29 has an invalid length. [ 1964.352843][ T7349] netlink: 'syz.3.10713': attribute type 21 has an invalid length. [ 1964.416593][ T7349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10713'. [ 1965.439848][ T7375] netlink: 'syz.0.10720': attribute type 1 has an invalid length. [ 1965.454861][ T7375] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.10720'. [ 1965.668294][ T7361] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1965.689197][ T7369] netlink: 'syz.4.10718': attribute type 1 has an invalid length. [ 1966.009173][ T7374] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.10720'. [ 1966.031212][ T7378] netlink: 12002 bytes leftover after parsing attributes in process `syz.2.10721'. [ 1966.398280][ T7388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10724'. [ 1966.470707][ T7390] netlink: 'syz.2.10725': attribute type 1 has an invalid length. [ 1966.488071][ T7390] netlink: 'syz.2.10725': attribute type 1 has an invalid length. [ 1966.508605][ T7390] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.10725'. [ 1966.537583][ T7395] netlink: 'syz.2.10725': attribute type 3 has an invalid length. [ 1966.729767][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.737173][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.767322][ T7399] device bridge0 left promiscuous mode [ 1966.873052][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1966.880728][ T7399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1966.889759][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.897501][ T7399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1966.926084][ T7399] team0: Port device bridge0 added [ 1966.989011][ T7403] device veth0_vlan left promiscuous mode [ 1967.006060][ T7403] device veth0_vlan entered promiscuous mode [ 1967.037766][ T7403] team0: Device veth0_vlan failed to register rx_handler [ 1967.189903][ T7405] device veth0_vlan left promiscuous mode [ 1967.210367][ T7405] device veth0_vlan entered promiscuous mode [ 1967.221967][ T7405] team0: Device veth0_vlan failed to register rx_handler [ 1971.404493][ T7497] __nla_validate_parse: 6 callbacks suppressed [ 1971.404538][ T7497] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10759'. [ 1975.611470][ T7538] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1975.918061][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.924476][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.106817][ T7568] : port 1(gretap0) entered blocking state [ 1976.206481][ T7568] : port 1(gretap0) entered disabled state [ 1976.257956][ T7568] device gretap0 entered promiscuous mode [ 1976.270295][ T7567] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10776'. [ 1976.650079][ T7584] validate_nla: 7 callbacks suppressed [ 1976.650099][ T7584] netlink: 'syz.2.10782': attribute type 25 has an invalid length. [ 1976.696928][ T7584] netlink: 'syz.2.10782': attribute type 3 has an invalid length. [ 1976.832038][ T7590] netlink: 'syz.3.10784': attribute type 10 has an invalid length. [ 1976.987655][ T7590] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1977.113085][ T7595] device syzkaller0 entered promiscuous mode [ 1977.151386][ T7594] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1977.340535][ T7601] netlink: 'syz.0.10787': attribute type 22 has an invalid length. [ 1977.412779][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1977.755292][ T7598] netlink: 'syz.1.10786': attribute type 13 has an invalid length. [ 1977.763855][ T7598] netlink: 'syz.1.10786': attribute type 58 has an invalid length. [ 1977.771947][ T7598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10786'. [ 1978.260901][ T7617] netlink: 'syz.0.10791': attribute type 10 has an invalid length. [ 1978.361691][ T7617] device veth1_macvtap left promiscuous mode [ 1978.680143][ T7632] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10792'. [ 1978.903830][ T7623] netlink: 'syz.0.10791': attribute type 10 has an invalid length. [ 1979.092530][ T7635] : port 1(veth0_to_team) entered blocking state [ 1979.145404][ T7635] : port 1(veth0_to_team) entered disabled state [ 1979.191725][ T7635] device veth0_to_team entered promiscuous mode [ 1979.252372][ T7625] netlink: 'syz.1.10802': attribute type 10 has an invalid length. [ 1979.566143][ T7652] netlink: 'syz.4.10798': attribute type 10 has an invalid length. [ 1979.582462][ T7652] team0: Device ipvlan1 failed to register rx_handler [ 1979.843315][ T7661] delete_channel: no stack [ 1982.760511][ T7681] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.10805'. [ 1983.227135][ T7709] : port 1(gretap0) entered blocking state [ 1983.320514][ T7709] : port 1(gretap0) entered disabled state [ 1983.357360][ T7709] device gretap0 entered promiscuous mode [ 1983.901714][ T7721] netlink: 'syz.3.10816': attribute type 3 has an invalid length. [ 1983.912676][ T7721] netlink: 'syz.3.10816': attribute type 1 has an invalid length. [ 1983.926370][ T7721] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1984.431394][ T7742] netlink: 'syz.3.10822': attribute type 21 has an invalid length. [ 1984.439384][ T7742] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10822'. [ 1984.491756][ T7742] netlink: 'syz.3.10822': attribute type 4 has an invalid length. [ 1984.538119][ T7742] netlink: 'syz.3.10822': attribute type 3 has an invalid length. [ 1984.587035][ T7742] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10822'. [ 1984.651593][ T7755] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.10824'. [ 1984.681899][ T7755] openvswitch: netlink: Key type 386 is out of range max 32 [ 1984.737347][ T4289] Bluetooth: hci5: unexpected event 0x34 length: 151 > 6 [ 1986.897956][ T7801] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.10838'. [ 1987.484322][ T7827] netlink: 'syz.4.10843': attribute type 10 has an invalid length. [ 1987.509760][ T7827] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10843'. [ 1987.708393][ T7840] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.10848'. [ 1987.756777][ T7840] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1988.313218][ T7862] netlink: 'syz.3.10855': attribute type 1 has an invalid length. [ 1988.330457][ T7862] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1988.368862][ T7871] netlink: 'syz.3.10855': attribute type 29 has an invalid length. [ 1988.752113][ T7871] netlink: 'syz.3.10855': attribute type 29 has an invalid length. [ 1988.772239][ T7875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10859'. [ 1988.933296][ T7877] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1989.211881][ T7885] netlink: 'syz.0.10861': attribute type 27 has an invalid length. [ 1989.254025][ T7885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10861'. [ 1989.433235][ T7888] can: request_module (can-proto-0) failed. [ 1989.676348][ T7899] netlink: 'syz.1.10866': attribute type 33 has an invalid length. [ 1989.694603][ T7899] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10866'. [ 1989.713280][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1989.762295][ T7899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1990.633766][ T7917] netlink: 180 bytes leftover after parsing attributes in process `syz.4.10871'. [ 1991.088532][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.353019][ T7959] syz.1.10882[7959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1992.353145][ T7959] syz.1.10882[7959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1992.662739][ T7957] device syzkaller0 entered promiscuous mode [ 1992.877371][ T7961] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10880'. [ 1992.919844][ T7961] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1993.220008][ T7977] netlink: 63763 bytes leftover after parsing attributes in process `syz.4.10885'. [ 1993.245537][ T7977] tc_dump_action: action bad kind [ 1996.101576][ T8004] netlink: 'syz.4.10892': attribute type 10 has an invalid length. [ 1996.118433][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10892'. [ 1996.145296][ T8004] device team0 entered promiscuous mode [ 1996.152716][ T8004] device team_slave_0 entered promiscuous mode [ 1996.182873][ T8004] device team_slave_1 entered promiscuous mode [ 1996.201934][ T8004] device macvlan0 entered promiscuous mode [ 1996.213353][ T8004] device batadv0 entered promiscuous mode [ 1996.225883][ T8004] device bridge_slave_1 entered promiscuous mode [ 1996.245103][ T8004] device geneve1 entered promiscuous mode [ 1996.340877][ T8004] bond0: (slave team0): Releasing backup interface [ 1996.407707][ T8004] bridge0: port 2(team0) entered blocking state [ 1996.416048][ T8004] bridge0: port 2(team0) entered disabled state [ 1996.670005][ T3681] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1996.679417][ T3681] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1997.160920][ T8043] netlink: 'syz.0.10902': attribute type 1 has an invalid length. [ 1997.169365][ T8043] netlink: 'syz.0.10902': attribute type 1 has an invalid length. [ 1997.179494][ T8043] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.10902'. [ 1998.113300][ T8071] netlink: 'syz.4.10911': attribute type 4 has an invalid length. [ 1998.123636][ T8076] netlink: 768 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1998.161087][ T8071] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10911'. [ 1999.681198][ T8120] netlink: 'syz.1.10922': attribute type 4 has an invalid length. [ 1999.696902][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10922'. [ 1999.874655][ T8125] netlink: 'syz.3.10924': attribute type 21 has an invalid length. [ 1999.954842][ T8125] netlink: 'syz.3.10924': attribute type 1 has an invalid length. [ 2000.130333][ T8125] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10924'. [ 2000.466469][ T8135] netlink: 'syz.4.10926': attribute type 29 has an invalid length. [ 2000.490520][ T8135] netlink: 'syz.4.10926': attribute type 3 has an invalid length. [ 2000.525923][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10926'. [ 2000.678032][ T8132] device syzkaller0 entered promiscuous mode [ 2003.948869][ T8159] netlink: 'syz.3.10935': attribute type 13 has an invalid length. [ 2003.962488][ T8159] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.10935'. [ 2004.121873][ T8175] netlink: 'syz.4.10947': attribute type 4 has an invalid length. [ 2004.132110][ T8175] netlink: 'syz.4.10947': attribute type 14 has an invalid length. [ 2004.400120][ T8182] delete_channel: no stack [ 2004.450182][ T8182] delete_channel: no stack [ 2007.800990][ T8199] netlink: 'syz.2.10942': attribute type 10 has an invalid length. [ 2007.838711][ T8199] team0: Device hsr_slave_0 failed to register rx_handler [ 2007.979842][ T8200] netlink: 'syz.4.10943': attribute type 22 has an invalid length. [ 2008.008690][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10943'. [ 2008.493301][ T8220] device syzkaller0 entered promiscuous mode [ 2008.522455][ T8225] netlink: 'syz.1.10952': attribute type 10 has an invalid length. [ 2008.531995][ T8233] netlink: 'syz.1.10952': attribute type 11 has an invalid length. [ 2008.540378][ T8233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10952'. [ 2008.557540][ T8231] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.10953'. [ 2008.584570][ T8232] netlink: 'syz.4.10955': attribute type 28 has an invalid length. [ 2008.606983][ T8232] netlink: 'syz.4.10955': attribute type 4 has an invalid length. [ 2008.648047][ T8232] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10955'. [ 2010.968213][ T8231] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.10953'. [ 2010.980134][ T8241] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10957'. [ 2011.000005][ T8240] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10957'. [ 2011.015972][ T8246] netlink: 'syz.2.10958': attribute type 7 has an invalid length. [ 2011.527784][ T8259] can: request_module (can-proto-0) failed. [ 2011.719413][ T8274] netlink: 'syz.4.10965': attribute type 10 has an invalid length. [ 2012.307238][ T8304] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.10974'. [ 2013.132573][ T8332] netlink: 'syz.2.10980': attribute type 10 has an invalid length. [ 2013.152747][ T8330] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10981'. [ 2013.330925][ T8332] bridge0: port 3(hsr0) entered disabled state [ 2013.370546][ T8332] bridge0: port 3(hsr0) entered disabled state [ 2013.400632][ T8337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10980'. [ 2013.416887][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10980'. [ 2013.445159][ T8330] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2013.457351][ T8330] CPU: 1 PID: 8330 Comm: syz.4.10981 Not tainted syzkaller #0 [ 2013.464876][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2013.474984][ T8330] Call Trace: [ 2013.478305][ T8330] [ 2013.481281][ T8330] dump_stack_lvl+0x188/0x24e [ 2013.486048][ T8330] ? show_regs_print_info+0x12/0x12 [ 2013.491301][ T8330] ? load_image+0x410/0x410 [ 2013.495876][ T8330] sysfs_warn_dup+0x8a/0xa0 [ 2013.500445][ T8330] sysfs_do_create_link_sd+0xc0/0x110 [ 2013.505966][ T8330] device_add+0x83b/0x1050 [ 2013.510444][ T8330] wiphy_register+0x1d8b/0x2aa0 [ 2013.515424][ T8330] ? cfg80211_event_work+0x40/0x40 [ 2013.520603][ T8330] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2013.526839][ T8330] ? ieee80211_register_hw+0x28d5/0x39f0 [ 2013.532547][ T8330] ieee80211_register_hw+0x2d48/0x39f0 [ 2013.538027][ T8330] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2013.544209][ T8330] ? ieee80211_register_hw+0xf41/0x39f0 [ 2013.549780][ T8330] ? ieee80211_register_hw+0xf41/0x39f0 [ 2013.555369][ T8330] ? ieee80211_tasklet_handler+0x20/0x20 [ 2013.561036][ T8330] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2013.566954][ T8330] ? __debug_object_init+0xed/0x440 [ 2013.572181][ T8330] ? memset+0x1e/0x40 [ 2013.576186][ T8330] ? __hrtimer_init+0x189/0x270 [ 2013.581114][ T8330] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2013.586921][ T8330] hwsim_new_radio_nl+0xab7/0xc90 [ 2013.591983][ T8330] genl_family_rcv_msg_doit+0x22f/0x350 [ 2013.597568][ T8330] ? end_current_label_crit_section+0x170/0x170 [ 2013.603860][ T8330] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2013.609794][ T8330] ? bpf_lsm_capable+0x5/0x10 [ 2013.614517][ T8330] ? security_capable+0x85/0xb0 [ 2013.619412][ T8330] genl_rcv_msg+0x601/0x790 [ 2013.623947][ T8330] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2013.630146][ T8330] ? genl_bind+0x360/0x360 [ 2013.634591][ T8330] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2013.640959][ T8330] ? lock_acquire+0x225/0x4a0 [ 2013.645680][ T8330] netlink_rcv_skb+0x1ef/0x440 [ 2013.650483][ T8330] ? genl_bind+0x360/0x360 [ 2013.654931][ T8330] ? netlink_ack+0x1160/0x1160 [ 2013.659751][ T8330] ? down_read+0x1a8/0x2d0 [ 2013.664211][ T8330] genl_rcv+0x24/0x40 [ 2013.668255][ T8330] netlink_unicast+0x7ad/0x920 [ 2013.673070][ T8330] netlink_sendmsg+0x8ad/0xbd0 [ 2013.677877][ T8330] ? netlink_getsockopt+0x550/0x550 [ 2013.683113][ T8330] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2013.688701][ T8330] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2013.694014][ T8330] ? security_socket_sendmsg+0x7c/0xa0 [ 2013.699503][ T8330] ? netlink_getsockopt+0x550/0x550 [ 2013.704747][ T8330] ____sys_sendmsg+0x5ed/0x9a0 [ 2013.709566][ T8330] ? __sys_sendmsg_sock+0x30/0x30 [ 2013.714638][ T8330] ? __import_iovec+0x306/0x510 [ 2013.719529][ T8330] ? import_iovec+0x6f/0xa0 [ 2013.724074][ T8330] ___sys_sendmsg+0x2a2/0x360 [ 2013.728795][ T8330] ? __sys_sendmsg+0x2a0/0x2a0 [ 2013.733620][ T8330] ? ktime_get+0x7b/0x270 [ 2013.738035][ T8330] __se_sys_sendmsg+0x1c3/0x2b0 [ 2013.742924][ T8330] ? __x64_sys_sendmsg+0x80/0x80 [ 2013.747915][ T8330] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2013.753838][ T8330] do_syscall_64+0x4c/0xa0 [ 2013.758284][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 2013.762992][ T8330] ? clear_bhb_loop+0x60/0xb0 [ 2013.767726][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2013.773652][ T8330] RIP: 0033:0x7f38dbf9de99 [ 2013.778093][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2013.797747][ T8330] RSP: 002b:00007f38dcda6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2013.806194][ T8330] RAX: ffffffffffffffda RBX: 00007f38dc226090 RCX: 00007f38dbf9de99 [ 2013.814196][ T8330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2013.822205][ T8330] RBP: 00007f38dc033eaf R08: 0000000000000000 R09: 0000000000000000 [ 2013.830210][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2013.838226][ T8330] R13: 00007f38dc226128 R14: 00007f38dc226090 R15: 00007fffd2562518 [ 2013.846239][ T8330] [ 2014.317684][ T8343] delete_channel: no stack [ 2014.370575][ T8343] delete_channel: no stack [ 2014.499218][ T8367] netlink: 'syz.3.10988': attribute type 3 has an invalid length. [ 2014.524147][ T8367] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10988'. [ 2014.964266][ T8378] netlink: 'syz.4.10993': attribute type 3 has an invalid length. [ 2014.979331][ T8378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10993'. [ 2015.459197][ T8389] netlink: 'syz.3.10998': attribute type 2 has an invalid length. [ 2016.425433][ T8401] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2016.444183][ T8401] syzkaller1: linktype set to 823 [ 2016.734014][ T8422] delete_channel: no stack [ 2016.784241][ T8422] delete_channel: no stack [ 2017.528064][ T8452] netlink: 'syz.3.11015': attribute type 10 has an invalid length. [ 2017.661150][ T8455] netlink: 'syz.3.11015': attribute type 11 has an invalid length. [ 2017.669133][ T8455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11015'. [ 2017.797765][ T8457] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11016'. [ 2017.999721][ T8461] C: renamed from team_slave_0 [ 2018.050076][ T8461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11018'. [ 2018.225119][ T8464] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11019'. [ 2018.654188][ T8475] netlink: 'syz.4.11024': attribute type 3 has an invalid length. [ 2018.674506][ T8475] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11024'. [ 2019.182649][ T8495] tap0: tun_chr_ioctl cmd 2147767521 [ 2019.575624][ T8504] netlink: 'syz.0.11034': attribute type 3 has an invalid length. [ 2019.609957][ T8504] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11034'. [ 2019.683012][ T8509] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11034'. [ 2020.585754][ T8535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2021.526021][ T8560] device syzkaller0 entered promiscuous mode [ 2026.539728][ T8614] netlink: 'syz.4.11059': attribute type 10 has an invalid length. [ 2026.593590][ T8614] device vxcan1 entered promiscuous mode [ 2026.615866][ T8614] team0: Device vxcan1 is of different type [ 2027.464901][ T8639] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11066'. [ 2028.029858][ T8652] netlink: 'syz.2.11069': attribute type 6 has an invalid length. [ 2028.067454][ T8652] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.11069'. [ 2028.201845][ T8659] netlink: 'syz.4.11068': attribute type 29 has an invalid length. [ 2028.220321][ T8659] netlink: 'syz.4.11068': attribute type 29 has an invalid length. [ 2028.270295][ T8650] netlink: 'syz.4.11068': attribute type 29 has an invalid length. [ 2028.297895][ T8658] netlink: 'syz.4.11068': attribute type 29 has an invalid length. [ 2028.397876][ T8650] netlink: 'syz.4.11068': attribute type 29 has an invalid length. [ 2028.477898][ T8671] sctp: [Deprecated]: syz.1.11073 (pid 8671) Use of int in maxseg socket option. [ 2028.477898][ T8671] Use struct sctp_assoc_value instead [ 2029.228011][ T8668] delete_channel: no stack [ 2029.516966][ T8676] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11075'. [ 2029.723362][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11077'. [ 2029.851025][ T8687] IPv6: pim6reg1: Disabled Multicast RS [ 2030.551003][ T8695] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11081'. [ 2031.845993][ T8716] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11086'. [ 2032.725326][ T8737] netlink: 'syz.2.11092': attribute type 9 has an invalid length. [ 2032.753960][ T8737] netlink: 'syz.2.11092': attribute type 8 has an invalid length. [ 2032.794293][ T8737] netlink: 355 bytes leftover after parsing attributes in process `syz.2.11092'. [ 2033.038113][ T8747] netlink: 'syz.4.11091': attribute type 10 has an invalid length. [ 2033.149764][ T8759] netlink: 'syz.3.11095': attribute type 29 has an invalid length. [ 2034.300676][ T8759] netlink: 'syz.3.11095': attribute type 29 has an invalid length. [ 2034.329435][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.383140][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2034.436177][ T8775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2034.480081][ T8775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2034.887659][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2034.920923][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2034.942554][ T8796] delete_channel: no stack [ 2034.968333][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2035.000827][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2035.212328][ T8798] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2035.476620][ T8812] device netdevsim0 entered promiscuous mode [ 2035.763631][ T8817] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.11113'. [ 2036.106542][ T8829] netlink: 'syz.2.11116': attribute type 29 has an invalid length. [ 2036.159227][ T8829] netlink: 'syz.2.11116': attribute type 29 has an invalid length. [ 2036.211120][ T8830] netlink: 'syz.2.11116': attribute type 29 has an invalid length. [ 2036.288275][ T8832] netlink: 'syz.1.11115': attribute type 29 has an invalid length. [ 2036.310592][ T8832] netlink: 'syz.1.11115': attribute type 29 has an invalid length. [ 2036.685739][ T8837] device pim6reg1 entered promiscuous mode [ 2037.343201][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.349721][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.610631][ T8861] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.11124'. [ 2038.348824][ T8891] validate_nla: 4 callbacks suppressed [ 2038.348846][ T8891] netlink: 'syz.2.11132': attribute type 29 has an invalid length. [ 2038.417315][ T8891] netlink: 'syz.2.11132': attribute type 29 has an invalid length. [ 2038.457731][ T8884] netlink: 'syz.2.11132': attribute type 29 has an invalid length. [ 2038.504425][ T8889] netlink: 'syz.2.11132': attribute type 29 has an invalid length. [ 2038.554921][ T8893] netlink: 'syz.2.11132': attribute type 29 has an invalid length. [ 2039.510065][ T8920] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11144'. [ 2039.819283][ T8926] netlink: 'syz.2.11146': attribute type 10 has an invalid length. [ 2039.843736][ T8926] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11146'. [ 2040.732908][ T8930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11147'. [ 2041.284935][ T8945] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.11150'. [ 2041.330175][ T8945] openvswitch: netlink: Flow actions attr not present in new flow. [ 2042.286434][ T8970] netlink: 'syz.3.11159': attribute type 3 has an invalid length. [ 2042.355418][ T8970] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11159'. [ 2042.761860][ T8991] netlink: 'syz.2.11164': attribute type 29 has an invalid length. [ 2042.770071][ T8991] netlink: 'syz.2.11164': attribute type 3 has an invalid length. [ 2042.777935][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11164'. [ 2043.073508][ T9002] netlink: 'syz.3.11166': attribute type 10 has an invalid length. [ 2043.114707][ T9002] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11166'. [ 2045.300816][ T9043] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11172'. [ 2045.398416][ T9055] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2045.502231][ T9043] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2045.524075][ T9043] CPU: 0 PID: 9043 Comm: syz.4.11172 Not tainted syzkaller #0 [ 2045.531611][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2045.541711][ T9043] Call Trace: [ 2045.545035][ T9043] [ 2045.548004][ T9043] dump_stack_lvl+0x188/0x24e [ 2045.552747][ T9043] ? show_regs_print_info+0x12/0x12 [ 2045.558001][ T9043] ? load_image+0x410/0x410 [ 2045.562603][ T9043] sysfs_warn_dup+0x8a/0xa0 [ 2045.567161][ T9043] sysfs_do_create_link_sd+0xc0/0x110 [ 2045.572592][ T9043] device_add+0x83b/0x1050 [ 2045.577066][ T9043] wiphy_register+0x1d8b/0x2aa0 [ 2045.582005][ T9043] ? cfg80211_event_work+0x40/0x40 [ 2045.587168][ T9043] ? minstrel_ht_alloc+0x894/0xa20 [ 2045.592354][ T9043] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2045.598473][ T9043] ieee80211_register_hw+0x2d48/0x39f0 [ 2045.604011][ T9043] ? ieee80211_register_hw+0xf41/0x39f0 [ 2045.609612][ T9043] ? ieee80211_register_hw+0xf41/0x39f0 [ 2045.615224][ T9043] ? ieee80211_tasklet_handler+0x20/0x20 [ 2045.620913][ T9043] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2045.626862][ T9043] ? __debug_object_init+0xed/0x440 [ 2045.632130][ T9043] ? memset+0x1e/0x40 [ 2045.636184][ T9043] ? __hrtimer_init+0x189/0x270 [ 2045.641091][ T9043] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2045.646881][ T9043] ? memcpy+0x3c/0x60 [ 2045.650917][ T9043] hwsim_new_radio_nl+0xab7/0xc90 [ 2045.656013][ T9043] genl_family_rcv_msg_doit+0x22f/0x350 [ 2045.661611][ T9043] ? end_current_label_crit_section+0x170/0x170 [ 2045.667912][ T9043] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2045.673863][ T9043] ? bpf_lsm_capable+0x5/0x10 [ 2045.678592][ T9043] ? security_capable+0x85/0xb0 [ 2045.683512][ T9043] genl_rcv_msg+0x601/0x790 [ 2045.688075][ T9043] ? genl_bind+0x360/0x360 [ 2045.692546][ T9043] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2045.698954][ T9043] netlink_rcv_skb+0x1ef/0x440 [ 2045.703783][ T9043] ? genl_bind+0x360/0x360 [ 2045.708254][ T9043] ? netlink_ack+0x1160/0x1160 [ 2045.713092][ T9043] ? down_read+0x1a8/0x2d0 [ 2045.717563][ T9043] genl_rcv+0x24/0x40 [ 2045.721590][ T9043] netlink_unicast+0x7ad/0x920 [ 2045.726441][ T9043] netlink_sendmsg+0x8ad/0xbd0 [ 2045.731276][ T9043] ? netlink_getsockopt+0x550/0x550 [ 2045.736532][ T9043] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2045.742146][ T9043] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2045.747472][ T9043] ? security_socket_sendmsg+0x7c/0xa0 [ 2045.752981][ T9043] ? netlink_getsockopt+0x550/0x550 [ 2045.758249][ T9043] ____sys_sendmsg+0x5ed/0x9a0 [ 2045.763085][ T9043] ? __sys_sendmsg_sock+0x30/0x30 [ 2045.768172][ T9043] ? __import_iovec+0x306/0x510 [ 2045.773097][ T9043] ? import_iovec+0x6f/0xa0 [ 2045.777671][ T9043] ___sys_sendmsg+0x2a2/0x360 [ 2045.782415][ T9043] ? __sys_sendmsg+0x2a0/0x2a0 [ 2045.787303][ T9043] __se_sys_sendmsg+0x1c3/0x2b0 [ 2045.792227][ T9043] ? __x64_sys_sendmsg+0x80/0x80 [ 2045.797251][ T9043] ? lockdep_hardirqs_on+0x94/0x140 [ 2045.802505][ T9043] do_syscall_64+0x4c/0xa0 [ 2045.807058][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 2045.811797][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 2045.816531][ T9043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2045.822480][ T9043] RIP: 0033:0x7f38dbf9de99 [ 2045.826941][ T9043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.846597][ T9043] RSP: 002b:00007f38dcd85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2045.855061][ T9043] RAX: ffffffffffffffda RBX: 00007f38dc226180 RCX: 00007f38dbf9de99 [ 2045.863081][ T9043] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2045.871112][ T9043] RBP: 00007f38dc033eaf R08: 0000000000000000 R09: 0000000000000000 [ 2045.879130][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.887144][ T9043] R13: 00007f38dc226218 R14: 00007f38dc226180 R15: 00007fffd2562518 [ 2045.895185][ T9043] [ 2045.918079][ T9060] netlink: 'syz.2.11173': attribute type 27 has an invalid length. [ 2046.019983][ T9060] netlink: 'syz.2.11173': attribute type 3 has an invalid length. [ 2046.123248][ T9065] netlink: 'syz.1.11177': attribute type 3 has an invalid length. [ 2046.131330][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11173'. [ 2046.189622][ T9065] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11177'. [ 2046.356567][ T9039] device syzkaller0 entered promiscuous mode [ 2046.722686][ T9068] delete_channel: no stack [ 2050.144709][ T9091] netlink: 'syz.3.11186': attribute type 10 has an invalid length. [ 2050.392854][ T9124] netlink: 'syz.3.11194': attribute type 2 has an invalid length. [ 2050.439644][ T9124] netlink: 'syz.3.11194': attribute type 1 has an invalid length. [ 2050.461519][ T9129] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11198'. [ 2050.479614][ T9124] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.11194'. [ 2050.495046][ T9129] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2050.760601][ T9131] netlink: 'syz.2.11196': attribute type 3 has an invalid length. [ 2050.779368][ T9131] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11196'. [ 2051.163077][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11205'. [ 2051.476208][ T9171] netlink: 'syz.2.11209': attribute type 14 has an invalid length. [ 2051.518178][ T9171] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11209'. [ 2051.845836][ T9181] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11211'. [ 2052.841102][ T9200] netlink: 'syz.0.11216': attribute type 3 has an invalid length. [ 2052.889852][ T9200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11216'. [ 2053.902196][ T9207] device syzkaller0 entered promiscuous mode [ 2053.961398][ T9219] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11221'. [ 2053.999123][ T9214] device sit0 entered promiscuous mode [ 2054.067302][ T9207] netlink: 'syz.3.11219': attribute type 41 has an invalid length. [ 2055.152083][ T9244] netlink: 'syz.1.11225': attribute type 3 has an invalid length. [ 2055.184050][ T9244] netlink: 'syz.1.11225': attribute type 1 has an invalid length. [ 2055.299484][ T9244] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.11225'. [ 2055.369043][ T9239] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11226'. [ 2056.917316][ T9251] netlink: 'syz.1.11229': attribute type 3 has an invalid length. [ 2056.936162][ T9251] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.11229'. [ 2059.851528][ T9236] netlink: 'syz.4.11223': attribute type 10 has an invalid length. [ 2059.872505][ T9253] netlink: 'syz.1.11230': attribute type 1 has an invalid length. [ 2059.889916][ T9253] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11230'. [ 2060.496721][ T9269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11231'. [ 2061.095959][ T9269] netlink: 'syz.0.11231': attribute type 12 has an invalid length. [ 2061.109266][ T9269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11231'. [ 2061.942519][ T9306] netlink: 'syz.0.11241': attribute type 10 has an invalid length. [ 2062.055681][ T9314] netlink: 'syz.1.11244': attribute type 29 has an invalid length. [ 2062.083321][ T9315] netlink: 'syz.1.11244': attribute type 29 has an invalid length. [ 2062.093546][ T9314] netlink: 'syz.1.11244': attribute type 29 has an invalid length. [ 2062.108256][ T9313] netlink: 'syz.1.11244': attribute type 29 has an invalid length. [ 2062.117288][ T9310] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11243'. [ 2062.232126][ T9317] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.11246'. [ 2062.343281][ T9327] netlink: 12002 bytes leftover after parsing attributes in process `syz.3.11248'. [ 2062.358680][ T9328] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.11245'. [ 2062.622513][ T9339] netlink: 'syz.0.11250': attribute type 5 has an invalid length. [ 2062.635915][ T9328] netlink: 'syz.4.11245': attribute type 3 has an invalid length. [ 2062.669348][ T9328] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11245'. [ 2063.754096][ T9353] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11255'. [ 2063.812333][ T9353] netlink: 'syz.3.11255': attribute type 10 has an invalid length. [ 2064.320552][ T9353] bond0: (slave wlan1): Releasing backup interface [ 2064.520144][ T9353] team0: Port device wlan1 added [ 2064.525888][ T9365] netlink: 'syz.2.11257': attribute type 17 has an invalid length. [ 2064.563665][ T9365] netlink: 148 bytes leftover after parsing attributes in process `syz.2.11257'. [ 2064.602090][ T9375] netlink: 64019 bytes leftover after parsing attributes in process `syz.4.11260'. [ 2066.503690][ T9422] netlink: 'syz.3.11274': attribute type 10 has an invalid length. [ 2066.529968][ T9422] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11274'. [ 2066.941454][ T9446] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11281'. [ 2067.281493][ T9452] netlink: 'syz.1.11282': attribute type 41 has an invalid length. [ 2068.113725][ T9469] netlink: 'syz.2.11288': attribute type 16 has an invalid length. [ 2068.122342][ T9469] netlink: 'syz.2.11288': attribute type 4 has an invalid length. [ 2068.158539][ T9469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11288'. [ 2068.234965][ T9476] netlink: 'syz.4.11290': attribute type 10 has an invalid length. [ 2068.756133][ T9496] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11296'. [ 2068.835094][ T9499] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11297'. [ 2069.187721][ T9512] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11301'. [ 2069.277449][ T9513] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.11301'. [ 2072.361206][ T9534] netlink: 'syz.2.11307': attribute type 21 has an invalid length. [ 2072.507182][ T9538] netlink: 'syz.0.11308': attribute type 10 has an invalid length. [ 2072.519722][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11308'. [ 2072.529106][ T9538] device veth0_vlan left promiscuous mode [ 2072.538303][ T9538] device veth0_vlan entered promiscuous mode [ 2072.547626][ T9538] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2072.602356][T27195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2072.642877][ T9543] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11311'. [ 2072.649352][T27195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2072.679283][T27195] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2072.755308][ T9551] netlink: 'syz.2.11312': attribute type 2 has an invalid length. [ 2073.173835][ T9554] device wg2 entered promiscuous mode [ 2074.082642][ T9577] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11322'. [ 2074.193495][ T9577] netlink: 'syz.2.11322': attribute type 10 has an invalid length. [ 2074.493560][ T9577] team0: Port device wlan1 added [ 2074.732407][ T9595] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11326'. [ 2075.346281][ T9621] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.11334'. [ 2075.679077][ T9637] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11338'. [ 2076.051394][ T9650] delete_channel: no stack [ 2076.360933][ T9663] netlink: 'syz.0.11345': attribute type 3 has an invalid length. [ 2076.387526][ T9663] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11345'. [ 2076.418291][ T9665] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.11346'. [ 2076.750342][ T9679] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11350'. [ 2078.489001][ T9715] netlink: 'syz.3.11360': attribute type 16 has an invalid length. [ 2078.560128][ T9715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11360'. [ 2078.807645][ T9702] netlink: 'syz.4.11355': attribute type 10 has an invalid length. [ 2078.852383][ T9702] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.903695][ T9702] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2078.972310][ T9702] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.036679][ T9702] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2079.256677][ T9734] netlink: 'syz.1.11362': attribute type 3 has an invalid length. [ 2079.298606][ T9734] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11362'. [ 2079.308569][ T9714] delete_channel: no stack [ 2079.504932][ T9715] netlink: 'syz.3.11360': attribute type 10 has an invalid length. [ 2079.541624][ T9715] team0: Port device macvlan0 added [ 2079.751863][ T9741] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11364'. [ 2079.973305][ T9751] netlink: 'syz.0.11368': attribute type 21 has an invalid length. [ 2080.009854][ T9751] IPv6: NLM_F_CREATE should be specified when creating new route [ 2080.049908][ T9751] IPv6: Can't replace route, no match found [ 2080.411463][ T9770] netlink: 'syz.4.11371': attribute type 10 has an invalid length. [ 2080.437922][ T9771] netlink: 'syz.0.11373': attribute type 1 has an invalid length. [ 2080.446004][ T9771] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.11373'. [ 2080.459773][ T9770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11371'. [ 2081.720709][ T9800] netlink: 'syz.1.11382': attribute type 11 has an invalid length. [ 2081.729299][ T9800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11382'. [ 2081.748204][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.883073][ T9807] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11384'. [ 2083.012118][ T9837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11390'. [ 2083.309340][T27195] tipc: Subscription rejected, illegal request [ 2083.441501][ T9851] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11396'. [ 2083.479683][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2083.550730][ T9851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2083.809952][ T9865] netlink: 'syz.3.11400': attribute type 2 has an invalid length. [ 2083.835875][ T9865] netlink: 175020 bytes leftover after parsing attributes in process `syz.3.11400'. [ 2083.923465][ T9865] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2083.948666][ T9865] syzkaller1: linktype set to 0 [ 2085.400443][ T9909] netlink: 'syz.3.11410': attribute type 2 has an invalid length. [ 2085.439915][ T9909] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11410'. [ 2086.193205][ T9927] netlink: 'syz.3.11415': attribute type 3 has an invalid length. [ 2086.212159][ T9927] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11415'. [ 2088.232938][ T9934] netlink: 'syz.0.11419': attribute type 10 has an invalid length. [ 2088.305136][ T9934] bond0: (slave team0): Releasing backup interface [ 2088.343127][ T9934] team0 (unregistering): Port device team_slave_0 removed [ 2088.388799][ T9934] team0 (unregistering): Port device team_slave_1 removed [ 2088.412710][ T9934] team0 (unregistering): Port device macvlan0 removed [ 2088.461419][ T9934] team0 (unregistering): Port device geneve1 removed [ 2088.503173][ T9934] team0 (unregistering): Port device hsr_slave_0 removed [ 2088.512963][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 2088.520297][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.583901][ T9934] team0 (unregistering): Port device bridge0 removed [ 2088.721099][ T9936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11417'. [ 2088.750045][ T9936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2088.780074][ T9936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2090.013608][ T9975] netlink: 'syz.1.11431': attribute type 3 has an invalid length. [ 2090.037106][ T9975] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11431'. [ 2091.441492][T10001] tap0: tun_chr_ioctl cmd 1074025681 [ 2092.276266][T10008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11441'. [ 2092.469450][T10008] netlink: 'syz.4.11441': attribute type 10 has an invalid length. [ 2092.633459][T10008] bridge0: port 2(team0) entered disabled state [ 2092.653690][T10008] device team_slave_0 left promiscuous mode [ 2092.666132][T10008] team0 (unregistering): Port device team_slave_0 removed [ 2092.678508][T10008] device team_slave_1 left promiscuous mode [ 2092.724034][T10008] team0 (unregistering): Port device team_slave_1 removed [ 2092.746740][T10008] device macvlan0 left promiscuous mode [ 2092.753774][T10021] netlink: 'syz.2.11446': attribute type 27 has an invalid length. [ 2092.763845][T10008] team0 (unregistering): Port device macvlan0 removed [ 2092.775273][T10008] device batadv0 left promiscuous mode [ 2092.777152][T10021] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11446'. [ 2092.825999][T10008] team0 (unregistering): Port device batadv0 removed [ 2092.842748][T10008] device bridge_slave_1 left promiscuous mode [ 2092.873408][T10008] team0 (unregistering): Port device bridge_slave_1 removed [ 2092.887263][T10008] device geneve1 left promiscuous mode [ 2092.895734][T10008] team0 (unregistering): Port device geneve1 removed [ 2093.117108][T10026] netlink: 'syz.2.11448': attribute type 10 has an invalid length. [ 2093.759286][T10026] team0: Device wg1 is of different type [ 2094.153039][T10056] netlink: 'syz.4.11455': attribute type 4 has an invalid length. [ 2094.179561][T10056] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11455'. [ 2094.323038][T10061] netlink: 'syz.0.11458': attribute type 10 has an invalid length. [ 2095.437065][T10081] netlink: 'syz.0.11463': attribute type 25 has an invalid length. [ 2095.449695][T10081] netlink: 'syz.0.11463': attribute type 9 has an invalid length. [ 2095.467830][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11463'. [ 2095.699945][T10088] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11465'. [ 2096.534858][T10108] netlink: 'syz.0.11470': attribute type 10 has an invalid length. [ 2097.344391][T10109] delete_channel: no stack [ 2098.784116][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.793541][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.165234][T10136] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11478'. [ 2099.249359][T10142] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.11475'. [ 2099.289635][T10142] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2099.595205][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11479'. [ 2099.742156][T10158] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.11483'. [ 2099.775751][T10156] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2099.848847][T10155] device syzkaller0 entered promiscuous mode [ 2101.301542][T10194] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11491'. [ 2102.975033][T10214] device syzkaller0 entered promiscuous mode [ 2105.489747][T10222] netlink: 'syz.1.11498': attribute type 10 has an invalid length. [ 2105.498032][T10222] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11498'. [ 2105.507552][T10222] device hsr0 entered promiscuous mode [ 2105.513767][T10222] bridge0: port 1(hsr0) entered blocking state [ 2105.523092][T10222] bridge0: port 1(hsr0) entered disabled state [ 2105.531925][T10222] bridge0: port 1(hsr0) entered blocking state [ 2105.538205][T10222] bridge0: port 1(hsr0) entered forwarding state [ 2105.556238][T10240] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11502'. [ 2105.812100][T10249] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11504'. [ 2105.853361][T10248] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11505'. [ 2105.873774][T10246] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11503'. [ 2105.893660][T10248] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.11505'. [ 2106.282038][T10258] netlink: 'syz.0.11507': attribute type 3 has an invalid length. [ 2106.312025][T10258] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11507'. [ 2109.346401][T10266] netlink: 'syz.3.11509': attribute type 10 has an invalid length. [ 2109.373834][T10266] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11509'. [ 2109.584455][T10275] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11511'. [ 2109.665800][T10291] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11514'. [ 2110.413525][T10310] netlink: 'syz.0.11521': attribute type 10 has an invalid length. [ 2111.004642][T10333] IPv6: Can't replace route, no match found [ 2112.236391][T10358] __nla_validate_parse: 3 callbacks suppressed [ 2112.237698][T10358] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11532'. [ 2112.324626][T10361] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.11533'. [ 2112.684907][T10365] delete_channel: no stack [ 2113.150597][T10377] netlink: 'syz.4.11539': attribute type 10 has an invalid length. [ 2113.158852][T10377] netlink: 55 bytes leftover after parsing attributes in process `syz.4.11539'. [ 2113.448086][T10377] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2113.712141][T10377] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2114.001741][T10391] netlink: 'syz.2.11541': attribute type 10 has an invalid length. [ 2114.039568][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.496634][T10404] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11544'. [ 2116.603819][T10455] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11557'. [ 2116.728954][T10462] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.11558'. [ 2116.797626][T10462] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11558'. [ 2118.230828][T10494] netlink: 'syz.0.11567': attribute type 21 has an invalid length. [ 2118.883371][T10508] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.11571'. [ 2119.093036][T10510] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11570'. [ 2119.384454][T10522] can: request_module (can-proto-5) failed. [ 2119.409657][T10521] can: request_module (can-proto-5) failed. [ 2121.059910][T10550] netlink: 'syz.2.11578': attribute type 21 has an invalid length. [ 2121.473556][T10565] device syzkaller0 entered promiscuous mode [ 2122.095712][T10588] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11589'. [ 2125.386757][T10589] device syzkaller0 entered promiscuous mode [ 2126.307415][T10644] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 2126.888799][T10663] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11607'. [ 2128.137774][T10684] netlink: 'syz.3.11614': attribute type 10 has an invalid length. [ 2128.201675][T10684] device macvlan0 entered promiscuous mode [ 2128.325809][T10684] team0: Port device macvlan0 removed [ 2128.366404][T10684] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2128.380044][T10686] netlink: 'syz.3.11614': attribute type 13 has an invalid length. [ 2128.397956][T10686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11614'. [ 2128.442630][T10686] syz_tun: refused to change device tx_queue_len [ 2128.460130][T10686] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2128.527415][T10700] netlink: 'syz.4.11617': attribute type 2 has an invalid length. [ 2128.581012][T10700] device 0 entered promiscuous mode [ 2128.605616][T10699] netlink: 'syz.2.11618': attribute type 10 has an invalid length. [ 2128.656322][T10699] team0: Device vxcan1 is of different type [ 2128.906866][T10709] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11620'. [ 2129.116373][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11624'. [ 2129.385162][T10732] netlink: 'syz.4.11629': attribute type 10 has an invalid length. [ 2129.871259][T10739] netlink: 'syz.2.11630': attribute type 25 has an invalid length. [ 2129.897570][T10739] netlink: 'syz.2.11630': attribute type 28 has an invalid length. [ 2130.120508][T10748] netlink: 'syz.4.11633': attribute type 10 has an invalid length. [ 2130.378550][T10768] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11636'. [ 2131.528671][T10805] netlink: 'syz.0.11647': attribute type 16 has an invalid length. [ 2131.549956][T10805] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11647'. [ 2131.559176][T10805] IPv6: ADDRCONF(NETDEV_CHANGE): Q6`Ҙ: link becomes ready [ 2131.626902][T10810] netlink: 'syz.3.11648': attribute type 15 has an invalid length. [ 2131.657980][T10810] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11648'. [ 2131.771023][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11650'. [ 2131.888320][T10823] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.11653'. [ 2132.536429][T10843] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11657'. [ 2133.284647][T10851] validate_nla: 2 callbacks suppressed [ 2133.284670][T10851] netlink: 'syz.0.11659': attribute type 39 has an invalid length. [ 2133.697283][T10857] device veth1_macvtap left promiscuous mode [ 2134.339450][T10868] netlink: 'syz.0.11665': attribute type 25 has an invalid length. [ 2134.404811][T10868] netlink: 'syz.0.11665': attribute type 28 has an invalid length. [ 2135.270276][T10897] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11671'. [ 2136.138638][T10901] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11683'. [ 2136.455899][T10919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11680'. [ 2136.478144][T10918] netlink: 'syz.4.11680': attribute type 12 has an invalid length. [ 2136.488705][T10918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11680'. [ 2136.665439][T10926] netlink: 'syz.4.11682': attribute type 10 has an invalid length. [ 2136.673983][T10926] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.11682'. [ 2136.787215][T10929] sctp: [Deprecated]: syz.0.11684 (pid 10929) Use of int in max_burst socket option deprecated. [ 2136.787215][T10929] Use struct sctp_assoc_value instead [ 2136.822933][T10929] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11684'. [ 2137.349118][T10945] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11690'. [ 2137.787574][T10960] __sock_release: fasync list not empty! [ 2137.907361][T10962] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11703'. [ 2138.132333][T10964] netlink: 'syz.4.11695': attribute type 3 has an invalid length. [ 2138.152920][T10964] netlink: 'syz.4.11695': attribute type 1 has an invalid length. [ 2138.173271][T10964] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.11695'. [ 2138.257081][T10971] device bridge_slave_1 left promiscuous mode [ 2138.269985][T10971] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.292783][T10971] device bridge_slave_0 left promiscuous mode [ 2138.300085][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.696501][T10982] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11700'. [ 2138.726446][T10980] netlink: 'syz.3.11699': attribute type 10 has an invalid length. [ 2139.190661][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11705'. [ 2139.452983][T11006] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11708'. [ 2139.681200][T11013] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11711'. [ 2140.037630][T11015] wlan1: mtu greater than device maximum [ 2140.325229][T11016] device syzkaller0 entered promiscuous mode [ 2140.643830][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11717'. [ 2141.703615][T11051] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11720'. [ 2143.133866][T11038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11717'. [ 2143.143628][T11045] netlink: 'syz.3.11718': attribute type 10 has an invalid length. [ 2143.484718][T11051] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2143.510316][T11057] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11722'. [ 2143.719058][T11067] netlink: 'syz.4.11726': attribute type 17 has an invalid length. [ 2143.755034][T11061] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11725'. [ 2143.774832][T11069] netlink: 'syz.4.11726': attribute type 17 has an invalid length. [ 2143.799613][T11069] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11726'. [ 2143.829677][T11069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2143.882503][T11069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2144.249735][T11091] netlink: 'syz.0.11733': attribute type 13 has an invalid length. [ 2144.267608][T11091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11733'. [ 2144.294179][T11091] syz_tun: refused to change device tx_queue_len [ 2144.311134][T11091] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2144.335176][T11096] netlink: 'syz.1.11732': attribute type 17 has an invalid length. [ 2144.362525][T11096] netlink: 'syz.1.11732': attribute type 16 has an invalid length. [ 2144.429609][T11096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11732'. [ 2145.077314][T11105] netlink: 'syz.3.11738': attribute type 2 has an invalid length. [ 2145.234703][T11105] device 0 entered promiscuous mode [ 2145.446577][T13540] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2145.454938][T13540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2145.463665][T13540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2145.472267][T13540] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2145.492027][T13540] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2145.500077][T13540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2145.792453][T11112] chnl_net:caif_netlink_parms(): no params data found [ 2146.054345][T11123] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11739'. [ 2146.067885][T11122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11739'. [ 2146.085903][T11123] openvswitch: netlink: Flow key attr not present in new flow. [ 2146.106847][T11122] openvswitch: netlink: Flow key attr not present in new flow. [ 2146.125190][T11112] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.134562][T11112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2146.146599][T11112] device bridge_slave_0 entered promiscuous mode [ 2146.159240][T11112] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.169484][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2146.185340][T11112] device bridge_slave_1 entered promiscuous mode [ 2146.376459][T11131] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.11743'. [ 2146.582641][T11112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2146.605075][T11133] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11741'. [ 2146.659257][T11112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2146.713435][T11112] team0: Port device team_slave_0 added [ 2146.736749][T11112] team0: Port device team_slave_1 added [ 2146.858795][T11112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2146.883131][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.932792][T11112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2146.946205][T11112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2146.953512][T11112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2146.994409][T11112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2147.234519][T11112] device hsr_slave_0 entered promiscuous mode [ 2147.260066][T11112] device hsr_slave_1 entered promiscuous mode [ 2147.287481][T11112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2147.316968][T11112] Cannot create hsr debugfs directory [ 2147.474527][ T7656] device .*! left promiscuous mode [ 2147.579719][T11114] Bluetooth: hci6: command 0x0409 tx timeout [ 2147.623376][ T7656] device 0 left promiscuous mode [ 2147.773764][T11144] device syzkaller0 entered promiscuous mode [ 2148.007303][T13540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2148.017776][T13540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2148.026025][T13540] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2148.035016][T13540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2148.043023][T13540] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2148.050556][T13540] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2149.659932][T11114] Bluetooth: hci6: command 0x041b tx timeout [ 2150.046490][ T7656] tipc: Left network mode [ 2150.141505][T11114] Bluetooth: hci3: command 0x0409 tx timeout [ 2150.981900][T11198] netlink: 'syz.3.11757': attribute type 10 has an invalid length. [ 2151.003819][T11198] __nla_validate_parse: 1 callbacks suppressed [ 2151.003836][T11198] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.11757'. [ 2151.289745][T11205] device syzkaller0 entered promiscuous mode [ 2151.315986][T11205] device syzkaller0 left promiscuous mode [ 2151.389731][T11205] device syzkaller0 entered promiscuous mode [ 2151.410927][T11164] chnl_net:caif_netlink_parms(): no params data found [ 2151.534376][T11213] delete_channel: no stack [ 2151.545194][T11213] delete_channel: no stack [ 2151.553712][T11112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2151.612899][T11112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2151.667957][T11112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2151.739711][T11114] Bluetooth: hci6: command 0x040f tx timeout [ 2151.780904][T11112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2151.943448][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.954425][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.964506][T11164] device bridge_slave_0 entered promiscuous mode [ 2152.000428][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.012327][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.030255][T11164] device bridge_slave_1 entered promiscuous mode [ 2152.219716][T11114] Bluetooth: hci3: command 0x041b tx timeout [ 2152.590569][T11164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.816182][T11247] netlink: 'syz.3.11765': attribute type 3 has an invalid length. [ 2152.840914][T11247] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11765'. [ 2152.914800][T11164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2153.005688][ T7656] device veth0_to_team left promiscuous mode [ 2153.020744][ T7656] : port 1(veth0_to_team) entered disabled state [ 2153.059342][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2153.076466][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2153.116389][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2153.137541][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2153.148697][ T7656] device bridge_slave_0 left promiscuous mode [ 2153.159205][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.197559][ T7656] device veth1_vlan left promiscuous mode [ 2153.829783][T11114] Bluetooth: hci6: command 0x0419 tx timeout [ 2154.219060][ T7656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2154.309656][T13540] Bluetooth: hci3: command 0x040f tx timeout [ 2154.317611][ T7656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2154.676911][ T7656] bond0 (unregistering): Released all slaves [ 2154.806349][T11254] netlink: 'syz.1.11767': attribute type 21 has an invalid length. [ 2154.817627][T11254] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.11767'. [ 2154.843162][T11164] team0: Port device team_slave_0 added [ 2154.913433][T11164] team0: Port device team_slave_1 added [ 2154.949732][T11112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2154.997283][T11164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.069253][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.139680][T11164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.204810][T11164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.223745][T11164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.331204][T11164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2155.376935][T27203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2155.394390][T27203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2155.431191][T11112] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.524733][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2155.540546][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2155.575687][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.582888][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.619952][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2155.648051][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2155.670575][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.677759][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2155.734984][T11164] device hsr_slave_0 entered promiscuous mode [ 2155.764654][T11164] device hsr_slave_1 entered promiscuous mode [ 2155.785552][T11164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2155.815314][T11164] Cannot create hsr debugfs directory [ 2155.852993][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2155.882121][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2155.910921][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2155.967758][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2156.004423][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2156.066911][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2156.090502][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2156.141437][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2156.169207][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2156.195434][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2156.272555][T11112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2156.303564][T11112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2156.332782][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2156.370840][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2156.380127][T13540] Bluetooth: hci3: command 0x0419 tx timeout [ 2156.810754][T11164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2156.864521][T11164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2156.908071][T11164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2156.937533][T11164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2157.031705][T11325] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2157.123231][T11325] netlink: 6 bytes leftover after parsing attributes in process `syz.1.11782'. [ 2157.171151][T11325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2157.203007][T11325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2157.466464][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2157.518146][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2157.536457][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2157.587406][T11164] 8021q: adding VLAN 0 to HW filter on device team0 [ 2157.619450][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2157.649005][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2157.683448][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.690687][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2157.710746][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2157.758677][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2157.794356][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2157.814985][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.822245][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2157.855965][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2157.874747][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2157.883956][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2157.896794][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2157.916253][T11112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.934010][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2157.953096][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2157.989215][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2158.018953][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2158.052667][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2158.075962][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2158.102279][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2158.133537][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2158.153019][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2158.176564][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2159.211840][T11367] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11787'. [ 2159.261360][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2159.268876][ T7667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2159.345556][T11164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2159.452503][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2159.490640][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2159.585414][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2159.628075][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2159.644437][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2159.673400][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2159.713338][T11112] device veth0_vlan entered promiscuous mode [ 2159.775975][T11112] device veth1_vlan entered promiscuous mode [ 2159.868069][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2159.912174][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2159.958926][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2159.978608][ T5396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2159.994004][T11112] device veth0_macvtap entered promiscuous mode [ 2160.033689][T11112] device veth1_macvtap entered promiscuous mode [ 2160.423274][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.429738][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.497058][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2160.524259][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2160.556744][T11112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2160.566939][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2160.586175][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2160.634178][T11112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2160.667438][T11112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2160.709037][T11112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2160.745695][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2160.767052][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2160.838835][T11112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.858308][T11112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.878012][T11112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.897021][T11112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2161.220783][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.259405][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.297430][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2161.353727][ T3681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.374023][ T3681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.417481][T27203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2161.782602][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2161.795277][T11431] netlink: 184 bytes leftover after parsing attributes in process `syz.4.11736'. [ 2161.815919][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2161.868655][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2161.900639][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2161.928189][T11164] device veth0_vlan entered promiscuous mode [ 2161.948226][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2161.997202][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2162.031329][T11164] device veth1_vlan entered promiscuous mode [ 2162.136046][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2162.155086][T11440] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.11800'. [ 2162.172023][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2162.213359][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2162.234562][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2162.266593][T11164] device veth0_macvtap entered promiscuous mode [ 2162.286153][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2162.297705][T11440] netlink: zone id is out of range [ 2162.333792][T11164] device veth1_macvtap entered promiscuous mode [ 2162.350887][T11440] netlink: zone id is out of range [ 2162.388358][T11449] IPv6: ADDRCONF(NETDEV_CHANGE): Q6`Ҙ: link becomes ready [ 2162.420497][T11440] netlink: get zone limit has 8 unknown bytes [ 2162.449361][T11448] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11803'. [ 2162.473896][T11449] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2162.476986][T11448] openvswitch: netlink: Message has 6 unknown bytes. [ 2162.583908][T11164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.617693][T11164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.648651][T11164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2162.683124][T11164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.741589][T11164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2162.764097][T11164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.778615][T11164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.794126][T11164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2162.815620][T11164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2162.843385][T11164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2162.902929][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2162.916319][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2162.944656][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2162.961967][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2162.987724][T11164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.012377][T11164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.029325][T11164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.068101][T11164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.367980][ T3681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.402555][ T3681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.464364][T27199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2163.560153][T11471] netlink: 'syz.4.11807': attribute type 2 has an invalid length. [ 2163.576944][T27199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.604232][T27199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.618494][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2163.638182][T11471] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.11807'. [ 2164.431957][T11494] netlink: 'syz.0.11814': attribute type 6 has an invalid length. [ 2164.476203][T11494] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11814'. [ 2221.662538][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.668910][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2269.819832][T11114] Bluetooth: hci6: command 0x0406 tx timeout [ 2274.939647][T11114] Bluetooth: hci3: command 0x0406 tx timeout [ 2283.102942][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.109315][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.019767][ T28] INFO: task syz.2.11652:10824 blocked for more than 143 seconds. [ 2285.027645][ T28] Not tainted syzkaller #0 [ 2285.034071][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2285.042947][ T28] task:syz.2.11652 state:D stack:24400 pid:10824 ppid:2717 flags:0x00004002 [ 2285.052238][ T28] Call Trace: [ 2285.055561][ T28] [ 2285.058539][ T28] __schedule+0x107f/0x4030 [ 2285.064141][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 2285.069244][ T28] ? __sched_text_start+0x8/0x8 [ 2285.077419][ T28] ? task_work_cancel+0xa1/0x220 [ 2285.082584][ T28] ? task_work_cancel_func+0x210/0x210 [ 2285.088189][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2285.094034][ T28] schedule+0xb9/0x180 [ 2285.098962][ T28] ? _free_event+0x10d/0x1050 [ 2285.104815][ T28] _free_event+0x176/0x1050 [ 2285.110877][ T28] perf_event_release_kernel+0x7c4/0x850 [ 2285.116673][ T28] ? __might_sleep+0xd0/0xd0 [ 2285.124618][ T28] ? calc_timer_values+0x410/0x410 [ 2285.131394][ T28] ? __might_sleep+0xd0/0xd0 [ 2285.136133][ T28] ? perf_mmap+0x1470/0x1470 [ 2285.143849][ T28] perf_release+0x37/0x40 [ 2285.148332][ T28] __fput+0x20a/0x8b0 [ 2285.152540][ T28] task_work_run+0x1d0/0x260 [ 2285.157280][ T28] ? task_work_cancel+0x220/0x220 [ 2285.162550][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 2285.168628][ T28] do_exit+0x9d5/0x2570 [ 2285.173122][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2285.179258][ T28] ? put_task_struct+0x80/0x80 [ 2285.188955][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2285.196591][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 2285.204773][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2285.212578][ T28] do_group_exit+0x229/0x2e0 [ 2285.217322][ T28] ? _raw_spin_unlock_irq+0x25/0x40 [ 2285.225365][ T28] get_signal+0x1259/0x1340 [ 2285.230869][ T28] arch_do_signal_or_restart+0xc4/0x1310 [ 2285.236662][ T28] ? __sched_text_start+0x8/0x8 [ 2285.241754][ T28] ? lock_chain_count+0x20/0x20 [ 2285.246751][ T28] ? preempt_schedule_irq+0xe6/0x160 [ 2285.252198][ T28] ? preempt_schedule_irq+0xe6/0x160 [ 2285.258659][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2285.271161][ T28] ? get_sigframe_size+0x10/0x10 [ 2285.276259][ T28] ? lock_chain_count+0x20/0x20 [ 2285.284056][ T28] ? rcu_is_watching+0x11/0xa0 [ 2285.289016][ T28] exit_to_user_mode_loop+0x70/0x110 [ 2285.296564][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 2285.305002][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 2285.312699][ T28] do_syscall_64+0x58/0xa0 [ 2285.317257][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2285.325451][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2285.331703][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2285.337755][ T28] RIP: 0033:0x7f361459de99 [ 2285.348971][ T28] RSP: 002b:00007f3615454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2285.359063][ T28] RAX: 000000000000005c RBX: 00007f3614825fa0 RCX: 00007f361459de99 [ 2285.368335][ T28] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 000000000000000c [ 2285.377777][ T28] RBP: 00007f3614633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2285.385948][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2285.394171][ T28] R13: 00007f3614826038 R14: 00007f3614825fa0 R15: 00007ffcce349188 [ 2285.403143][ T28] [ 2285.406327][ T28] [ 2285.406327][ T28] Showing all locks held in the system: [ 2285.416786][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2285.424756][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2285.438176][ T28] 1 lock held by rcu_tasks_trace/13: [ 2285.445027][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2285.458871][ T28] 1 lock held by khungtaskd/28: [ 2285.465271][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2285.477804][ T28] 1 lock held by klogd/3629: [ 2285.482594][ T28] 2 locks held by getty/4033: [ 2285.487392][ T28] #0: ffff88814cba2098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2285.497460][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2285.508065][ T28] [ 2285.510560][ T28] ============================================= [ 2285.510560][ T28] [ 2285.519084][ T28] NMI backtrace for cpu 1 [ 2285.523456][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2285.530709][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2285.540802][ T28] Call Trace: [ 2285.544120][ T28] [ 2285.547114][ T28] dump_stack_lvl+0x188/0x24e [ 2285.551851][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 2285.557186][ T28] ? show_regs_print_info+0x12/0x12 [ 2285.562444][ T28] ? load_image+0x410/0x410 [ 2285.566994][ T28] ? vprintk_emit+0x59f/0x6a0 [ 2285.571758][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 2285.576942][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 2285.581954][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2285.588164][ T28] ? _printk+0xda/0x130 [ 2285.592370][ T28] ? load_image+0x410/0x410 [ 2285.596931][ T28] ? load_image+0x410/0x410 [ 2285.601487][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2285.607606][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2285.613781][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2285.619815][ T28] watchdog+0xf0e/0xf50 [ 2285.624046][ T28] ? watchdog+0x1ed/0xf50 [ 2285.628427][ T28] kthread+0x29d/0x330 [ 2285.632545][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2285.637617][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2285.642250][ T28] ret_from_fork+0x1f/0x30 [ 2285.646750][ T28] [ 2285.650549][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2285.655967][ C0] NMI backtrace for cpu 0 [ 2285.655978][ C0] CPU: 0 PID: 3629 Comm: klogd Not tainted syzkaller #0 [ 2285.655995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2285.656005][ C0] RIP: 0010:perf_trace_lock+0x33f/0x390 [ 2285.656029][ C0] Code: 40 0e 36 e0 45 4b c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 23 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 00 a2 9f 8c [ 2285.656044][ C0] RSP: 0018:ffffc900032a7360 EFLAGS: 00000046 [ 2285.656059][ C0] RAX: c7440e72833fd200 RBX: ffffe8ffffc36ed0 RCX: c7440e72833fd200 [ 2285.656073][ C0] RDX: ffffffff841a46b1 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 2285.656086][ C0] RBP: ffffc900032a7450 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 2285.656099][ C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: ffffe8ffffc36ed0 [ 2285.656112][ C0] R13: 1ffff92000654e74 R14: ffffffff8c9f9b20 R15: dffffc0000000000 [ 2285.656125][ C0] FS: 00007fcfbace1c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2285.656140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2285.656152][ C0] CR2: 0000555980596660 CR3: 000000007e604000 CR4: 00000000003506f0 [ 2285.656167][ C0] DR0: 0000000000000000 DR1: 0000000000000b6e DR2: 0000000000000000 [ 2285.656178][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2285.656188][ C0] Call Trace: [ 2285.656193][ C0] [ 2285.656204][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 2285.656225][ C0] ? stack_trace_save+0xf0/0xf0 [ 2285.656253][ C0] lock_release+0x8ad/0x920 [ 2285.656275][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 2285.656294][ C0] ? debug_check_no_obj_freed+0x471/0x520 [ 2285.656313][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 2285.656329][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 2285.656353][ C0] ? __rwlock_init+0x140/0x140 [ 2285.656371][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2285.656392][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 2285.656413][ C0] _raw_spin_unlock_irqrestore+0x6d/0x120 [ 2285.656433][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2285.656452][ C0] ? page_ext_put+0x98/0xb0 [ 2285.656536][ C0] ? free_zapped_rcu+0x1f0/0x1f0 [ 2285.656561][ C0] debug_check_no_obj_freed+0x471/0x520 [ 2285.656585][ C0] free_unref_page_prepare+0x2c3/0x9e0 [ 2285.656615][ C0] free_unref_page+0x2e/0x3f0 [ 2285.656641][ C0] qlist_free_all+0x76/0xe0 [ 2285.656661][ C0] kasan_quarantine_reduce+0x144/0x160 [ 2285.656680][ C0] __kasan_slab_alloc+0x1e/0x80 [ 2285.656706][ C0] slab_post_alloc_hook+0x4b/0x490 [ 2285.656724][ C0] ? slab_pre_alloc_hook+0x8c/0x300 [ 2285.656746][ C0] kmem_cache_alloc_node+0x1ad/0x310 [ 2285.656764][ C0] ? __alloc_skb+0xf9/0x7d0 [ 2285.656791][ C0] __alloc_skb+0xf9/0x7d0 [ 2285.656816][ C0] alloc_skb_with_frags+0xa7/0x710 [ 2285.656838][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 2285.656867][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 2285.656899][ C0] ? sock_kzfree_s+0x50/0x50 [ 2285.656918][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 2285.656935][ C0] ? __rwlock_init+0x140/0x140 [ 2285.656953][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 2285.656971][ C0] unix_dgram_sendmsg+0x5c1/0x16f0 [ 2285.656997][ C0] ? aa_sk_perm+0x81f/0x950 [ 2285.657018][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 2285.657038][ C0] ? aa_af_perm+0x340/0x340 [ 2285.657057][ C0] ? unix_dgram_poll+0x680/0x680 [ 2285.657077][ C0] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2285.657102][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2285.657126][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2285.657143][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 2285.657168][ C0] __sys_sendto+0x497/0x650 [ 2285.657194][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 2285.657234][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2285.657259][ C0] ? lock_chain_count+0x20/0x20 [ 2285.657286][ C0] __x64_sys_sendto+0xda/0xf0 [ 2285.657312][ C0] do_syscall_64+0x4c/0xa0 [ 2285.657334][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2285.657356][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2285.657380][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2285.657402][ C0] RIP: 0033:0x7fcfbae31407 [ 2285.657415][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 2285.657429][ C0] RSP: 002b:00007ffef8c63e70 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2285.657446][ C0] RAX: ffffffffffffffda RBX: 00007fcfbace1c80 RCX: 00007fcfbae31407 [ 2285.657459][ C0] RDX: 000000000000003a RSI: 00007ffef8c63fb0 RDI: 0000000000000003 [ 2285.657470][ C0] RBP: 00007ffef8c643e0 R08: 0000000000000000 R09: 0000000000000000 [ 2285.657480][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffef8c643f8 [ 2285.657491][ C0] R13: 00007ffef8c63fb0 R14: 000000000000001f R15: 00007ffef8c63fb0 [ 2285.657513][ C0] [ 2285.669754][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2285.669794][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2285.669847][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2285.669872][ T28] Call Trace: [ 2285.669900][ T28] [ 2285.669922][ T28] dump_stack_lvl+0x188/0x24e [ 2285.670014][ T28] ? memcpy+0x3c/0x60 [ 2285.670073][ T28] ? show_regs_print_info+0x12/0x12 [ 2285.670156][ T28] ? load_image+0x410/0x410 [ 2285.670251][ T28] panic+0x2d3/0x710 [ 2285.670306][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2285.670405][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2285.670467][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 2285.670570][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2285.670665][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2285.670762][ T28] watchdog+0xf4d/0xf50 [ 2285.670836][ T28] ? watchdog+0x1ed/0xf50 [ 2285.671036][ T28] kthread+0x29d/0x330 [ 2285.671111][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2285.671183][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2285.671244][ T28] ret_from_fork+0x1f/0x30 [ 2285.671342][ T28] [ 2285.680090][ T28] Kernel Offset: disabled [ 2286.240809][ T28] Rebooting in 86400 seconds..