last executing test programs: 2m41.920111339s ago: executing program 1 (id=1928): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)='0', 0x1}], 0x1}, 0x54f4e10222cdd2ec) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2m40.857562185s ago: executing program 1 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) 2m40.230183508s ago: executing program 1 (id=1937): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000, 0x106e, 0xa641}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x405}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) 2m39.713759375s ago: executing program 1 (id=1941): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) (fail_nth: 2) 2m36.325951444s ago: executing program 1 (id=1947): r0 = syz_clone(0x202000, &(0x7f0000000a80)="886f229aa47ed8af60f2a4bd66af5b7d49ad84d31ce105e9fac5aaaa3bfbe4f1ff61a07fb7c9de13485bc248644c4b36b9cb7c6bf063a056dc9d1c873976a754f16593e83b0c904add09d3e24a36866b2d4e03276c51110ed2b584f3b578629fe3901cc24baf699f7449d098422fa0492e939a790532", 0x76, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="fdd6c9e2f84a510c5a4a200cf7c552c6861e7fed205d4ae28cc7e6fc56bb3139f5e8e42a4fcaefa03d7a5ca8c07bf7e0903524202d6dc252cc384670a190c600996078ba9ea9d5c919b2490bab1d8ff21983be816ad89857a634afad69a30ccaaff571dfe629c41e537fd639f4de8df089be911c5edc77d92d101bc2d5417eb5c50a7c4da36c960c3a6e52e85a118545930bc109c5f36d5b51bf55c9a6eb1ff5ff9235cfd64a8308b0180fba7414de2105195fd7edb2412ac59798739f461c03fd960f2e996e797488d5a8d925ce03e0d36076") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfffffffc, 0x0, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208000f0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@union={0xf, 0x2, 0x0, 0x5, 0x1, 0x7f, [{0xb, 0x5, 0x2}, {0x3, 0x5}]}]}, {0x0, [0x2e]}}, &(0x7f0000000d00)=""/250, 0x3f, 0xfa, 0x1, 0x2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0x20, &(0x7f0000000fc0)={&(0x7f0000000ec0)=""/74, 0x4a, 0x0, &(0x7f0000000f40)=""/125, 0x7d}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4932, 0xc2, 0x1, 0x1, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r6}, 0x38) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001040), &(0x7f0000001080)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0x0, 0x7, 0x18}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x19, 0x2, &(0x7f0000000040)=@raw=[@generic={0x6, 0xc, 0x3, 0x3, 0x3}, @exit], &(0x7f0000000c80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', r2, @fallback=0x24, r4, 0x8, &(0x7f0000000e40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x7, 0x0, 0x38}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f0000001300)=[r6, r9, r10, r11, 0xffffffffffffffff, r12, r13, r15, 0x1, r16], &(0x7f0000001340)=[{0x1, 0x5, 0x1, 0x4}, {0x4, 0x3, 0xe, 0xa}], 0x10, 0x3726}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r17 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r18 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r17}, 0x8) write$cgroup_int(r18, &(0x7f00000001c0), 0xfffffdef) r19 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r19}, 0x8) 2m34.849347212s ago: executing program 1 (id=1950): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x400}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000053da0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000001c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000040c50900000000000007080000fffdffffbfa400000000000007040000f0ffffff54020000080000001822000000000000000000000000020000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001040), 0x1}, 0x0, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r6 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)="a5d9b0fe56ed6159bdc1afeca6b0154260f6", 0x12}, {&(0x7f0000001140)="00023c", 0x3}, {&(0x7f0000001180)="953f7cee561672c270b0f293c1d5d397193d94b509eb7b38444156d87ab9cdee2a80aff7210eb76774b44f63462b7ece012dc6e9bf56039fbc9a1e4873ccb058965f4f5f784ef0aa8be2f72391ed8ca2ded5af892032f3cf5628370f0ba2db1577965e06304ff18415a31d92398d2a064d9660f091ca27e8b5d268", 0x7b}, {&(0x7f0000001280)="52d16bccc1ad56da6e3f7215572ee1bdae5f729307ae56445b8e17f194d55bfa1a8549a720657a5a13a97e62b1", 0x2d}], 0x4, 0x0, 0x0, 0x1f000000}, 0x26008690) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 2m19.654282302s ago: executing program 32 (id=1950): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3075e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x5e02, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x400}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000053da0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000001c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9af8ff00000040c50900000000000007080000fffdffffbfa400000000000007040000f0ffffff54020000080000001822000000000000000000000000020000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001040), 0x1}, 0x0, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r6 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)="a5d9b0fe56ed6159bdc1afeca6b0154260f6", 0x12}, {&(0x7f0000001140)="00023c", 0x3}, {&(0x7f0000001180)="953f7cee561672c270b0f293c1d5d397193d94b509eb7b38444156d87ab9cdee2a80aff7210eb76774b44f63462b7ece012dc6e9bf56039fbc9a1e4873ccb058965f4f5f784ef0aa8be2f72391ed8ca2ded5af892032f3cf5628370f0ba2db1577965e06304ff18415a31d92398d2a064d9660f091ca27e8b5d268", 0x7b}, {&(0x7f0000001280)="52d16bccc1ad56da6e3f7215572ee1bdae5f729307ae56445b8e17f194d55bfa1a8549a720657a5a13a97e62b1", 0x2d}], 0x4, 0x0, 0x0, 0x1f000000}, 0x26008690) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 5.969912295s ago: executing program 5 (id=2597): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000580)="ba", 0x1}], 0x1}, 0x80) r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x28) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="57459f4a7ecbef07037edf7c2032a87b7d8f70162f81d786466eb34f07fb18fae7864aaefb9e51f71646e301b5aaa87d1cc6bdc4db6d30617c6484d5e48f89124b9de6e7a1db663a1c33894856412b7ceed021bdf8a2284591bbfcbd82b4436ffcff9bde46a8f3400eb37bf78b67bf0cd13e1963d1aa10ef8bc3c0fc8ed604fa5803c3a9151bcbec74efedd160f0fc845dd5936cc1e9981ae88a0e7b9b3a06ae15a9347c1d6aeff7859263e25eb9a7b8dca6bddfcbae9d00000000d1175e7c32882efb68658a341e026fa6de2f31015051c95e2c44cf685638da2da195241e3d947496d6f2da"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r3}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x35, 0x1, 0xc90d, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), &(0x7f00000004c0)=[0x0]}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, &(0x7f0000000900), &(0x7f0000000940)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x456, 0x0, 0x0, 0x2, 0x2e881f9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) 5.641129782s ago: executing program 5 (id=2601): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="bfeb010018000000000000007a0000007a000000070000000f0000000800000f02000000050000000200000002000000010000000200000a810000000504000001800000930e00000200000002000000d6ffffff0100000076688c3c0200000001000000ff000000060000000200000040000000000000000300000001000080030000001e060600000000000012030000000000002e5f5f612e00"], &(0x7f0000000300)=""/177, 0x9b, 0xb1, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map=r2, 0x2b, 0x1, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x2, 0x0, 0x3, 0x3, 0x9, 0xffffffffffffffff, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6}]}, &(0x7f00000005c0)='syzkaller\x00', 0x17c, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r2, 0x8, &(0x7f0000000600)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0xc, 0xd3c}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000680)=[r2, r2, r2, r2, r2], &(0x7f0000000880)=[{0x4, 0x1, 0x1, 0x1}, {0x4, 0x6, 0x4, 0xa}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x4, 0xc, 0x5}, {0x0, 0x5, 0x7, 0x2}, {0x1, 0x4, 0x5, 0x2}, {0x1, 0x3, 0xf, 0xa}, {0x5, 0x1, 0x4}, {0x4, 0x3, 0x1, 0x6}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a00)={r3, r4, 0x4, r3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0x20, &(0x7f0000000500)={&(0x7f0000000440)=""/115, 0x73, 0x0, &(0x7f00000004c0)=""/52, 0x34}}, 0x10) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) unlink(&(0x7f0000000ac0)='./file0\x00') 5.132171888s ago: executing program 3 (id=2606): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}, 0x8040) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x891c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.131513019s ago: executing program 2 (id=2607): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1051, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xf, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r2) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r4}, 0x8) sendmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r6}) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000340)=""/193, 0xc1}, 0x40010103) r8 = perf_event_open(0x0, 0x0, 0xb, r5, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.876014703s ago: executing program 3 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xe, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @generic={0x6, 0x1, 0xc, 0x8000, 0x1}, @generic={0x8, 0x4, 0x7, 0x7fff}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x5, 0xf0, &(0x7f0000000140)=""/240, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0xe, 0x1, 0x8f, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r3, 0x8) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r3, r0, 0x36, 0x2000, 0x0, @value=r6, @void, @void, @void, r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104e000000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 4.590519747s ago: executing program 5 (id=2611): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/251, 0xfb}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x10}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 4.560005379s ago: executing program 2 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) syz_clone(0x33e9ca56ff1aa4c6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 4.326434681s ago: executing program 4 (id=2614): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x9, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="61104093000000009500000000000000509cc95396f22eb33da4b4fcef2850abcef650f88f55028d35eab6bacd7cf66cd411c0bf1be08d2630b4257f0a1b560885174d7190c7e33a674c93f2b3f7e97e1652e05f379d61a5125e9e217b42c73d8f68ed35d5922a631ed45bfeec6f"], &(0x7f0000000200)='GPL\x00'}, 0x94) 3.896131784s ago: executing program 4 (id=2615): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2.032215573s ago: executing program 3 (id=2616): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000001d71184c000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=ANY=[], 0x1db0}, 0x50) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) 2.029099073s ago: executing program 0 (id=2617): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002a40)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffe}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) (async) r3 = perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) write$cgroup_subtree(r2, 0x0, 0xc54c295c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x83) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.950179277s ago: executing program 4 (id=2618): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c002, 0x8000ac5d, 0x0, 0x9, 0xbf94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x4, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x3b) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x2, [{0x7, 0xd, "a574ace24a24d6c02bc530"}, {0x0, 0xa, "36f741f789e19b77"}, {0x5, 0xc, "0abce4b1f363009a6e57"}]}]}}}], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000711844000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup, r5}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfff}, 0x0, 0x400000, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b0800", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) 1.914167739s ago: executing program 5 (id=2619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000000000000000fcd42763cd3512297f5484972d8630e71d462446e3aaa682790dbc965c5f8e3867d3c38680ffa353a5a3310dca667a52a8dcaa3c3babd1f82351b5ee81f58d4d91a1bfd612415b46b27b2f87d1df2cd73e96630fb4f6fac44c1ff52cf651a08b847bdadfe8a1cb76d08f1d59790c38333a884bce660c42968f18bf7597ba32fdff8a348baa7ed0d022718f6b5711eeceb0eb6bfc48fd92639e020dc2a9cafc9c77e0e65e5e41052e83cf0ff7df329615ffda61f7", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)=r0}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xed, &(0x7f00000014c0)=""/4086, 0x0, 0x1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000251a00d0f80000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018150000", @ANYRES32=r3, @ANYBLOB="000000000000000018430000fcffffff0000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004d0000008500000006000000182b00", @ANYRES32=r4, @ANYBLOB="0000000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x7, r5, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r6], &(0x7f0000000680)=[{0x0, 0x3, 0x8, 0x6}, {0x5, 0x5, 0x2}, {0x3, 0x1, 0x1, 0xb}, {0x0, 0x2, 0xf, 0x7}, {0x3, 0x3, 0x4, 0xa}, {0x4, 0x1, 0x3, 0x8}], 0x10, 0x5e5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x4004000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, r10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x11, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x59c, 0x31, &(0x7f0000000280)=""/49, 0x0, 0x62, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000009c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0xf, 0xc6, 0xeb}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x4, 0x1, 0x4}], 0x10, 0x8}, 0x94) r11 = socket$kcm(0xa, 0x6, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x10d, 0xb, &(0x7f0000000000)=r12, 0x4) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4008744b, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r13 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.868231711s ago: executing program 2 (id=2620): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}, 0x8040) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x891c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.761255807s ago: executing program 4 (id=2621): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)='0', 0x1}], 0x1}, 0x54f4e10222cdd2ec) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 1.664744712s ago: executing program 0 (id=2622): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x8d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711091000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba754118907000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 1.240654704s ago: executing program 2 (id=2623): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xb, &(0x7f0000000100), 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 1.040260795s ago: executing program 4 (id=2624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (rerun: 64) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4e29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef44c94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75be4b09000000000000c00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cfd261be12697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22836dd4cab25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30c1d36e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338f181c7f10f5420f40fd0ec51690c9e8d8b6eda5aabc893d1653758fd43f5cabb9b821119bdcce3ddbfd6811800337992c3356eec5adba029b54778c026ad93102cce85ed403801deca385d4b493d4cdc770c00e3a50ab5ec88443dde28a2d0ef201f589a2d6e841eb753d4b96e0b110e868aed32e396ea07961e7dd9e31854235ae13564b24c1d2d615e4945480e39a5829c9417991c89e752579bad373cef6841be3360d938afcead4ede350d602fced5edf4e20892f960df47a6be843e54a10ba7432ca660458ce2fbdf9d2b7fc1fb31bb59ab653e3b9d1f69a7cbbbed40ac88e4e4587b72023e8790b8aff00"/1305, 0x519}, {&(0x7f0000001b80)="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", 0x52b}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) (async) r5 = perf_event_open(0x0, 0xffffffffffffffff, 0x6, r0, 0xb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_to_bond\x00', 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xb, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1000000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x76, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x66) (rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 1.013692946s ago: executing program 3 (id=2625): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) (async, rerun: 64) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (rerun: 64) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="9f5206133493a4e4a4423c3489a032a7823a31b3cd11172597fc1d05f18fd31b2eaac884f117506cec3242d13be39eaf196ef9ddd5e0c01a15015e1582d02f577e6f85f4cb8a2e8b95d243d290d5085ff7780e530ceff6f09977cad229a13927dc177a0c7bfab0e26f1ae5b24381971df168d8db984588c7e1a056369f07debcaeeed52b41794fc378c421ac7f292d78cd3e1e88", 0x94}, {&(0x7f0000000380)="032a6291c5db7d2cf50d728d759819bd76f85ca7abbf45c0564c9aea2e48f8beabfc9ac8e33f22fbe00cd5980e3b211a140a457eb30c2981fe6c691f1a3876e6bf4e92e949899399f5e774a5a9f3b498e4868153f3229bac778408f21b95a2afd10d2d6c20030b3d84c12b45593423f44ca27e84e5e47a59e19cbc85435699d744a02608e118c6194a90e9b9", 0x8c}], 0x2, &(0x7f0000000500)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1798}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xfd, [@multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @local]}, @timestamp_prespec={0x44, 0x14, 0x8d, 0x3, 0x3, [{@empty, 0xfffffeff}, {@multicast2, 0x9}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @timestamp={0x44, 0x20, 0x7d, 0x0, 0x5, [0x0, 0x1, 0x9, 0x80000001, 0x4, 0x1, 0x200]}, @lsrr={0x83, 0xb, 0x9c, [@dev={0xac, 0x14, 0x14, 0x2f}, @remote]}, @end, @end, @generic={0x86, 0x11, "0356c9a72f9a5aa8a483eda3e7a359"}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa7d5}}], 0x120}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async, rerun: 32) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r5, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r6, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x20, 0x3, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000800)='syzkaller\x00', 0xa0000000, 0x18, &(0x7f0000000840)=""/24, 0x40f00, 0x54, '\x00', r9, @netfilter, r7, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x5, 0x9, 0x80000001}, 0x10, r10, r7, 0x1, 0x0, &(0x7f0000000cc0)=[{0x1, 0x1, 0x7, 0x5}], 0x10, 0x4}, 0x94) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=0xffffffffffffffff, 0xa, 0x1, 0x7f, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0}, 0x40) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, r6, 0x1d, 0x2000, 0x0, @value=r7, @void, @void, @void, r12}, 0x20) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async, rerun: 32) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[], 0x0, 0xcc, 0x0, 0x1, 0x10, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r13, 0x25, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) (async) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex=r13, r2, 0x25, 0x2004, r3, @value=r15, @void, @void, @void, r12}, 0x20) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000300)='GPL\x00') (rerun: 32) recvmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10042) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r16, 0x0, 0x5d, 0x26, &(0x7f0000000400)="3e7657cd5ae01d038031b14d1db240613a770925c1ddbe0b261ad4cf9ce014831d7746bcefb93e02d02a24bc08f2e5f32627ab5a7a9b490c6e1333152a1872e5b8743920fc006c6e44edd23fcf3bd371c742dc7644419f13f415363aab0fa50016", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x42002}, 0x3e) 848.353925ms ago: executing program 2 (id=2626): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081000000e3bd6e00000000000b0029002d101800ba808000"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081000000e3bd6e00000000000b0029002d101800ba808000"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 847.574815ms ago: executing program 0 (id=2627): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="90ab28c6071d95454fd4d2f47295cf21071f312294e0f8296dae3fa3d54bdc9482fc52ce8f4997646af0b89baa97553cfdd42d76f826f7fb54cd91411ee859f7a7c26706a10f3c43f9e21e64b03b4360ea7946eb", 0x54}, {&(0x7f0000000200)="a66164890c5b813f6507f3fd4e140d4e513d25153809a08ac61e5af9679997eafb9bcd7040ff278063182c9edc4ee84bf70fe220e0e5f7e615da246a960152ea71954cd7f9007768330e2250aa09f5baf430c019d7d7d2aaec79eb1cc1b31918ccd247e3318a13725d494f6243801ebb29ec086057dc9162d735caded53feededc9f2bba3dc427410bd5d3914d19d43009ae8c788456c586ab5a96f535422a456f2f51d510630d0571eaa04e688bf3647e4c51928bdaaf3fdc42b775d7fe0d82405b85746a38a338d9426d162a920c95e31ebfc525eba3e27decc4104b9d770d9b4e4e", 0xe3}, {&(0x7f00000006c0)="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", 0x1000}], 0x3}, 0xd912d167a0fe8160) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xba, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcfa062c73c910b990bdf5853b6b969481f8932b02b172a0c507c540fd87034c4346046bebdd5541d58ea7d22b904a59942127b6908c699d71e45b3274302bd303fb78762ec841a49b78bf16b0d52d3d92803b802f0f07c544010de828ba322b51d81dce1ef3188e18bc478ac032a5efd03530cf8bb22348f99b4a08dd7d5cc9aa697be4fae93002ad4fc918f1c9c8cef549b30cb9856cca4a18525ff974addbcb83409e20aa2c650b755876a92", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 797.382048ms ago: executing program 5 (id=2628): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2ba, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000040c00000002000000f00000003e4a482a1cb394820000186b7af43b5c7087b9bf73f2e6120d"], 0x0, 0x26}, 0x28) 719.693892ms ago: executing program 3 (id=2629): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10147) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 616.097017ms ago: executing program 0 (id=2630): r0 = socket$kcm(0x10, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x3, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) 613.639807ms ago: executing program 2 (id=2631): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="09be360cca18ac96619bbe17c34691e828fe9ad67e05569b29608c3917048797d436d8248d49f75412342c44e9d1c695b864f59cb830f82e76ac6523985719bd884ff7a5f47260df71390d97d5dcc2f6a5b3d401455c4cbe920d04520bced70ca82ea009280fc199119380055fdc767e53add2ff5336b37ff92ac48d84cdca8aa6e73507225ee19e755af376c229239c61d19078709e383a05e183ff175f8253ee209172dfac9cae2c95a2864fed5cd78de43be130306e7ab9210edce0581e780707c80c065d5817ca958ea2570e755bafc36688dc7445ec040c8ba0540168de9623", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018230000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x008\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000bad8810200000000000000ec3b14f87b000000000000000000"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) 520.259042ms ago: executing program 4 (id=2632): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xf9, 0x81, 0x6, 0x0, 0x3, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_config_ext={0xfffffffffffffb16, 0x80000000000000}, 0x400, 0x6, 0x7, 0x8, 0x0, 0x1ff, 0x9, 0x0, 0x1ff, 0x0, 0x401}, 0xffffffffffffffff, 0x5, r0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8980004000078", 0x14}], 0x1}, 0x40000) 201.218539ms ago: executing program 0 (id=2633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}, 0x8040) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x891c, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 161.210491ms ago: executing program 3 (id=2634): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)='0', 0x1}], 0x1}, 0x54f4e10222cdd2ec) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 251.42µs ago: executing program 0 (id=2635): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)}, 0x10140) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="62e8eaee3d2c639f0d9f6384d3dbe98fed6317ce6266132a506d4aacfc8778ec513c717e7f37661c7079f1ffffffffffffec264e32ce3d93994d4c3babbc192ddf645561ca27ea730537b1f90ccacf62346a0d596c2c3cbac515f188b4a532cda26037470d18efa166dcf896ba94c2af2f5d989f1b5ac566046ccf4a41318132bafe3ac07cd1f060291a997d52491f2b4d58a8858d7535bd3c788fe46690b12b80ab1341bea667f81a0d5d2e78f9f58cceda4bf4580d6e276eeeada6ca6de3"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000b0000000850009000f0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={0x1, &(0x7f00000003c0)="aa344749a5dd327bff718775ac9b09c85caa23a89be034672e5fd66d4df4cbe7b5a48525ccbbd55e671c68b7175d4e2eca88b0ac91af55356562d962e36ab04e404168362d219732c70c8f8492f8f6f85051d1d0c08480fcbfeb2472683ac3ea2b3f5da3e0b4f4fa974a59cc83d95ba64dd1922a800c55332d6a2e8a9a0d2f78de439d5391330a6589c052bac4f65c7af40c973d3d9833e42b7130a46c4980eb67e61a9023aabddcd8d2ee90756bae676f5ba34cf08b64f6aa79"}, 0x20) 0s ago: executing program 5 (id=2636): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0xae, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x800, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) kernel console output (not intermixed with test programs): , switching to perfect channel medium [ 131.830106][ T5139] netlink: 'syz.2.214': attribute type 29 has an invalid length. [ 131.861665][ T5139] netlink: 'syz.2.214': attribute type 29 has an invalid length. [ 131.923204][ T5144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'. [ 131.949580][ T5139] netlink: 'syz.2.214': attribute type 29 has an invalid length. [ 132.410113][ T5157] netlink: 144 bytes leftover after parsing attributes in process `syz.2.219'. [ 132.563275][ T5163] netlink: 'syz.4.221': attribute type 25 has an invalid length. [ 132.584670][ T5163] netlink: 'syz.4.221': attribute type 28 has an invalid length. [ 132.972665][ T5170] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 133.007357][ T5170] team0: Device syz_tun is up. Set it down before adding it as a team port [ 133.068930][ T5174] netlink: 'syz.0.223': attribute type 25 has an invalid length. [ 133.082585][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.089940][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.250062][ T5158] delete_channel: no stack [ 136.094215][ T5218] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.131761][ T5218] device syzkaller0 entered promiscuous mode [ 136.172554][ T5228] netlink: 'syz.0.238': attribute type 25 has an invalid length. [ 139.598295][ T5285] netlink: 'syz.0.253': attribute type 3 has an invalid length. [ 139.612274][ T5285] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 139.625607][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.253'. [ 141.734462][ T5308] netlink: 'syz.1.259': attribute type 21 has an invalid length. [ 141.806248][ T5308] netlink: 164 bytes leftover after parsing attributes in process `syz.1.259'. [ 142.599050][ T5324] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 142.749570][ T5327] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.265'. [ 142.810930][ T5324] team0: Device veth1_macvtap failed to register rx_handler [ 142.989216][ T5340] netlink: 'syz.3.267': attribute type 3 has an invalid length. [ 143.059338][ T5340] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.267'. [ 143.096319][ T5340] netlink: 'syz.3.267': attribute type 2 has an invalid length. [ 143.123047][ T5340] netlink: 10 bytes leftover after parsing attributes in process `syz.3.267'. [ 143.282773][ T5352] netlink: 'syz.0.270': attribute type 25 has an invalid length. [ 143.928058][ T5356] netlink: 'syz.1.272': attribute type 9 has an invalid length. [ 143.979416][ T5356] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.272'. [ 144.107988][ T5378] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 144.685096][ T5378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.178441][ T5401] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 145.206763][ T5401] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.281'. [ 145.248442][ T5401] netlink: 64819 bytes leftover after parsing attributes in process `syz.0.281'. [ 147.147067][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 148.343772][ T5424] netlink: 'syz.2.286': attribute type 25 has an invalid length. [ 149.055052][ T5438] Driver unsupported XDP return value 0 on prog (id 345) dev N/A, expect packet loss! [ 150.025728][ T5452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.294'. [ 150.070490][ T5463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.297'. [ 150.140496][ T5462] device macvlan1 entered promiscuous mode [ 151.790677][ T5473] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 151.804844][ T5473] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.302'. [ 151.943847][ T5477] netlink: 'syz.3.303': attribute type 3 has an invalid length. [ 151.951844][ T5477] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.303'. [ 151.967463][ T5477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.303'. [ 151.978451][ T5477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.303'. [ 152.026097][ T5477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.303'. [ 152.085887][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 152.124405][ T5481] netlink: 'syz.4.304': attribute type 25 has an invalid length. [ 152.156465][ T5477] raw_sendmsg: syz.3.303 forgot to set AF_INET. Fix it! [ 152.845829][ T5509] netlink: 'syz.4.309': attribute type 11 has an invalid length. [ 153.003462][ T5509] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.309'. [ 153.470925][ T5498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.740493][ T5523] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 153.818651][ T5523] device hsr0 entered promiscuous mode [ 153.866309][ T5523] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.951836][ T5529] netlink: 'syz.3.314': attribute type 27 has an invalid length. [ 154.146592][ T5534] netlink: 'syz.4.318': attribute type 29 has an invalid length. [ 154.547651][ T5529] bond0: (slave bond_slave_0): Releasing backup interface [ 154.953669][ T5534] netlink: 'syz.4.318': attribute type 29 has an invalid length. [ 155.355455][ T5553] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 155.355726][ T5560] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 155.386552][ T5552] netlink: 'syz.3.322': attribute type 29 has an invalid length. [ 155.442327][ T5552] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.322'. [ 155.763821][ T5566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.326'. [ 155.915005][ T5566] bridge0: port 3(veth0_vlan) entered blocking state [ 155.921951][ T5566] bridge0: port 3(veth0_vlan) entered disabled state [ 155.952514][ T5566] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 157.012577][ T5594] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 157.144565][ T5595] validate_nla: 7 callbacks suppressed [ 157.144696][ T5595] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 157.242217][ T5595] netlink: 55 bytes leftover after parsing attributes in process `syz.3.333'. [ 158.004628][ T5613] netlink: 112 bytes leftover after parsing attributes in process `syz.0.339'. [ 161.199231][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.344917][ T5772] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 169.418183][ T5772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.380'. [ 170.072954][ T5772] .`: renamed from bond0 [ 170.526014][ T5786] netlink: 'syz.0.384': attribute type 1 has an invalid length. [ 170.573733][ T5786] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.384'. [ 170.948888][ T5800] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 170.991738][ T5800] syzkaller1: Linktype set failed because interface is up [ 171.132946][ T5806] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 172.529002][ T5839] netlink: 180 bytes leftover after parsing attributes in process `syz.0.398'. [ 175.414975][ T5851] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.402'. [ 175.511828][ T5851] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 175.696436][ T5856] netlink: 148 bytes leftover after parsing attributes in process `syz.3.405'. [ 175.974886][ T5863] netlink: 'syz.2.406': attribute type 39 has an invalid length. [ 177.231907][ T5890] netlink: 192 bytes leftover after parsing attributes in process `syz.2.412'. [ 177.252805][ T5890] netlink: 'syz.2.412': attribute type 12 has an invalid length. [ 177.261555][ T5890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.412'. [ 177.324719][ T5890] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 177.415457][ T5890] team0: Device veth1_vlan failed to register rx_handler [ 177.675946][ T5902] netlink: 'syz.3.413': attribute type 4 has an invalid length. [ 177.704316][ T5902] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.413'. [ 178.281124][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 178.506399][ T5916] netlink: 'syz.4.417': attribute type 27 has an invalid length. [ 178.722602][ T5928] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 178.743028][ T5922] delete_channel: no stack [ 179.166426][ T5933] netlink: 'syz.2.422': attribute type 2 has an invalid length. [ 179.211467][ T5933] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 179.233623][ T5933] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.422'. [ 179.562438][ T5916] bond0: (slave bond_slave_0): Releasing backup interface [ 179.662450][ T5928] netlink: 'syz.2.422': attribute type 29 has an invalid length. [ 179.859475][ T5935] netlink: 'syz.3.423': attribute type 3 has an invalid length. [ 179.867906][ T5935] netlink: 152 bytes leftover after parsing attributes in process `syz.3.423'. [ 182.221444][ T5984] validate_nla: 1 callbacks suppressed [ 182.221490][ T5984] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 182.989423][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 183.152585][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 183.438136][ T6016] netlink: 22 bytes leftover after parsing attributes in process `syz.3.445'. [ 185.034726][ T6049] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 185.529587][ T6049] team0 (unregistering): Port device team_slave_0 removed [ 185.622281][ T6049] team0 (unregistering): Port device team_slave_1 removed [ 185.712097][ T6049] team0 (unregistering): Port device macvlan0 removed [ 185.818782][ T6049] team0 (unregistering): Port device wlan1 removed [ 185.894007][ T6050] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 186.511458][ T6070] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.462'. [ 190.921227][ T6129] netlink: 'syz.2.478': attribute type 2 has an invalid length. [ 191.003912][ T6129] netlink: 10 bytes leftover after parsing attributes in process `syz.2.478'. [ 191.157550][ T6129] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 191.382464][ T4282] Bluetooth: hci4: Malformed LE Event: 0x1d [ 191.408870][ T6141] netlink: 'syz.4.484': attribute type 39 has an invalid length. [ 193.677361][ T6169] netlink: 'syz.4.489': attribute type 21 has an invalid length. [ 193.749962][ T6169] netlink: 'syz.4.489': attribute type 1 has an invalid length. [ 194.506320][ T6177] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.493'. [ 194.518730][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.525432][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.636912][ T6198] netlink: 'syz.4.499': attribute type 12 has an invalid length. [ 195.654005][ T6198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.499'. [ 195.724895][ T6199] tap0: tun_chr_ioctl cmd 2147767517 [ 197.140745][ T6200] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 197.191743][ T6200] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.499'. [ 197.977692][ T6206] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.500'. [ 198.425537][ T6209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.500'. [ 199.549034][ T6231] IPv6: Can't replace route, no match found [ 199.686790][ T6238] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 199.793092][ T6238] netlink: 5 bytes leftover after parsing attributes in process `syz.0.510'. [ 200.267020][ T6257] netlink: 'syz.3.514': attribute type 7 has an invalid length. [ 200.346362][ T6257] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.514'. [ 201.401477][ T6272] device syzkaller0 entered promiscuous mode [ 201.713867][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 201.720441][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 201.726898][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 201.726921][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 201.733211][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 201.901745][ T6281] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 201.993795][ T6281] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.522'. [ 207.398269][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.524'. [ 207.417033][ T6291] netlink: 'syz.1.525': attribute type 7 has an invalid length. [ 207.831548][ T6322] netlink: 'syz.4.533': attribute type 21 has an invalid length. [ 207.892044][ T6322] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 209.513813][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 209.562985][ T6355] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 209.572815][ T6356] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 210.563135][ T6369] netlink: 'syz.2.545': attribute type 3 has an invalid length. [ 210.622003][ T6369] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.545'. [ 210.876491][ T6379] netlink: 'syz.3.549': attribute type 21 has an invalid length. [ 214.761715][ T6463] netlink: 'syz.3.569': attribute type 21 has an invalid length. [ 214.793439][ T6463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.569'. [ 215.195818][ T6469] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 215.250197][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.571'. [ 215.300692][ T6469] device team0 entered promiscuous mode [ 215.366557][ T6469] device team_slave_0 entered promiscuous mode [ 215.429010][ T6469] device team_slave_1 entered promiscuous mode [ 215.602482][ T6469] bridge0: port 3(team0) entered blocking state [ 215.739723][ T6469] bridge0: port 3(team0) entered disabled state [ 215.953151][ T6469] bridge0: port 3(team0) entered blocking state [ 215.960008][ T6469] bridge0: port 3(team0) entered forwarding state [ 215.989429][ T6482] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.574'. [ 216.028879][ T6482] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 216.245744][ T6487] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 216.331900][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.576'. [ 216.443819][ T6487] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 216.723330][ T6504] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 216.916475][ T6504] team0: Port device macvlan0 added [ 219.617960][ T6565] netlink: 'syz.4.595': attribute type 2 has an invalid length. [ 220.389804][ T6565] device 0 entered promiscuous mode [ 221.834534][ T6593] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.604'. [ 223.670934][ T6625] device macvlan1 entered promiscuous mode [ 226.550749][ T6641] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.614'. [ 227.407478][ T6663] netlink: 'syz.0.623': attribute type 11 has an invalid length. [ 227.512391][ T6663] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.623'. [ 227.573157][ T6665] netlink: 'syz.0.623': attribute type 11 has an invalid length. [ 227.614208][ T6665] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.623'. [ 227.754795][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.394621][ T6680] device macvlan1 entered promiscuous mode [ 229.712315][ T6700] device syzkaller0 entered promiscuous mode [ 229.963846][ T6712] netlink: 'syz.3.637': attribute type 11 has an invalid length. [ 229.993761][ T6712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.637'. [ 230.031973][ T6712] netlink: 'syz.3.637': attribute type 11 has an invalid length. [ 230.074099][ T6712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.637'. [ 230.207776][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.446059][ T6722] netlink: 'syz.3.640': attribute type 29 has an invalid length. [ 232.117840][ T6722] netlink: 'syz.3.640': attribute type 29 has an invalid length. [ 232.351992][ T6731] netlink: 'syz.4.643': attribute type 9 has an invalid length. [ 232.398534][ T6731] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.643'. [ 235.196058][ T6784] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.657'. [ 236.672413][ T6833] netlink: 'syz.2.670': attribute type 13 has an invalid length. [ 236.751674][ T6833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.670'. [ 237.025469][ T6833] syz_tun: refused to change device tx_queue_len [ 237.117696][ T6833] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 237.119743][ T6839] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.671'. [ 237.243133][ T6831] netlink: 'syz.2.670': attribute type 13 has an invalid length. [ 237.284131][ T6831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.670'. [ 237.427561][ T6831] syz_tun: refused to change device tx_queue_len [ 237.510366][ T6831] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 239.624284][ T6880] netlink: 'syz.2.683': attribute type 16 has an invalid length. [ 239.632194][ T6880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.683'. [ 240.638102][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.797996][ T6897] netlink: 'syz.3.687': attribute type 4 has an invalid length. [ 241.816653][ T6897] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.687'. [ 241.860239][ T6899] netlink: 4063 bytes leftover after parsing attributes in process `syz.2.688'. [ 241.912325][ T6906] netlink: 4063 bytes leftover after parsing attributes in process `syz.2.688'. [ 242.802823][ T6922] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 242.826993][ T6922] netlink: 55 bytes leftover after parsing attributes in process `syz.1.692'. [ 247.429258][ T6975] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 247.445041][ T6975] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.705'. [ 249.846654][ T4282] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 251.756043][ T7084] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.738'. [ 253.102182][ T7106] device syzkaller0 entered promiscuous mode [ 254.207686][ T7134] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 254.244085][ T7134] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 255.994073][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000462][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.378190][ T7138] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 258.555063][ T7166] netlink: 'syz.2.759': attribute type 12 has an invalid length. [ 258.574204][ T7166] netlink: 172 bytes leftover after parsing attributes in process `syz.2.759'. [ 258.714582][ T7173] netlink: 'syz.3.760': attribute type 29 has an invalid length. [ 258.761231][ T7173] netlink: 'syz.3.760': attribute type 29 has an invalid length. [ 258.814796][ T7169] netlink: 'syz.3.760': attribute type 29 has an invalid length. [ 259.017920][ T7182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.761'. [ 259.259354][ T7183] netlink: 168 bytes leftover after parsing attributes in process `syz.2.762'. [ 259.702133][ T7189] netlink: 'syz.4.765': attribute type 4 has an invalid length. [ 259.793476][ T7189] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.765'. [ 261.356393][ T4282] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 261.664976][ T4295] tipc: Subscription rejected, illegal request [ 263.417951][ T7261] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 263.449046][ T7261] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.782'. [ 264.258541][ T7269] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.785'. [ 266.643607][ T7311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.796'. [ 267.088549][ T7311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.176076][ T7311] bond0 (unregistering): Released all slaves [ 267.442815][ T7320] netlink: 14 bytes leftover after parsing attributes in process `syz.4.798'. [ 267.509583][ T7320] openvswitch: netlink: Message has 6 unknown bytes. [ 268.679466][ T7341] netlink: 'syz.2.805': attribute type 10 has an invalid length. [ 268.714956][ T7341] netlink: 2 bytes leftover after parsing attributes in process `syz.2.805'. [ 268.804745][ T7341] device bond0 entered promiscuous mode [ 268.810485][ T7341] device bond_slave_0 entered promiscuous mode [ 268.914294][ T7341] device bond_slave_1 entered promiscuous mode [ 268.985937][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.660003][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.185104][ T7385] device veth1 entered promiscuous mode [ 275.482460][ T7429] netlink: 'syz.1.825': attribute type 25 has an invalid length. [ 275.504077][ T7432] tun0: tun_chr_ioctl cmd 1074025675 [ 275.509775][ T7432] tun0: persist enabled [ 275.520257][ T7422] tun0: tun_chr_ioctl cmd 1074025675 [ 275.527090][ T7422] tun0: persist enabled [ 275.770104][ T7438] device wg2 entered promiscuous mode [ 275.805055][ T7436] netlink: 'syz.1.828': attribute type 10 has an invalid length. [ 275.827340][ T7441] netlink: 'syz.2.831': attribute type 2 has an invalid length. [ 275.850075][ T7441] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.831'. [ 275.890139][ T7436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.903234][ T7436] .`: (slave batadv0): Enslaving as an active interface with an up link [ 275.912875][ T7442] netlink: 'syz.0.830': attribute type 11 has an invalid length. [ 276.507458][ T7466] netlink: 'syz.0.837': attribute type 21 has an invalid length. [ 276.542888][ T7466] netlink: 156 bytes leftover after parsing attributes in process `syz.0.837'. [ 277.014703][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 2577 [ 277.795711][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 280.570884][ T7527] netlink: 'syz.0.852': attribute type 25 has an invalid length. [ 281.330591][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.4.854'. [ 281.994332][ T7547] netlink: 'syz.3.858': attribute type 7 has an invalid length. [ 282.090960][ T7551] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 282.318575][ T7552] netlink: 'syz.2.857': attribute type 21 has an invalid length. [ 282.393975][ T7552] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 282.483759][ T7552] netlink: 100 bytes leftover after parsing attributes in process `syz.2.857'. [ 282.693154][ T7553] netlink: 'syz.2.857': attribute type 21 has an invalid length. [ 282.737014][ T7561] netlink: 152 bytes leftover after parsing attributes in process `syz.1.859'. [ 283.005815][ T7563] netlink: 'syz.4.861': attribute type 21 has an invalid length. [ 284.179513][ T7582] netlink: 144 bytes leftover after parsing attributes in process `syz.2.865'. [ 284.253756][ T7584] netlink: 'syz.0.866': attribute type 25 has an invalid length. [ 285.270476][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 286.025086][ T7606] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.875'. [ 286.375938][ T7614] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.876'. [ 288.058901][ T7636] netlink: 'syz.4.880': attribute type 25 has an invalid length. [ 290.832780][ T7666] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.889'. [ 291.146923][ T7669] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 291.193030][ T7669] team0: Device veth1_vlan is already a lower device of the team interface [ 291.899585][ T7673] netlink: 'syz.4.892': attribute type 27 has an invalid length. [ 291.986786][ T7673] netlink: 164 bytes leftover after parsing attributes in process `syz.4.892'. [ 292.262103][ T7686] netlink: 'syz.3.895': attribute type 25 has an invalid length. [ 294.214820][ T7702] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 294.283699][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.899'. [ 295.424008][ T7715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.901'. [ 296.325420][ T7723] netlink: 'syz.1.906': attribute type 16 has an invalid length. [ 296.366293][ T7723] netlink: 'syz.1.906': attribute type 4 has an invalid length. [ 296.467157][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.906'. [ 297.303694][ T7741] netlink: 'syz.3.908': attribute type 25 has an invalid length. [ 298.821942][ T7746] netlink: 'syz.2.909': attribute type 10 has an invalid length. [ 298.864640][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.909'. [ 298.954255][ T7746] device veth0_vlan left promiscuous mode [ 298.980756][ T7746] device veth0_vlan entered promiscuous mode [ 299.015481][ T7746] bridge0: port 3(veth0_vlan) entered blocking state [ 299.053202][ T7746] bridge0: port 3(veth0_vlan) entered disabled state [ 299.116084][ T7746] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 300.232619][ T7774] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 300.338874][ T7767] netlink: 'syz.4.912': attribute type 10 has an invalid length. [ 300.396884][ T7774] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 300.429529][ T7776] netlink: 'syz.1.917': attribute type 29 has an invalid length. [ 301.139213][ T7790] netlink: 'syz.2.921': attribute type 25 has an invalid length. [ 302.871832][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.063881][ T7829] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.932'. [ 305.562366][ T7837] netlink: 'syz.2.934': attribute type 29 has an invalid length. [ 305.614046][ T7837] netlink: 'syz.2.934': attribute type 29 has an invalid length. [ 305.678468][ T7838] device syzkaller0 entered promiscuous mode [ 305.707498][ T7838] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 305.713288][ T7836] netlink: 'syz.4.935': attribute type 25 has an invalid length. [ 306.440323][ T7855] netlink: 'syz.2.940': attribute type 2 has an invalid length. [ 306.523111][ T7855] netlink: 164 bytes leftover after parsing attributes in process `syz.2.940'. [ 307.654434][ T7868] netlink: 26 bytes leftover after parsing attributes in process `syz.3.942'. [ 308.254448][ T7874] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.944'. [ 310.025690][ T7889] netlink: 52 bytes leftover after parsing attributes in process `syz.4.948'. [ 310.177206][ T7889] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 310.220436][ T7888] netlink: 'syz.0.949': attribute type 25 has an invalid length. [ 310.558395][ T7904] netlink: 'syz.2.953': attribute type 19 has an invalid length. [ 311.037074][ T7924] netlink: 830 bytes leftover after parsing attributes in process `syz.1.958'. [ 314.372455][ T7951] netlink: 'syz.4.967': attribute type 3 has an invalid length. [ 314.425496][ T7952] netlink: 'syz.2.965': attribute type 25 has an invalid length. [ 314.434202][ T7951] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.967'. [ 314.809896][ T7959] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 314.841305][ T7959] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.966'. [ 314.939930][ T7968] tap0: tun_chr_ioctl cmd 1074025677 [ 314.965143][ T7968] tap0: linktype set to 1 [ 315.724464][ T7982] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 315.754518][ T7982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.591864][ T8007] netlink: 'syz.3.982': attribute type 25 has an invalid length. [ 317.266997][ T8033] netlink: 'syz.1.988': attribute type 2 has an invalid length. [ 317.396630][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.403106][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.470894][ T8040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.986'. [ 317.539234][ T8040] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 317.985977][ T8051] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 318.011977][ T8056] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 318.093805][ T8051] netlink: 156 bytes leftover after parsing attributes in process `syz.3.993'. [ 318.115558][ T8056] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 318.194967][ T8059] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 318.375012][ T8056] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 319.138628][ T8062] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.995'. [ 319.379364][ T8089] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1002'. [ 319.548833][ T8090] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.648438][ T8090] syzkaller1: linktype set to 786 [ 320.623724][ T8103] validate_nla: 1 callbacks suppressed [ 320.623742][ T8103] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 320.708624][ T8106] netlink: 'syz.1.1005': attribute type 39 has an invalid length. [ 321.014533][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.181056][ T8112] device bridge_slave_0 left promiscuous mode [ 321.199985][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.415037][ T8123] netlink: 'syz.2.1010': attribute type 25 has an invalid length. [ 322.382585][ T8136] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1014'. [ 325.278781][ T8210] netlink: 'syz.1.1033': attribute type 29 has an invalid length. [ 325.303604][ T8210] netlink: 'syz.1.1033': attribute type 3 has an invalid length. [ 325.311509][ T8210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1033'. [ 325.539338][ T8213] device syzkaller0 entered promiscuous mode [ 325.549564][ T8221] netlink: 'syz.3.1036': attribute type 2 has an invalid length. [ 325.593630][ T8221] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.1036'. [ 325.773945][ T8213] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1034'. [ 325.918869][ T8213] team0: Port device team_slave_0 removed [ 326.319818][ T8237] netlink: 'syz.0.1040': attribute type 28 has an invalid length. [ 326.438446][ T8230] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1038'. [ 327.737879][ T8254] netlink: 'syz.2.1043': attribute type 3 has an invalid length. [ 327.874752][ T8254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1043'. [ 328.243181][ T8265] netlink: 'syz.3.1044': attribute type 1 has an invalid length. [ 328.263823][ T8265] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1044'. [ 329.852901][ T8261] tap0: tun_chr_ioctl cmd 2147767517 [ 329.858476][ T8267] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1046'. [ 330.484769][ T8288] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1051'. [ 330.924622][ T8301] netlink: 'syz.0.1054': attribute type 39 has an invalid length. [ 331.780617][ T8310] netlink: 'syz.0.1054': attribute type 22 has an invalid length. [ 331.802514][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 331.941472][ T8315] netlink: 'syz.1.1058': attribute type 10 has an invalid length. [ 332.011309][ T8315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1058'. [ 332.222932][ T8323] netlink: 'syz.2.1059': attribute type 25 has an invalid length. [ 332.531688][ T8332] netlink: 'syz.0.1061': attribute type 3 has an invalid length. [ 332.824355][ T8332] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1061'. [ 333.268475][ T8357] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 333.294110][ T8357] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1065'. [ 334.328731][ T4968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.950476][ T8379] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 335.994402][ T8379] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1074'. [ 336.078790][ T8378] netlink: 'syz.0.1073': attribute type 2 has an invalid length. [ 336.200350][ T8378] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1073'. [ 336.238420][ T8382] netlink: 'syz.2.1075': attribute type 25 has an invalid length. [ 337.073784][ T8411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1082'. [ 337.160393][ T8394] netlink: 'syz.4.1077': attribute type 3 has an invalid length. [ 337.173886][ T8411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1082'. [ 337.193616][ T8394] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1077'. [ 337.793046][ T8441] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1089'. [ 338.151749][ T8448] netlink: 'syz.4.1090': attribute type 25 has an invalid length. [ 339.674261][ T8484] netlink: 'syz.2.1099': attribute type 21 has an invalid length. [ 339.682443][ T8484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1099'. [ 341.847650][ T8507] netlink: 'syz.4.1105': attribute type 25 has an invalid length. [ 342.890997][ T4282] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 343.759961][ T8549] netlink: 'syz.0.1118': attribute type 9 has an invalid length. [ 344.090539][ T8551] sctp: [Deprecated]: syz.4.1117 (pid 8551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.090539][ T8551] Use struct sctp_sack_info instead [ 344.117055][ T8560] netlink: 'syz.2.1119': attribute type 25 has an invalid length. [ 344.175004][ T8557] sctp: [Deprecated]: syz.4.1117 (pid 8557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.175004][ T8557] Use struct sctp_sack_info instead [ 344.913619][ T4282] Bluetooth: hci3: command 0x2016 tx timeout [ 345.229062][ T8583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.237197][ T8583] IPv6: NLM_F_CREATE should be set when creating new route [ 346.825327][ T8618] netlink: 'syz.1.1136': attribute type 25 has an invalid length. [ 347.035943][ T8622] netlink: 'syz.4.1138': attribute type 25 has an invalid length. [ 347.116141][ T8621] netlink: 'syz.0.1137': attribute type 2 has an invalid length. [ 347.325384][ T8629] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 347.365738][ T8629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.404875][ T8629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.450390][ T8629] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 347.933261][ T8643] netlink: 'syz.1.1142': attribute type 3 has an invalid length. [ 348.029854][ T8643] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 348.073834][ T8643] netlink: 21959 bytes leftover after parsing attributes in process `syz.1.1142'. [ 348.593906][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 348.727521][ T8662] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 349.418542][ T8679] device bond_slave_1 entered promiscuous mode [ 349.863434][ T8682] device syzkaller0 entered promiscuous mode [ 351.039836][ T4589] tipc: Subscription rejected, illegal request [ 352.129537][ T8733] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1169'. [ 352.153550][ T8733] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.972717][ T8705] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 354.988627][ T8705] team0: Device veth1_vlan failed to register rx_handler [ 355.008448][ T8736] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1170'. [ 355.067088][ T8742] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1171'. [ 355.367380][ T8749] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1174'. [ 355.398417][ T8752] syz.4.1176[8752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.398679][ T8752] syz.4.1176[8752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.950718][ T8780] netlink: 'syz.1.1180': attribute type 27 has an invalid length. [ 357.003779][ T8780] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1180'. [ 357.082732][ T8778] netlink: 'syz.0.1179': attribute type 29 has an invalid length. [ 357.144221][ T8778] netlink: 'syz.0.1179': attribute type 29 has an invalid length. [ 357.861846][ T8797] mac80211_hwsim hwsim8 ªªªªªª: renamed from wlan0 [ 358.303429][ T8821] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1190'. [ 358.352024][ T8825] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1190'. [ 359.874141][ T8860] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1200'. [ 359.903708][ T8860] openvswitch: netlink: Key type 386 is out of range max 32 [ 360.307658][ T8868] netlink: 'syz.3.1201': attribute type 21 has an invalid length. [ 360.333656][ T8868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1201'. [ 360.350092][ T8860] device lo entered promiscuous mode [ 360.381885][ T8860] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 360.432372][ T8876] netlink: 'syz.4.1204': attribute type 46 has an invalid length. [ 360.460625][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1204'. [ 360.509760][ T8875] Ÿë: port 1(gretap0) entered blocking state [ 360.523809][ T8875] Ÿë: port 1(gretap0) entered disabled state [ 360.554364][ T8875] device gretap0 entered promiscuous mode [ 361.295472][ T8884] mac80211_hwsim hwsim6 ªªªªªª: renamed from wlan0 [ 361.585993][ T8891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1209'. [ 361.705473][ T8895] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 361.751414][ T8895] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1210'. [ 365.242514][ T8942] netlink: 'syz.0.1225': attribute type 21 has an invalid length. [ 365.274315][ T8942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1225'. [ 365.511261][ T8962] netlink: 'syz.1.1230': attribute type 10 has an invalid length. [ 365.529698][ T8962] device netdevsim0 entered promiscuous mode [ 365.788708][ T8968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1233'. [ 366.469422][ T8975] netlink: 'syz.2.1236': attribute type 21 has an invalid length. [ 368.650494][ T9006] netlink: 'syz.3.1244': attribute type 2 has an invalid length. [ 368.757318][ T9006] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1244'. [ 369.204093][ T9013] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1247'. [ 369.542485][ T9019] netlink: 'syz.0.1249': attribute type 21 has an invalid length. [ 369.588573][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 369.633211][ T9019] netlink: 'syz.0.1249': attribute type 11 has an invalid length. [ 369.658117][ T9019] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1249'. [ 370.308988][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.223149][ T9026] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.1253'. [ 371.250308][ T9026] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1253'. [ 371.372852][ T9026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1253'. [ 372.760821][ T9062] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.844506][ T9062] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1261'. [ 373.191581][ T9067] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 373.244374][ T9067] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1261'. [ 374.739064][ T9097] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1271'. [ 375.468006][ T9108] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.1274'. [ 375.990066][ T9118] netlink: 'syz.2.1277': attribute type 2 has an invalid length. [ 376.657276][ T9105] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1274'. [ 377.709648][ T9142] tap0: tun_chr_ioctl cmd 2147767517 [ 378.841266][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849493][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.435160][ T9174] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.1292'. [ 379.586914][ T9176] netlink: 'syz.2.1303': attribute type 21 has an invalid length. [ 379.623045][ T9176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1303'. [ 379.653228][ T9176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1303'. [ 380.105698][ T9174] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1292'. [ 380.250347][ T9193] netlink: 'syz.4.1296': attribute type 2 has an invalid length. [ 380.278591][ T9193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1296'. [ 382.425233][ T9243] netlink: 'syz.3.1311': attribute type 2 has an invalid length. [ 382.481154][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1311'. [ 382.884707][ T9250] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1313'. [ 384.660886][ T9275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1321'. [ 384.711503][ T9258] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1313'. [ 385.647946][ T9297] netlink: 'syz.3.1325': attribute type 21 has an invalid length. [ 387.734185][ T9323] netlink: 'syz.2.1334': attribute type 4 has an invalid length. [ 387.741999][ T9323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1334'. [ 387.815433][ T9317] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.1333'. [ 389.362897][ T9352] netlink: 'syz.0.1340': attribute type 11 has an invalid length. [ 389.815705][ T9367] netlink: 'syz.3.1346': attribute type 13 has an invalid length. [ 389.893917][ T9367] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1346'. [ 389.992644][ T9367] syz_tun: refused to change device tx_queue_len [ 390.045649][ T9367] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 390.857160][ T9371] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 390.898460][ T9371] team0: Port device netdevsim0 added [ 390.964137][ T9364] netlink: 'syz.3.1346': attribute type 13 has an invalid length. [ 390.972293][ T9364] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1346'. [ 391.020125][ T9364] syz_tun: refused to change device tx_queue_len [ 391.020444][ T9381] delete_channel: no stack [ 391.050883][ T9364] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 391.062885][ T9381] delete_channel: no stack [ 391.326987][ T9397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1353'. [ 391.386392][ T9396] netlink: 'syz.4.1354': attribute type 2 has an invalid length. [ 391.413850][ T9396] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1354'. [ 391.599472][ T4282] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 391.607548][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 391.617521][ T4282] CPU: 1 PID: 4282 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 391.625229][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.635362][ T4282] Workqueue: hci3 hci_rx_work [ 391.640385][ T4282] Call Trace: [ 391.643823][ T4282] [ 391.647083][ T4282] dump_stack_lvl+0x188/0x24e [ 391.651852][ T4282] ? show_regs_print_info+0x12/0x12 [ 391.657307][ T4282] ? load_image+0x400/0x400 [ 391.661949][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 391.667164][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 391.672056][ T4282] ? do_raw_spin_unlock+0x11d/0x230 [ 391.677397][ T4282] kobject_add_internal+0x61c/0xcc0 [ 391.682816][ T4282] kobject_add+0x160/0x230 [ 391.687436][ T4282] ? kobject_init+0x1d0/0x1d0 [ 391.692306][ T4282] ? klist_children_get+0x50/0x50 [ 391.697418][ T4282] ? get_device_parent+0x121/0x3f0 [ 391.702628][ T4282] device_add+0x483/0xfb0 [ 391.707106][ T4282] ? kmem_cache_free+0xf7/0x290 [ 391.712144][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 391.717268][ T4282] le_conn_complete_evt+0x1062/0x1670 [ 391.722769][ T4282] ? le_conn_complete_evt+0xe9/0x1670 [ 391.728261][ T4282] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 391.734866][ T4282] ? bt_info+0x180/0x180 [ 391.739458][ T4282] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 391.745367][ T4282] ? skb_pull_data+0xf7/0x200 [ 391.750166][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 391.755830][ T4282] ? hci_remote_host_features_evt+0x270/0x270 [ 391.761981][ T4282] hci_event_packet+0x7b9/0x1280 [ 391.767011][ T4282] ? bis_list+0x280/0x280 [ 391.771516][ T4282] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 391.777571][ T4282] ? kcov_remote_start+0x4c7/0x7e0 [ 391.782940][ T4282] ? patch_conexant_auto+0x1260/0x1650 [ 391.788814][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 391.794079][ T4282] hci_rx_work+0x3eb/0xd40 [ 391.798724][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 391.803633][ T4282] ? process_one_work+0x7b0/0x1160 [ 391.808796][ T4282] process_one_work+0x8a2/0x1160 [ 391.814005][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 391.819709][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 391.824883][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 391.830584][ T4282] ? kthread_data+0x4b/0xc0 [ 391.835167][ T4282] worker_thread+0xaa2/0x1270 [ 391.840129][ T4282] kthread+0x29d/0x330 [ 391.844253][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 391.849420][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 391.854051][ T4282] ret_from_fork+0x1f/0x30 [ 391.858723][ T4282] [ 391.863047][ T4282] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 391.876999][ T4282] Bluetooth: hci3: failed to register connection device [ 392.319938][ T9417] netlink: 'syz.0.1358': attribute type 21 has an invalid length. [ 393.767798][ T9453] netlink: 'syz.2.1367': attribute type 3 has an invalid length. [ 393.860385][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1367'. [ 393.954653][ T4282] Bluetooth: hci3: command 0x2016 tx timeout [ 394.910551][ T9472] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 395.013799][ T9472] netlink: 'syz.4.1371': attribute type 3 has an invalid length. [ 395.051042][ T9472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1371'. [ 395.664869][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 395.733141][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 395.810893][ T9480] netlink: 'syz.4.1372': attribute type 21 has an invalid length. [ 396.452732][ T9495] netlink: 'syz.3.1376': attribute type 21 has an invalid length. [ 396.482505][ T9495] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1376'. [ 398.405595][ T9524] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 398.453546][ T9533] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 399.748457][ T9564] netlink: 'syz.2.1395': attribute type 11 has an invalid length. [ 399.768797][ T9564] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1395'. [ 400.117981][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.240584][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.790815][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.881158][ T9568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.091952][ T9585] netlink: 'syz.1.1402': attribute type 21 has an invalid length. [ 401.121115][ T9585] netlink: 'syz.1.1402': attribute type 22 has an invalid length. [ 401.129626][ T9585] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1402'. [ 401.462391][ T9597] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 401.702965][ T9597] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1406'. [ 401.782808][ T9594] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1406'. [ 401.805805][ T9594] netlink: zone id is out of range [ 401.817810][ T9594] netlink: zone id is out of range [ 401.829805][ T9594] netlink: zone id is out of range [ 401.864642][ T9594] netlink: zone id is out of range [ 401.877882][ T9594] netlink: zone id is out of range [ 401.895377][ T9594] netlink: zone id is out of range [ 401.914625][ T9594] netlink: zone id is out of range [ 401.948607][ T9594] netlink: zone id is out of range [ 402.000637][ T9594] netlink: zone id is out of range [ 402.295977][ T9607] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1412'. [ 403.064936][ T9626] netlink: 'syz.3.1410': attribute type 3 has an invalid length. [ 403.235329][ T9626] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1410'. [ 406.355360][ T9652] netlink: 'syz.3.1422': attribute type 10 has an invalid length. [ 407.004066][ T9652] device veth0_macvtap left promiscuous mode [ 410.375510][ T9692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1434'. [ 410.590465][ T9700] netlink: 'syz.1.1435': attribute type 10 has an invalid length. [ 410.599589][ T9700] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.1435'. [ 410.749974][ T9705] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1437'. [ 410.763156][ T9705] net_ratelimit: 7 callbacks suppressed [ 410.763175][ T9705] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 411.317118][ T9713] netlink: 'syz.0.1440': attribute type 27 has an invalid length. [ 411.900833][ T9713] bond0: (slave bond_slave_0): Releasing backup interface [ 412.696290][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1439'. [ 412.758634][ T9729] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1444'. [ 412.860341][ T9732] netlink: 'syz.4.1445': attribute type 2 has an invalid length. [ 412.905102][ T9732] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 412.931830][ T9732] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1445'. [ 413.023659][ T9738] netlink: 'syz.1.1447': attribute type 21 has an invalid length. [ 414.156870][ T9763] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 415.172641][ T9781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1457'. [ 415.194995][ T9780] netlink: 'syz.2.1456': attribute type 2 has an invalid length. [ 415.571441][ T9780] device 0 entered promiscuous mode [ 415.578382][ T9781] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1457'. [ 415.648796][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1457'. [ 415.762102][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1457'. [ 415.913877][ T9796] netlink: 'syz.4.1460': attribute type 29 has an invalid length. [ 415.974601][ T9796] netlink: 'syz.4.1460': attribute type 29 has an invalid length. [ 416.979164][ T9802] netlink: 'syz.3.1462': attribute type 4 has an invalid length. [ 417.036729][ T9802] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1462'. [ 418.435270][ T9841] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1473'. [ 418.489620][ T9833] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 418.755925][ T9833] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1469'. [ 418.824322][ T9845] netlink: 'syz.3.1469': attribute type 22 has an invalid length. [ 418.913831][ T9845] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1469'. [ 419.514365][ T9858] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 419.563644][ T9858] netlink: 205560 bytes leftover after parsing attributes in process `syz.1.1476'. [ 419.788509][ T9866] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1479'. [ 420.476057][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.637417][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.729700][ T9874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.852087][ T9874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.244828][ T9878] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 421.263782][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1482'. [ 421.684042][ T9890] device wg2 entered promiscuous mode [ 422.542190][ T9918] delete_channel: no stack [ 422.674090][ T9922] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 423.001395][ T9934] syz.1.1493[9934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.001556][ T9934] syz.1.1493[9934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.063718][ T9925] netlink: 'syz.1.1493': attribute type 10 has an invalid length. [ 423.490198][ T9947] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1499'. [ 423.832376][ T9957] netlink: 'syz.0.1501': attribute type 25 has an invalid length. [ 424.228209][ T9969] netlink: 'syz.3.1504': attribute type 9 has an invalid length. [ 424.301206][ T9969] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1504'. [ 424.352347][ T9968] netlink: 'syz.3.1504': attribute type 21 has an invalid length. [ 424.379869][ T9968] netlink: 'syz.3.1504': attribute type 6 has an invalid length. [ 424.396265][ T9968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1504'. [ 424.436589][ T9976] netlink: 'syz.1.1507': attribute type 3 has an invalid length. [ 424.602128][ T9985] netlink: 'syz.1.1510': attribute type 29 has an invalid length. [ 424.611717][ T9985] netlink: 'syz.1.1510': attribute type 29 has an invalid length. [ 424.636910][ T9985] netlink: 'syz.1.1510': attribute type 29 has an invalid length. [ 424.718435][ T9987] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1508'. [ 424.795649][ T9987] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 425.275629][T10009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1516'. [ 426.059025][T10025] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1521'. [ 426.861138][T10047] validate_nla: 4 callbacks suppressed [ 426.861155][T10047] netlink: 'syz.0.1525': attribute type 21 has an invalid length. [ 426.898375][T10047] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.039924][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.053111][T10107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.175274][T10107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.195261][T10107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.304192][T10115] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 431.559388][T10160] netlink: 'syz.0.1559': attribute type 3 has an invalid length. [ 431.671731][T10160] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.1559'. [ 432.191129][T10168] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 432.254522][T10170] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 432.363072][T10170] netlink: 'syz.0.1563': attribute type 2 has an invalid length. [ 432.431844][T10170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'. [ 432.765045][T10170] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.1563'. [ 432.792957][T10170] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1563'. [ 433.192103][T10192] netlink: 177648 bytes leftover after parsing attributes in process `syz.1.1567'. [ 433.292951][T10194] netlink: 'syz.2.1568': attribute type 27 has an invalid length. [ 433.385169][T10194] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1568'. [ 433.553341][T10203] netlink: 'syz.0.1579': attribute type 3 has an invalid length. [ 433.723149][T10203] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1579'. [ 434.295247][T10219] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 434.303305][T10219] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1573'. [ 434.566451][T10219] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 434.933716][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1580'. [ 434.992290][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1580'. [ 435.578042][T10262] netlink: 'syz.3.1586': attribute type 13 has an invalid length. [ 435.607135][T10262] syz_tun: refused to change device tx_queue_len [ 435.652798][T10262] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 435.764631][T10264] netlink: 'syz.1.1588': attribute type 25 has an invalid length. [ 435.849450][T10262] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 436.098996][T10271] netlink: 'syz.0.1590': attribute type 4 has an invalid length. [ 436.170620][T10271] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 440.366473][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.373104][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.948764][T10327] netlink: 'syz.4.1603': attribute type 25 has an invalid length. [ 441.143056][T10335] netlink: 'syz.2.1606': attribute type 10 has an invalid length. [ 441.248303][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.255883][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.344727][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.352259][T10335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.360039][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.367448][T10335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.415758][T10335] device bridge0 entered promiscuous mode [ 441.429244][T10335] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 441.468458][T10340] __nla_validate_parse: 4 callbacks suppressed [ 441.468477][T10340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1605'. [ 442.351850][T10353] netlink: 'syz.4.1610': attribute type 11 has an invalid length. [ 442.371915][T10353] netlink: 143448 bytes leftover after parsing attributes in process `syz.4.1610'. [ 442.454628][T10353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.837984][T10381] netlink: 'syz.2.1618': attribute type 3 has an invalid length. [ 442.863247][T10381] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1618'. [ 443.252634][T10387] netlink: 'syz.3.1620': attribute type 27 has an invalid length. [ 443.292949][T10387] C: renamed from team_slave_0 [ 443.950817][T10394] can: request_module (can-proto-0) failed. [ 445.062550][T10421] tap0: tun_chr_ioctl cmd 1074025677 [ 445.234538][T10421] tap0: linktype set to 780 [ 446.468908][T10425] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 446.534284][T10425] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1632'. [ 452.152326][T10473] netlink: 'syz.2.1646': attribute type 39 has an invalid length. [ 454.851535][T10473] device hsr_slave_1 left promiscuous mode [ 455.030365][T10478] netlink: 'syz.4.1649': attribute type 14 has an invalid length. [ 455.039081][T10478] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1649'. [ 455.460763][T10496] netlink: 'syz.4.1651': attribute type 10 has an invalid length. [ 455.564784][T10493] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 456.483421][T10519] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 456.524241][T10512] delete_channel: no stack [ 456.614067][T10521] FAULT_INJECTION: forcing a failure. [ 456.614067][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 456.715257][T10521] CPU: 0 PID: 10521 Comm: syz.1.1660 Not tainted syzkaller #0 [ 456.723276][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.734325][T10521] Call Trace: [ 456.738886][T10521] [ 456.742440][T10521] dump_stack_lvl+0x188/0x24e [ 456.747975][T10521] ? show_regs_print_info+0x12/0x12 [ 456.754033][T10521] ? load_image+0x400/0x400 [ 456.759481][T10521] ? __lock_acquire+0x7d10/0x7d10 [ 456.765401][T10521] should_fail_ex+0x399/0x4d0 [ 456.770579][T10521] _copy_from_user+0x2c/0x170 [ 456.775601][T10521] ___sys_sendmsg+0x1c3/0x360 [ 456.780888][T10521] ? __sys_sendmsg+0x290/0x290 [ 456.786754][T10521] ? __lock_acquire+0x7d10/0x7d10 [ 456.793315][T10521] __se_sys_sendmsg+0x1bb/0x2a0 [ 456.799015][T10521] ? ct_nmi_exit+0x145/0x1c0 [ 456.804078][T10521] ? __x64_sys_sendmsg+0x80/0x80 [ 456.809260][T10521] ? lockdep_hardirqs_on+0x94/0x140 [ 456.814516][T10521] do_syscall_64+0x4c/0xa0 [ 456.819974][T10521] ? clear_bhb_loop+0x60/0xb0 [ 456.825710][T10521] ? clear_bhb_loop+0x60/0xb0 [ 456.831316][T10521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.837528][T10521] RIP: 0033:0x7fd8f8b9cdd9 [ 456.842170][T10521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.862446][T10521] RSP: 002b:00007fd8f9a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.871002][T10521] RAX: ffffffffffffffda RBX: 00007fd8f8e15fa0 RCX: 00007fd8f8b9cdd9 [ 456.879261][T10521] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000b [ 456.887445][T10521] RBP: 00007fd8f9a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 456.895899][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.904708][T10521] R13: 00007fd8f8e16038 R14: 00007fd8f8e15fa0 R15: 00007fffc70119b8 [ 456.912934][T10521] [ 457.718835][T10548] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1664'. [ 458.067712][T10561] netlink: 'syz.4.1667': attribute type 10 has an invalid length. [ 458.308696][T10567] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 458.375954][T10567] netlink: 'syz.1.1669': attribute type 29 has an invalid length. [ 458.912146][T10586] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 459.666582][T10597] netlink: 'syz.1.1676': attribute type 25 has an invalid length. [ 460.499661][T10602] netlink: 'syz.3.1678': attribute type 10 has an invalid length. [ 460.520692][T10602] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1678'. [ 460.595975][T10602] device hsr0 entered promiscuous mode [ 460.625328][T10611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1680'. [ 460.640952][T10602] bridge0: port 1(hsr0) entered blocking state [ 460.662253][T10602] bridge0: port 1(hsr0) entered disabled state [ 460.672057][T10611] openvswitch: netlink: Flow key attr not present in new flow. [ 460.749996][T10602] bridge0: port 1(hsr0) entered blocking state [ 460.759494][T10602] bridge0: port 1(hsr0) entered forwarding state [ 461.581181][T10627] netlink: 'syz.2.1692': attribute type 25 has an invalid length. [ 462.021979][T10636] netlink: 'syz.4.1687': attribute type 8 has an invalid length. [ 462.038005][T10636] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1687'. [ 463.749871][T10671] netlink: 'syz.1.1696': attribute type 2 has an invalid length. [ 463.823583][T10671] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1696'. [ 466.294890][T10724] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 466.415679][T10724] netlink: 'syz.1.1709': attribute type 2 has an invalid length. [ 466.563304][T10724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1709'. [ 467.195896][T10749] netlink: 'syz.3.1717': attribute type 3 has an invalid length. [ 467.321848][T10749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1717'. [ 468.843107][T10784] netlink: 'syz.0.1727': attribute type 19 has an invalid length. [ 468.851155][T10772] netlink: 'syz.2.1725': attribute type 3 has an invalid length. [ 468.851368][T10772] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1725'. [ 469.622178][T10796] netlink: 'syz.1.1729': attribute type 25 has an invalid length. [ 469.962265][T10809] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1734'. [ 470.933164][T10825] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1737'. [ 471.082810][T10832] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1741'. [ 471.112794][T10834] netlink: 'syz.4.1742': attribute type 10 has an invalid length. [ 471.172581][T10834] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.227210][T10834] bond0: (slave team0): Enslaving as an active interface with an up link [ 471.245306][T10833] netlink: 'syz.4.1742': attribute type 12 has an invalid length. [ 471.284338][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1742'. [ 471.342901][T10832] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 471.386808][T10832] CPU: 0 PID: 10832 Comm: syz.3.1741 Not tainted syzkaller #0 [ 471.394466][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.404926][T10832] Call Trace: [ 471.408258][T10832] [ 471.411236][T10832] dump_stack_lvl+0x188/0x24e [ 471.416186][T10832] ? show_regs_print_info+0x12/0x12 [ 471.422242][T10832] ? load_image+0x400/0x400 [ 471.426848][T10832] sysfs_warn_dup+0x8a/0xa0 [ 471.431513][T10832] sysfs_do_create_link_sd+0xc0/0x110 [ 471.437074][T10832] device_add+0x7ed/0xfb0 [ 471.441479][T10832] wiphy_register+0x1d9f/0x2ac0 [ 471.446507][T10832] ? cfg80211_event_work+0x40/0x40 [ 471.451686][T10832] ? minstrel_ht_alloc+0x894/0xa20 [ 471.456980][T10832] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 471.463379][T10832] ieee80211_register_hw+0x2d00/0x39f0 [ 471.469095][T10832] ? ieee80211_register_hw+0xf21/0x39f0 [ 471.474701][T10832] ? ieee80211_register_hw+0xf21/0x39f0 [ 471.480419][T10832] ? ieee80211_tasklet_handler+0x20/0x20 [ 471.486141][T10832] ? memset+0x1e/0x40 [ 471.490262][T10832] ? __hrtimer_init+0x186/0x270 [ 471.495161][T10832] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 471.500931][T10832] hwsim_new_radio_nl+0xafa/0xce0 [ 471.506170][T10832] genl_family_rcv_msg_doit+0x22a/0x330 [ 471.511758][T10832] ? end_current_label_crit_section+0x170/0x170 [ 471.518372][T10832] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 471.524639][T10832] ? bpf_lsm_capable+0x5/0x10 [ 471.529363][T10832] ? security_capable+0x85/0xb0 [ 471.534438][T10832] genl_rcv_msg+0x604/0x790 [ 471.539246][T10832] ? genl_bind+0x360/0x360 [ 471.543913][T10832] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 471.550474][T10832] netlink_rcv_skb+0x1fb/0x450 [ 471.555381][T10832] ? genl_bind+0x360/0x360 [ 471.559990][T10832] ? netlink_ack+0x1170/0x1170 [ 471.564874][T10832] ? down_read+0x1a8/0x2d0 [ 471.570124][T10832] genl_rcv+0x24/0x40 [ 471.574318][T10832] netlink_unicast+0x74d/0x8d0 [ 471.579292][T10832] netlink_sendmsg+0x8ad/0xbd0 [ 471.584089][T10832] ? netlink_getsockopt+0x550/0x550 [ 471.589762][T10832] ? aa_sock_msg_perm+0x94/0x150 [ 471.595191][T10832] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 471.600597][T10832] ? security_socket_sendmsg+0x7c/0xa0 [ 471.606344][T10832] ? netlink_getsockopt+0x550/0x550 [ 471.611566][T10832] ____sys_sendmsg+0x5be/0x970 [ 471.616363][T10832] ? __sys_sendmsg_sock+0x30/0x30 [ 471.621520][T10832] ? __import_iovec+0x315/0x500 [ 471.626399][T10832] ? import_iovec+0x6f/0xa0 [ 471.631017][T10832] ___sys_sendmsg+0x2a2/0x360 [ 471.635811][T10832] ? try_to_wake_up+0x67c/0x1080 [ 471.640777][T10832] ? __sys_sendmsg+0x290/0x290 [ 471.645717][T10832] __se_sys_sendmsg+0x1bb/0x2a0 [ 471.650688][T10832] ? __x64_sys_sendmsg+0x80/0x80 [ 471.656034][T10832] ? lockdep_hardirqs_on+0x94/0x140 [ 471.661601][T10832] do_syscall_64+0x4c/0xa0 [ 471.666130][T10832] ? clear_bhb_loop+0x60/0xb0 [ 471.671441][T10832] ? clear_bhb_loop+0x60/0xb0 [ 471.676529][T10832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.682451][T10832] RIP: 0033:0x7ff01b19cdd9 [ 471.687062][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.708450][T10832] RSP: 002b:00007ff01c041028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.717342][T10832] RAX: ffffffffffffffda RBX: 00007ff01b416180 RCX: 00007ff01b19cdd9 [ 471.725437][T10832] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 471.733583][T10832] RBP: 00007ff01b232d69 R08: 0000000000000000 R09: 0000000000000000 [ 471.741789][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.750318][T10832] R13: 00007ff01b416218 R14: 00007ff01b416180 R15: 00007fff6e3e80b8 [ 471.758598][T10832] [ 472.508639][T10865] netlink: 'syz.0.1748': attribute type 25 has an invalid length. [ 475.905068][T10898] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 475.987087][T10898] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1760'. [ 476.087182][T10904] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1759'. [ 477.222590][T10919] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1767'. [ 479.989405][T10919] device hsr_slave_0 left promiscuous mode [ 480.004609][T10919] device hsr_slave_1 left promiscuous mode [ 480.121570][T10921] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1768'. [ 480.265641][T10943] netlink: 'syz.0.1773': attribute type 9 has an invalid length. [ 480.299061][T10943] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1773'. [ 480.697265][T10947] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1775'. [ 480.832367][T10963] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 481.017376][T10963] device veth0_vlan left promiscuous mode [ 481.052412][T10963] device veth0_vlan entered promiscuous mode [ 481.098824][T10963] team0: Device veth0_vlan failed to register rx_handler [ 481.460974][T10962] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 481.494020][T10962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 481.519411][T10975] netlink: 'syz.2.1783': attribute type 4 has an invalid length. [ 481.573937][T10962] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 484.120626][T11011] netlink: 'syz.2.1791': attribute type 25 has an invalid length. [ 485.070271][T11025] netlink: 'syz.0.1797': attribute type 16 has an invalid length. [ 485.094447][T11025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1797'. [ 485.166124][T11025] netlink: 'syz.0.1797': attribute type 10 has an invalid length. [ 485.459010][T11025] device macvlan0 entered promiscuous mode [ 485.737482][T11025] team0: Port device macvlan0 added [ 487.129310][T11041] netlink: 'syz.0.1801': attribute type 4 has an invalid length. [ 487.150009][T11041] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1801'. [ 487.774512][T11044] netlink: 'syz.3.1802': attribute type 4 has an invalid length. [ 488.981209][T11056] netlink: 'syz.0.1805': attribute type 3 has an invalid length. [ 489.070592][T11056] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1805'. [ 490.028375][T11069] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1810'. [ 490.108014][T11069] netlink: zone id is out of range [ 490.164116][T11069] netlink: zone id is out of range [ 490.170187][T11069] netlink: get zone limit has 8 unknown bytes [ 491.195362][T11085] netlink: 'syz.1.1812': attribute type 2 has an invalid length. [ 491.276765][T11084] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 491.344502][T11084] device vxcan1 entered promiscuous mode [ 491.350884][T11084] team0: Device vxcan1 is of different type [ 493.748998][T11113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1821'. [ 495.196650][T11138] netlink: 'syz.4.1829': attribute type 25 has an invalid length. [ 497.535842][T11167] bridge0: port 1(hsr0) entered disabled state [ 497.542709][T11167] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.113292][T11177] netlink: 'syz.2.1837': attribute type 27 has an invalid length. [ 498.167935][T11177] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1837'. [ 498.287861][T11179] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1837'. [ 498.664852][T11179] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1837'. [ 498.700145][T11179] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1837'. [ 498.745253][T11193] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1842'. [ 498.834036][T11193] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 499.515353][T11198] netlink: 'syz.0.1843': attribute type 25 has an invalid length. [ 499.877134][T11202] device pim6reg1 entered promiscuous mode [ 501.719834][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.727243][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.176559][T11237] netlink: 'syz.4.1854': attribute type 3 has an invalid length. [ 504.198229][T11250] netlink: 'syz.4.1859': attribute type 27 has an invalid length. [ 504.244860][T11251] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1859'. [ 504.270515][T11250] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1859'. [ 504.355944][T11251] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1859'. [ 504.355978][T11251] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1859'. [ 504.676807][T11256] tipc: Started in network mode [ 504.712863][T11256] tipc: Node identity 9215a268, cluster identity 4711 [ 504.751238][T11256] tipc: Node number set to 2450891368 [ 505.401871][T11266] netlink: 'syz.4.1864': attribute type 29 has an invalid length. [ 505.447308][T11268] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1865'. [ 507.724997][T11290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1872'. [ 507.842803][T11290] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1872'. [ 508.584592][T11298] netlink: 'syz.1.1875': attribute type 27 has an invalid length. [ 508.622675][T11298] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1875'. [ 508.722776][T11301] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1875'. [ 508.747066][T11301] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1875'. [ 509.951549][T11299] delete_channel: no stack [ 513.652733][T11329] __nla_validate_parse: 1 callbacks suppressed [ 513.652755][T11329] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1883'. [ 513.754389][T11329] openvswitch: netlink: Flow actions attr not present in new flow. [ 514.565080][T11342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1887'. [ 515.076851][T11350] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1889'. [ 515.090149][T11350] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1889'. [ 515.173655][T11350] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1889'. [ 518.297162][T11373] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 521.208648][T11403] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1906'. [ 523.612694][T11428] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1916'. [ 523.760550][T11434] device veth1_macvtap left promiscuous mode [ 524.527938][T11451] netlink: 'syz.0.1922': attribute type 21 has an invalid length. [ 524.553999][T11451] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1922'. [ 525.579653][T11464] FAULT_INJECTION: forcing a failure. [ 525.579653][T11464] name failslab, interval 1, probability 0, space 0, times 1 [ 525.645803][T11464] CPU: 1 PID: 11464 Comm: syz.4.1926 Not tainted syzkaller #0 [ 525.653477][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.663813][T11464] Call Trace: [ 525.667153][T11464] [ 525.670145][T11464] dump_stack_lvl+0x188/0x24e [ 525.675485][T11464] ? show_regs_print_info+0x12/0x12 [ 525.681323][T11464] ? load_image+0x400/0x400 [ 525.686021][T11464] ? __might_sleep+0xd0/0xd0 [ 525.690947][T11464] ? __lock_acquire+0x7d10/0x7d10 [ 525.697811][T11464] should_fail_ex+0x399/0x4d0 [ 525.702772][T11464] should_failslab+0x5/0x20 [ 525.707433][T11464] slab_pre_alloc_hook+0x59/0x310 [ 525.712604][T11464] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 525.718563][T11464] __kmem_cache_alloc_node+0x4f/0x260 [ 525.724078][T11464] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 525.730020][T11464] __kmalloc+0xa0/0x240 [ 525.734415][T11464] tomoyo_realpath_from_path+0xdf/0x5d0 [ 525.740118][T11464] ? tomoyo_path_number_perm+0x205/0x650 [ 525.746128][T11464] tomoyo_path_number_perm+0x22f/0x650 [ 525.751845][T11464] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 525.757556][T11464] ? ksys_write+0x1c0/0x250 [ 525.762259][T11464] ? common_file_perm+0x171/0x1c0 [ 525.767677][T11464] ? __fget_files+0x28/0x4b0 [ 525.772517][T11464] ? __fget_files+0x28/0x4b0 [ 525.777282][T11464] security_file_ioctl+0x6c/0xa0 [ 525.782379][T11464] __se_sys_ioctl+0x48/0x170 [ 525.787219][T11464] do_syscall_64+0x4c/0xa0 [ 525.792068][T11464] ? clear_bhb_loop+0x60/0xb0 [ 525.796897][T11464] ? clear_bhb_loop+0x60/0xb0 [ 525.802071][T11464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.808092][T11464] RIP: 0033:0x7fad5b99cdd9 [ 525.812657][T11464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.833361][T11464] RSP: 002b:00007fad5c7b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.842008][T11464] RAX: ffffffffffffffda RBX: 00007fad5bc16090 RCX: 00007fad5b99cdd9 [ 525.850137][T11464] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000000 [ 525.858331][T11464] RBP: 00007fad5c7b9090 R08: 0000000000000000 R09: 0000000000000000 [ 525.866467][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.874927][T11464] R13: 00007fad5bc16128 R14: 00007fad5bc16090 R15: 00007ffdbfc1ac68 [ 525.883119][T11464] [ 525.924575][T11464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.759221][T11478] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 527.254365][T11483] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 527.964976][T11501] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 528.098788][T11501] team0: Device hsr_slave_0 failed to register rx_handler [ 528.385144][T11513] FAULT_INJECTION: forcing a failure. [ 528.385144][T11513] name failslab, interval 1, probability 0, space 0, times 0 [ 528.525818][T11513] CPU: 1 PID: 11513 Comm: syz.1.1941 Not tainted syzkaller #0 [ 528.534105][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.544837][T11513] Call Trace: [ 528.548264][T11513] [ 528.551612][T11513] dump_stack_lvl+0x188/0x24e [ 528.556728][T11513] ? show_regs_print_info+0x12/0x12 [ 528.561998][T11513] ? load_image+0x400/0x400 [ 528.566577][T11513] ? __might_sleep+0xd0/0xd0 [ 528.571239][T11513] ? __lock_acquire+0x7d10/0x7d10 [ 528.576448][T11513] should_fail_ex+0x399/0x4d0 [ 528.581579][T11513] should_failslab+0x5/0x20 [ 528.586144][T11513] slab_pre_alloc_hook+0x59/0x310 [ 528.591495][T11513] ? tomoyo_encode+0x27e/0x540 [ 528.596432][T11513] __kmem_cache_alloc_node+0x4f/0x260 [ 528.601890][T11513] ? tomoyo_encode+0x27e/0x540 [ 528.606815][T11513] __kmalloc+0xa0/0x240 [ 528.611070][T11513] tomoyo_encode+0x27e/0x540 [ 528.615762][T11513] tomoyo_realpath_from_path+0x58e/0x5d0 [ 528.621511][T11513] ? tomoyo_path_number_perm+0x205/0x650 [ 528.627668][T11513] tomoyo_path_number_perm+0x22f/0x650 [ 528.633559][T11513] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 528.639178][T11513] ? ksys_write+0x1c0/0x250 [ 528.643940][T11513] ? common_file_perm+0x171/0x1c0 [ 528.649174][T11513] ? __fget_files+0x28/0x4b0 [ 528.653959][T11513] ? __fget_files+0x28/0x4b0 [ 528.658855][T11513] security_file_ioctl+0x6c/0xa0 [ 528.664252][T11513] __se_sys_ioctl+0x48/0x170 [ 528.669118][T11513] do_syscall_64+0x4c/0xa0 [ 528.673656][T11513] ? clear_bhb_loop+0x60/0xb0 [ 528.678531][T11513] ? clear_bhb_loop+0x60/0xb0 [ 528.683642][T11513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.689702][T11513] RIP: 0033:0x7fd8f8b9cdd9 [ 528.694512][T11513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.715516][T11513] RSP: 002b:00007fd8f9a59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.724285][T11513] RAX: ffffffffffffffda RBX: 00007fd8f8e16090 RCX: 00007fd8f8b9cdd9 [ 528.732669][T11513] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000000 [ 528.741176][T11513] RBP: 00007fd8f9a59090 R08: 0000000000000000 R09: 0000000000000000 [ 528.750079][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.758838][T11513] R13: 00007fd8f8e16128 R14: 00007fd8f8e16090 R15: 00007fffc70119b8 [ 528.767844][T11513] [ 529.105249][T11513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.104254][T11543] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1947'. [ 532.280951][T11541] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1948'. [ 534.966722][T11573] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1952'. [ 535.146918][T11573] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 536.193123][T11585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1956'. [ 536.534255][T11591] FAULT_INJECTION: forcing a failure. [ 536.534255][T11591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.610732][T11591] CPU: 0 PID: 11591 Comm: syz.3.1957 Not tainted syzkaller #0 [ 536.618397][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.628609][T11591] Call Trace: [ 536.632642][T11591] [ 536.635645][T11591] dump_stack_lvl+0x188/0x24e [ 536.640423][T11591] ? show_regs_print_info+0x12/0x12 [ 536.645706][T11591] ? load_image+0x400/0x400 [ 536.650307][T11591] ? __lock_acquire+0x7d10/0x7d10 [ 536.655516][T11591] ? snprintf+0xe5/0x140 [ 536.660034][T11591] should_fail_ex+0x399/0x4d0 [ 536.664807][T11591] _copy_to_user+0x2c/0x130 [ 536.669745][T11591] simple_read_from_buffer+0xe3/0x150 [ 536.675526][T11591] proc_fail_nth_read+0x1a6/0x220 [ 536.680756][T11591] ? proc_fault_inject_write+0x310/0x310 [ 536.686661][T11591] ? fsnotify_perm+0x248/0x550 [ 536.691763][T11591] ? proc_fault_inject_write+0x310/0x310 [ 536.697638][T11591] vfs_read+0x2de/0xa00 [ 536.701960][T11591] ? kernel_read+0x1e0/0x1e0 [ 536.706875][T11591] ? __fget_files+0x28/0x4b0 [ 536.711704][T11591] ? __fget_files+0x28/0x4b0 [ 536.716556][T11591] ? __fget_files+0x43d/0x4b0 [ 536.721401][T11591] ? __fdget_pos+0x2ae/0x360 [ 536.726221][T11591] ? ksys_read+0x71/0x250 [ 536.730801][T11591] ksys_read+0x14c/0x250 [ 536.735192][T11591] ? vfs_write+0xa30/0xa30 [ 536.739759][T11591] ? lockdep_hardirqs_on+0x94/0x140 [ 536.745009][T11591] do_syscall_64+0x4c/0xa0 [ 536.749550][T11591] ? clear_bhb_loop+0x60/0xb0 [ 536.754524][T11591] ? clear_bhb_loop+0x60/0xb0 [ 536.759368][T11591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.765599][T11591] RIP: 0033:0x7ff01b15d60e [ 536.770056][T11591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.790620][T11591] RSP: 002b:00007ff01c061fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 536.799083][T11591] RAX: ffffffffffffffda RBX: 00007ff01c0626c0 RCX: 00007ff01b15d60e [ 536.807269][T11591] RDX: 000000000000000f RSI: 00007ff01c0620a0 RDI: 0000000000000006 [ 536.815451][T11591] RBP: 00007ff01c062090 R08: 0000000000000000 R09: 0000000000000000 [ 536.823736][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.831755][T11591] R13: 00007ff01b416128 R14: 00007ff01b416090 R15: 00007fff6e3e80b8 [ 536.840015][T11591] [ 537.392691][T11603] netlink: 'syz.4.1960': attribute type 25 has an invalid length. [ 540.082351][T11644] netlink: 'syz.4.1973': attribute type 25 has an invalid length. [ 540.774764][T11651] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 540.803088][T11652] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 540.938513][T11655] tap0: tun_chr_ioctl cmd 1074025677 [ 540.973868][T11655] tap0: linktype set to 1 [ 541.005674][T11655] tap0: tun_chr_ioctl cmd 1074025677 [ 541.011590][T11655] tap0: linktype set to 23 [ 541.342381][T11661] netlink: 'syz.4.1979': attribute type 3 has an invalid length. [ 541.350381][T11662] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1980'. [ 541.458609][T11661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1979'. [ 542.465701][T11678] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1978'. [ 542.767358][T11683] netlink: 'syz.0.1984': attribute type 3 has an invalid length. [ 542.885617][T11683] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1984'. [ 546.626374][T11723] netlink: 'syz.4.1995': attribute type 3 has an invalid length. [ 546.635208][T11723] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1995'. [ 546.797440][T11728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 546.806922][T11728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1998'. [ 546.904142][T11732] FAULT_INJECTION: forcing a failure. [ 546.904142][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.077376][T11732] CPU: 1 PID: 11732 Comm: syz.0.1997 Not tainted syzkaller #0 [ 547.085461][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.096176][T11732] Call Trace: [ 547.099494][T11732] [ 547.102456][T11732] dump_stack_lvl+0x188/0x24e [ 547.107375][T11732] ? show_regs_print_info+0x12/0x12 [ 547.112887][T11732] ? load_image+0x400/0x400 [ 547.117449][T11732] ? __lock_acquire+0x7d10/0x7d10 [ 547.122526][T11732] ? snprintf+0xe5/0x140 [ 547.126828][T11732] should_fail_ex+0x399/0x4d0 [ 547.131732][T11732] _copy_to_user+0x2c/0x130 [ 547.136507][T11732] simple_read_from_buffer+0xe3/0x150 [ 547.141909][T11732] proc_fail_nth_read+0x1a6/0x220 [ 547.147130][T11732] ? proc_fault_inject_write+0x310/0x310 [ 547.153060][T11732] ? fsnotify_perm+0x248/0x550 [ 547.157845][T11732] ? proc_fault_inject_write+0x310/0x310 [ 547.163607][T11732] vfs_read+0x2de/0xa00 [ 547.167898][T11732] ? kernel_read+0x1e0/0x1e0 [ 547.172721][T11732] ? __fget_files+0x28/0x4b0 [ 547.177385][T11732] ? __fget_files+0x28/0x4b0 [ 547.182120][T11732] ? __fget_files+0x43d/0x4b0 [ 547.186851][T11732] ? __fdget_pos+0x2ae/0x360 [ 547.191490][T11732] ? ksys_read+0x71/0x250 [ 547.195849][T11732] ksys_read+0x14c/0x250 [ 547.200324][T11732] ? vfs_write+0xa30/0xa30 [ 547.205131][T11732] ? lockdep_hardirqs_on+0x94/0x140 [ 547.210612][T11732] do_syscall_64+0x4c/0xa0 [ 547.215226][T11732] ? clear_bhb_loop+0x60/0xb0 [ 547.220266][T11732] ? clear_bhb_loop+0x60/0xb0 [ 547.225058][T11732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.231073][T11732] RIP: 0033:0x7f511bd5d60e [ 547.235959][T11732] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.256182][T11732] RSP: 002b:00007f511cd05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.264707][T11732] RAX: ffffffffffffffda RBX: 00007f511cd066c0 RCX: 00007f511bd5d60e [ 547.272701][T11732] RDX: 000000000000000f RSI: 00007f511cd060a0 RDI: 0000000000000008 [ 547.281149][T11732] RBP: 00007f511cd06090 R08: 0000000000000000 R09: 0000000000000000 [ 547.289691][T11732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.297963][T11732] R13: 00007f511c016128 R14: 00007f511c016090 R15: 00007ffd852b87d8 [ 547.305988][T11732] [ 547.778596][T11744] netlink: 'syz.4.2002': attribute type 10 has an invalid length. [ 547.794227][T11744] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2002'. [ 549.978096][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 549.988487][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 549.998626][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.010701][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.020781][T11792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.028526][T11792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.272050][T11794] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 550.292368][ T7814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.343745][T11794] netlink: 'syz.2.2017': attribute type 1 has an invalid length. [ 550.353120][T11794] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2017'. [ 552.114291][T11792] Bluetooth: hci1: command 0x0409 tx timeout [ 553.362377][ T7814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.587614][ T7814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.606386][T11812] netlink: 'syz.3.2025': attribute type 21 has an invalid length. [ 553.617862][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2025'. [ 553.701927][T11817] netlink: 'syz.4.2023': attribute type 10 has an invalid length. [ 553.753357][T11817] team0: Port device wlan1 added [ 553.771496][T11818] @: port 1(vlan0) entered blocking state [ 553.785434][T11818] @: port 1(vlan0) entered disabled state [ 553.802274][T11818] device vlan0 entered promiscuous mode [ 553.869716][ T7814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.203912][T11792] Bluetooth: hci1: command 0x041b tx timeout [ 554.388885][ T7814] tipc: Left network mode [ 554.407266][T11830] Dead loop on virtual device ip6_vti0, fix it urgently! [ 554.506416][T11789] chnl_net:caif_netlink_parms(): no params data found [ 554.623134][T11831] sctp: [Deprecated]: syz.0.2029 (pid 11831) Use of int in maxseg socket option. [ 554.623134][T11831] Use struct sctp_assoc_value instead [ 555.975552][T11844] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2032'. [ 556.221459][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.238171][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.247462][T11789] device bridge_slave_0 entered promiscuous mode [ 556.273592][T11792] Bluetooth: hci1: command 0x040f tx timeout [ 556.434542][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.452249][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.504421][T11789] device bridge_slave_1 entered promiscuous mode [ 556.665146][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.700071][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.712888][T11872] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 556.727354][T11872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2036'. [ 556.784444][T11872] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 556.998176][T11789] team0: Port device team_slave_0 added [ 557.326256][T11789] team0: Port device team_slave_1 added [ 557.700351][T11901] netlink: 'syz.2.2041': attribute type 10 has an invalid length. [ 557.749496][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.805684][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.935089][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.138628][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.152008][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.258243][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.364460][T11792] Bluetooth: hci1: command 0x0419 tx timeout [ 559.179046][T11934] netlink: 'syz.2.2049': attribute type 21 has an invalid length. [ 559.194347][T11934] netlink: 'syz.2.2049': attribute type 6 has an invalid length. [ 559.243533][T11934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'. [ 559.514882][T11789] device hsr_slave_0 entered promiscuous mode [ 559.539852][T11789] device hsr_slave_1 entered promiscuous mode [ 559.641231][T11789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.652513][T11946] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 559.673701][T11789] Cannot create hsr debugfs directory [ 559.674541][T11946] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2051'. [ 561.377018][T11789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.499088][T11975] netlink: 'syz.3.2059': attribute type 27 has an invalid length. [ 561.527179][T11789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.590477][T11975] netlink: 'syz.3.2059': attribute type 3 has an invalid length. [ 561.608660][ T7814] device hsr_slave_0 left promiscuous mode [ 561.624728][ T7814] device hsr_slave_1 left promiscuous mode [ 561.640086][T11975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2059'. [ 561.653811][ T7814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.679084][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.726750][ T7814] device bridge_slave_1 left promiscuous mode [ 561.734382][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.467728][ T7814] device bridge_slave_0 left promiscuous mode [ 562.474606][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.500263][ T7814] device veth1_macvtap left promiscuous mode [ 562.507748][ T7814] device veth0_macvtap left promiscuous mode [ 563.157324][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.163904][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.458836][ T7814] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 563.592882][ T7814] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.639318][ T7814] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.842307][ T7814] .` (unregistering): (slave batadv0): Releasing backup interface [ 563.909226][ T7814] .` (unregistering): Released all slaves [ 563.995415][T11789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 564.005611][T11983] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 564.029686][T11983] team0: Port device geneve1 added [ 564.052046][T11997] -1: renamed from syzkaller0 [ 564.088829][T11789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 564.730985][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.899334][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.942047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.048199][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.132744][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.186970][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.257393][T11564] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.265786][T11564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.362464][T12028] delete_channel: no stack [ 565.369691][T11564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.464637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.507480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.568541][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.576124][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.628125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.685250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.698719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.765853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.822553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.856288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.898325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.981935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.049162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.104257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 566.154648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.207973][T11789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.702067][T12071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 566.740130][T12071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 566.788063][T12078] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 567.446747][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 567.862501][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.895024][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.930339][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.543861][T12111] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2086'. [ 569.007241][T12106] can: request_module (can-proto-0) failed. [ 569.862329][T12141] netlink: 'syz.0.2091': attribute type 6 has an invalid length. [ 569.932859][T12141] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2091'. [ 570.072433][T12143] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 570.519579][T12143] bridge0: port 3(team0) entered disabled state [ 570.603980][T12143] device team0 left promiscuous mode [ 570.610147][T12143] device team_slave_0 left promiscuous mode [ 570.620655][T12143] device team_slave_1 left promiscuous mode [ 570.637077][T12143] device macvlan0 left promiscuous mode [ 570.647659][T12143] bridge0: port 3(team0) entered disabled state [ 570.719473][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.740950][T12143] bond0: (slave team0): Enslaving as an active interface with an up link [ 570.783582][T12145] netlink: 'syz.0.2091': attribute type 7 has an invalid length. [ 570.803630][T12145] netlink: 'syz.0.2091': attribute type 6 has an invalid length. [ 570.812286][T12146] tap0: tun_chr_ioctl cmd 2147767517 [ 572.781872][T12149] netlink: 'syz.3.2090': attribute type 41 has an invalid length. [ 572.800358][T12149] netlink: 'syz.3.2090': attribute type 4 has an invalid length. [ 572.852127][T12149] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2090'. [ 572.913879][T12149] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 572.971928][T12147] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 572.983761][T12182] netlink: 'syz.0.2098': attribute type 10 has an invalid length. [ 573.043875][T12147] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2092'. [ 573.126659][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.136682][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.188775][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.212943][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.235983][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.252251][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.287282][T11789] device veth0_vlan entered promiscuous mode [ 573.358180][T11789] device veth1_vlan entered promiscuous mode [ 573.654429][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 573.673947][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 573.724664][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.784544][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.807723][T11789] device veth0_macvtap entered promiscuous mode [ 573.845900][T11789] device veth1_macvtap entered promiscuous mode [ 573.910980][T12214] netlink: 'syz.3.2106': attribute type 11 has an invalid length. [ 573.920449][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.952564][T12214] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2106'. [ 573.970697][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.017723][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.048136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 574.075764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 574.135836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 574.142217][T12219] netlink: 'syz.3.2106': attribute type 11 has an invalid length. [ 574.156349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 574.183844][T12219] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2106'. [ 574.220001][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.252275][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.293186][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.332729][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.384771][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.487943][T11789] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.527483][T11789] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.583808][T11789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.592990][T11789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.808640][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.396831][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.428756][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.621848][T11563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 575.710679][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.765380][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.829757][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 576.885525][T12255] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2113'. [ 578.629252][T12269] netlink: 'syz.0.2116': attribute type 21 has an invalid length. [ 578.668344][T12269] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2116'. [ 580.859780][T12298] delete_channel: no stack [ 585.108020][T12370] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 587.378213][T12420] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.2146'. [ 587.466288][T12413] device wlan1 entered promiscuous mode [ 587.498950][T12422] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.2146'. [ 587.839766][T12435] netlink: 'syz.4.2148': attribute type 39 has an invalid length. [ 589.876069][T12480] netlink: 'syz.2.2159': attribute type 21 has an invalid length. [ 590.641595][T12497] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2161'. [ 590.735611][T12497] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 591.591737][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 591.852713][T12487] delete_channel: no stack [ 594.560002][T12587] netlink: 'syz.4.2180': attribute type 17 has an invalid length. [ 594.660476][T12590] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2182'. [ 594.717961][T12590] bridge_slave_1: default FDB implementation only supports local addresses [ 596.118766][T12632] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2189'. [ 596.280506][T12630] netlink: 'syz.5.2191': attribute type 21 has an invalid length. [ 596.300506][T12632] netlink: zone id is out of range [ 596.330753][T12630] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2191'. [ 596.357204][T12632] netlink: zone id is out of range [ 596.403927][T12630] netlink: 'syz.5.2191': attribute type 4 has an invalid length. [ 596.428812][T12632] netlink: zone id is out of range [ 596.463817][T12630] netlink: 'syz.5.2191': attribute type 5 has an invalid length. [ 596.514339][T12632] netlink: zone id is out of range [ 596.514366][T12632] netlink: zone id is out of range [ 596.514384][T12632] netlink: zone id is out of range [ 596.514403][T12632] netlink: zone id is out of range [ 596.514421][T12632] netlink: zone id is out of range [ 596.514439][T12632] netlink: zone id is out of range [ 596.514458][T12632] netlink: zone id is out of range [ 596.558767][T12640] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2193'. [ 596.644126][T12630] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2191'. [ 596.937268][T12644] netlink: 'syz.4.2194': attribute type 1 has an invalid length. [ 597.145815][T12655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2198'. [ 597.333127][T12664] device veth0_vlan left promiscuous mode [ 597.381031][T12664] device veth0_vlan entered promiscuous mode [ 597.429198][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 597.514512][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 597.536934][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 599.478587][T12707] device syzkaller0 entered promiscuous mode [ 605.921674][T12814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2231'. [ 606.283676][T12826] netlink: 'syz.3.2234': attribute type 4 has an invalid length. [ 606.303685][T12826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2234'. [ 609.577863][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2240'. [ 609.654388][T12879] netlink: 'syz.3.2239': attribute type 20 has an invalid length. [ 609.817653][T12884] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2239'. [ 609.831075][T12878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2241'. [ 610.007542][T12884] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2239'. [ 610.293484][T12879] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2239'. [ 610.675681][T12915] netlink: 'syz.5.2246': attribute type 10 has an invalid length. [ 610.770698][T12915] batman_adv: batadv0: Adding interface: netdevsim0 [ 610.813103][T12915] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.901623][T12915] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 611.193623][T12926] netlink: 'syz.4.2249': attribute type 3 has an invalid length. [ 611.201647][T12926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2249'. [ 611.525981][T12928] device syzkaller0 entered promiscuous mode [ 613.311950][T12973] netlink: 'syz.5.2261': attribute type 4 has an invalid length. [ 613.322316][T12973] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2261'. [ 616.691955][T12961] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 616.701621][T12961] bond0: (slave bond_slave_0): Releasing backup interface [ 616.710156][T12961] device bond_slave_0 left promiscuous mode [ 616.981416][T12998] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2268'. [ 617.641715][T13012] netlink: 'syz.0.2269': attribute type 2 has an invalid length. [ 617.683165][T13012] netlink: 'syz.0.2269': attribute type 8 has an invalid length. [ 617.760370][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2269'. [ 618.152439][T13027] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2273'. [ 618.554864][T13027] device wlan1 entered promiscuous mode [ 618.569402][T13037] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2275'. [ 619.002929][T13041] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2274'. [ 619.016617][T13034] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2274'. [ 619.177075][T13061] netlink: 'syz.2.2280': attribute type 25 has an invalid length. [ 620.948690][T13088] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 621.062541][T13088] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2286'. [ 624.596140][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.602703][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.982034][T13158] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 625.227972][T13158] team0: Device wg1 is of different type [ 626.702944][T13189] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 626.738860][T13189] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 626.806609][T13193] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 626.878253][T13189] netlink: 'syz.4.2309': attribute type 29 has an invalid length. [ 628.070428][T13224] syz.5.2320[13224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.070636][T13224] syz.5.2320[13224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.163052][T13229] netlink: 'syz.3.2322': attribute type 2 has an invalid length. [ 628.973957][T13250] netlink: 'syz.3.2325': attribute type 17 has an invalid length. [ 630.116715][T13278] netlink: 'syz.3.2332': attribute type 2 has an invalid length. [ 630.848633][T13278] device 0 entered promiscuous mode [ 630.859116][T13285] netlink: 'syz.3.2332': attribute type 2 has an invalid length. [ 630.873506][T13285] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2332'. [ 631.777256][T13329] netlink: 'syz.3.2346': attribute type 10 has an invalid length. [ 631.850726][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2346'. [ 631.920898][T13329] team0: Port device dummy0 added [ 632.165570][T13331] delete_channel: no stack [ 632.336360][T13346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2353'. [ 632.415989][T13345] device pim6reg1 entered promiscuous mode [ 632.427741][T13349] netlink: 'syz.0.2352': attribute type 7 has an invalid length. [ 632.485415][T13349] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.2352'. [ 632.840848][T13359] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2354'. [ 633.594208][T13386] netlink: 'syz.4.2362': attribute type 2 has an invalid length. [ 633.621983][T13386] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.2362'. [ 638.107735][T13411] netlink: 'syz.5.2370': attribute type 21 has an invalid length. [ 638.129243][T13411] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2370'. [ 644.922380][T13475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2385'. [ 645.110795][T13490] netlink: 'syz.3.2391': attribute type 21 has an invalid length. [ 645.159965][T13496] netlink: 'syz.4.2392': attribute type 12 has an invalid length. [ 645.181331][T13496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2392'. [ 645.334143][T13496] device syzkaller0 entered promiscuous mode [ 645.658605][T13510] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 646.077948][T13510] team0 (unregistering): Port device C removed [ 646.418343][T13530] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.2401'. [ 646.448810][T13529] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.2401'. [ 646.516603][T13510] team0 (unregistering): Port device team_slave_1 removed [ 646.594856][T13510] team0 (unregistering): Port device macvlan0 removed [ 646.678605][T13510] team0 (unregistering): Port device netdevsim0 removed [ 646.809453][T13510] team0 (unregistering): Port device geneve1 removed [ 646.952857][T13510] team0 (unregistering): Port device dummy0 removed [ 647.571739][T13549] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 647.657043][T13549] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2407'. [ 648.423015][T13557] netlink: 'syz.0.2409': attribute type 30 has an invalid length. [ 650.457486][T13567] device lo entered promiscuous mode [ 650.489196][T13567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 650.672728][T13575] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2415'. [ 651.899203][T13612] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 651.933754][T13612] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 651.939830][T13612] syzkaller0: owner set to 0 [ 652.532963][T13638] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 652.566231][T13638] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2435'. [ 652.923547][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 654.004191][T13650] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2439'. [ 655.971077][T13672] netlink: 'syz.3.2442': attribute type 9 has an invalid length. [ 656.000475][T13671] netlink: 'syz.3.2442': attribute type 9 has an invalid length. [ 656.063023][T13672] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2442'. [ 656.063699][T13671] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2442'. [ 656.611113][T13686] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2448'. [ 656.780819][T13693] netlink: 'syz.3.2448': attribute type 29 has an invalid length. [ 656.813862][T13693] netlink: 'syz.3.2448': attribute type 29 has an invalid length. [ 656.846184][T13691] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2449'. [ 656.881139][T13686] netlink: 'syz.3.2448': attribute type 29 has an invalid length. [ 656.961343][T13693] netlink: 'syz.3.2448': attribute type 29 has an invalid length. [ 656.973199][T13691] net_ratelimit: 3660 callbacks suppressed [ 656.973217][T13691] netlink: zone id is out of range [ 657.054228][T13691] netlink: zone id is out of range [ 657.094938][T13703] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2453'. [ 657.143643][T13691] netlink: zone id is out of range [ 657.214274][T13691] netlink: zone id is out of range [ 657.259658][T13691] netlink: zone id is out of range [ 657.304724][T13691] netlink: zone id is out of range [ 657.349391][T13691] netlink: zone id is out of range [ 657.417295][T13691] netlink: zone id is out of range [ 657.456162][T13691] netlink: zone id is out of range [ 657.488303][T13691] netlink: zone id is out of range [ 657.545476][T13710] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2456'. [ 657.661653][T13710] netlink: 'syz.2.2456': attribute type 4 has an invalid length. [ 657.700138][T13710] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2456'. [ 657.777184][T13717] netlink: 'syz.0.2457': attribute type 10 has an invalid length. [ 658.512728][T13730] netlink: 'syz.5.2461': attribute type 10 has an invalid length. [ 658.532623][T13730] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2461'. [ 658.554851][T13730] device team0 entered promiscuous mode [ 658.567372][T13730] device team_slave_0 entered promiscuous mode [ 658.596360][T13730] device team_slave_1 entered promiscuous mode [ 658.702339][T13730] bridge0: port 3(team0) entered blocking state [ 658.737654][T13730] bridge0: port 3(team0) entered disabled state [ 658.818186][T13746] delete_channel: no stack [ 658.822793][T13746] delete_channel: no stack [ 658.992503][T13730] bridge0: port 3(team0) entered blocking state [ 659.001378][T13730] bridge0: port 3(team0) entered forwarding state [ 659.145787][T13746] can: request_module (can-proto-0) failed. [ 659.320221][T13739] device syzkaller0 entered promiscuous mode [ 663.440140][T13792] netlink: 'syz.4.2479': attribute type 10 has an invalid length. [ 663.896452][T13804] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 663.940406][T13804] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2482'. [ 665.402348][T13832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2491'. [ 665.539492][T13834] net_ratelimit: 10 callbacks suppressed [ 665.539511][T13834] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 665.561485][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 3 [ 665.569130][T13835] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 665.600184][T13841] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2493'. [ 665.774983][T13848] netlink: 'syz.4.2495': attribute type 21 has an invalid length. [ 667.585712][T13883] device syzkaller0 entered promiscuous mode [ 667.698055][T13904] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2507'. [ 668.299105][T13925] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2511'. [ 669.801001][T13938] sctp: [Deprecated]: syz.3.2515 (pid 13938) Use of int in maxseg socket option. [ 669.801001][T13938] Use struct sctp_assoc_value instead [ 671.385687][T13921] netlink: 'syz.0.2511': attribute type 21 has an invalid length. [ 671.393957][T13921] netlink: 'syz.0.2511': attribute type 1 has an invalid length. [ 671.402004][T13921] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2511'. [ 671.425874][T13937] netlink: 'syz.3.2515': attribute type 10 has an invalid length. [ 671.614076][T13941] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 671.621974][T13941] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2517'. [ 671.888840][T13941] wlan1: mtu less than device minimum [ 671.949315][T13941] team0: Device wlan1 failed to change mtu [ 672.753851][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 673.207229][T13962] netlink: 'syz.0.2522': attribute type 46 has an invalid length. [ 673.223993][T13961] delete_channel: no stack [ 673.517209][T13965] netlink: 'syz.0.2523': attribute type 3 has an invalid length. [ 673.587714][T13965] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2523'. [ 674.068281][T13980] netlink: 'syz.4.2527': attribute type 29 has an invalid length. [ 674.123938][T13980] netlink: 'syz.4.2527': attribute type 29 has an invalid length. [ 674.463774][T13997] netlink: 'syz.2.2532': attribute type 21 has an invalid length. [ 675.721092][T14038] netlink: 'syz.2.2542': attribute type 3 has an invalid length. [ 675.775115][T14038] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2542'. [ 677.116932][T14069] netlink: 'syz.4.2550': attribute type 29 has an invalid length. [ 677.580142][T14077] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 677.623984][T14077] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 677.804407][T14091] netlink: 'syz.0.2557': attribute type 4 has an invalid length. [ 677.817674][T14086] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2553'. [ 677.892637][T14095] netlink: 'syz.3.2559': attribute type 33 has an invalid length. [ 677.911224][T14095] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2559'. [ 678.185811][T11792] Bluetooth: hci3: ISO packet for unknown connection handle 3849 [ 679.307223][T14135] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2571'. [ 680.634120][T14174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 680.666523][T14174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 680.727270][T14174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 680.762780][T14174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 680.803691][T14185] netlink: 'syz.3.2586': attribute type 10 has an invalid length. [ 680.878348][T14191] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 680.903473][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2587'. [ 680.926561][T14191] device team0 entered promiscuous mode [ 680.966858][T14191] device team_slave_0 entered promiscuous mode [ 680.981698][T14193] netlink: 'syz.2.2588': attribute type 2 has an invalid length. [ 680.983101][T14191] device team_slave_1 entered promiscuous mode [ 681.012443][T14191] device macvlan0 entered promiscuous mode [ 681.094448][T14191] bond0: (slave team0): Releasing backup interface [ 681.151000][T14191] bridge0: port 3(team0) entered blocking state [ 681.171431][T14191] bridge0: port 3(team0) entered disabled state [ 681.596942][T14209] netlink: 'syz.2.2593': attribute type 8 has an invalid length. [ 681.606000][T14209] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2593'. [ 681.638594][T14209] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 681.690496][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.701592][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.817296][T14209] bond0: (slave bridge0): Releasing backup interface [ 681.856551][T14209] device bridge0 left promiscuous mode [ 682.078050][T14221] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2597'. [ 683.317505][T14258] netlink: 'syz.4.2608': attribute type 25 has an invalid length. [ 683.659718][T14268] netlink: 'syz.5.2611': attribute type 29 has an invalid length. [ 685.806839][T14268] netlink: 'syz.5.2611': attribute type 29 has an invalid length. [ 685.828902][T14279] netlink: 'syz.4.2615': attribute type 11 has an invalid length. [ 686.037163][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.043796][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.582756][T14293] __nla_validate_parse: 2 callbacks suppressed [ 686.602763][T14293] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2619'. [ 686.852738][T14301] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2622'. [ 687.150553][T14317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2626'. [ 687.191607][T14319] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2626'. [ 687.326509][T14326] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.2628'. [ 687.955726][ T28] INFO: task syz.1.1950:11554 blocked for more than 143 seconds. [ 687.963866][ T28] Not tainted syzkaller #0 [ 687.969022][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.981155][ T28] task:syz.1.1950 state:D stack:23152 pid:11554 ppid:4267 flags:0x00004002 [ 688.055999][ T28] Call Trace: [ 688.073799][ T28] [ 688.082159][ T28] __schedule+0x11d1/0x40e0 [ 688.111478][ T28] ? __mutex_lock+0x1ab/0xaf0 [ 688.117036][ T28] ? __sched_text_start+0x8/0x8 [ 688.132775][ T28] ? task_work_cancel+0xa1/0x220 [ 688.140467][ T28] ? task_work_cancel_func+0x210/0x210 [ 688.155414][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 688.168127][ T28] ? _free_event+0xfd/0x10a0 [ 688.181344][ T28] schedule+0xb9/0x180 [ 688.191465][ T28] _free_event+0x171/0x10a0 [ 688.207843][ T28] ? perf_mmap+0x13d0/0x13d0 [ 688.221296][ T28] ? perf_mmap+0x13d0/0x13d0 [ 688.228354][ T28] perf_event_release_kernel+0x83e/0x8d0 [ 688.237913][ T28] ? __might_sleep+0xd0/0xd0 [ 688.242785][ T28] ? calc_timer_values+0x410/0x410 [ 688.248903][ T28] ? perf_mmap+0x13d0/0x13d0 [ 688.257824][ T28] perf_release+0x37/0x40 [ 688.262855][ T28] __fput+0x22c/0x920 [ 688.267992][ T28] task_work_run+0x1d0/0x260 [ 688.272984][ T28] ? task_work_cancel+0x220/0x220 [ 688.282366][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 688.292744][ T28] do_exit+0x982/0x2480 [ 688.301168][ T28] ? lock_chain_count+0x20/0x20 [ 688.309342][ T28] ? put_task_struct+0x80/0x80 [ 688.320644][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 688.327626][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 688.333198][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 688.344086][ T28] do_group_exit+0x217/0x2d0 [ 688.349100][ T28] ? _raw_spin_unlock_irq+0x25/0x40 [ 688.356869][ T28] get_signal+0x1272/0x1350 [ 688.361749][ T28] arch_do_signal_or_restart+0xc4/0x1350 [ 688.370231][ T28] ? security_bpf+0x40/0xa0 [ 688.377125][ T28] ? security_bpf+0x7a/0xa0 [ 688.382019][ T28] ? get_sigframe_size+0x10/0x10 [ 688.389498][ T28] ? __sys_bpf+0x5b8/0x780 [ 688.396274][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 688.402719][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 688.411493][ T28] exit_to_user_mode_loop+0x70/0x110 [ 688.421661][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 688.432020][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 688.438171][ T28] do_syscall_64+0x58/0xa0 [ 688.444049][ T28] ? clear_bhb_loop+0x60/0xb0 [ 688.448896][ T28] ? clear_bhb_loop+0x60/0xb0 [ 688.453965][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 688.460181][ T28] RIP: 0033:0x7fd8f8b9cdd9 [ 688.465019][ T28] RSP: 002b:00007fd8f9a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 688.479090][ T28] RAX: fffffffffffffff7 RBX: 00007fd8f8e15fa0 RCX: 00007fd8f8b9cdd9 [ 688.491111][ T28] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 688.499444][ T28] RBP: 00007fd8f8c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 688.507845][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.516274][ T28] R13: 00007fd8f8e16038 R14: 00007fd8f8e15fa0 R15: 00007fffc70119b8 [ 688.524503][ T28] [ 688.543578][ T28] [ 688.543578][ T28] Showing all locks held in the system: [ 688.551638][ T28] 1 lock held by rcu_tasks_kthre/12: [ 688.563948][ T28] #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 688.578472][ T28] 1 lock held by rcu_tasks_trace/13: [ 688.587638][ T28] #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 688.600635][ T28] 1 lock held by khungtaskd/28: [ 688.610931][ T28] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 688.621601][ T28] 2 locks held by getty/4022: [ 688.629984][ T28] #0: ffff88814cd5f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 688.646578][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 688.659813][ T28] 2 locks held by kworker/1:7/4343: [ 688.669010][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 688.680116][ T28] #1: ffffc90004547d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 688.695786][ T28] 2 locks held by syz.2.2631/14330: [ 688.701305][ T28] #0: ffff888055869410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 688.712330][ T28] #1: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 688.727319][ T28] 3 locks held by syz.2.2631/14334: [ 688.732662][ T28] 1 lock held by syz.2.2631/14337: [ 688.738548][ T28] #0: ffffffff8dd4a488 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 688.760770][ T28] 1 lock held by syz.5.2628/14344: [ 688.770884][ T28] #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 688.782401][ T28] 1 lock held by syz.0.2635/14352: [ 688.787962][ T28] #0: ffffffff8dd4a488 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 688.804233][ T28] [ 688.806636][ T28] ============================================= [ 688.806636][ T28] [ 688.819656][ T28] NMI backtrace for cpu 0 [ 688.824055][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 688.831284][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.841470][ T28] Call Trace: [ 688.844779][ T28] [ 688.847750][ T28] dump_stack_lvl+0x188/0x24e [ 688.852486][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 688.857912][ T28] ? show_regs_print_info+0x12/0x12 [ 688.863162][ T28] ? load_image+0x400/0x400 [ 688.867692][ T28] ? vprintk_emit+0x59f/0x6a0 [ 688.872409][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 688.877657][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 688.882703][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 688.888978][ T28] ? _printk+0xda/0x130 [ 688.893168][ T28] ? load_image+0x400/0x400 [ 688.897693][ T28] ? load_image+0x400/0x400 [ 688.902229][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 688.908419][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 688.914514][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 688.920521][ T28] watchdog+0xeee/0xf30 [ 688.924786][ T28] ? watchdog+0x1ed/0xf30 [ 688.929138][ T28] kthread+0x29d/0x330 [ 688.933218][ T28] ? hungtask_pm_notify+0x40/0x40 [ 688.938261][ T28] ? kthread_blkcg+0xd0/0xd0 [ 688.943127][ T28] ret_from_fork+0x1f/0x30 [ 688.947585][ T28] [ 688.951317][ T28] Sending NMI from CPU 0 to CPUs 1: [ 688.956610][ C1] NMI backtrace for cpu 1 [ 688.956622][ C1] CPU: 1 PID: 26 Comm: kworker/1:1 Not tainted syzkaller #0 [ 688.956638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.956647][ C1] Workqueue: events free_obj_work [ 688.956668][ C1] RIP: 0010:unwind_next_frame+0x135a/0x20b0 [ 688.956689][ C1] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 74 45 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 06 4c 01 f0 49 8d 4e 04 48 39 e8 4c 0f 46 e9 49 [ 688.956702][ C1] RSP: 0018:ffffc90000a1f5f0 EFLAGS: 00000a03 [ 688.956722][ C1] RAX: 0000000000000000 RBX: ffffc90000a1f6c8 RCX: dffffc0000000000 [ 688.956733][ C1] RDX: ffffffff8ea2bcac RSI: ffffffff8e31e468 RDI: ffffffff81391adf [ 688.956744][ C1] RBP: ffffffff81712295 R08: 000000000000000c R09: 0000000000000000 [ 688.956754][ C1] R10: dffffc0000000000 R11: fffff52000143ee5 R12: ffffffff8e31e494 [ 688.956765][ C1] R13: ffffffff8e31e468 R14: ffffffff8e31e47c R15: ffffffff8e31e468 [ 688.956776][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 688.956789][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 688.956800][ C1] CR2: 00007fe3ab9ea2f8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 688.956815][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 688.956825][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 688.956835][ C1] Call Trace: [ 688.956840][ C1] [ 688.956852][ C1] ? stack_trace_save+0xa6/0xf0 [ 688.956871][ C1] ? __unwind_start+0x5bb/0x740 [ 688.956890][ C1] ? stack_trace_save+0xf0/0xf0 [ 688.956907][ C1] arch_stack_walk+0x10c/0x140 [ 688.956928][ C1] ? stack_trace_save+0xa6/0xf0 [ 688.956948][ C1] stack_trace_save+0xa6/0xf0 [ 688.956965][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 688.956989][ C1] kasan_set_track+0x4b/0x70 [ 688.957040][ C1] ? kmem_cache_free+0xf7/0x290 [ 688.957055][ C1] kasan_save_free_info+0x2d/0x50 [ 688.957069][ C1] ____kasan_slab_free+0x126/0x1e0 [ 688.957090][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 688.957111][ C1] ? free_obj_work+0x432/0x5a0 [ 688.957126][ C1] kmem_cache_free+0xf7/0x290 [ 688.957146][ C1] free_obj_work+0x432/0x5a0 [ 688.957165][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 688.957185][ C1] ? __free_object+0xa70/0xa70 [ 688.957202][ C1] ? read_lock_is_recursive+0x10/0x10 [ 688.957220][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 688.957237][ C1] ? _raw_spin_unlock+0x40/0x40 [ 688.957254][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 688.957272][ C1] ? process_one_work+0x7b0/0x1160 [ 688.957288][ C1] process_one_work+0x8a2/0x1160 [ 688.957313][ C1] ? worker_detach_from_pool+0x240/0x240 [ 688.957329][ C1] ? _raw_spin_lock_irq+0x86/0xf0 [ 688.957347][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 688.957362][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 688.957378][ C1] ? kthread_data+0x4b/0xc0 [ 688.957402][ C1] worker_thread+0xaa2/0x1270 [ 688.957435][ C1] kthread+0x29d/0x330 [ 688.957448][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 688.957464][ C1] ? kthread_blkcg+0xd0/0xd0 [ 688.957478][ C1] ret_from_fork+0x1f/0x30 [ 688.957507][ C1] [ 689.181682][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 689.181696][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 689.181723][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 689.181734][ T28] Call Trace: [ 689.181740][ T28] [ 689.181747][ T28] dump_stack_lvl+0x188/0x24e [ 689.181780][ T28] ? memcpy+0x3c/0x60 [ 689.181807][ T28] ? show_regs_print_info+0x12/0x12 [ 689.181834][ T28] ? load_image+0x400/0x400 [ 689.181869][ T28] panic+0x2e5/0x730 [ 689.181888][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 689.181918][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 689.181936][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 689.181969][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 689.181998][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 689.182027][ T28] watchdog+0xf2d/0xf30 [ 689.182053][ T28] ? watchdog+0x1ed/0xf30 [ 689.182080][ T28] kthread+0x29d/0x330 [ 689.182095][ T28] ? hungtask_pm_notify+0x40/0x40 [ 689.182115][ T28] ? kthread_blkcg+0xd0/0xd0 [ 689.182134][ T28] ret_from_fork+0x1f/0x30 [ 689.182171][ T28] [ 689.184845][ T28] Kernel Offset: disabled [ 689.395756][ T28] Rebooting in 86400 seconds..