last executing test programs: 22.982349468s ago: executing program 4 (id=10445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 22.6090928s ago: executing program 4 (id=10448): socket$kcm(0x21, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x61]}}, 0x0, 0x3b}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x804) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)}], 0x3, &(0x7f0000000580)=""/70, 0x46}, 0x10040) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029002d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@generic={0x6, "a8bc42746d96be46f16ccaf6f4ead6212256ab7e52b8564b2796524c04243da1ac781c20065f87c15f041682dcca403194cdb36cd45226bffc4f71429bfa98f2e501403d455cb6b80ed89fca9d94ac9f75eb81d491a6834d3b2e909a15ed3f480b71521572cbf8f259293bfcfb94bc8617ef8c8649fc04a44b1b9b00"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r4, 0x20, &(0x7f0000000180)={&(0x7f0000000080)=""/84, 0x54, 0x0, &(0x7f0000000100)=""/71, 0x47}}, 0x10) 21.288467916s ago: executing program 4 (id=10455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff0000000603000000230000000e8000000000000000ac1414aa2c200007"], 0xfdef) 20.854978332s ago: executing program 4 (id=10457): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 20.688367851s ago: executing program 2 (id=10458): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac1414aa2c200007"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000340), 0x8) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104002, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x1, 0xfc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000008000000d492dad18e57806e3da7030c001e34023a5441e9577b94b8c400000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 20.636481724s ago: executing program 3 (id=10460): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 20.088428906s ago: executing program 3 (id=10462): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f10", 0x8}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x57}], 0x2}, 0x4000000) 19.709856308s ago: executing program 2 (id=10466): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x32, &(0x7f0000000040), 0xcf) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x4, 0x4, 0x40000009, 0x0, r3}, 0x50) 19.660471831s ago: executing program 3 (id=10467): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x0, 0x0, 0x0, 0xc, 0xb1, &(0x7f0000000580)=""/177, 0x40f00, 0x13, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x3, 0x5, 0x8, 0x2}, {0x5, 0x5, 0xd, 0x1}]}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x3000080, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000780), &(0x7f0000000940)="1c5717854a9932652c2cab82b82e630fa80c87b515bf867880f2d68f455e3802a2f78c3a5be94653f5dfacb84447560256788a2187d6967f52a9d4d62b04506422f2e096e2d0504f138bfb21a8d1bf60bea7a375034f767321d46d1cf7075702a5500c2e822bf2cf1540018315d6fdcf702c9b114bf9ff91") syz_clone(0x1000000, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xa2, 0xde, 0x1, 0x0, 0x83f6, 0x4800, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180)}, 0x2000, 0x3ff, 0x2, 0x5, 0x5ff61d51, 0x80000001, 0xe2, 0x0, 0x41, 0x0, 0x227f8a92}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xc64bed12b88f3cd4) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0xff, 0x4, 0xcf, 0xd8, 0x0, 0x2, 0x100, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0x9}, 0x8, 0x5, 0x98, 0x3, 0x10001, 0x40, 0xfff, 0x0, 0x0, 0x0, 0x4}, r0, 0x1, r4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0x5, 0x3, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @ldst={0x1, 0x0, 0x0, 0x6, 0x7, 0xffffffffffffffe0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x1, 0x5, 0x2, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000300)='syzkaller\x00', 0x80000001, 0x58, &(0x7f0000000340)=""/88, 0x41000, 0x3, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x5, 0xc}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000840)=[r7, r3], &(0x7f0000000880)=[{0x4, 0x4, 0x6, 0xc}, {0x5, 0x5, 0x9, 0x2}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x4, 0x0, 0x9}, {0x3, 0x2, 0xf, 0x3}, {0x0, 0x1, 0xf, 0x7}], 0x10, 0x8}, 0x94) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) setsockopt$sock_attach_bpf(r8, 0x84, 0x25, 0x0, 0x0) 19.32035971s ago: executing program 2 (id=10470): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800a, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x36, 0x1, 0xe, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r8}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1e0000000300000000000000", @ANYRES32=r8, @ANYRES64=r7], 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x2}, 0x0, 0x0, 0x90, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000280)='./cgroup/../file0/file0/file0\x00', r6}, 0x18) 18.099666431s ago: executing program 2 (id=10474): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$kcm(0x2c, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYRES32=r1], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000004000000bc7900000000000000009924357230f0eb81d7d2b88b886095e9459a65d7d37ff865b4724e16864478351b475f1a5c34143921e86d50b08425a7f7a73738037245624507ee6dc9f8a409d472522a282cdd6cb1f84535fbedeadd0b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000800400000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000200", @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.098535911s ago: executing program 0 (id=10484): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020208000c0003a101000400a100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000001000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.855908085s ago: executing program 0 (id=10476): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x27, 0xa, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f0000000540)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x3, &(0x7f0000000680)=""/47, 0x2f}, 0x2142) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x20, '\x00', 0x0, @sock_ops=0x3, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x100001}, 0x10, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00\a'], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0) 17.461476648s ago: executing program 3 (id=10477): r0 = socket$kcm(0xa, 0x7, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x200}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010103) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r9, 0xffffffffffffffff, 0x0, 0x3f, &(0x7f0000000080)='/proc/sy*/net/ipv4\x00\x00s/sync_\x00l\x91\xce\xc74.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1H\x91%\x11c\x91l,\xec\x8c\xf7'}, 0x30) r10 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x80044944, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000a80)='/proc/sy*/net/ipv4\x00\x00s/sync_\x00l\x91\xce\xc74.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1H\x91%\x11c\x91l,\xec\x8c\xf7') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 17.360898024s ago: executing program 1 (id=10478): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5411, &(0x7f0000000640)) r1 = socket$kcm(0x10, 0xf, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f00000001c0)="83", 0x0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x11, &(0x7f0000000000)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x40305828, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/174, 0xae, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r7, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8a80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xab, &(0x7f0000000180)=""/171, 0x41000, 0x4, '\x00', r5, @fallback=0x2b, r6, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x6, 0x5, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[r8], &(0x7f00000005c0)=[{0x2, 0x1, 0xf, 0x6}, {0x5, 0x4, 0x9, 0x2}, {0x4, 0x5, 0x10, 0x8}], 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r9}, 0xc) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 17.240658581s ago: executing program 0 (id=10479): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000300), 0x0, 0x0, &(0x7f0000000980), 0xffffffff, 0xffffffffffffffff, 0x4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8000) 16.708652572s ago: executing program 1 (id=10480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000000)=""/48}, 0x20) (fail_nth: 4) 16.706497152s ago: executing program 2 (id=10481): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001440)=""/4129, 0x1021}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000115c0)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socket$kcm(0x11, 0x200000000000003, 0x300) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) (async) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001440)=""/4129, 0x1021}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000115c0)=r3, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) (async) 16.307334935s ago: executing program 1 (id=10482): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800001f000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37}, 0x20) 16.22608029s ago: executing program 1 (id=10483): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8100, 0x0, 0x0, 0x8, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffc7b, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bd, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 15.956433765s ago: executing program 2 (id=10485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000300)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x66}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1000002, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) socketpair(0x1d, 0xa, 0x4, &(0x7f0000000080)) close(r2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x605, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5b9, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x886f5cad098fbc1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0xc000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 15.949186606s ago: executing program 4 (id=10486): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800a, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup, 0x36, 0x1, 0xe, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r8}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1e0000000300000000000000", @ANYRES32=r8, @ANYRES64=r7], 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79f4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x2}, 0x0, 0x0, 0x90, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000280)='./cgroup/../file0/file0/file0\x00', r6}, 0x18) 15.88159284s ago: executing program 0 (id=10487): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000008500"/19], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0xf, 0x40, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x26c, 0x0, @perf_bp={&(0x7f0000000300), 0xd}, 0x8872, 0x3, 0x6b6, 0x4, 0x401, 0x2, 0xd, 0x0, 0x400, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c", @ANYRES64=r7], 0x48}, 0x0) r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYRES32=r6, @ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="f5725e74c4256dd8a649e98897eef7deb2a977cf0fd0791e917b9c2bf51f5976cfcb7f6db0bae605ad01f68c0e16b5ec219995cdce7fe2912daacd8e3ddc92ae52ceefd526eccc3f46ca412d6520df91283475c3ebdf71df84ce982c39871fb67ea6e501e4700cbb1ed2a58683731382318b319aa4d40b8942ebab6c84148e883bdd9d346a0a9a31c5fde2ef91ff1f58ea254a689e1e0123058fe9b341220f94643ca6a3b401fb509d3199a27fa0af5fce", @ANYRES64=r0], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000600), 0x2}, 0x12c94, 0x0, 0x4, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r11, &(0x7f00000007c0)}, 0x20) write$cgroup_int(r8, &(0x7f0000000040), 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140097ff29000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 15.720122769s ago: executing program 3 (id=10488): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020208000c0003a101000400a100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000001000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.574195587s ago: executing program 1 (id=10489): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRESOCT, @ANYBLOB='_'], 0x48) 15.341716831s ago: executing program 3 (id=10490): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000fdffffffffff3daf62b9"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x480283, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0xade2}, 0x10, 0x3ff, 0x200000, 0x8, 0x3, 0xcc, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3fc, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r4}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 15.340727101s ago: executing program 4 (id=10491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) (async) close(r3) (async) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x10, 0x0, 0xc}]}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000004c0)="ac", &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) 15.312665663s ago: executing program 0 (id=10492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20000800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0xc, 0x3, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x96, &(0x7f0000000500)=""/150, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000400)=[{0x0, 0x3, 0x3, 0xb}, {0x0, 0x2, 0x7, 0x3}], 0x10, 0x2f8a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187cf073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c"], 0xc0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000680), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 14.932446205s ago: executing program 0 (id=10493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) 14.932050565s ago: executing program 1 (id=10494): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) 207.693679ms ago: executing program 32 (id=10485): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000300)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x66}, [@map_idx={0x18, 0xf, 0x5, 0x0, 0x7}]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x1000002, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) socketpair(0x1d, 0xa, 0x4, &(0x7f0000000080)) close(r2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x605, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5b9, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x886f5cad098fbc1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0xc000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 111.587834ms ago: executing program 33 (id=10490): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000fdffffffffff3daf62b9"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0xa0, 0x0, 0x0, 0x1, 0x480283, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xf, 0xade2}, 0x10, 0x3ff, 0x200000, 0x8, 0x3, 0xcc, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3fc, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000001c0)={r4}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 0s ago: executing program 34 (id=10491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) (async) close(r3) (async) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x10, 0x0, 0xc}]}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000004c0)="ac", &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) kernel console output (not intermixed with test programs): sendmsg_sock+0x30/0x30 [ 1797.911556][ T3162] ? __import_iovec+0x315/0x500 [ 1797.916440][ T3162] ? import_iovec+0x6f/0xa0 [ 1797.920966][ T3162] ___sys_sendmsg+0x2a2/0x360 [ 1797.925664][ T3162] ? try_to_wake_up+0x67c/0x1080 [ 1797.930632][ T3162] ? __sys_sendmsg+0x290/0x290 [ 1797.935594][ T3162] __se_sys_sendmsg+0x1bb/0x2a0 [ 1797.940476][ T3162] ? __x64_sys_sendmsg+0x80/0x80 [ 1797.945463][ T3162] ? lockdep_hardirqs_on+0x94/0x140 [ 1797.950707][ T3162] do_syscall_64+0x4c/0xa0 [ 1797.955152][ T3162] ? clear_bhb_loop+0x60/0xb0 [ 1797.959853][ T3162] ? clear_bhb_loop+0x60/0xb0 [ 1797.964552][ T3162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.970461][ T3162] RIP: 0033:0x7fc90ff9aeb9 [ 1797.974893][ T3162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.994522][ T3162] RSP: 002b:00007fc910f45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.002962][ T3162] RAX: ffffffffffffffda RBX: 00007fc910215fa0 RCX: 00007fc90ff9aeb9 [ 1798.010948][ T3162] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1798.018934][ T3162] RBP: 00007fc910008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1798.026922][ T3162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.034913][ T3162] R13: 00007fc910216038 R14: 00007fc910215fa0 R15: 00007ffc4d987ae8 [ 1798.042934][ T3162] [ 1799.309650][ T3195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8957'. [ 1799.322797][ T3195] netlink: 'syz.4.8957': attribute type 2 has an invalid length. [ 1799.331489][ T3195] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8957'. [ 1799.669085][ T3206] syz.4.8962[3206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1799.672284][ T3206] syz.4.8962[3206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.744636][ T3224] -1: renamed from syzkaller0 [ 1801.389544][ T3236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8972'. [ 1801.405811][ T3236] netlink: 'syz.4.8972': attribute type 2 has an invalid length. [ 1801.414000][ T3236] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.8972'. [ 1803.036814][ T3273] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8983'. [ 1803.524397][ T3280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1803.595845][ T3280] netlink: 'syz.0.8985': attribute type 2 has an invalid length. [ 1803.603650][ T3280] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.8985'. [ 1803.933150][ T3292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8988'. [ 1804.043035][ T3292] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8988'. [ 1804.060340][ T3295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8988'. [ 1804.361890][ T3304] device lo left promiscuous mode [ 1804.540174][ T3309] device lo entered promiscuous mode [ 1805.150279][ T3321] netlink: 'syz.2.8998': attribute type 22 has an invalid length. [ 1805.185157][ T3321] __nla_validate_parse: 1 callbacks suppressed [ 1805.185177][ T3321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8998'. [ 1805.282994][ T3325] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8999'. [ 1805.317990][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1806.658706][ T3361] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.9006'. [ 1807.949918][ T3401] netlink: 'syz.0.9018': attribute type 3 has an invalid length. [ 1807.976792][ T3401] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9018'. [ 1808.261696][ T3412] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9019'. [ 1808.378874][ T3412] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1810.287077][ T3447] netlink: 'syz.0.9031': attribute type 10 has an invalid length. [ 1810.541563][ T3447] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1810.799339][ T3460] netlink: 'syz.3.9034': attribute type 10 has an invalid length. [ 1810.919864][ T3460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.946606][ T3460] device team0 entered promiscuous mode [ 1811.013896][ T3460] device team_slave_1 entered promiscuous mode [ 1811.033066][ T3460] bond0: (slave team0): Enslaving as an active interface with an up link [ 1811.306536][ T3462] device syzkaller0 entered promiscuous mode [ 1815.554151][ T3473] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1815.918182][ T3487] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1816.088528][ T3487] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1816.288746][ T3499] netlink: 'syz.3.9044': attribute type 10 has an invalid length. [ 1816.338622][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.388130][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.921088][ T3505] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9046'. [ 1819.200995][ T3549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1819.211682][ T3546] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9058'. [ 1819.263314][ T3549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1819.302108][ T3552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1819.326569][ T3553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1819.834701][ T3555] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9060'. [ 1819.916024][ T3560] netlink: 'syz.4.9062': attribute type 5 has an invalid length. [ 1820.736960][ T3562] FAULT_INJECTION: forcing a failure. [ 1820.736960][ T3562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.750768][ T3562] CPU: 0 PID: 3562 Comm: syz.1.9063 Not tainted syzkaller #0 [ 1820.758183][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1820.768252][ T3562] Call Trace: [ 1820.771538][ T3562] [ 1820.774481][ T3562] dump_stack_lvl+0x188/0x24e [ 1820.779181][ T3562] ? show_regs_print_info+0x12/0x12 [ 1820.784400][ T3562] ? load_image+0x400/0x400 [ 1820.788937][ T3562] ? __lock_acquire+0x7d10/0x7d10 [ 1820.793981][ T3562] ? __mutex_trylock_common+0x155/0x260 [ 1820.799556][ T3562] should_fail_ex+0x399/0x4d0 [ 1820.804259][ T3562] _copy_from_iter+0x1c0/0x1130 [ 1820.809133][ T3562] ? copyout_mc+0x110/0x110 [ 1820.813666][ T3562] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1820.819668][ T3562] ? lock_chain_count+0x20/0x20 [ 1820.824542][ T3562] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1820.829586][ T3562] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1820.835152][ T3562] ? page_copy_sane+0x4e/0x390 [ 1820.839940][ T3562] copy_page_from_iter+0x77/0x100 [ 1820.844989][ T3562] pipe_write+0x87f/0x1b20 [ 1820.849443][ T3562] ? pipe_read+0x1260/0x1260 [ 1820.854054][ T3562] ? end_current_label_crit_section+0x14b/0x170 [ 1820.860313][ T3562] ? common_file_perm+0x171/0x1c0 [ 1820.865359][ T3562] vfs_write+0x4b1/0xa30 [ 1820.869625][ T3562] ? file_end_write+0x250/0x250 [ 1820.874508][ T3562] ? __fget_files+0x43d/0x4b0 [ 1820.879212][ T3562] ? __fdget_pos+0x1d4/0x360 [ 1820.883818][ T3562] ? ksys_write+0x71/0x250 [ 1820.888266][ T3562] ksys_write+0x14c/0x250 [ 1820.892615][ T3562] ? __ia32_sys_read+0x80/0x80 [ 1820.897403][ T3562] ? lockdep_hardirqs_on+0x94/0x140 [ 1820.902637][ T3562] do_syscall_64+0x4c/0xa0 [ 1820.907065][ T3562] ? clear_bhb_loop+0x60/0xb0 [ 1820.911755][ T3562] ? clear_bhb_loop+0x60/0xb0 [ 1820.916444][ T3562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.922351][ T3562] RIP: 0033:0x7efe6d15b78e [ 1820.926786][ T3562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1820.946576][ T3562] RSP: 002b:00007efe6e11bce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1820.955018][ T3562] RAX: ffffffffffffffda RBX: 00007efe6e11c6c0 RCX: 00007efe6d15b78e [ 1820.963002][ T3562] RDX: 0000000000000029 RSI: 00007efe6e11be90 RDI: 0000000000000002 [ 1820.970988][ T3562] RBP: 00007efe6e11be90 R08: 0000000000000000 R09: 0000000000000000 [ 1820.978978][ T3562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 1820.987044][ T3562] R13: 00007efe6d3e4640 R14: 00007efe6d3db4a0 R15: 0000000000000001 [ 1820.995036][ T3562] [ 1821.398425][ T3570] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9075'. [ 1821.570807][ T3584] netlink: 'syz.1.9067': attribute type 29 has an invalid length. [ 1821.835893][ T3584] netlink: 'syz.1.9067': attribute type 29 has an invalid length. [ 1821.857533][ T3587] netlink: 'syz.1.9067': attribute type 29 has an invalid length. [ 1821.895070][ T3588] netlink: 'syz.1.9067': attribute type 29 has an invalid length. [ 1821.960663][ T3593] netlink: 'syz.1.9067': attribute type 29 has an invalid length. [ 1825.422563][ T3649] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1828.222550][ T3703] ref_ctr_offset mismatch. inode: 0x98a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1828.250415][ T3707] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9097'. [ 1829.337067][ T3727] FAULT_INJECTION: forcing a failure. [ 1829.337067][ T3727] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.370891][ T3727] CPU: 1 PID: 3727 Comm: syz.2.9106 Not tainted syzkaller #0 [ 1829.378349][ T3727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1829.388447][ T3727] Call Trace: [ 1829.391766][ T3727] [ 1829.394730][ T3727] dump_stack_lvl+0x188/0x24e [ 1829.399465][ T3727] ? show_regs_print_info+0x12/0x12 [ 1829.404816][ T3727] ? load_image+0x400/0x400 [ 1829.409389][ T3727] ? __might_sleep+0xd0/0xd0 [ 1829.414002][ T3727] ? __lock_acquire+0x7d10/0x7d10 [ 1829.419060][ T3727] should_fail_ex+0x399/0x4d0 [ 1829.423765][ T3727] should_failslab+0x5/0x20 [ 1829.428290][ T3727] slab_pre_alloc_hook+0x59/0x310 [ 1829.433328][ T3727] ? trace_probe_init+0x2ec/0x380 [ 1829.438369][ T3727] __kmem_cache_alloc_node+0x4f/0x260 [ 1829.443758][ T3727] ? trace_probe_init+0x2ec/0x380 [ 1829.448796][ T3727] __kmalloc_node_track_caller+0x9e/0x230 [ 1829.454545][ T3727] kstrdup+0x37/0x70 [ 1829.458458][ T3727] trace_probe_init+0x2ec/0x380 [ 1829.463329][ T3727] create_local_trace_uprobe+0x17f/0x6e0 [ 1829.468986][ T3727] ? bpf_get_uprobe_info+0x520/0x520 [ 1829.474290][ T3727] ? _copy_from_user+0x10b/0x170 [ 1829.479251][ T3727] perf_uprobe_init+0xef/0x190 [ 1829.484032][ T3727] perf_uprobe_event_init+0xe2/0x170 [ 1829.489348][ T3727] perf_try_init_event+0x12b/0x3d0 [ 1829.494477][ T3727] perf_event_alloc+0xf5c/0x21b0 [ 1829.499429][ T3727] ? perf_event_alloc+0xbe2/0x21b0 [ 1829.504575][ T3727] __se_sys_perf_event_open+0x5db/0x1ec0 [ 1829.510403][ T3727] ? __fget_files+0x43d/0x4b0 [ 1829.515117][ T3727] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1829.520783][ T3727] ? lockdep_hardirqs_on+0x94/0x140 [ 1829.526002][ T3727] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1829.531653][ T3727] do_syscall_64+0x4c/0xa0 [ 1829.536083][ T3727] ? clear_bhb_loop+0x60/0xb0 [ 1829.540777][ T3727] ? clear_bhb_loop+0x60/0xb0 [ 1829.545469][ T3727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.551375][ T3727] RIP: 0033:0x7f1a5279aeb9 [ 1829.555800][ T3727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.575423][ T3727] RSP: 002b:00007f1a536c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1829.583878][ T3727] RAX: ffffffffffffffda RBX: 00007f1a52a16090 RCX: 00007f1a5279aeb9 [ 1829.591879][ T3727] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 1829.599874][ T3727] RBP: 00007f1a536c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.607859][ T3727] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1829.615840][ T3727] R13: 00007f1a52a16128 R14: 00007f1a52a16090 R15: 00007ffe67a42328 [ 1829.623843][ T3727] [ 1829.691801][ T3727] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 1829.740705][ T3721] device syzkaller0 entered promiscuous mode [ 1829.823091][ T3734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1830.411236][ T3734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1830.471251][ T3740] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1832.014991][ T3767] ref_ctr_offset mismatch. inode: 0xb4d offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0xff8c [ 1832.399563][ T3772] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1832.493867][ T3780] device lo left promiscuous mode [ 1832.523836][ T3780] device lo entered promiscuous mode [ 1832.685779][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1832.783259][ T3786] netlink: 'syz.4.9122': attribute type 39 has an invalid length. [ 1834.586177][ T3825] device lo left promiscuous mode [ 1834.616932][ T3825] device lo entered promiscuous mode [ 1834.642498][ T3833] netlink: 'syz.2.9136': attribute type 29 has an invalid length. [ 1834.737860][ T3832] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9135'. [ 1834.789934][ T3833] netlink: 'syz.2.9136': attribute type 29 has an invalid length. [ 1835.144307][ T3839] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1838.274749][ T3894] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9154'. [ 1841.080872][ T3964] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1841.212574][ T3967] delete_channel: no stack [ 1842.041172][ T3990] netlink: 'syz.1.9178': attribute type 40 has an invalid length. [ 1842.587618][ T3996] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1842.930332][ T4006] netlink: 'syz.0.9184': attribute type 10 has an invalid length. [ 1842.952851][ T4006] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9184'. [ 1843.002386][ T4006] device bond0 entered promiscuous mode [ 1843.028780][ T4006] device bond_slave_1 entered promiscuous mode [ 1843.041584][ T4006] device netdevsim0 entered promiscuous mode [ 1843.312460][ T4285] Bluetooth: hci0: ISO packet for unknown connection handle 48 [ 1843.315611][ T4014] netlink: 9015 bytes leftover after parsing attributes in process `syz.1.9187'. [ 1843.429733][ T4013] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1845.386341][ T4070] netlink: 'syz.0.9201': attribute type 3 has an invalid length. [ 1845.419801][ T4070] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9201'. [ 1845.746121][ T4079] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9203'. [ 1848.479678][ T4097] tipc: Started in network mode [ 1848.495085][ T4097] tipc: Node identity 9215a268, cluster identity 4711 [ 1848.501931][ T4097] tipc: Node number set to 2450891368 [ 1848.570424][ T4102] netlink: 'syz.3.9210': attribute type 6 has an invalid length. [ 1848.644152][ T4102] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9210'. [ 1849.706006][ T4098] sctp: [Deprecated]: syz.0.9207 (pid 4098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1849.706006][ T4098] Use struct sctp_sack_info instead [ 1849.820358][ T4125] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9213'. [ 1850.016627][ T4098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9207'. [ 1850.974626][ T4134] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9218'. [ 1852.004681][ T4161] device lo left promiscuous mode [ 1852.046149][ T4161] device lo entered promiscuous mode [ 1852.146712][ T4165] FAULT_INJECTION: forcing a failure. [ 1852.146712][ T4165] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.211797][ T4165] CPU: 0 PID: 4165 Comm: syz.3.9230 Not tainted syzkaller #0 [ 1852.219257][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1852.229355][ T4165] Call Trace: [ 1852.232665][ T4165] [ 1852.235627][ T4165] dump_stack_lvl+0x188/0x24e [ 1852.240354][ T4165] ? show_regs_print_info+0x12/0x12 [ 1852.245593][ T4165] ? load_image+0x400/0x400 [ 1852.250136][ T4165] ? __might_sleep+0xd0/0xd0 [ 1852.254770][ T4165] ? __lock_acquire+0x7d10/0x7d10 [ 1852.259815][ T4165] ? irqentry_enter+0x33/0x50 [ 1852.264512][ T4165] should_fail_ex+0x399/0x4d0 [ 1852.269301][ T4165] should_failslab+0x5/0x20 [ 1852.273826][ T4165] slab_pre_alloc_hook+0x59/0x310 [ 1852.278870][ T4165] ? __get_vm_area_node+0x122/0x330 [ 1852.284087][ T4165] __kmem_cache_alloc_node+0x4f/0x260 [ 1852.289563][ T4165] ? __get_vm_area_node+0x122/0x330 [ 1852.294789][ T4165] kmalloc_node_trace+0x22/0xe0 [ 1852.299752][ T4165] __get_vm_area_node+0x122/0x330 [ 1852.304807][ T4165] ? __local_bh_enable_ip+0x136/0x1c0 [ 1852.310191][ T4165] __vmalloc_node_range+0x357/0x13b0 [ 1852.315490][ T4165] ? netlink_sendmsg+0x5ec/0xbd0 [ 1852.320458][ T4165] ? netlink_insert+0x1034/0x13c0 [ 1852.325522][ T4165] ? free_vm_area+0x50/0x50 [ 1852.330050][ T4165] ? netlink_sendmsg+0x5ec/0xbd0 [ 1852.335004][ T4165] vmalloc+0x75/0x80 [ 1852.338911][ T4165] ? netlink_sendmsg+0x5ec/0xbd0 [ 1852.343862][ T4165] netlink_sendmsg+0x5ec/0xbd0 [ 1852.348737][ T4165] ? netlink_getsockopt+0x550/0x550 [ 1852.353959][ T4165] ? aa_file_perm+0x3ea/0xf00 [ 1852.358649][ T4165] ? aa_file_perm+0x112/0xf00 [ 1852.363338][ T4165] ? aa_sock_msg_perm+0x94/0x150 [ 1852.368288][ T4165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1852.373583][ T4165] ? security_socket_sendmsg+0x7c/0xa0 [ 1852.379062][ T4165] sock_write_iter+0x2d9/0x3e0 [ 1852.383845][ T4165] ? sock_read_iter+0x3a0/0x3a0 [ 1852.388725][ T4165] ? common_file_perm+0x171/0x1c0 [ 1852.393780][ T4165] vfs_write+0x4b1/0xa30 [ 1852.398046][ T4165] ? file_end_write+0x250/0x250 [ 1852.402920][ T4165] ? __fget_files+0x43d/0x4b0 [ 1852.407625][ T4165] ? __fdget_pos+0x1d4/0x360 [ 1852.412226][ T4165] ? ksys_write+0x71/0x250 [ 1852.416664][ T4165] ksys_write+0x14c/0x250 [ 1852.421017][ T4165] ? __ia32_sys_read+0x80/0x80 [ 1852.425800][ T4165] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1852.431703][ T4165] do_syscall_64+0x4c/0xa0 [ 1852.436131][ T4165] ? clear_bhb_loop+0x60/0xb0 [ 1852.440822][ T4165] ? clear_bhb_loop+0x60/0xb0 [ 1852.445542][ T4165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1852.451482][ T4165] RIP: 0033:0x7fc90ff9aeb9 [ 1852.455926][ T4165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.475548][ T4165] RSP: 002b:00007fc910f45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1852.483983][ T4165] RAX: ffffffffffffffda RBX: 00007fc910215fa0 RCX: 00007fc90ff9aeb9 [ 1852.492015][ T4165] RDX: 000000000000fe33 RSI: 00002000000003c0 RDI: 0000000000000009 [ 1852.500513][ T4165] RBP: 00007fc910f45090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.508493][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.516474][ T4165] R13: 00007fc910216038 R14: 00007fc910215fa0 R15: 00007ffc4d987ae8 [ 1852.524474][ T4165] [ 1852.614866][ T4165] syz.3.9230: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1852.680940][ T4165] CPU: 1 PID: 4165 Comm: syz.3.9230 Not tainted syzkaller #0 [ 1852.688408][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1852.698537][ T4165] Call Trace: [ 1852.701858][ T4165] [ 1852.704822][ T4165] dump_stack_lvl+0x188/0x24e [ 1852.709563][ T4165] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1852.716024][ T4165] ? show_regs_print_info+0x12/0x12 [ 1852.721277][ T4165] ? load_image+0x400/0x400 [ 1852.725844][ T4165] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 1852.732304][ T4165] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1852.738867][ T4165] warn_alloc+0x242/0x330 [ 1852.743247][ T4165] ? __get_vm_area_node+0x122/0x330 [ 1852.748499][ T4165] ? zone_watermark_ok_safe+0x270/0x270 [ 1852.754099][ T4165] ? rcu_is_watching+0x11/0xa0 [ 1852.758932][ T4165] ? __get_vm_area_node+0x318/0x330 [ 1852.764265][ T4165] ? __local_bh_enable_ip+0x136/0x1c0 [ 1852.769690][ T4165] __vmalloc_node_range+0x37c/0x13b0 [ 1852.775025][ T4165] ? netlink_insert+0x1034/0x13c0 [ 1852.780123][ T4165] ? free_vm_area+0x50/0x50 [ 1852.784678][ T4165] ? netlink_sendmsg+0x5ec/0xbd0 [ 1852.789641][ T4165] vmalloc+0x75/0x80 [ 1852.793582][ T4165] ? netlink_sendmsg+0x5ec/0xbd0 [ 1852.798539][ T4165] netlink_sendmsg+0x5ec/0xbd0 [ 1852.803333][ T4165] ? netlink_getsockopt+0x550/0x550 [ 1852.808591][ T4165] ? aa_file_perm+0x3ea/0xf00 [ 1852.813280][ T4165] ? aa_file_perm+0x112/0xf00 [ 1852.817966][ T4165] ? aa_sock_msg_perm+0x94/0x150 [ 1852.822913][ T4165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1852.828205][ T4165] ? security_socket_sendmsg+0x7c/0xa0 [ 1852.833683][ T4165] sock_write_iter+0x2d9/0x3e0 [ 1852.838474][ T4165] ? sock_read_iter+0x3a0/0x3a0 [ 1852.843359][ T4165] ? common_file_perm+0x171/0x1c0 [ 1852.848403][ T4165] vfs_write+0x4b1/0xa30 [ 1852.852666][ T4165] ? file_end_write+0x250/0x250 [ 1852.857537][ T4165] ? __fget_files+0x43d/0x4b0 [ 1852.862238][ T4165] ? __fdget_pos+0x1d4/0x360 [ 1852.866848][ T4165] ? ksys_write+0x71/0x250 [ 1852.871293][ T4165] ksys_write+0x14c/0x250 [ 1852.875655][ T4165] ? __ia32_sys_read+0x80/0x80 [ 1852.880459][ T4165] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1852.886368][ T4165] do_syscall_64+0x4c/0xa0 [ 1852.890794][ T4165] ? clear_bhb_loop+0x60/0xb0 [ 1852.895485][ T4165] ? clear_bhb_loop+0x60/0xb0 [ 1852.900174][ T4165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1852.906077][ T4165] RIP: 0033:0x7fc90ff9aeb9 [ 1852.910508][ T4165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.930135][ T4165] RSP: 002b:00007fc910f45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1852.938568][ T4165] RAX: ffffffffffffffda RBX: 00007fc910215fa0 RCX: 00007fc90ff9aeb9 [ 1852.946551][ T4165] RDX: 000000000000fe33 RSI: 00002000000003c0 RDI: 0000000000000009 [ 1852.954535][ T4165] RBP: 00007fc910f45090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.962522][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.970507][ T4165] R13: 00007fc910216038 R14: 00007fc910215fa0 R15: 00007ffc4d987ae8 [ 1852.978504][ T4165] [ 1853.016629][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.023062][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.048369][ T4165] Mem-Info: [ 1853.051590][ T4165] active_anon:19877 inactive_anon:0 isolated_anon:0 [ 1853.051590][ T4165] active_file:21453 inactive_file:40643 isolated_file:0 [ 1853.051590][ T4165] unevictable:768 dirty:201 writeback:0 [ 1853.051590][ T4165] slab_reclaimable:21277 slab_unreclaimable:95574 [ 1853.051590][ T4165] mapped:38863 shmem:10522 pagetables:684 [ 1853.051590][ T4165] sec_pagetables:0 bounce:0 [ 1853.051590][ T4165] kernel_misc_reclaimable:0 [ 1853.051590][ T4165] free:1312987 free_pcp:3167 free_cma:0 [ 1853.369651][ T4165] Node 0 active_anon:94108kB inactive_anon:0kB active_file:85812kB inactive_file:162368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163652kB dirty:804kB writeback:0kB shmem:55252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11840kB pagetables:2736kB sec_pagetables:0kB all_unreclaimable? no [ 1853.474678][ T4165] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1853.609735][ T4165] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1853.619336][ T4178] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9233'. [ 1853.716501][ T4165] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 1853.739403][ T4165] Node 0 DMA32 free:1301604kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:98608kB inactive_anon:0kB active_file:85812kB inactive_file:162368kB unevictable:1536kB writepending:804kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:8608kB local_pcp:5664kB free_cma:0kB [ 1853.927299][ T4165] lowmem_reserve[]: 0 0 1 1 1 [ 1853.932171][ T4165] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1854.117943][ T4165] lowmem_reserve[]: 0 0 0 0 0 [ 1854.122776][ T4165] Node 1 Normal free:3914760kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:6016kB local_pcp:0kB free_cma:0kB [ 1854.257544][ T4165] lowmem_reserve[]: 0 0 0 0 0 [ 1854.262362][ T4165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1854.307937][ T4165] Node 0 DMA32: 4*4kB (UME) 399*8kB (UE) 40*16kB (UME) 1332*32kB (UE) 1661*64kB (UME) 891*128kB (UME) 277*256kB (UM) 89*512kB (UME) 29*1024kB (UM) 12*2048kB (UME) 208*4096kB (UM) = 1289544kB [ 1854.359769][ T4165] Node 0 Normal: 0*4kB 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1854.394119][ T4165] Node 1 Normal: 212*4kB (UE) 51*8kB (UE) 32*16kB (UME) 199*32kB (UME) 71*64kB (UME) 21*128kB (UME) 10*256kB (UME) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 950*4096kB (M) = 3914760kB [ 1854.493339][ T4165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.522731][ T4165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1854.563045][ T4165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1854.604107][ T4165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1854.613473][ T4165] 79818 total pagecache pages [ 1854.654635][ T4165] 0 pages in swap cache [ 1854.658861][ T4165] Free swap = 124996kB [ 1854.663045][ T4165] Total swap = 124996kB [ 1854.704138][ T4165] 2097051 pages RAM [ 1854.708023][ T4165] 0 pages HighMem/MovableOnly [ 1854.734094][ T4165] 415205 pages reserved [ 1854.738322][ T4165] 0 pages cma reserved [ 1855.391877][ T4200] device lo left promiscuous mode [ 1855.460794][ T4202] device lo entered promiscuous mode [ 1855.559960][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1855.598712][ T4211] netlink: 'syz.3.9244': attribute type 10 has an invalid length. [ 1855.614305][ T4211] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9244'. [ 1855.699337][T26225] bond0: (slave syz_tun): Releasing backup interface [ 1855.811926][T14828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1855.823685][T14828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1855.833442][T14828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1855.842109][T14828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1855.850169][T14828] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1855.857639][T14828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1855.919630][ T4488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.409121][ T4488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.555431][ T4227] netlink: 'syz.2.9250': attribute type 10 has an invalid length. [ 1856.857970][ T4240] netlink: 'syz.3.9252': attribute type 1 has an invalid length. [ 1856.909043][ T4227] bond0: (slave bond_slave_0): Releasing backup interface [ 1856.923501][ T4240] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.9252'. [ 1857.303120][ T4488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.405922][ T4488] bond0: (slave netdevsim0): Releasing backup interface [ 1857.422688][ T4488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.769657][ T4212] chnl_net:caif_netlink_parms(): no params data found [ 1857.892449][ T4259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9257'. [ 1857.902044][T14828] Bluetooth: hci0: command 0x0409 tx timeout [ 1858.549344][ T4276] netlink: 'syz.4.9260': attribute type 1 has an invalid length. [ 1858.564966][ T4276] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.9260'. [ 1858.878805][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.909524][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.927885][ T4212] device bridge_slave_0 entered promiscuous mode [ 1859.401914][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.417748][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.451306][ T4212] device bridge_slave_1 entered promiscuous mode [ 1859.786584][ T4212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.801163][ T4212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1859.974258][T14828] Bluetooth: hci0: command 0x041b tx timeout [ 1860.103346][ T4212] team0: Port device team_slave_0 added [ 1860.423828][ T4309] device lo left promiscuous mode [ 1860.441789][ T4315] device lo entered promiscuous mode [ 1860.477564][ T4212] team0: Port device team_slave_1 added [ 1860.876004][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.883278][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.107747][ T4212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1861.136715][ T4212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1861.148465][ T4212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1861.205154][ T4212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.400597][ T4336] netlink: 'syz.3.9273': attribute type 2 has an invalid length. [ 1861.762705][ T4212] device hsr_slave_0 entered promiscuous mode [ 1861.795921][ T4212] device hsr_slave_1 entered promiscuous mode [ 1861.827713][ T4212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1861.843148][ T4351] netlink: 'syz.0.9277': attribute type 2 has an invalid length. [ 1861.890681][ T4212] Cannot create hsr debugfs directory [ 1861.904199][ T4347] netlink: 'syz.0.9277': attribute type 1 has an invalid length. [ 1861.926499][ T4347] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1862.022323][ T4351] device .d entered promiscuous mode [ 1862.073028][T14828] Bluetooth: hci0: command 0x040f tx timeout [ 1862.180257][ T4488] device hsr_slave_0 left promiscuous mode [ 1862.280892][ T4488] device hsr_slave_1 left promiscuous mode [ 1862.317457][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1862.326907][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1862.335319][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1862.353005][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.409348][ T4488] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1862.425129][ T4488] batman_adv: batadv0: Removing interface: veth0_vlan [ 1862.473136][ T4488] device veth1_vlan left promiscuous mode [ 1862.479105][ T4488] device veth0_vlan left promiscuous mode [ 1862.928840][ T4488] team0 (unregistering): Port device geneve1 removed [ 1862.978396][ T4488] team0 (unregistering): Port device geneve0 removed [ 1863.029662][ T4488] team0 (unregistering): Port device macvlan1 removed [ 1863.487903][ T4488] team0 (unregistering): Port device team_slave_1 removed [ 1863.579827][ T4488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.010580][ T4488] bond0 (unregistering): Released all slaves [ 1864.134405][T14828] Bluetooth: hci0: command 0x0419 tx timeout [ 1864.306303][ T4384] device lo left promiscuous mode [ 1865.331093][ T4385] device lo entered promiscuous mode [ 1865.343420][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1867.016656][ T4433] netlink: 'syz.0.9295': attribute type 29 has an invalid length. [ 1867.061108][ T4433] netlink: 'syz.0.9295': attribute type 29 has an invalid length. [ 1867.073225][ T4436] netlink: 'syz.0.9295': attribute type 29 has an invalid length. [ 1867.113687][ T4435] device lo left promiscuous mode [ 1867.136134][ T4435] device lo entered promiscuous mode [ 1867.169942][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1867.250814][ T4212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1867.350906][ T4212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1867.498182][ T4212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1867.541168][ T4212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1868.199373][ T4212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1868.260184][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1868.313043][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1868.357741][ T4212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1868.422562][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1868.435777][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1868.529882][T31162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.537134][T31162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.573978][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1868.608615][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1868.628216][T31162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.635465][T31162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.651357][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1868.762147][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1868.847816][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1868.962405][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1869.005932][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1869.022560][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1869.075681][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1869.180909][ T4212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1869.306613][ T4212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1869.418151][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1869.457722][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1869.522044][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1869.555099][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1869.641358][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1869.680263][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1870.027856][ T4506] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9314'. [ 1870.847672][ T4517] netlink: 'syz.0.9324': attribute type 21 has an invalid length. [ 1870.912583][ T4517] netlink: 'syz.0.9324': attribute type 20 has an invalid length. [ 1870.921816][ T4518] netlink: 'syz.0.9324': attribute type 1 has an invalid length. [ 1870.945849][ T4518] netlink: 'syz.0.9324': attribute type 4 has an invalid length. [ 1870.994620][ T4518] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9324'. [ 1871.089391][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1871.112953][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1871.281287][ T4212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.401245][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1871.425857][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1871.561638][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1871.571271][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1871.600583][ T4212] device veth0_vlan entered promiscuous mode [ 1871.644667][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1871.716590][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1871.757699][ T4212] device veth1_vlan entered promiscuous mode [ 1871.948120][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1871.960420][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1871.985010][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1872.020699][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1872.042011][ T4212] device veth0_macvtap entered promiscuous mode [ 1872.100172][ T4212] device veth1_macvtap entered promiscuous mode [ 1872.136568][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1872.170174][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1872.226588][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.260969][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.306761][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1872.350874][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.395871][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1872.403671][ T4553] netlink: 'syz.4.9320': attribute type 10 has an invalid length. [ 1872.493384][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1872.514613][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1872.544994][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.568813][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.592397][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.623989][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.662163][ T4212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1872.715885][ T4212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1872.750474][ T4212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.831543][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1872.865497][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1872.912271][ T4212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.941572][ T4212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.998950][ T4212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.045200][ T4212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.191137][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.469653][T20309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.559889][T20309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.707211][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1873.765801][T31164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.793381][T31164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.843284][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1875.290706][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.574894][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 1876.265700][T14828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1876.296834][T14828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1876.307151][T14828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1876.325041][T14828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1876.334671][T14828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1876.342144][T14828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1876.688246][T32276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.117061][T32276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.548885][T32276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.813535][T32276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.374229][T14828] Bluetooth: hci1: command 0x0409 tx timeout [ 1878.485534][T32276] device 0 left promiscuous mode [ 1878.889991][ T4692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1880.454221][T14828] Bluetooth: hci1: command 0x041b tx timeout [ 1881.383165][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 1881.417516][ T4692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9359'. [ 1881.545421][T32276] tipc: Left network mode [ 1881.929752][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.994528][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.032356][ T4645] device bridge_slave_0 entered promiscuous mode [ 1882.127188][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.174216][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.203444][ T4645] device bridge_slave_1 entered promiscuous mode [ 1882.345322][ T4738] netlink: 'syz.4.9366': attribute type 21 has an invalid length. [ 1882.364271][ T4738] netlink: 'syz.4.9366': attribute type 20 has an invalid length. [ 1882.373763][ T4736] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9375'. [ 1882.555634][T14828] Bluetooth: hci1: command 0x040f tx timeout [ 1882.596861][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1882.625944][ T4739] netlink: 'syz.4.9366': attribute type 1 has an invalid length. [ 1882.665414][ T4739] netlink: 'syz.4.9366': attribute type 4 has an invalid length. [ 1882.755545][ T4739] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1883.337391][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1883.675679][ T4769] net_ratelimit: 136 callbacks suppressed [ 1883.675700][ T4769] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1883.688135][ T4769] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1883.743658][ T4645] team0: Port device team_slave_0 added [ 1883.771879][ T4645] team0: Port device team_slave_1 added [ 1883.961002][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1884.040527][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.099350][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1884.294634][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1884.314507][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1884.423099][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1884.435350][ T4777] netlink: 'syz.4.9376': attribute type 10 has an invalid length. [ 1884.457417][ T4777] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9376'. [ 1884.614454][T14828] Bluetooth: hci1: command 0x0419 tx timeout [ 1884.867488][ T4784] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1884.881646][ T4792] netlink: 'syz.2.9381': attribute type 10 has an invalid length. [ 1885.008212][ T4645] device hsr_slave_0 entered promiscuous mode [ 1885.023808][ T4645] device hsr_slave_1 entered promiscuous mode [ 1889.191408][T32276] device hsr_slave_0 left promiscuous mode [ 1889.260483][T32276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.290221][T32276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1889.360988][T32276] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1889.386750][T32276] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1889.482281][T32276] device veth1_macvtap left promiscuous mode [ 1889.497327][T32276] device veth0_macvtap left promiscuous mode [ 1890.816306][T32276] device team_slave_1 left promiscuous mode [ 1890.850258][T32276] team0 (unregistering): Port device team_slave_1 removed [ 1891.312848][T32276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1891.321861][T32276] device bond_slave_1 left promiscuous mode [ 1891.391464][T32276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1891.442878][T32276] device bond_slave_0 left promiscuous mode [ 1891.831385][T32276] bond0 (unregistering): (slave team0): Releasing backup interface [ 1891.839974][T32276] device team0 left promiscuous mode [ 1891.878026][T32276] bond0 (unregistering): Released all slaves [ 1891.939342][ T4840] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9393'. [ 1892.856231][ T4910] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9417'. [ 1893.375072][ T4645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1893.438110][ T4645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1893.528574][ T4645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1893.570868][ T4645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1893.930211][ T4934] netlink: 'syz.4.9420': attribute type 21 has an invalid length. [ 1894.119799][ T4934] netlink: 'syz.4.9420': attribute type 1 has an invalid length. [ 1894.197095][ T4940] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9421'. [ 1894.630515][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1894.739244][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1894.774804][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1894.832506][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1894.940112][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1894.969978][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1895.034718][T20316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.041926][T20316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1895.244237][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1895.282623][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1895.405273][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1895.465875][T20316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.473044][T20316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1895.622728][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1895.709806][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1896.424307][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1896.468912][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1896.906760][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1897.185655][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1897.238335][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1897.309719][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1897.444297][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1897.544970][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1897.618877][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1897.689727][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1899.675636][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1899.747476][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1899.783845][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1899.930219][ T5004] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9438'. [ 1900.033133][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1900.043211][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1900.079249][ T4645] device veth0_vlan entered promiscuous mode [ 1900.100583][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1900.133983][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1900.161866][ T4645] device veth1_vlan entered promiscuous mode [ 1900.245021][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1900.269879][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1900.321567][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1900.626509][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1900.645344][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1900.696641][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1900.750765][ T4645] device veth0_macvtap entered promiscuous mode [ 1900.795285][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1900.847510][ T4645] device veth1_macvtap entered promiscuous mode [ 1900.995818][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.124231][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.206046][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.258812][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.359098][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1901.390041][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1901.449728][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1901.498448][ T5022] netlink: 'syz.1.9442': attribute type 10 has an invalid length. [ 1901.523343][ T5022] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9442'. [ 1903.199185][ T5030] FAULT_INJECTION: forcing a failure. [ 1903.199185][ T5030] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.226773][ T5030] CPU: 1 PID: 5030 Comm: syz.2.9443 Not tainted syzkaller #0 [ 1903.234222][ T5030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1903.244312][ T5030] Call Trace: [ 1903.247657][ T5030] [ 1903.250626][ T5030] dump_stack_lvl+0x188/0x24e [ 1903.255358][ T5030] ? show_regs_print_info+0x12/0x12 [ 1903.260605][ T5030] ? load_image+0x400/0x400 [ 1903.265150][ T5030] ? __might_sleep+0xd0/0xd0 [ 1903.269773][ T5030] ? __lock_acquire+0x7d10/0x7d10 [ 1903.274845][ T5030] should_fail_ex+0x399/0x4d0 [ 1903.279573][ T5030] should_failslab+0x5/0x20 [ 1903.284114][ T5030] slab_pre_alloc_hook+0x59/0x310 [ 1903.289173][ T5030] ? kvmalloc_node+0x6c/0x180 [ 1903.293894][ T5030] __kmem_cache_alloc_node+0x4f/0x260 [ 1903.299328][ T5030] ? kvmalloc_node+0x6c/0x180 [ 1903.304044][ T5030] __kmalloc_node+0xa0/0x240 [ 1903.308677][ T5030] kvmalloc_node+0x6c/0x180 [ 1903.313258][ T5030] page_pool_create+0x1e7/0x5c0 [ 1903.318166][ T5030] bpf_test_run_xdp_live+0x223/0x1a90 [ 1903.323619][ T5030] ? 0xffffffffa0004440 [ 1903.327797][ T5030] ? text_poke_copy+0x79/0x90 [ 1903.332478][ T5030] ? 0xffffffffa0004440 [ 1903.336644][ T5030] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1903.342588][ T5030] ? 0xffffffffa0004440 [ 1903.346793][ T5030] ? xdp_convert_md_to_buff+0x330/0x330 [ 1903.352407][ T5030] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1903.358666][ T5030] ? bpf_test_init+0x119/0x140 [ 1903.363446][ T5030] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1903.368928][ T5030] bpf_prog_test_run_xdp+0x736/0xf10 [ 1903.374237][ T5030] ? dev_put+0x80/0x80 [ 1903.378331][ T5030] ? dev_put+0x80/0x80 [ 1903.382416][ T5030] bpf_prog_test_run+0x31e/0x390 [ 1903.387386][ T5030] __sys_bpf+0x62b/0x780 [ 1903.391667][ T5030] ? bpf_link_show_fdinfo+0x380/0x380 [ 1903.397104][ T5030] ? lock_chain_count+0x20/0x20 [ 1903.402000][ T5030] __x64_sys_bpf+0x78/0x90 [ 1903.406445][ T5030] do_syscall_64+0x4c/0xa0 [ 1903.410889][ T5030] ? clear_bhb_loop+0x60/0xb0 [ 1903.415622][ T5030] ? clear_bhb_loop+0x60/0xb0 [ 1903.420328][ T5030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1903.426238][ T5030] RIP: 0033:0x7f1a5279aeb9 [ 1903.430665][ T5030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.450290][ T5030] RSP: 002b:00007f1a536c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1903.458721][ T5030] RAX: ffffffffffffffda RBX: 00007f1a52a16090 RCX: 00007f1a5279aeb9 [ 1903.466706][ T5030] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1903.474692][ T5030] RBP: 00007f1a536c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.482675][ T5030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.490655][ T5030] R13: 00007f1a52a16128 R14: 00007f1a52a16090 R15: 00007ffe67a42328 [ 1903.498653][ T5030] [ 1903.531271][ T5030] page_pool_create() gave up with errno -12 [ 1904.109516][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1904.122380][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1904.134448][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.148666][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.163083][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.200529][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.223540][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.250569][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.262279][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1904.286572][ T4645] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.307231][ T4645] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.345997][ T4645] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.355594][ T4645] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1904.428886][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1904.487700][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1904.544933][ T5053] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1904.978311][T20316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.020607][T20316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.125070][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1905.171943][ T5070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1905.181556][ T4490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1905.236415][ T4490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.278292][ T5070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1905.388232][T20316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1905.720552][ T5073] device syzkaller0 entered promiscuous mode [ 1906.014975][ T5090] netlink: 143876 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1906.063350][ T5090] netlink: zone id is out of range [ 1906.090925][ T5090] netlink: zone id is out of range [ 1906.134772][ T5090] netlink: zone id is out of range [ 1906.196537][ T5090] netlink: zone id is out of range [ 1906.371078][ T5090] netlink: zone id is out of range [ 1906.405245][ T5090] netlink: zone id is out of range [ 1906.410720][ T5090] netlink: zone id is out of range [ 1906.418589][ T5090] netlink: zone id is out of range [ 1906.428614][ T5090] netlink: zone id is out of range [ 1906.442604][ T5090] netlink: zone id is out of range [ 1912.974150][ T5135] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9463'. [ 1912.983473][ T5139] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9465'. [ 1913.807348][ T5168] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.9475'. [ 1914.451553][ T5183] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1914.559109][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.559181][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.460807][ T5203] netlink: 'syz.0.9487': attribute type 5 has an invalid length. [ 1915.552983][ T5209] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1915.684979][ T5193] -1: renamed from syzkaller0 [ 1920.482192][ T5235] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9495'. [ 1920.491963][ T5234] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1920.657476][ T5257] netlink: 'syz.0.9503': attribute type 27 has an invalid length. [ 1920.676724][ T5257] net_ratelimit: 136 callbacks suppressed [ 1920.676744][ T5257] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1921.326172][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9507'. [ 1922.391797][ T5294] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9515'. [ 1923.234539][ T5295] netlink: 'syz.2.9514': attribute type 10 has an invalid length. [ 1923.280146][ T5295] team0: Port device macvlan1 added [ 1923.909723][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1923.953735][ T5310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1923.991710][ T5312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1925.016421][ T5322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9521'. [ 1926.249018][ T5335] netlink: 'syz.0.9527': attribute type 10 has an invalid length. [ 1926.488927][ T5335] team0: Port device wlan1 added [ 1927.890114][ T5376] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1928.723687][ T5393] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1928.772555][ T5393] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9545'. [ 1928.857705][ T5390] netlink: 'syz.3.9544': attribute type 10 has an invalid length. [ 1929.118628][ T5390] team0: Port device wlan1 added [ 1930.520757][ T5430] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9561'. [ 1930.743039][ T5437] netlink: 'syz.1.9564': attribute type 10 has an invalid length. [ 1930.857183][ T5439] FAULT_INJECTION: forcing a failure. [ 1930.857183][ T5439] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.893535][ T5439] CPU: 0 PID: 5439 Comm: syz.3.9565 Not tainted syzkaller #0 [ 1930.900984][ T5439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1930.911054][ T5439] Call Trace: [ 1930.914342][ T5439] [ 1930.917285][ T5439] dump_stack_lvl+0x188/0x24e [ 1930.922001][ T5439] ? show_regs_print_info+0x12/0x12 [ 1930.927214][ T5439] ? load_image+0x400/0x400 [ 1930.931734][ T5439] should_fail_ex+0x399/0x4d0 [ 1930.936430][ T5439] should_failslab+0x5/0x20 [ 1930.940956][ T5439] slab_pre_alloc_hook+0x59/0x310 [ 1930.945996][ T5439] kmem_cache_alloc_node+0x5a/0x320 [ 1930.951205][ T5439] ? __alloc_skb+0xfc/0x7e0 [ 1930.955725][ T5439] __alloc_skb+0xfc/0x7e0 [ 1930.960073][ T5439] netlink_dump+0x1ee/0xd00 [ 1930.964604][ T5439] ? netlink_lookup+0x200/0x200 [ 1930.969475][ T5439] ? kasan_save_alloc_info+0x7/0x30 [ 1930.974689][ T5439] ? genl_start+0x2e3/0x4a0 [ 1930.979221][ T5439] __netlink_dump_start+0x537/0x6f0 [ 1930.984439][ T5439] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1930.990178][ T5439] ? genl_rcv_msg+0x790/0x790 [ 1930.994869][ T5439] ? aa_get_newest_label+0xf9/0x5b0 [ 1931.000076][ T5439] ? end_current_label_crit_section+0x170/0x170 [ 1931.006326][ T5439] ? genl_family_rcv_msg_doit+0x330/0x330 [ 1931.012059][ T5439] ? genl_start+0x4a0/0x4a0 [ 1931.016573][ T5439] ? genl_lock_dumpit+0x90/0x90 [ 1931.021461][ T5439] ? apparmor_capable+0x12c/0x190 [ 1931.026503][ T5439] ? bpf_lsm_capable+0x5/0x10 [ 1931.031194][ T5439] ? security_capable+0x85/0xb0 [ 1931.036064][ T5439] genl_rcv_msg+0x5cb/0x790 [ 1931.040593][ T5439] ? lockdep_hardirqs_on+0x94/0x140 [ 1931.045813][ T5439] ? genl_bind+0x360/0x360 [ 1931.050251][ T5439] ? l2tp_nl_cmd_session_modify+0x600/0x600 [ 1931.056242][ T5439] ? l2tp_nl_cmd_session_get+0x1e0/0x1e0 [ 1931.061894][ T5439] netlink_rcv_skb+0x1fb/0x450 [ 1931.066676][ T5439] ? genl_bind+0x360/0x360 [ 1931.071108][ T5439] ? netlink_ack+0x1170/0x1170 [ 1931.075899][ T5439] ? down_read+0x1a8/0x2d0 [ 1931.080337][ T5439] genl_rcv+0x24/0x40 [ 1931.084332][ T5439] netlink_unicast+0x74d/0x8d0 [ 1931.089117][ T5439] netlink_sendmsg+0x8ad/0xbd0 [ 1931.093903][ T5439] ? netlink_getsockopt+0x550/0x550 [ 1931.099124][ T5439] ? netlink_getsockopt+0x550/0x550 [ 1931.104338][ T5439] ____sys_sendmsg+0x5be/0x970 [ 1931.109123][ T5439] ? __sys_sendmsg_sock+0x30/0x30 [ 1931.114159][ T5439] ? __import_iovec+0x315/0x500 [ 1931.119029][ T5439] ? import_iovec+0x6f/0xa0 [ 1931.123542][ T5439] ___sys_sendmsg+0x2a2/0x360 [ 1931.128237][ T5439] ? __sys_sendmsg+0x290/0x290 [ 1931.133022][ T5439] ? irqentry_enter+0x33/0x50 [ 1931.137742][ T5439] __se_sys_sendmsg+0x1bb/0x2a0 [ 1931.142612][ T5439] ? __x64_sys_sendmsg+0x80/0x80 [ 1931.147588][ T5439] ? lockdep_hardirqs_on+0x94/0x140 [ 1931.152810][ T5439] do_syscall_64+0x4c/0xa0 [ 1931.157239][ T5439] ? clear_bhb_loop+0x60/0xb0 [ 1931.161927][ T5439] ? clear_bhb_loop+0x60/0xb0 [ 1931.166640][ T5439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1931.172571][ T5439] RIP: 0033:0x7f571c39aeb9 [ 1931.177019][ T5439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.196652][ T5439] RSP: 002b:00007f571d2ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1931.205082][ T5439] RAX: ffffffffffffffda RBX: 00007f571c615fa0 RCX: 00007f571c39aeb9 [ 1931.213064][ T5439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1931.221045][ T5439] RBP: 00007f571d2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.229059][ T5439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.237036][ T5439] R13: 00007f571c616038 R14: 00007f571c615fa0 R15: 00007fff439dabc8 [ 1931.245129][ T5439] [ 1931.602402][ T5437] team0: Port device wlan1 added [ 1931.611288][ T5451] netlink: 'syz.3.9568': attribute type 21 has an invalid length. [ 1931.633942][ T5451] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9568'. [ 1932.396022][ T5462] netlink: 'syz.0.9572': attribute type 7 has an invalid length. [ 1933.969471][ T5500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9581'. [ 1935.718685][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1935.728774][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1935.744611][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1935.759262][ T4213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1935.767580][ T4213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1935.776223][ T4213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1937.814867][T14828] Bluetooth: hci3: command 0x0409 tx timeout [ 1938.298806][ T5529] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9590'. [ 1938.345021][T27466] bond0: (slave syz_tun): Releasing backup interface [ 1938.374450][ T5560] netlink: 'syz.3.9600': attribute type 10 has an invalid length. [ 1938.393202][ T5560] device syz_tun entered promiscuous mode [ 1938.443542][ T5560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1938.866384][ T5569] netlink: 'syz.1.9603': attribute type 25 has an invalid length. [ 1938.889381][ T5569] netlink: 'syz.1.9603': attribute type 28 has an invalid length. [ 1939.236479][ T5543] chnl_net:caif_netlink_parms(): no params data found [ 1939.551246][ T5543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.654612][ T5543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.705573][ T5543] device bridge_slave_0 entered promiscuous mode [ 1939.725727][ T5543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.739773][ T5543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.765584][ T5543] device bridge_slave_1 entered promiscuous mode [ 1939.791176][ T5600] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9612'. [ 1939.821501][ T5601] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9611'. [ 1939.894419][T14828] Bluetooth: hci3: command 0x041b tx timeout [ 1939.898157][ T5543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1939.942101][ T5543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1939.973961][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1940.001392][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.106172][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1940.119261][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.604993][ T5605] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1940.631372][ T5543] team0: Port device team_slave_0 added [ 1940.657952][ T5543] team0: Port device team_slave_1 added [ 1940.693323][ T5543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.701851][ T5543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.734966][ T5543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.772680][ T5543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1940.791194][ T5543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1940.863711][ T5543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1940.981177][ T5543] device hsr_slave_0 entered promiscuous mode [ 1941.025065][ T5543] device hsr_slave_1 entered promiscuous mode [ 1941.044318][ T5543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1941.057386][ T5543] Cannot create hsr debugfs directory [ 1941.616620][ T5543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.897573][ T5543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.974501][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 1942.185351][ T5543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.410559][ T5543] bond0: (slave netdevsim0): Releasing backup interface [ 1942.448581][ T5543] device netdevsim0 left promiscuous mode [ 1942.462128][ T5543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1942.808085][ T5543] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1942.841857][ T5543] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1942.852630][ T5543] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1942.863707][ T5543] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1942.996471][ T5543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1943.047304][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1943.060682][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1943.090903][ T5543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1943.123568][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1943.156435][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1943.180438][ T4488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.187645][ T4488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1943.217839][ T4488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1943.249780][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1943.272652][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1943.299595][T20309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1943.306835][T20309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1943.346771][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1943.369328][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1943.410549][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1943.431004][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1943.452942][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1943.473043][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1943.526956][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1943.570945][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1943.594902][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1943.630970][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1943.662682][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1943.708926][ T5543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1943.731050][ T5683] netlink: 'syz.1.9635': attribute type 21 has an invalid length. [ 1944.054311][ T4213] Bluetooth: hci3: command 0x0419 tx timeout [ 1945.155776][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1945.163303][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1945.210160][ T5543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.281289][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1945.296433][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1945.343362][ T5543] device veth0_vlan entered promiscuous mode [ 1945.360336][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1945.374955][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1945.398879][ T5543] device veth1_vlan entered promiscuous mode [ 1945.417093][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1945.428590][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1945.447380][ T5703] ref_ctr_offset mismatch. inode: 0xeb offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0xfff6 [ 1945.449436][T32272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1945.522600][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1945.544596][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1945.557769][T32276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1945.579825][ T5543] device veth0_macvtap entered promiscuous mode [ 1945.617493][ T5543] device veth1_macvtap entered promiscuous mode [ 1945.676466][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.714101][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.765724][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.793685][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.843341][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1945.878720][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1945.919812][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1946.239889][ T5722] netlink: 'syz.2.9647': attribute type 29 has an invalid length. [ 1946.608592][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1946.639653][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1946.663088][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1946.673270][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1946.697222][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1946.716688][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.747116][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1946.760749][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.782828][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1946.799292][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1946.812066][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1946.822479][ T5722] netlink: 'syz.2.9647': attribute type 29 has an invalid length. [ 1946.849912][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1946.895163][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1946.937216][ T5543] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.954096][ T5543] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.973117][ T5543] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.996287][ T5543] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.369709][T20309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.414214][T20309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.477020][T20309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1947.543593][T32273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.578781][T32273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.662887][T31162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1947.897205][ T5754] netlink: 'syz.1.9663': attribute type 10 has an invalid length. [ 1947.965612][ T5754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9663'. [ 1950.914674][ T5803] FAULT_INJECTION: forcing a failure. [ 1950.914674][ T5803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1950.943701][ T5803] CPU: 0 PID: 5803 Comm: syz.3.9670 Not tainted syzkaller #0 [ 1950.951162][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1950.961258][ T5803] Call Trace: [ 1950.964575][ T5803] [ 1950.967539][ T5803] dump_stack_lvl+0x188/0x24e [ 1950.972252][ T5803] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1950.978567][ T5803] ? show_regs_print_info+0x12/0x12 [ 1950.983805][ T5803] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1950.990001][ T5803] ? dump_stack+0x5/0x12 [ 1950.994290][ T5803] should_fail_ex+0x399/0x4d0 [ 1950.999023][ T5803] _copy_to_user+0x2c/0x130 [ 1951.003564][ T5803] map_get_next_key+0x4fa/0x620 [ 1951.008457][ T5803] ? map_get_next_key+0x2d4/0x620 [ 1951.013523][ T5803] __sys_bpf+0x466/0x780 [ 1951.017819][ T5803] ? bpf_link_show_fdinfo+0x380/0x380 [ 1951.023271][ T5803] __x64_sys_bpf+0x78/0x90 [ 1951.027734][ T5803] do_syscall_64+0x4c/0xa0 [ 1951.032188][ T5803] ? clear_bhb_loop+0x60/0xb0 [ 1951.036902][ T5803] ? clear_bhb_loop+0x60/0xb0 [ 1951.041637][ T5803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1951.047576][ T5803] RIP: 0033:0x7f571c39aeb9 [ 1951.052023][ T5803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.071677][ T5803] RSP: 002b:00007f571d2ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1951.080137][ T5803] RAX: ffffffffffffffda RBX: 00007f571c615fa0 RCX: 00007f571c39aeb9 [ 1951.088143][ T5803] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000004 [ 1951.096164][ T5803] RBP: 00007f571d2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.104171][ T5803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1951.112169][ T5803] R13: 00007f571c616038 R14: 00007f571c615fa0 R15: 00007fff439dabc8 [ 1951.120204][ T5803] [ 1951.543370][ T5814] netlink: 'syz.0.9673': attribute type 10 has an invalid length. [ 1952.066691][ T5822] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9674'. [ 1952.137239][ T5828] netlink: 'syz.1.9676': attribute type 21 has an invalid length. [ 1952.202340][ T5828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9676'. [ 1953.742009][ T5844] netlink: 'syz.4.9682': attribute type 4 has an invalid length. [ 1953.779808][ T5844] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1955.935726][ T5882] netlink: 'syz.3.9695': attribute type 21 has an invalid length. [ 1956.001099][ T5882] netlink: 'syz.3.9695': attribute type 1 has an invalid length. [ 1956.992192][ T5904] netlink: 'syz.2.9700': attribute type 21 has an invalid length. [ 1957.080783][ T5904] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9700'. [ 1958.163114][ T5918] netlink: 'syz.1.9704': attribute type 29 has an invalid length. [ 1959.066267][ T5918] netlink: 'syz.1.9704': attribute type 29 has an invalid length. [ 1959.395369][ T5915] delete_channel: no stack [ 1959.738116][ T5933] netlink: 'syz.0.9710': attribute type 10 has an invalid length. [ 1959.811250][ T5933] team0: Port device macvlan1 added [ 1959.879281][ T5941] netlink: 'syz.1.9722': attribute type 10 has an invalid length. [ 1959.915904][ T5941] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9722'. [ 1959.957406][ T5941] device bond0 entered promiscuous mode [ 1959.978036][ T5941] device bond_slave_0 entered promiscuous mode [ 1960.000390][ T5941] device bond_slave_1 entered promiscuous mode [ 1960.026709][ T5941] bridge0: port 3(bond0) entered blocking state [ 1960.067670][ T5941] bridge0: port 3(bond0) entered disabled state [ 1960.143525][ T5941] bridge0: port 3(bond0) entered blocking state [ 1960.150167][ T5941] bridge0: port 3(bond0) entered forwarding state [ 1960.745745][ T5955] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9717'. [ 1961.248525][ T5966] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9720'. [ 1961.357615][ T5969] netlink: 'syz.3.9723': attribute type 21 has an invalid length. [ 1961.403578][ T5969] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1962.056738][ T5985] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9729'. [ 1962.104561][ T5985] device hsr_slave_0 left promiscuous mode [ 1962.136570][ T5985] device hsr_slave_1 left promiscuous mode [ 1963.925176][ T6011] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9738'. [ 1963.994096][ T6004] netlink: 'syz.3.9734': attribute type 11 has an invalid length. [ 1964.003543][ T6004] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9734'. [ 1964.453737][ T6026] netlink: 'syz.0.9742': attribute type 3 has an invalid length. [ 1964.483878][ T6026] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9742'. [ 1965.056163][ T6047] netlink: 'syz.4.9749': attribute type 3 has an invalid length. [ 1965.086117][ T6047] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9749'. [ 1965.089978][ T6039] netlink: 'syz.0.9748': attribute type 2 has an invalid length. [ 1965.140330][ T6039] netlink: 'syz.0.9748': attribute type 1 has an invalid length. [ 1965.168270][ T6039] netlink: 'syz.0.9748': attribute type 4 has an invalid length. [ 1965.210164][ T6039] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.9748'. [ 1966.563411][ T6082] netlink: 'syz.0.9759': attribute type 21 has an invalid length. [ 1966.674258][ T6082] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1968.010961][ T6098] netlink: 'syz.0.9764': attribute type 4 has an invalid length. [ 1968.030864][ T6098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1968.920360][ T6115] netlink: 'syz.3.9767': attribute type 3 has an invalid length. [ 1968.971123][ T6115] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9767'. [ 1972.122502][ T6139] tipc: Started in network mode [ 1972.140248][ T6139] tipc: Node identity 9215a268, cluster identity 4711 [ 1972.233122][ T6139] tipc: Node number set to 2450891368 [ 1972.420057][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.427790][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.738323][ T6155] netlink: 'syz.2.9776': attribute type 21 has an invalid length. [ 1972.759029][ T6155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9776'. [ 1972.810872][ T6161] netlink: 'syz.1.9777': attribute type 6 has an invalid length. [ 1972.820522][ T6161] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9777'. [ 1973.563398][ T6171] netlink: 117020 bytes leftover after parsing attributes in process `syz.0.9781'. [ 1973.720084][ T6181] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1975.897521][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.908855][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.202980][ T6228] netlink: 'syz.1.9799': attribute type 12 has an invalid length. [ 1977.232216][ T6228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9799'. [ 1977.979608][ T4213] Bluetooth: hci0: command 0x0406 tx timeout [ 1978.639835][ T6240] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9802'. [ 1980.772087][ T6263] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9811'. [ 1981.823188][ T6296] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9817'. [ 1983.153206][ T6314] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9824'. [ 1983.174633][ T6314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1984.538003][ T6335] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9831'. [ 1988.022177][ T6378] FAULT_INJECTION: forcing a failure. [ 1988.022177][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1988.074151][ T6378] CPU: 0 PID: 6378 Comm: syz.2.9845 Not tainted syzkaller #0 [ 1988.081670][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1988.091810][ T6378] Call Trace: [ 1988.095174][ T6378] [ 1988.098171][ T6378] dump_stack_lvl+0x188/0x24e [ 1988.102929][ T6378] ? show_regs_print_info+0x12/0x12 [ 1988.108197][ T6378] ? load_image+0x400/0x400 [ 1988.112745][ T6378] ? __lock_acquire+0x7d10/0x7d10 [ 1988.117878][ T6378] should_fail_ex+0x399/0x4d0 [ 1988.122679][ T6378] _copy_from_user+0x2c/0x170 [ 1988.127439][ T6378] generic_map_update_batch+0x4a1/0x810 [ 1988.133098][ T6378] ? rcu_read_unlock+0xa0/0xa0 [ 1988.137934][ T6378] ? __fdget+0x17c/0x200 [ 1988.142242][ T6378] ? rcu_read_unlock+0xa0/0xa0 [ 1988.147045][ T6378] bpf_map_do_batch+0x466/0x600 [ 1988.151968][ T6378] __sys_bpf+0x6f7/0x780 [ 1988.156284][ T6378] ? bpf_link_show_fdinfo+0x380/0x380 [ 1988.161772][ T6378] ? lock_chain_count+0x20/0x20 [ 1988.166712][ T6378] __x64_sys_bpf+0x78/0x90 [ 1988.171181][ T6378] do_syscall_64+0x4c/0xa0 [ 1988.175643][ T6378] ? clear_bhb_loop+0x60/0xb0 [ 1988.180360][ T6378] ? clear_bhb_loop+0x60/0xb0 [ 1988.185092][ T6378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1988.191053][ T6378] RIP: 0033:0x7f1a5279aeb9 [ 1988.195536][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1988.215206][ T6378] RSP: 002b:00007f1a536ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1988.223798][ T6378] RAX: ffffffffffffffda RBX: 00007f1a52a15fa0 RCX: 00007f1a5279aeb9 [ 1988.231809][ T6378] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 1988.239820][ T6378] RBP: 00007f1a536ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1988.248265][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1988.256280][ T6378] R13: 00007f1a52a16038 R14: 00007f1a52a15fa0 R15: 00007ffe67a42328 [ 1988.264365][ T6378] [ 1988.739082][ T6391] netlink: 'syz.0.9851': attribute type 29 has an invalid length. [ 1988.769005][ T6391] netlink: 'syz.0.9851': attribute type 29 has an invalid length. [ 1988.785626][ T6395] netlink: 'syz.0.9851': attribute type 29 has an invalid length. [ 1988.808136][ T6391] netlink: 'syz.0.9851': attribute type 10 has an invalid length. [ 1989.013812][ T6391] bond0: (slave bond_slave_0): Releasing backup interface [ 1989.037637][ T6395] netlink: 'syz.0.9851': attribute type 29 has an invalid length. [ 1989.053135][ T6398] netlink: 'syz.4.9849': attribute type 33 has an invalid length. [ 1989.087492][ T6398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9849'. [ 1989.115951][ T6400] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9849'. [ 1989.188236][ T6393] netlink: 'syz.2.9850': attribute type 12 has an invalid length. [ 1989.204662][ T6393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9850'. [ 1989.451951][ T6410] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9854'. [ 1989.849092][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.931686][ T6417] device bridge_slave_0 left promiscuous mode [ 1989.969845][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.831063][ T6428] netlink: 'syz.3.9860': attribute type 10 has an invalid length. [ 1990.915465][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1991.008935][ T6428] batman_adv: batadv0: Adding interface: veth0_vlan [ 1991.063841][ T6428] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.277764][ T6428] batman_adv: batadv0: Interface activated: veth0_vlan [ 1991.775560][ T6438] netlink: 'syz.1.9865': attribute type 29 has an invalid length. [ 1991.789858][ T6438] netlink: 'syz.1.9865': attribute type 29 has an invalid length. [ 1991.930340][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9867'. [ 1992.045561][ T6444] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9867'. [ 1992.243778][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9870'. [ 1992.400768][ T6454] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9872'. [ 1992.578862][ T6460] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9874'. [ 1992.743916][ T6460] device .d entered promiscuous mode [ 1992.867057][ T6463] FAULT_INJECTION: forcing a failure. [ 1992.867057][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1992.893703][ T6463] CPU: 1 PID: 6463 Comm: syz.1.9875 Not tainted syzkaller #0 [ 1992.901189][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1992.911427][ T6463] Call Trace: [ 1992.914788][ T6463] [ 1992.917804][ T6463] dump_stack_lvl+0x188/0x24e [ 1992.922686][ T6463] ? show_regs_print_info+0x12/0x12 [ 1992.927982][ T6463] ? load_image+0x400/0x400 [ 1992.932606][ T6463] ? __lock_acquire+0x7d10/0x7d10 [ 1992.937730][ T6463] should_fail_ex+0x399/0x4d0 [ 1992.942479][ T6463] _copy_from_user+0x2c/0x170 [ 1992.947188][ T6463] generic_map_update_batch+0x4a1/0x810 [ 1992.952848][ T6463] ? rcu_read_unlock+0xa0/0xa0 [ 1992.957698][ T6463] ? __fdget+0x17c/0x200 [ 1992.961992][ T6463] ? rcu_read_unlock+0xa0/0xa0 [ 1992.966785][ T6463] bpf_map_do_batch+0x466/0x600 [ 1992.971696][ T6463] __sys_bpf+0x6f7/0x780 [ 1992.975978][ T6463] ? bpf_link_show_fdinfo+0x380/0x380 [ 1992.981423][ T6463] ? lock_chain_count+0x20/0x20 [ 1992.986335][ T6463] __x64_sys_bpf+0x78/0x90 [ 1992.990790][ T6463] do_syscall_64+0x4c/0xa0 [ 1992.995236][ T6463] ? clear_bhb_loop+0x60/0xb0 [ 1992.999940][ T6463] ? clear_bhb_loop+0x60/0xb0 [ 1993.004678][ T6463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1993.010609][ T6463] RIP: 0033:0x7fe33ed9aeb9 [ 1993.015055][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1993.034707][ T6463] RSP: 002b:00007fe33fd27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1993.043168][ T6463] RAX: ffffffffffffffda RBX: 00007fe33f015fa0 RCX: 00007fe33ed9aeb9 [ 1993.051164][ T6463] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 1993.059166][ T6463] RBP: 00007fe33fd27090 R08: 0000000000000000 R09: 0000000000000000 [ 1993.067161][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.075175][ T6463] R13: 00007fe33f016038 R14: 00007fe33f015fa0 R15: 00007ffc21ff2d08 [ 1993.083238][ T6463] [ 1994.119359][ T6483] validate_nla: 5 callbacks suppressed [ 1994.119381][ T6483] netlink: 'syz.1.9883': attribute type 33 has an invalid length. [ 1994.136142][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1994.228747][ T6483] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1994.321089][ T6490] netlink: 'syz.0.9886': attribute type 29 has an invalid length. [ 1994.331870][ T6490] netlink: 'syz.0.9886': attribute type 29 has an invalid length. [ 1994.370522][ T6492] netlink: 'syz.0.9886': attribute type 29 has an invalid length. [ 1994.425612][ T6490] netlink: 'syz.0.9886': attribute type 29 has an invalid length. [ 1995.561436][ T6506] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9888'. [ 1995.976575][ T6511] netlink: 'syz.1.9892': attribute type 25 has an invalid length. [ 1996.004308][ T6511] netlink: 'syz.1.9892': attribute type 29 has an invalid length. [ 1996.180770][ T6514] netlink: 'syz.0.9895': attribute type 1 has an invalid length. [ 1996.196769][ T6514] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9895'. [ 1996.746388][ T6532] netlink: 'syz.3.9899': attribute type 33 has an invalid length. [ 1996.811554][ T6532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1996.908489][ T6537] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1998.464382][ T4213] Bluetooth: hci1: command 0x0406 tx timeout [ 1998.744340][ T6572] sctp: [Deprecated]: syz.4.9912 (pid 6572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1998.744340][ T6572] Use struct sctp_sack_info instead [ 1999.395870][ T6583] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9918'. [ 1999.599673][ T6592] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.9919'. [ 1999.624710][ T6587] netlink: 'syz.3.9917': attribute type 10 has an invalid length. [ 2000.924350][ T6611] netlink: 'syz.3.9924': attribute type 21 has an invalid length. [ 2000.932283][ T6611] netlink: 'syz.3.9924': attribute type 20 has an invalid length. [ 2006.108887][ T6637] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9931'. [ 2006.118459][ T6648] netlink: 'syz.4.9935': attribute type 10 has an invalid length. [ 2006.153239][ T6648] team0: Port device wlan1 added [ 2006.162514][ T6653] netlink: 'syz.3.9937': attribute type 23 has an invalid length. [ 2006.851875][ T6676] netlink: 'syz.0.9944': attribute type 29 has an invalid length. [ 2006.905362][ T6676] netlink: 'syz.0.9944': attribute type 29 has an invalid length. [ 2006.937146][ T6676] netlink: 'syz.0.9944': attribute type 29 has an invalid length. [ 2007.233731][ T6679] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9945'. [ 2007.806661][ T6693] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9950'. [ 2007.941707][ T6699] netlink: 'syz.1.9951': attribute type 10 has an invalid length. [ 2008.471311][ T6715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2008.477862][ T6715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2009.088188][ T6729] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9964'. [ 2010.930592][ T6760] netlink: 'syz.0.9976': attribute type 10 has an invalid length. [ 2011.194523][ T6760] team0: Port device wlan1 added [ 2011.221435][ T6755] bridge0: port 3(bond0) entered disabled state [ 2011.320322][ T6769] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.9977'. [ 2011.359194][ T6755] device bridge_slave_1 left promiscuous mode [ 2011.386173][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.408521][ T6755] device bridge_slave_0 left promiscuous mode [ 2011.427615][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 2011.567723][ T6767] netlink: 'syz.2.9977': attribute type 39 has an invalid length. [ 2011.584341][ T6769] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.9977'. [ 2011.706248][ T6778] ªªªªªª™™: renamed from vlan0 [ 2011.817998][ T6780] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9982'. [ 2015.875308][ T6826] device bridge_slave_1 left promiscuous mode [ 2015.884333][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.153511][ T6828] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9997'. [ 2016.230719][ T6834] netlink: 'syz.3.9998': attribute type 21 has an invalid length. [ 2016.393416][ T6834] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9998'. [ 2017.513280][ T6853] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10007'. [ 2017.543495][ T6853] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10007'. [ 2018.665718][ T6866] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10011'. [ 2020.839213][ T6900] netlink: 'syz.2.10023': attribute type 21 has an invalid length. [ 2020.994345][ T6900] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10023'. [ 2021.029532][ T6902] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10024'. [ 2021.064609][ T6909] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.10027'. [ 2022.184939][ T6923] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10041'. [ 2023.041478][ T6938] device bridge_slave_1 left promiscuous mode [ 2023.051075][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.241557][ T6938] device bridge_slave_0 left promiscuous mode [ 2023.270342][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.101591][ T6984] netlink: 'syz.0.10053': attribute type 21 has an invalid length. [ 2025.119915][ T6984] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10053'. [ 2026.166934][ T6995] netlink: 143876 bytes leftover after parsing attributes in process `syz.1.10056'. [ 2026.244258][ T6995] netlink: zone id is out of range [ 2026.249482][ T6995] netlink: zone id is out of range [ 2026.300388][ T6995] netlink: zone id is out of range [ 2026.365245][ T6995] netlink: zone id is out of range [ 2026.370471][ T6995] netlink: zone id is out of range [ 2026.566126][ T6995] netlink: zone id is out of range [ 2026.593333][ T6995] netlink: zone id is out of range [ 2026.599428][ T6995] netlink: zone id is out of range [ 2026.615669][ T6995] netlink: zone id is out of range [ 2026.630891][ T6995] netlink: zone id is out of range [ 2026.762939][ T6998] netlink: 'syz.2.10057': attribute type 10 has an invalid length. [ 2026.897534][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10057'. [ 2027.733765][ T7023] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10066'. [ 2028.472205][ T7036] netlink: 'syz.0.10070': attribute type 21 has an invalid length. [ 2028.510191][ T7036] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10070'. [ 2031.164827][ T7072] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10081'. [ 2032.066547][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10086'. [ 2032.208172][ T7092] netlink: 'syz.4.10087': attribute type 21 has an invalid length. [ 2032.405004][ T7095] syz.0.10089[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2032.405183][ T7095] syz.0.10089[7095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2032.425698][ T7092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10087'. [ 2032.730250][T31164] device .d left promiscuous mode [ 2032.912159][T31164] tipc: Left network mode [ 2035.422695][ T7157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10100'. [ 2035.878518][T31164] Ÿë: port 1(erspan0) entered disabled state [ 2036.156392][T31164] device erspan0 left promiscuous mode [ 2036.162303][T31164] Ÿë: port 1(erspan0) entered disabled state [ 2037.336969][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.343357][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.389078][ T7174] netlink: 'syz.2.10104': attribute type 3 has an invalid length. [ 2037.398682][ T7193] netlink: 'syz.4.10108': attribute type 21 has an invalid length. [ 2037.420251][ T7193] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10108'. [ 2037.430444][ T7174] netlink: 'syz.2.10104': attribute type 1 has an invalid length. [ 2037.602472][ T7174] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.10104'. [ 2038.071614][T31164] team0: Port device wlan1 removed [ 2039.306625][T31164] device hsr_slave_0 left promiscuous mode [ 2039.313385][T31164] device hsr_slave_1 left promiscuous mode [ 2039.405969][T31164] device veth1_macvtap left promiscuous mode [ 2039.431082][T31164] device veth0_macvtap left promiscuous mode [ 2039.458286][T31164] device veth1_vlan left promiscuous mode [ 2039.478641][T31164] device veth0_vlan left promiscuous mode [ 2040.380455][T31164] team0 (unregistering): Port device geneve0 removed [ 2042.349691][T31164] team0 (unregistering): Port device team_slave_1 removed [ 2042.485073][T31164] team0 (unregistering): Port device team_slave_0 removed [ 2042.672568][T31164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2042.710092][T31164] device bond_slave_1 left promiscuous mode [ 2043.651381][T31164] bond0 (unregistering): Released all slaves [ 2043.696946][ T7243] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10125'. [ 2043.713073][ T7260] netlink: 'syz.2.10130': attribute type 21 has an invalid length. [ 2043.754507][ T7260] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10130'. [ 2044.090902][ T7278] netlink: 'syz.2.10136': attribute type 10 has an invalid length. [ 2044.141575][ T7276] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10137'. [ 2044.299351][ T7274] netlink: 'syz.3.10134': attribute type 8 has an invalid length. [ 2044.308960][ T7274] netlink: 'syz.3.10134': attribute type 9 has an invalid length. [ 2044.332183][ T7274] netlink: 'syz.3.10134': attribute type 10 has an invalid length. [ 2044.367456][ T7274] netlink: 'syz.3.10134': attribute type 11 has an invalid length. [ 2044.401546][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10134'. [ 2045.458593][ T7310] netlink: 'syz.2.10146': attribute type 21 has an invalid length. [ 2045.498941][ T7310] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10146'. [ 2046.325433][ T7326] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10151'. [ 2047.238166][ T7332] netlink: 'syz.4.10154': attribute type 8 has an invalid length. [ 2047.284803][ T7332] netlink: 'syz.4.10154': attribute type 9 has an invalid length. [ 2047.300724][ T7332] netlink: 'syz.4.10154': attribute type 10 has an invalid length. [ 2047.337918][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10154'. [ 2047.929817][ T7353] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10161'. [ 2047.980650][ T7353] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10161'. [ 2048.379303][ T7364] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10165'. [ 2053.744238][ T7374] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10169'. [ 2053.759983][ T7383] validate_nla: 3 callbacks suppressed [ 2053.760001][ T7383] netlink: 'syz.2.10171': attribute type 8 has an invalid length. [ 2053.774511][ T7383] netlink: 'syz.2.10171': attribute type 9 has an invalid length. [ 2053.782376][ T7383] netlink: 'syz.2.10171': attribute type 10 has an invalid length. [ 2053.825115][ T7383] netlink: 'syz.2.10171': attribute type 11 has an invalid length. [ 2053.833095][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10171'. [ 2054.293338][ T7396] netlink: 'syz.1.10175': attribute type 7 has an invalid length. [ 2054.972561][ T7408] netlink: 'syz.4.10179': attribute type 9 has an invalid length. [ 2056.051312][ T7424] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10182'. [ 2057.071802][ T7464] netlink: 'syz.4.10194': attribute type 3 has an invalid length. [ 2057.113074][ T7464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10194'. [ 2059.901831][ T4213] Bluetooth: hci3: command 0x0406 tx timeout [ 2061.490147][ T7453] netlink: 'syz.1.10191': attribute type 21 has an invalid length. [ 2061.498511][ T7453] netlink: 'syz.1.10191': attribute type 1 has an invalid length. [ 2061.506419][ T7453] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10191'. [ 2067.494568][ T7519] FAULT_INJECTION: forcing a failure. [ 2067.494568][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 2067.556240][ T7520] netlink: 'syz.3.10206': attribute type 2 has an invalid length. [ 2067.595336][ T7519] CPU: 1 PID: 7519 Comm: syz.4.10208 Not tainted syzkaller #0 [ 2067.602883][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2067.612990][ T7519] Call Trace: [ 2067.616296][ T7519] [ 2067.619244][ T7519] dump_stack_lvl+0x188/0x24e [ 2067.623955][ T7519] ? show_regs_print_info+0x12/0x12 [ 2067.629181][ T7519] ? load_image+0x400/0x400 [ 2067.633806][ T7519] ? __might_sleep+0xd0/0xd0 [ 2067.638416][ T7519] ? __lock_acquire+0x7d10/0x7d10 [ 2067.643465][ T7519] ? snprintf+0xe5/0x140 [ 2067.647724][ T7519] should_fail_ex+0x399/0x4d0 [ 2067.652426][ T7519] should_failslab+0x5/0x20 [ 2067.656949][ T7519] slab_pre_alloc_hook+0x59/0x310 [ 2067.661992][ T7519] ? traceprobe_set_print_fmt+0x58/0xb0 [ 2067.667645][ T7519] __kmem_cache_alloc_node+0x4f/0x260 [ 2067.673037][ T7519] ? traceprobe_set_print_fmt+0x58/0xb0 [ 2067.678598][ T7519] __kmalloc+0xa0/0x240 [ 2067.682776][ T7519] traceprobe_set_print_fmt+0x58/0xb0 [ 2067.688170][ T7519] create_local_trace_uprobe+0x564/0x6e0 [ 2067.693826][ T7519] ? bpf_get_uprobe_info+0x520/0x520 [ 2067.699131][ T7519] ? _copy_from_user+0x10b/0x170 [ 2067.704096][ T7519] perf_uprobe_init+0xef/0x190 [ 2067.708879][ T7519] perf_uprobe_event_init+0xe2/0x170 [ 2067.714189][ T7519] perf_try_init_event+0x12b/0x3d0 [ 2067.719318][ T7519] perf_event_alloc+0xf5c/0x21b0 [ 2067.724291][ T7519] ? perf_event_alloc+0xbe2/0x21b0 [ 2067.729461][ T7519] __se_sys_perf_event_open+0x5db/0x1ec0 [ 2067.735118][ T7519] ? __fget_files+0x43d/0x4b0 [ 2067.739827][ T7519] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2067.745495][ T7519] ? lockdep_hardirqs_on+0x94/0x140 [ 2067.750733][ T7519] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 2067.756387][ T7519] do_syscall_64+0x4c/0xa0 [ 2067.760817][ T7519] ? clear_bhb_loop+0x60/0xb0 [ 2067.765504][ T7519] ? clear_bhb_loop+0x60/0xb0 [ 2067.770195][ T7519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2067.776099][ T7519] RIP: 0033:0x7f06a5f9aeb9 [ 2067.780527][ T7519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2067.800151][ T7519] RSP: 002b:00007f06a6dcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2067.808583][ T7519] RAX: ffffffffffffffda RBX: 00007f06a6216090 RCX: 00007f06a5f9aeb9 [ 2067.816569][ T7519] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 2067.824553][ T7519] RBP: 00007f06a6dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 2067.832536][ T7519] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 2067.840524][ T7519] R13: 00007f06a6216128 R14: 00007f06a6216090 R15: 00007ffc52484868 [ 2067.848524][ T7519] [ 2067.885733][ T7520] netlink: 'syz.3.10206': attribute type 1 has an invalid length. [ 2067.988543][ T7520] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10206'. [ 2068.548812][ T7520] can: request_module (can-proto-0) failed. [ 2068.550195][ T7526] device wg2 entered promiscuous mode [ 2068.960107][ T7540] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10214'. [ 2069.676366][ T7562] netlink: 'syz.2.10221': attribute type 4 has an invalid length. [ 2069.723567][ T7562] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10221'. [ 2071.694326][ T7578] netlink: 'syz.1.10226': attribute type 2 has an invalid length. [ 2071.752015][ T7578] netlink: 'syz.1.10226': attribute type 1 has an invalid length. [ 2071.852240][ T7578] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10226'. [ 2072.439854][ T7578] can: request_module (can-proto-0) failed. [ 2072.785315][ T7582] device wg2 entered promiscuous mode [ 2073.167684][ T7600] netlink: 'syz.2.10232': attribute type 21 has an invalid length. [ 2073.297183][ T7600] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10232'. [ 2074.047351][ T7610] netlink: 'syz.1.10236': attribute type 29 has an invalid length. [ 2074.137292][ T7610] netlink: 'syz.1.10236': attribute type 29 has an invalid length. [ 2076.369871][ T7631] netlink: 'syz.3.10243': attribute type 6 has an invalid length. [ 2076.413353][ T7636] netlink: 'syz.4.10242': attribute type 2 has an invalid length. [ 2076.414488][ T7631] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10243'. [ 2076.485643][ T7636] netlink: 'syz.4.10242': attribute type 1 has an invalid length. [ 2076.530894][ T7636] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10242'. [ 2076.741983][ T7646] device wg2 entered promiscuous mode [ 2076.802762][ T7640] can: request_module (can-proto-0) failed. [ 2077.534805][ T7677] netlink: 'syz.0.10258': attribute type 21 has an invalid length. [ 2077.557770][ T7677] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10258'. [ 2078.378725][ T7681] netlink: 'syz.3.10260': attribute type 27 has an invalid length. [ 2080.447616][ T7701] netlink: 'syz.3.10265': attribute type 3 has an invalid length. [ 2080.514152][ T7701] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10265'. [ 2083.514901][ T7741] netlink: 'syz.0.10277': attribute type 21 has an invalid length. [ 2083.574179][ T7741] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2083.706840][ T7744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10278'. [ 2085.225256][ T7766] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10286'. [ 2085.387953][ T7769] netlink: 'syz.0.10287': attribute type 10 has an invalid length. [ 2085.396359][ T7769] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.10287'. [ 2089.417281][ T7836] device syzkaller0 entered promiscuous mode [ 2089.947811][ T7859] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10319'. [ 2091.063238][ T7877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10327'. [ 2092.499207][ T7901] netlink: 'syz.2.10334': attribute type 10 has an invalid length. [ 2092.516709][ T7901] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10334'. [ 2092.573230][ T7906] device sit0 entered promiscuous mode [ 2092.912899][ T7913] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10337'. [ 2093.489772][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10342'. [ 2093.499408][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10342'. [ 2093.524786][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10342'. [ 2093.791816][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2093.818119][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2093.845556][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2093.853068][ T7946] FAULT_INJECTION: forcing a failure. [ 2093.853068][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2093.866873][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2093.969624][ T7946] CPU: 0 PID: 7946 Comm: syz.4.10349 Not tainted syzkaller #0 [ 2093.977190][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2093.987395][ T7946] Call Trace: [ 2093.990731][ T7946] [ 2093.993717][ T7946] dump_stack_lvl+0x188/0x24e [ 2093.998460][ T7946] ? show_regs_print_info+0x12/0x12 [ 2094.003695][ T7946] ? load_image+0x400/0x400 [ 2094.008243][ T7946] ? __lock_acquire+0x7d10/0x7d10 [ 2094.013328][ T7946] should_fail_ex+0x399/0x4d0 [ 2094.018056][ T7946] _copy_from_user+0x2c/0x170 [ 2094.022770][ T7946] generic_map_update_batch+0x4f3/0x810 [ 2094.028385][ T7946] ? rcu_read_unlock+0xa0/0xa0 [ 2094.033192][ T7946] ? __fdget+0x17c/0x200 [ 2094.037474][ T7946] ? rcu_read_unlock+0xa0/0xa0 [ 2094.042261][ T7946] bpf_map_do_batch+0x466/0x600 [ 2094.047161][ T7946] __sys_bpf+0x6f7/0x780 [ 2094.051439][ T7946] ? bpf_link_show_fdinfo+0x380/0x380 [ 2094.056888][ T7946] ? lock_chain_count+0x20/0x20 [ 2094.061791][ T7946] __x64_sys_bpf+0x78/0x90 [ 2094.066242][ T7946] do_syscall_64+0x4c/0xa0 [ 2094.070691][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 2094.075393][ T7946] ? clear_bhb_loop+0x60/0xb0 [ 2094.080105][ T7946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2094.086030][ T7946] RIP: 0033:0x7f06a5f9aeb9 [ 2094.090470][ T7946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2094.110105][ T7946] RSP: 002b:00007f06a6dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2094.118554][ T7946] RAX: ffffffffffffffda RBX: 00007f06a6215fa0 RCX: 00007f06a5f9aeb9 [ 2094.126548][ T7946] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2094.134541][ T7946] RBP: 00007f06a6dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2094.142621][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2094.150617][ T7946] R13: 00007f06a6216038 R14: 00007f06a6215fa0 R15: 00007ffc52484868 [ 2094.158650][ T7946] [ 2094.297561][ T7952] device syzkaller0 entered promiscuous mode [ 2094.942594][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10353'. [ 2095.023431][ T7967] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10352'. [ 2096.634630][ T8008] device syzkaller0 entered promiscuous mode [ 2097.634528][ T8019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10368'. [ 2098.073750][ T8027] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10369'. [ 2098.777783][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.784470][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.921842][ T8040] netlink: 'syz.3.10375': attribute type 10 has an invalid length. [ 2098.944494][ T8040] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10375'. [ 2099.175181][ T8044] batman_adv: batadv0: Removing interface: team0 [ 2099.259248][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2099.281492][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2099.367898][ T8044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2099.381286][ T8044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2099.382608][ T8058] netlink: 'syz.1.10381': attribute type 29 has an invalid length. [ 2099.799550][ T8058] netlink: 'syz.1.10381': attribute type 29 has an invalid length. [ 2099.808207][ T8060] device syzkaller0 entered promiscuous mode [ 2099.881159][ T8059] netlink: 'syz.1.10381': attribute type 29 has an invalid length. [ 2100.254043][ T8076] netlink: 'syz.0.10390': attribute type 21 has an invalid length. [ 2100.301961][ T8076] netlink: 'syz.0.10390': attribute type 11 has an invalid length. [ 2100.347481][ T8074] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10388'. [ 2100.513745][ T8082] FAULT_INJECTION: forcing a failure. [ 2100.513745][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.615535][ T8082] CPU: 0 PID: 8082 Comm: syz.4.10391 Not tainted syzkaller #0 [ 2100.623132][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2100.633275][ T8082] Call Trace: [ 2100.636626][ T8082] [ 2100.639624][ T8082] dump_stack_lvl+0x188/0x24e [ 2100.644393][ T8082] ? show_regs_print_info+0x12/0x12 [ 2100.649645][ T8082] ? load_image+0x400/0x400 [ 2100.654207][ T8082] ? __lock_acquire+0x7d10/0x7d10 [ 2100.659310][ T8082] should_fail_ex+0x399/0x4d0 [ 2100.664069][ T8082] _copy_from_user+0x2c/0x170 [ 2100.668805][ T8082] generic_map_update_batch+0x4f3/0x810 [ 2100.674466][ T8082] ? rcu_read_unlock+0xa0/0xa0 [ 2100.679483][ T8082] ? __fdget+0x17c/0x200 [ 2100.683784][ T8082] ? rcu_read_unlock+0xa0/0xa0 [ 2100.688588][ T8082] bpf_map_do_batch+0x466/0x600 [ 2100.693512][ T8082] __sys_bpf+0x6f7/0x780 [ 2100.697827][ T8082] ? bpf_link_show_fdinfo+0x380/0x380 [ 2100.703312][ T8082] ? lock_chain_count+0x20/0x20 [ 2100.708257][ T8082] __x64_sys_bpf+0x78/0x90 [ 2100.712726][ T8082] do_syscall_64+0x4c/0xa0 [ 2100.717184][ T8082] ? clear_bhb_loop+0x60/0xb0 [ 2100.721897][ T8082] ? clear_bhb_loop+0x60/0xb0 [ 2100.726625][ T8082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2100.732558][ T8082] RIP: 0033:0x7f06a5f9aeb9 [ 2100.737034][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2100.756789][ T8082] RSP: 002b:00007f06a6dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2100.765261][ T8082] RAX: ffffffffffffffda RBX: 00007f06a6215fa0 RCX: 00007f06a5f9aeb9 [ 2100.773269][ T8082] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 2100.781280][ T8082] RBP: 00007f06a6dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.789286][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2100.797297][ T8082] R13: 00007f06a6216038 R14: 00007f06a6215fa0 R15: 00007ffc52484868 [ 2100.805380][ T8082] [ 2100.825371][ T8087] netlink: 'syz.0.10392': attribute type 1 has an invalid length. [ 2100.833299][ T8087] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10392'. [ 2101.191812][ T8087] netlink: 'syz.0.10392': attribute type 2 has an invalid length. [ 2101.287487][ T8087] device .d entered promiscuous mode [ 2101.416727][ T8096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10396'. [ 2102.117201][ T8104] device syzkaller0 entered promiscuous mode [ 2102.386176][ T8109] device syzkaller0 entered promiscuous mode [ 2102.532388][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2102.546690][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2102.620527][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2102.637850][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.670290][ T8113] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2102.681931][ T8113] batman_adv: batadv0: Removing interface: veth0_vlan [ 2103.291896][ T8128] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10405'. [ 2103.639629][ T8138] netlink: 'syz.0.10410': attribute type 21 has an invalid length. [ 2103.657456][ T8138] netlink: 'syz.0.10410': attribute type 3 has an invalid length. [ 2103.674801][ T8138] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10410'. [ 2103.702322][ T8139] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.10410'. [ 2104.933647][ T8164] netlink: 'syz.1.10418': attribute type 1 has an invalid length. [ 2104.963517][ T8164] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10418'. [ 2104.996924][ T8165] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10421'. [ 2105.523979][ T8183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2105.531822][ T8183] IPv6: NLM_F_CREATE should be set when creating new route [ 2105.540465][ T8183] IPv6: NLM_F_CREATE should be set when creating new route [ 2105.548886][ T8183] IPv6: NLM_F_CREATE should be set when creating new route [ 2106.856135][ T8203] netlink: 'syz.0.10435': attribute type 10 has an invalid length. [ 2107.865564][ T8203] team0: Port device geneve1 added [ 2108.612314][ T8219] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10438'. [ 2109.881137][ T8251] netlink: 'syz.0.10449': attribute type 21 has an invalid length. [ 2109.899337][ T8251] netlink: 'syz.0.10449': attribute type 20 has an invalid length. [ 2111.422219][ T8262] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10453'. [ 2111.513142][ T8271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2111.520523][ T8271] IPv6: NLM_F_CREATE should be set when creating new route [ 2111.527862][ T8271] IPv6: NLM_F_CREATE should be set when creating new route [ 2111.535161][ T8271] IPv6: NLM_F_CREATE should be set when creating new route [ 2112.418100][ T8291] netlink: 'syz.0.10464': attribute type 10 has an invalid length. [ 2113.461887][ T8317] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10470'. [ 2114.871783][ T8339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2114.879139][ T8339] IPv6: NLM_F_CREATE should be set when creating new route [ 2114.886507][ T8339] IPv6: NLM_F_CREATE should be set when creating new route [ 2114.893985][ T8339] IPv6: NLM_F_CREATE should be set when creating new route [ 2115.670753][ T8355] FAULT_INJECTION: forcing a failure. [ 2115.670753][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2115.701700][ T8355] CPU: 1 PID: 8355 Comm: syz.1.10480 Not tainted syzkaller #0 [ 2115.709234][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2115.719320][ T8355] Call Trace: [ 2115.722629][ T8355] [ 2115.725589][ T8355] dump_stack_lvl+0x188/0x24e [ 2115.730315][ T8355] ? show_regs_print_info+0x12/0x12 [ 2115.735555][ T8355] ? load_image+0x400/0x400 [ 2115.740094][ T8355] ? __lock_acquire+0x7d10/0x7d10 [ 2115.745154][ T8355] ? snprintf+0xe5/0x140 [ 2115.749431][ T8355] should_fail_ex+0x399/0x4d0 [ 2115.754158][ T8355] _copy_to_user+0x2c/0x130 [ 2115.758701][ T8355] simple_read_from_buffer+0xe3/0x150 [ 2115.764123][ T8355] proc_fail_nth_read+0x1a6/0x220 [ 2115.769179][ T8355] ? proc_fault_inject_write+0x310/0x310 [ 2115.774849][ T8355] ? fsnotify_perm+0x248/0x550 [ 2115.779647][ T8355] ? proc_fault_inject_write+0x310/0x310 [ 2115.785315][ T8355] vfs_read+0x2de/0xa00 [ 2115.789521][ T8355] ? kernel_read+0x1e0/0x1e0 [ 2115.794153][ T8355] ? __fget_files+0x28/0x4b0 [ 2115.798783][ T8355] ? __fget_files+0x28/0x4b0 [ 2115.803415][ T8355] ? __fget_files+0x43d/0x4b0 [ 2115.808149][ T8355] ? __fdget_pos+0x2ae/0x360 [ 2115.812778][ T8355] ? ksys_read+0x71/0x250 [ 2115.817157][ T8355] ksys_read+0x14c/0x250 [ 2115.821535][ T8355] ? vfs_write+0xa30/0xa30 [ 2115.826021][ T8355] ? lockdep_hardirqs_on+0x94/0x140 [ 2115.831280][ T8355] do_syscall_64+0x4c/0xa0 [ 2115.835829][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 2115.840544][ T8355] ? clear_bhb_loop+0x60/0xb0 [ 2115.845260][ T8355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2115.851183][ T8355] RIP: 0033:0x7fe33ed5b78e [ 2115.855636][ T8355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2115.875285][ T8355] RSP: 002b:00007fe33fd26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2115.883741][ T8355] RAX: ffffffffffffffda RBX: 00007fe33fd276c0 RCX: 00007fe33ed5b78e [ 2115.891743][ T8355] RDX: 000000000000000f RSI: 00007fe33fd270a0 RDI: 0000000000000004 [ 2115.899745][ T8355] RBP: 00007fe33fd27090 R08: 0000000000000000 R09: 0000000000000000 [ 2115.907745][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2115.915749][ T8355] R13: 00007fe33f016038 R14: 00007fe33f015fa0 R15: 00007ffc21ff2d08 [ 2115.923774][ T8355] [ 2115.953822][ T8343] delete_channel: no stack [ 2116.549484][ T8368] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10486'. [ 2116.881119][ T8373] can: request_module (can-proto-4) failed. [ 2133.203538][T14828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2133.213115][T14828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2133.221758][T14828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2133.231426][T14828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2133.241206][T14828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2133.248824][T14828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2133.486346][ T8411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2133.504990][ T8411] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2133.513174][ T8411] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2133.522090][ T8411] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2133.531515][ T8411] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2133.539342][ T8411] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2133.745561][ T8411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2133.755385][ T8411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2133.763599][ T8411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2133.773477][ T8411] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2133.782516][ T8411] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2133.790578][ T8411] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2134.105668][ T4213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2134.115586][ T4213] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2134.123722][ T4213] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2134.132837][ T4213] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2134.140901][ T4213] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2134.149090][ T4213] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2134.425820][ T8411] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2134.435963][ T8411] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2134.444582][ T8411] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2134.453835][ T8411] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2134.463069][ T8411] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2134.470684][ T8411] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2135.334158][ T4213] Bluetooth: hci4: command 0x0409 tx timeout [ 2135.574101][ T4213] Bluetooth: hci6: command 0x0409 tx timeout [ 2135.814088][ T4213] Bluetooth: hci7: command 0x0409 tx timeout [ 2136.214079][ T4213] Bluetooth: hci8: command 0x0409 tx timeout [ 2136.534142][ T4213] Bluetooth: hci9: command 0x0409 tx timeout [ 2137.414041][ T4213] Bluetooth: hci4: command 0x041b tx timeout [ 2137.654015][ T4213] Bluetooth: hci6: command 0x041b tx timeout [ 2137.894151][ T4213] Bluetooth: hci7: command 0x041b tx timeout [ 2138.294034][ T4213] Bluetooth: hci8: command 0x041b tx timeout [ 2138.614187][ T4213] Bluetooth: hci9: command 0x041b tx timeout [ 2139.494121][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 2139.734894][ T4213] Bluetooth: hci6: command 0x040f tx timeout [ 2139.974094][ T4213] Bluetooth: hci7: command 0x040f tx timeout [ 2140.374248][ T4213] Bluetooth: hci8: command 0x040f tx timeout [ 2140.694097][ T4213] Bluetooth: hci9: command 0x040f tx timeout [ 2141.574018][ T4213] Bluetooth: hci4: command 0x0419 tx timeout [ 2141.814041][ T4213] Bluetooth: hci6: command 0x0419 tx timeout [ 2142.054032][ T4213] Bluetooth: hci7: command 0x0419 tx timeout [ 2142.454039][ T4213] Bluetooth: hci8: command 0x0419 tx timeout [ 2142.774014][ T4213] Bluetooth: hci9: command 0x0419 tx timeout [ 2144.214143][ T4352] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2658 jiffies s: 154989 root: 0x1/. [ 2144.227074][ T4352] rcu: blocking rcu_node structures (internal RCU debug): [ 2144.234620][ T4352] Sending NMI from CPU 1 to CPUs 0: [ 2144.239885][ C0] NMI backtrace for cpu 0 [ 2144.239896][ C0] CPU: 0 PID: 8385 Comm: syz.3.10490 Not tainted syzkaller #0 [ 2144.239912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2144.239928][ C0] RIP: 0010:perf_swevent_event+0x7/0x530 [ 2144.239957][ C0] Code: 80 e1 07 80 c1 03 38 c1 0f 8c 0d ff ff ff 48 89 df e8 5d b6 2d 00 e9 00 ff ff ff e8 a3 ad 86 08 0f 1f 00 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 20 48 89 cd 49 89 d6 49 89 f4 49 89 ff e8 51 cb [ 2144.239971][ C0] RSP: 0018:ffffc90000007598 EFLAGS: 00000046 [ 2144.239985][ C0] RAX: ffffffff81a59e72 RBX: 1ffff110171c6abc RCX: ffff8880b8e35558 [ 2144.239998][ C0] RDX: ffffc90000007640 RSI: 0000000000000001 RDI: ffff88803d734800 [ 2144.240009][ C0] RBP: ffffc90000007848 R08: ffff888080bd1dc7 R09: 1ffff1101017a3b8 [ 2144.240020][ C0] R10: dffffc0000000000 R11: ffffed101017a3b9 R12: 0000000000000000 [ 2144.240030][ C0] R13: ffff88803d734800 R14: ffff8880b8e355e0 R15: 0000000000000000 [ 2144.240041][ C0] FS: 00007f571d2ce6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2144.240055][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2144.240066][ C0] CR2: 00007f571d2add58 CR3: 0000000057774000 CR4: 00000000003506f0 [ 2144.240081][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 2144.240091][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2144.240101][ C0] Call Trace: [ 2144.240107][ C0] [ 2144.240115][ C0] perf_tp_event+0x38c/0xc00 [ 2144.240140][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2144.240178][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 2144.240196][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 2144.240215][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 2144.240239][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2144.240263][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2144.240287][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 2144.240308][ C0] ? irqentry_enter+0x33/0x50 [ 2144.240324][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2144.240345][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2144.240367][ C0] ? lock_chain_count+0x20/0x20 [ 2144.240386][ C0] ? irqentry_enter+0x33/0x50 [ 2144.240400][ C0] trace_hardirqs_off_finish+0x13f/0x180 [ 2144.240420][ C0] irqentry_enter+0x33/0x50 [ 2144.240434][ C0] sysvec_irq_work+0xa/0xc0 [ 2144.240453][ C0] asm_sysvec_irq_work+0x16/0x20 [ 2144.240470][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2144.240487][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 30 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2144.240499][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 2144.240512][ C0] RAX: fc790da9ba1f9200 RBX: 1ffff92000000f5c RCX: fc790da9ba1f9200 [ 2144.240523][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 2144.240533][ C0] RBP: ffffc90000007b90 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 2144.240544][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 2144.240554][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 2144.240576][ C0] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 2144.240595][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2144.240618][ C0] __rcu_read_unlock+0x78/0xd0 [ 2144.240631][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 2144.240652][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2144.240667][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 2144.240688][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 2144.240712][ C0] __hrtimer_run_queues+0x560/0xd70 [ 2144.240734][ C0] ? hw_scan_work+0xf50/0xf50 [ 2144.240760][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2144.240775][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 2144.240799][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 2144.240818][ C0] handle_softirqs+0x2a1/0x930 [ 2144.240838][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 2144.240855][ C0] ? do_softirq+0x210/0x210 [ 2144.240872][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 2144.240888][ C0] __irq_exit_rcu+0x13b/0x230 [ 2144.240902][ C0] ? irq_exit_rcu+0x20/0x20 [ 2144.240931][ C0] irq_exit_rcu+0x5/0x20 [ 2144.240944][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2144.240965][ C0] [ 2144.240969][ C0] [ 2144.240975][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2144.240992][ C0] RIP: 0010:_raw_read_unlock_irqrestore+0xbc/0x120 [ 2144.241008][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3f 79 22 f7 65 8b 05 00 fd cb 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 2144.241020][ C0] RSP: 0018:ffffc900035a7d40 EFLAGS: 00000206 [ 2144.241032][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: fc790da9ba1f9200 [ 2144.241043][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 2144.241054][ C0] RBP: ffffc900035a7dc8 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 2144.241065][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: dffffc0000000000 [ 2144.241077][ C0] R13: ffff888054539c40 R14: ffffffff8dda3b20 R15: 1ffff920006b4fa8 [ 2144.241101][ C0] ? _raw_read_unlock+0x40/0x40 [ 2144.241118][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 2144.241140][ C0] netlink_create+0xf4/0x510 [ 2144.241166][ C0] __sock_create+0x4a2/0x940 [ 2144.241191][ C0] __sys_socket+0xc4/0x190 [ 2144.241212][ C0] __x64_sys_socket+0x76/0x80 [ 2144.241231][ C0] do_syscall_64+0x4c/0xa0 [ 2144.241247][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2144.241263][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2144.241280][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2144.241295][ C0] RIP: 0033:0x7f571c39aeb9 [ 2144.241309][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2144.241321][ C0] RSP: 002b:00007f571d2ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2144.241337][ C0] RAX: ffffffffffffffda RBX: 00007f571c615fa0 RCX: 00007f571c39aeb9 [ 2144.241348][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2144.241357][ C0] RBP: 00007f571c408c1f R08: 0000000000000000 R09: 0000000000000000 [ 2144.241366][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2144.241376][ C0] R13: 00007f571c616038 R14: 00007f571c615fa0 R15: 00007fff439dabc8 [ 2144.241396][ C0]