last executing test programs: 8.25550603s ago: executing program 2 (id=3678): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x2009, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r5, 0x0, 0xeffd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r9}, 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 7.974088667s ago: executing program 2 (id=3681): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0xc602, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 7.351292043s ago: executing program 0 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000004e0000461282ef28986f043fc41e8f9984"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={0x0}, 0x18) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x750d, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0xffffffffffffffff, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x2e0, 0x25, 0x0, &(0x7f00000002c0)="b9ff1e03000d698cb89ebdf008004000000e6a8d7700"/37, 0x0, 0x100, 0x2000000, 0x89, 0xd7, &(0x7f0000000600)="df0ed5eb446af4d99f2a060d94dcdd2fd94e292ea42dd8f56b77afdcaa8dee2eddb20b471a0ccff86457257af38f34e9c0f9eb7ef87a5cc1bc8074fc257a122fc9cf26c2445176ae3f079be98ed0a4f395d86380afc4202b246b085cd35401e71805b79e38cf6374bd9ba6698f0c5cfb040c2a5ecaccee7c27b9cf1bca504c196fc31f081f18ca1cc3", &(0x7f0000000740)="144a525ab4f4af1df5610d5e48353e2c3421171002fe0f3cd50ee24d8599f9e4d3659aec0892c5e79d9e429dff2b92d2ffcaf1571041f2e9d573778f82fc0d2b49dea1d40eac9b3ea7abdae46a6ea516add6b7e957ac37ad017d128601973e5099e4f228710b523b1d99051243d401f8d6fea7abbcc7b6aab7f35063c6242c6d63383e046b4bbfc81bd769c2723930dd0f02289ea23e305968e24e00a920f76262edd814215be11fdfd7a8ed79058d9c725b3e68f97b2c629faf2c1640b96aa00fd1d2cd358b94ae96f33cae800e3df3e552e4006df55c"}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r9, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x7fffffff, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x1, 0x8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x9, 0x7, 0xa, 0xfffffffffffffff4, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0x1, 0xb, 0x20, 0x1b}, @generic={0x80, 0x0, 0xf, 0xffff, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x0, 0x1ff, 0xf8}, 0x10, r9, r7, 0x4, &(0x7f0000000a40)=[r1, r10, r0, r0], &(0x7f0000000a80)=[{0x4, 0x4, 0x10}, {0x3, 0x3}, {0x4, 0x1, 0x6, 0xa}, {0x4, 0x2, 0xe, 0xc}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.862825285s ago: executing program 0 (id=3690): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90524fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES64=r0, @ANYRES8], 0x48) 6.805966037s ago: executing program 4 (id=3692): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x80e1, 0xff6c, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0c408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4bb0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8700000d16a4683f1aeb4edbb57a5025cc67e006dcdf63955ce3bb9ad809d5e1cece81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9243370e9701fa4a3f7d561b343411dfa6244de137817856", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYBLOB="0000002328ffd9b42cf26b00000000007b8af8ff00000000bfa20000000000000e82bd174bd18dcfe5eff6ef25b0ecbdfe9b2c9f3ba6afd20b89360d6255302d4f5accaed787007464b5c439a652dc5ca4cfc2c07caa5a85c42fc0949a5fdaa2b731dcc51809dd5498c1ec825a942aba7bd2ca2393ba1c5ebfdd97b031d9a065e3abca8c4dd21475fdfa90edd64afb21f451188204b5164f07fbf5351871d32118c0b0d5119a7edf2ae33516399eab21104546f1a195dfde33205b1ba825f8e33904db288f0eca49801da9939de8e3bd1a526714788958875dd255caef93cf692f3bb5a2aed5adb007"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, r1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001de76765d6bc0a0001000000dc0000efff0c0000"], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000630be998c0005000000000001000000dc00000000000000e96b5ba26958f38d40b7373082c275578aea056d2b8a3013baaa859f7e2da2d4f63ec2774a4373a8a6f606c6743e03e103bb3c363989232dd0"], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x10022) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003507d25a806f8c6394f90524", 0x12}], 0x1}, 0x0) recvmsg$kcm(r4, 0x0, 0x2042) r7 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x24010410) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) 6.618353662s ago: executing program 0 (id=3694): socket$kcm(0x11, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x888a4, 0x0, 0x0, 0x0, 0x6, 0x2f07}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, 0x0) getpid() getpid() r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(0x0, r4, 0x1, r3, 0x0) r5 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36", 0x10, 0x0, &(0x7f00000007c0), 0x0) r6 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="438fd74f926a04c574611c5d3fff65ef1fbcdee1eabee685a3aa3b73c662e2de9b91bfe5751d36b2de1b133e6e41f516363db7699daf15e1d3f7b14adce1d9721d746ccdabe8edaadcef547735f99d54b90ad1ef1b46fb940efb750819cdee32cd302342b9db47184ad74d90c9054f933836e7f6f54cb93ec0b72c5ae9402f0aa07e35a005a191009c885adece276a6ef1c4952fadb943156a348f17dfdd72a5498d877b2cd97562ab309fba64a70ff2ed22e005b4ae31932381", 0xba}, {&(0x7f0000000440)="b8d7b79ff3d9156f602f764eaade3c142a6d6bef0415fc7951bc37c517fc06356a30cbc7671f512037627fb0798692f4b729eacd02ec4614", 0x38}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556", 0x10}, {&(0x7f0000000540)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa0acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5cf831023d96feaac82ea28f57eaa247b61baf595ea363ee4a7700749dc8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e84513c5e35864c54370a2bb1996b5a", 0x7d}, {&(0x7f0000000600)="782b7903ab9d0c8174ef41ec32bd85763073d77f6305978bf9655085a7ba2b5e7ee5214552d4596944e9bbda97b812a8b93bb5c150f2c98b4b629172eba1e5dea02301a679ae40263c81e8151f1a0e5932ce6f5e9e391d", 0x57}], 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00000000180000000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="1c000000000000001200000002000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20048040}, 0x40) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) 6.001132327s ago: executing program 4 (id=3697): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 5.799151492s ago: executing program 4 (id=3700): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 5.719678164s ago: executing program 3 (id=3701): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000004e0000461282ef28986f043fc41e8f9984"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={0x0}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0xffffffffffffffff, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x2e0, 0x25, 0x0, &(0x7f00000002c0)="b9ff1e03000d698cb89ebdf008004000000e6a8d7700"/37, 0x0, 0x100, 0x2000000, 0x89, 0xd7, &(0x7f0000000600)="df0ed5eb446af4d99f2a060d94dcdd2fd94e292ea42dd8f56b77afdcaa8dee2eddb20b471a0ccff86457257af38f34e9c0f9eb7ef87a5cc1bc8074fc257a122fc9cf26c2445176ae3f079be98ed0a4f395d86380afc4202b246b085cd35401e71805b79e38cf6374bd9ba6698f0c5cfb040c2a5ecaccee7c27b9cf1bca504c196fc31f081f18ca1cc3", &(0x7f0000000740)="144a525ab4f4af1df5610d5e48353e2c3421171002fe0f3cd50ee24d8599f9e4d3659aec0892c5e79d9e429dff2b92d2ffcaf1571041f2e9d573778f82fc0d2b49dea1d40eac9b3ea7abdae46a6ea516add6b7e957ac37ad017d128601973e5099e4f228710b523b1d99051243d401f8d6fea7abbcc7b6aab7f35063c6242c6d63383e046b4bbfc81bd769c2723930dd0f02289ea23e305968e24e00a920f76262edd814215be11fdfd7a8ed79058d9c725b3e68f97b2c629faf2c1640b96aa00fd1d2cd358b94ae96f33cae800e3df3e552e4006df55c"}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 1) 5.438773481s ago: executing program 4 (id=3702): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x341a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340)}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.310890765s ago: executing program 0 (id=3703): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000fc0)={r3, r0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) recvmsg(r3, &(0x7f00000012c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x10023) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3a}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.241328316s ago: executing program 3 (id=3704): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x2009, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r5, 0x0, 0xeffd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r9}, 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 5.11969996s ago: executing program 4 (id=3706): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000014006b030231a6080c000af32c0cae936c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f68e12ec63c9f4d4938037e786a6d1000000e665050b38", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) close(r1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80194, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x90802, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001000)='devices.deny\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xdc0, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.036462092s ago: executing program 3 (id=3707): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff001240006384", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) write$cgroup_type(r0, &(0x7f00000005c0), 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000580)={&(0x7f0000000740)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="9afa65958bc04f832883b1c2be9bb8043ef38ef69c0134c4efeb592b58a0cceb14ca018d1e0fa1d3a2860ae1ae86551d460cb7748e6b41dc55be270b57261e2130394881e693a61677cfee3b539d1016bbdcd79958285d16826ee6354d9dae21beb06a64d3fa1c5b8e111a49463a68", 0x6f}, {&(0x7f0000000380)="5f9777eeea3a87e8d9c4085c6fbe830df5c4a180a70957644d9dfbb30ccfd833b31e7f496c288ce58dacda0faae196218c1bed8bb5f85392d753d5b98913fe92db9015907798823c7ed2f885531d710e51ff51c2341fb745b64ee8e6b5fd28835910b2020646c329601c91d2609f8bf5897aaf540380802efc932275b40fbfebb657cb3cc075b906fc7c4bac9a7a9f9024119c6e9d3eea4f17f52ef53f52eda715543872ea3404c2a3a9defd78", 0xad}], 0x2, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0xd8}, 0x28000040) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8}, 0x8) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x5, 0x23, {0xa, 0x4c23, 0x10001, @local, 0x7ff}}}, 0x80, 0x0}, 0x400f7e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000fc0000100000001000000004000000020000000000001104000000000fffff0000610075f4b331a107679189c29fd586c9ea41b91d402ba98c1582e25556bf3af16f513dff3c2e3bdf68d0"], &(0x7f0000000040)=""/249, 0x2c, 0xf9, 0x7}, 0x28) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'netdevsim0\x00'}) 4.794709668s ago: executing program 2 (id=3708): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f3ffffff001900000200000004a30100100000008520000005000000184b0000d82ba4ad2a8b5718000000009500000000000000305a7e65bf32bb04ef6656794d8cc4f76ac82f246aa162fd7f3c0bbc8d32fd3fd333a446ff41e8a734edf6f824335e9a273fd442185e0a45a8db4e6e30d6514ab7555335"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@ifindex, 0xffffffffffffffff, 0x19, 0x2023}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff2db}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x2a, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a3f", 0x0}, 0x50) 4.793746538s ago: executing program 1 (id=3718): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90524fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES64=r0, @ANYRES8], 0x48) 4.271618021s ago: executing program 4 (id=3709): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) close(r2) recvmsg$unix(r1, 0x0, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r4], 0x12) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000", 0x17}], 0x1, 0x0, 0x0, 0x20}, 0x24088054) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.211565403s ago: executing program 1 (id=3710): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 4.161317714s ago: executing program 2 (id=3711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3c}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) r2 = perf_event_open$cgroup(0x0, r0, 0xd, r1, 0x8) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000280)='/proc/\x84ys/net/ipv\x06\x00\x00s/syn\x95Xc_\x00le\xf44\x19\xab%nN\xd4\xa2\x8a\x00\xd11=\x0e\xab+)~\x03\t0q\x91\x1d\x11\xc8\xdd\x15'}, 0x25) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.stat\x00', 0x80040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b", &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000000000000000000000000ba59001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000010008500000006000000002eaa37f589bacf533b514cb9c5fc5e210c6d3b5e0ce45f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r6, @ANYRES64=0x0], 0x40}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') 4.081661766s ago: executing program 0 (id=3712): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 3.667981176s ago: executing program 2 (id=3713): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10c002, 0xa45d, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (fail_nth: 4) 3.608635128s ago: executing program 1 (id=3714): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000009000001", @ANYRES32=r2, @ANYRES32=r3], 0x18, 0x4004064}, 0x40046) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa82e382a5f2fb9c1, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x0, 0x2, 0x9, 0x9}, {0x14000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000180)='./cgroup.cpu/cpuset.cpus/file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) 3.251938067s ago: executing program 2 (id=3715): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001a12c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) r2 = socket$kcm(0x2, 0x5, 0x84) close(0x3) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[], 0xee8a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 2.835714127s ago: executing program 1 (id=3716): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.74031305s ago: executing program 1 (id=3717): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x2009, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r5, 0x0, 0xeffd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000940)={0x0, r9}, 0x8) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 2.591206714s ago: executing program 1 (id=3719): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0xc602, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 652.987053ms ago: executing program 0 (id=3720): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5c00000014006b030231a6080c000af32c0cae936c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f68e12ec63c9f4d4938037e786a6d1000000e665050b38", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r6, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) close(r1) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80194, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x90802, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001000)='devices.deny\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xdc0, 0x2, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 615.536074ms ago: executing program 3 (id=3721): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x341a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340)}, 0x8386}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x8, 0x8, 0x8, 0x5, 0x0, 0x0, 0x40001, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0xfffffffffffffff9}, 0x107008, 0x9, 0x3ff, 0x7, 0x1, 0x0, 0x4, 0x0, 0x8, 0x0, 0x2172}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d030000002f6e35400c000200001ec00037", 0x21}], 0x1, 0x0, 0x0, 0x39c}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, &(0x7f0000000640)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90524fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 245.735973ms ago: executing program 3 (id=3722): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f3ffffff001900000200000004a30100100000008520000005000000184b0000d82ba4ad2a8b5718000000009500000000000000305a7e65bf32bb04ef6656794d8cc4f76ac82f246aa162fd7f3c0bbc8d32fd3fd333a446ff41e8a734edf6f824335e9a273fd442185e0a45a8db4e6e30d6514ab7555335"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x0, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@ifindex, 0xffffffffffffffff, 0x19, 0x2023}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=3723): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000480)=r3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000005, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000100)) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1e0000000500000009000000ffffffff90cb0400", @ANYRES32=r5, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0400000000400000000000000ff8ffffff000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x3, 0x1000}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r2, r8, r2, r9, r10, r2, r2], 0x0, 0x10, 0x40}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0xfae70cd23e750632, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r12 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r6, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): vice gre0 is of different type [ 497.368331][T12065] netlink: 'syz.1.2381': attribute type 21 has an invalid length. [ 497.389283][T12065] netlink: 'syz.1.2381': attribute type 1 has an invalid length. [ 497.430636][T12070] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 498.452203][T12070] team0: Device gre0 is of different type [ 499.083415][T12074] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2383'. [ 499.231522][T12099] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.2393'. [ 500.276267][T12115] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 500.297795][T12115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'. [ 500.335202][T12115] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 500.350376][T12115] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.386587][T12115] batman_adv: batadv0: Interface activated: ÿÿÿÿÿÿ [ 500.477390][T12120] netlink: 'syz.2.2401': attribute type 3 has an invalid length. [ 500.522490][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2401'. [ 501.346336][T12145] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.2410'. [ 501.948319][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.955318][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.087821][T12158] netlink: 'syz.3.2414': attribute type 10 has an invalid length. [ 502.352159][T12164] netlink: 'syz.2.2417': attribute type 3 has an invalid length. [ 502.379889][T12164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2417'. [ 502.930607][T12158] team0: Device gre0 is of different type [ 503.514329][T12175] netlink: 'syz.2.2420': attribute type 10 has an invalid length. [ 503.795118][T12175] team0: Device gre0 is of different type [ 504.822137][T12201] netlink: 'syz.1.2429': attribute type 3 has an invalid length. [ 504.844940][T12201] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2429'. [ 504.952993][T12203] netlink: 'syz.0.2431': attribute type 3 has an invalid length. [ 504.968805][T12203] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2431'. [ 505.286391][T12213] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2434'. [ 506.425408][T12235] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 506.444597][T12235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2444'. [ 506.464785][T12235] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 506.550128][T12241] netlink: 'syz.3.2445': attribute type 3 has an invalid length. [ 506.575385][T12241] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2445'. [ 506.814191][T12247] netlink: 'syz.1.2447': attribute type 10 has an invalid length. [ 506.816025][T12250] FAULT_INJECTION: forcing a failure. [ 506.816025][T12250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.883589][T12250] CPU: 1 PID: 12250 Comm: syz.0.2449 Not tainted syzkaller #0 [ 506.891318][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.901424][T12250] Call Trace: [ 506.904736][T12250] [ 506.907700][T12250] dump_stack_lvl+0x188/0x24e [ 506.912438][T12250] ? show_regs_print_info+0x12/0x12 [ 506.917690][T12250] ? load_image+0x410/0x410 [ 506.922248][T12250] ? __lock_acquire+0x7c40/0x7c40 [ 506.927679][T12250] should_fail_ex+0x390/0x4c0 [ 506.932667][T12250] _copy_from_user+0x2c/0x170 [ 506.938001][T12250] __copy_msghdr+0x384/0x560 [ 506.942813][T12250] ___sys_sendmsg+0x210/0x360 [ 506.947622][T12250] ? __sys_sendmsg+0x2a0/0x2a0 [ 506.952617][T12250] ? __lock_acquire+0x7c40/0x7c40 [ 506.958074][T12250] __se_sys_sendmsg+0x1c3/0x2b0 [ 506.963409][T12250] ? __x64_sys_sendmsg+0x80/0x80 [ 506.968579][T12250] ? lockdep_hardirqs_on+0x94/0x140 [ 506.973973][T12250] do_syscall_64+0x4c/0xa0 [ 506.978413][T12250] ? clear_bhb_loop+0x60/0xb0 [ 506.983105][T12250] ? clear_bhb_loop+0x60/0xb0 [ 506.987795][T12250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.993877][T12250] RIP: 0033:0x7fd71e39e0d9 [ 506.998406][T12250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.018917][T12250] RSP: 002b:00007fd71f2c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.027534][T12250] RAX: ffffffffffffffda RBX: 00007fd71e625fa0 RCX: 00007fd71e39e0d9 [ 507.035693][T12250] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 507.043783][T12250] RBP: 00007fd71f2c0090 R08: 0000000000000000 R09: 0000000000000000 [ 507.051772][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.059958][T12250] R13: 00007fd71e626038 R14: 00007fd71e625fa0 R15: 00007ffc3422b328 [ 507.068391][T12250] [ 507.476264][T12247] team0: Device gre0 is of different type [ 508.348192][T12264] netlink: 'syz.0.2454': attribute type 21 has an invalid length. [ 508.366662][T12264] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 508.421965][T12267] netlink: 'syz.2.2455': attribute type 39 has an invalid length. [ 510.516515][T12309] netlink: 'syz.1.2469': attribute type 10 has an invalid length. [ 512.241008][T12309] team0: Device gre0 is of different type [ 512.312217][T12311] netlink: 'syz.4.2470': attribute type 21 has an invalid length. [ 512.322670][T12311] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 514.030950][T12363] netlink: 'syz.3.2489': attribute type 39 has an invalid length. [ 514.141601][T12366] netlink: 'syz.4.2490': attribute type 21 has an invalid length. [ 514.159144][T12366] netlink: 'syz.4.2490': attribute type 1 has an invalid length. [ 514.486915][T12379] netlink: 'syz.1.2496': attribute type 10 has an invalid length. [ 516.631303][T12379] team0: Device gre0 is of different type [ 517.779180][T12403] netlink: 'syz.3.2502': attribute type 39 has an invalid length. [ 518.180983][T12405] netlink: 'syz.1.2503': attribute type 3 has an invalid length. [ 518.264611][T12405] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2503'. [ 518.877293][T12414] netlink: 'syz.4.2506': attribute type 3 has an invalid length. [ 518.967298][T12414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2506'. [ 519.228836][T12419] netlink: 'syz.2.2508': attribute type 21 has an invalid length. [ 519.275305][T12419] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 519.402107][T12432] FAULT_INJECTION: forcing a failure. [ 519.402107][T12432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.479295][T12430] netlink: 'syz.3.2521': attribute type 3 has an invalid length. [ 519.504735][T12432] CPU: 1 PID: 12432 Comm: syz.1.2510 Not tainted syzkaller #0 [ 519.512372][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.522591][T12432] Call Trace: [ 519.525902][T12432] [ 519.529052][T12432] dump_stack_lvl+0x188/0x24e [ 519.534000][T12432] ? show_regs_print_info+0x12/0x12 [ 519.539479][T12432] ? load_image+0x410/0x410 [ 519.544007][T12432] ? __lock_acquire+0x7c40/0x7c40 [ 519.549142][T12432] should_fail_ex+0x390/0x4c0 [ 519.554019][T12432] _copy_from_user+0x2c/0x170 [ 519.558797][T12432] ___sys_sendmsg+0x1c3/0x360 [ 519.563581][T12432] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.568383][T12432] ? rcu_is_watching+0x11/0xa0 [ 519.573260][T12432] __se_sys_sendmsg+0x1c3/0x2b0 [ 519.578176][T12432] ? __x64_sys_sendmsg+0x80/0x80 [ 519.583294][T12432] ? lockdep_hardirqs_on+0x94/0x140 [ 519.588596][T12432] do_syscall_64+0x4c/0xa0 [ 519.593230][T12432] ? clear_bhb_loop+0x60/0xb0 [ 519.597939][T12432] ? clear_bhb_loop+0x60/0xb0 [ 519.602638][T12432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.608565][T12432] RIP: 0033:0x7fb98c39e0d9 [ 519.613221][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.632879][T12432] RSP: 002b:00007fb98d1a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.641572][T12432] RAX: ffffffffffffffda RBX: 00007fb98c626090 RCX: 00007fb98c39e0d9 [ 519.650515][T12432] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 519.659243][T12432] RBP: 00007fb98d1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 519.667337][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.676322][T12432] R13: 00007fb98c626128 R14: 00007fb98c626090 R15: 00007ffe49686718 [ 519.684867][T12432] [ 519.713656][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2521'. [ 520.103525][T12447] netlink: 'syz.3.2514': attribute type 39 has an invalid length. [ 520.677604][T12462] netlink: 'syz.3.2517': attribute type 3 has an invalid length. [ 520.749390][T12462] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2517'. [ 521.093988][T12476] netlink: 'syz.3.2524': attribute type 21 has an invalid length. [ 521.136033][T12476] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 521.630353][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2525'. [ 523.781132][T12492] team0: Device gre0 is of different type [ 523.823529][T12495] validate_nla: 2 callbacks suppressed [ 523.823550][T12495] netlink: 'syz.4.2528': attribute type 39 has an invalid length. [ 523.839935][T12498] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 523.950977][T12498] team0: Device gre0 is of different type [ 524.041229][T12514] netlink: 'syz.4.2534': attribute type 3 has an invalid length. [ 524.049884][T12514] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2534'. [ 524.422173][T12521] netlink: 'syz.4.2538': attribute type 3 has an invalid length. [ 524.437711][T12521] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2538'. [ 524.585807][T12523] device syzkaller0 entered promiscuous mode [ 527.200690][T12531] netlink: 'syz.4.2541': attribute type 21 has an invalid length. [ 527.208907][T12531] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 528.247572][T12563] netlink: 'syz.3.2549': attribute type 3 has an invalid length. [ 528.286126][T12563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2549'. [ 528.859030][T12573] netlink: 'syz.4.2553': attribute type 21 has an invalid length. [ 528.930125][T12573] netlink: 'syz.4.2553': attribute type 1 has an invalid length. [ 529.049421][T12578] netlink: 'syz.1.2556': attribute type 21 has an invalid length. [ 529.090297][T12578] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 529.962128][T12598] netlink: 'syz.1.2559': attribute type 10 has an invalid length. [ 530.240834][T12598] team0: Device gre0 is of different type [ 531.702142][T12627] netlink: 'syz.0.2565': attribute type 3 has an invalid length. [ 531.746534][T12627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2565'. [ 532.004646][T12620] netlink: 'syz.2.2564': attribute type 3 has an invalid length. [ 532.068390][T12620] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2564'. [ 532.175316][T12629] netlink: 'syz.3.2567': attribute type 39 has an invalid length. [ 532.670617][T12635] netlink: 'syz.2.2569': attribute type 21 has an invalid length. [ 532.692364][T12635] netlink: 'syz.2.2569': attribute type 1 has an invalid length. [ 533.844798][T12662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2578'. [ 534.317141][T12674] validate_nla: 5 callbacks suppressed [ 534.317177][T12674] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 534.335982][T12675] netlink: 'syz.3.2581': attribute type 3 has an invalid length. [ 534.358364][T12675] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2581'. [ 535.943074][T12674] team0: Device gre0 is of different type [ 536.182612][T12687] netlink: 'syz.0.2584': attribute type 21 has an invalid length. [ 536.208347][T12687] netlink: 'syz.0.2584': attribute type 1 has an invalid length. [ 536.238339][T12692] netlink: 'syz.4.2587': attribute type 10 has an invalid length. [ 536.589222][T12700] netlink: 'syz.1.2590': attribute type 3 has an invalid length. [ 536.640232][T12700] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2590'. [ 536.722524][T12692] team0: Device gre0 is of different type [ 536.773454][T12698] netlink: 'syz.3.2588': attribute type 21 has an invalid length. [ 536.785824][T12698] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 537.199688][T12711] netlink: 'syz.1.2594': attribute type 3 has an invalid length. [ 537.249105][T12711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2594'. [ 537.336895][T12710] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 539.430650][T12727] team0: Device gre0 is of different type [ 539.851822][T12743] validate_nla: 2 callbacks suppressed [ 539.851896][T12743] netlink: 'syz.0.2605': attribute type 39 has an invalid length. [ 539.876945][T12755] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 540.197637][T12758] netlink: 'syz.2.2609': attribute type 3 has an invalid length. [ 540.243099][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2609'. [ 540.975202][T12755] team0: Device gre0 is of different type [ 541.275020][T12762] netlink: 'syz.4.2611': attribute type 21 has an invalid length. [ 541.299415][T12762] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 541.379706][T12774] netlink: 'syz.2.2614': attribute type 21 has an invalid length. [ 541.408978][T12774] netlink: 'syz.2.2614': attribute type 1 has an invalid length. [ 541.696723][T12779] netlink: 'syz.4.2616': attribute type 3 has an invalid length. [ 541.715763][T12779] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2616'. [ 542.663967][T12801] netlink: 'syz.1.2622': attribute type 3 has an invalid length. [ 542.696818][T12801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2622'. [ 543.054783][T12807] netlink: 'syz.0.2625': attribute type 21 has an invalid length. [ 544.678635][T12826] team0: Device gre0 is of different type [ 544.830223][T12834] team0: Device gre0 is of different type [ 545.106560][T12849] validate_nla: 7 callbacks suppressed [ 545.106655][T12849] netlink: 'syz.0.2639': attribute type 3 has an invalid length. [ 545.122535][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2639'. [ 545.579137][T12854] netlink: 'syz.1.2641': attribute type 21 has an invalid length. [ 545.598834][T12854] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 547.355755][T12891] netlink: 'syz.4.2651': attribute type 39 has an invalid length. [ 547.545205][T12899] netlink: 'syz.2.2654': attribute type 3 has an invalid length. [ 547.554030][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2654'. [ 547.605906][T12895] netlink: 'syz.0.2653': attribute type 39 has an invalid length. [ 547.691928][T12901] netlink: 'syz.3.2656': attribute type 21 has an invalid length. [ 547.742998][T12901] netlink: 'syz.3.2656': attribute type 1 has an invalid length. [ 548.159980][T12911] netlink: 'syz.4.2659': attribute type 21 has an invalid length. [ 548.194337][T12911] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 550.286549][T12961] validate_nla: 4 callbacks suppressed [ 550.286569][T12961] netlink: 'syz.3.2676': attribute type 21 has an invalid length. [ 550.332596][T12961] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 551.320206][T12981] netlink: 'syz.3.2684': attribute type 21 has an invalid length. [ 551.356169][T12981] netlink: 'syz.3.2684': attribute type 1 has an invalid length. [ 551.628324][T12990] netlink: 'syz.2.2687': attribute type 39 has an invalid length. [ 551.925963][T12998] netlink: 'syz.0.2700': attribute type 10 has an invalid length. [ 553.288787][T12998] team0: Device gre0 is of different type [ 553.392131][T12996] netlink: 'syz.3.2691': attribute type 39 has an invalid length. [ 553.479210][T13016] netlink: 'syz.1.2693': attribute type 3 has an invalid length. [ 553.592251][T13016] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2693'. [ 553.632300][T13001] netlink: 'syz.2.2690': attribute type 21 has an invalid length. [ 553.650905][T13001] netlink: 'syz.2.2690': attribute type 1 has an invalid length. [ 555.319347][T13052] sctp: [Deprecated]: syz.4.2706 (pid 13052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 555.319347][T13052] Use struct sctp_sack_info instead [ 555.525250][T13049] @0Ù: renamed from bond_slave_1 [ 555.764571][T13052] validate_nla: 1 callbacks suppressed [ 555.764589][T13052] netlink: 'syz.4.2706': attribute type 21 has an invalid length. [ 556.426676][T13065] netlink: 'syz.2.2709': attribute type 3 has an invalid length. [ 556.444859][T13065] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2709'. [ 556.537206][T13071] netlink: 'syz.4.2711': attribute type 10 has an invalid length. [ 558.051952][T13071] team0: Device gre0 is of different type [ 558.341440][T13100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2721'. [ 558.400131][T13079] netlink: 'syz.1.2713': attribute type 21 has an invalid length. [ 558.429135][T13079] netlink: 'syz.1.2713': attribute type 1 has an invalid length. [ 558.444625][T13100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2721'. [ 558.504030][T13099] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2721'. [ 558.568743][T13098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2721'. [ 559.537902][T13110] netlink: 'syz.1.2724': attribute type 3 has an invalid length. [ 559.558207][T13110] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2724'. [ 560.779708][T13142] FAULT_INJECTION: forcing a failure. [ 560.779708][T13142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.891107][T13142] CPU: 0 PID: 13142 Comm: syz.3.2734 Not tainted syzkaller #0 [ 560.898834][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.909198][T13142] Call Trace: [ 560.912611][T13142] [ 560.915590][T13142] dump_stack_lvl+0x188/0x24e [ 560.920352][T13142] ? show_regs_print_info+0x12/0x12 [ 560.925610][T13142] ? load_image+0x410/0x410 [ 560.930353][T13142] ? __lock_acquire+0x7c40/0x7c40 [ 560.935518][T13142] should_fail_ex+0x390/0x4c0 [ 560.940264][T13142] _copy_from_user+0x2c/0x170 [ 560.945285][T13142] bpf_test_init+0xde/0x140 [ 560.949844][T13142] bpf_prog_test_run_xdp+0x488/0xf80 [ 560.955272][T13142] ? __lock_acquire+0x7c40/0x7c40 [ 560.960639][T13142] ? dev_put+0x80/0x80 [ 560.964760][T13142] ? dev_put+0x80/0x80 [ 560.968875][T13142] bpf_prog_test_run+0x31c/0x390 [ 560.973933][T13142] __sys_bpf+0x62b/0x780 [ 560.978284][T13142] ? bpf_link_show_fdinfo+0x380/0x380 [ 560.983862][T13142] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 560.990036][T13142] __x64_sys_bpf+0x78/0x90 [ 560.994734][T13142] do_syscall_64+0x4c/0xa0 [ 560.999353][T13142] ? clear_bhb_loop+0x60/0xb0 [ 561.004151][T13142] ? clear_bhb_loop+0x60/0xb0 [ 561.009054][T13142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.014995][T13142] RIP: 0033:0x7f7c1f59e0d9 [ 561.019433][T13142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.039593][T13142] RSP: 002b:00007f7c20396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.048042][T13142] RAX: ffffffffffffffda RBX: 00007f7c1f825fa0 RCX: 00007f7c1f59e0d9 [ 561.056200][T13142] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 561.064593][T13142] RBP: 00007f7c20396090 R08: 0000000000000000 R09: 0000000000000000 [ 561.072581][T13142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.080908][T13142] R13: 00007f7c1f826038 R14: 00007f7c1f825fa0 R15: 00007ffdc03f9f08 [ 561.089354][T13142] [ 561.870584][T13156] netlink: 'syz.1.2737': attribute type 1 has an invalid length. [ 561.893481][T13156] netlink: 'syz.1.2737': attribute type 4 has an invalid length. [ 561.927286][T13156] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2737'. [ 562.034215][T13161] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2739'. [ 562.246725][T13166] netlink: 'syz.1.2741': attribute type 10 has an invalid length. [ 563.232923][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.239662][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.581683][T13166] team0: Device gre0 is of different type [ 564.422276][T13197] netlink: 'syz.3.2751': attribute type 39 has an invalid length. [ 565.125242][T13218] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2759'. [ 565.809840][T13237] netlink: 'syz.2.2765': attribute type 39 has an invalid length. [ 566.078746][T13243] netlink: 'syz.1.2767': attribute type 10 has an invalid length. [ 566.159544][T13243] device geneve0 entered promiscuous mode [ 566.223821][T13248] netlink: 'syz.0.2772': attribute type 10 has an invalid length. [ 567.082266][T13248] team0: Device gre0 is of different type [ 567.366152][T13256] netlink: 'syz.2.2774': attribute type 10 has an invalid length. [ 567.381123][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2774'. [ 567.393713][T13256] device ipvlan1 entered promiscuous mode [ 567.416364][T13256] bridge0: port 4(ipvlan1) entered blocking state [ 567.444536][T13256] bridge0: port 4(ipvlan1) entered disabled state [ 567.454072][T13256] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 568.034775][T13273] netlink: 'syz.2.2781': attribute type 39 has an invalid length. [ 568.202297][T13281] netlink: 'syz.0.2784': attribute type 10 has an invalid length. [ 568.663527][T13295] netlink: 'syz.2.2787': attribute type 3 has an invalid length. [ 568.706363][T13295] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2787'. [ 569.515483][T13281] team0: Device gre0 is of different type [ 570.061443][T13292] netlink: 'syz.1.2785': attribute type 21 has an invalid length. [ 570.069627][T13292] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 570.822427][T13322] netlink: 'syz.3.2797': attribute type 39 has an invalid length. [ 571.534074][T13339] netlink: 'syz.1.2804': attribute type 3 has an invalid length. [ 571.546139][T13339] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2804'. [ 571.705467][T13346] netlink: 'syz.2.2805': attribute type 21 has an invalid length. [ 571.768349][T13346] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 572.691310][T13369] netlink: 'syz.3.2813': attribute type 39 has an invalid length. [ 573.227089][T13388] netlink: 'syz.1.2822': attribute type 4 has an invalid length. [ 573.278367][T13385] netlink: 'syz.2.2821': attribute type 21 has an invalid length. [ 573.291968][T13385] netlink: 'syz.2.2821': attribute type 1 has an invalid length. [ 573.311348][T13382] netlink: 'syz.4.2820': attribute type 21 has an invalid length. [ 573.348707][T13382] netlink: 'syz.4.2820': attribute type 1 has an invalid length. [ 574.894317][T13411] netlink: 'syz.3.2829': attribute type 10 has an invalid length. [ 576.353480][T13411] team0: Device gre0 is of different type [ 576.487682][T13436] netlink: 'syz.2.2836': attribute type 21 has an invalid length. [ 576.569298][T13436] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 578.795371][T13481] netlink: 'syz.3.2852': attribute type 10 has an invalid length. [ 579.969887][T13481] team0: Device gre0 is of different type [ 580.253012][T13500] netlink: 'syz.4.2858': attribute type 21 has an invalid length. [ 580.327726][T13500] netlink: 'syz.4.2858': attribute type 1 has an invalid length. [ 580.903945][T13509] netlink: 'syz.1.2862': attribute type 39 has an invalid length. [ 581.622212][T13533] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2871'. [ 583.521639][T13551] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2874'. [ 583.602118][T13571] netlink: 'syz.3.2874': attribute type 4 has an invalid length. [ 583.638144][T13571] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2874'. [ 583.931222][T13582] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 584.130905][T13582] team0: Device gre0 is of different type [ 587.333721][T13648] netlink: 'syz.2.2911': attribute type 10 has an invalid length. [ 588.376019][T13648] team0: Device gre0 is of different type [ 588.450148][T13654] netlink: 'syz.4.2912': attribute type 10 has an invalid length. [ 588.583719][T13654] team0: Device gre0 is of different type [ 590.034399][T13695] netlink: 'syz.1.2925': attribute type 2 has an invalid length. [ 590.056913][T13695] netlink: 'syz.1.2925': attribute type 1 has an invalid length. [ 590.091161][T13695] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2925'. [ 592.516414][T13686] netlink: 'syz.0.2921': attribute type 39 has an invalid length. [ 592.552983][T13697] netlink: 'syz.1.2925': attribute type 9 has an invalid length. [ 592.568590][T13698] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 592.576393][T13698] syzkaller1: linktype set to 0 [ 593.318956][T13714] netlink: 'syz.2.2931': attribute type 10 has an invalid length. [ 594.503650][T13714] team0: Device gre0 is of different type [ 594.747471][T13732] netlink: 'syz.1.2936': attribute type 21 has an invalid length. [ 594.771290][T13732] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 594.830360][T13737] netlink: 'syz.0.2938': attribute type 39 has an invalid length. [ 594.844266][T13740] netlink: 'syz.3.2939': attribute type 21 has an invalid length. [ 595.101040][T13747] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2941'. [ 596.063299][T13771] netlink: 'syz.4.2952': attribute type 39 has an invalid length. [ 597.205779][T13778] netlink: 'syz.3.2953': attribute type 21 has an invalid length. [ 597.238144][T13778] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 597.260903][T13783] netlink: 'syz.0.2954': attribute type 10 has an invalid length. [ 597.613024][T13783] team0: Device gre0 is of different type [ 598.606204][T13809] netlink: 'syz.0.2964': attribute type 3 has an invalid length. [ 598.615092][T13809] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2964'. [ 601.159473][T13817] netlink: 'syz.4.2966': attribute type 39 has an invalid length. [ 601.903870][T13827] netlink: 'syz.0.2968': attribute type 3 has an invalid length. [ 601.945711][T13827] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2968'. [ 602.244219][T13839] netlink: 'syz.1.2974': attribute type 10 has an invalid length. [ 604.123139][T13839] team0: Device gre0 is of different type [ 604.241646][T13837] netlink: 'syz.2.2973': attribute type 39 has an invalid length. [ 604.263392][T13854] netlink: 'syz.3.2980': attribute type 39 has an invalid length. [ 605.433114][T13872] netlink: 'syz.2.2986': attribute type 21 has an invalid length. [ 605.472128][T13872] netlink: 'syz.2.2986': attribute type 1 has an invalid length. [ 606.196112][T10015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.416735][T13893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.426513][T13893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.435567][T13893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.444736][T13893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.451171][T13891] netlink: 'syz.2.2992': attribute type 3 has an invalid length. [ 606.463509][T13891] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2992'. [ 606.477661][T13893] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.485913][T13893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.504655][T10015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.706496][T10015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.876523][T10015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.005847][T13900] netlink: 'syz.1.2993': attribute type 39 has an invalid length. [ 607.805880][T10015] device 0 left promiscuous mode [ 607.949269][T13892] chnl_net:caif_netlink_parms(): no params data found [ 608.481693][T13934] netlink: 'syz.0.3002': attribute type 21 has an invalid length. [ 608.522989][T13934] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 608.538074][T13893] Bluetooth: hci0: command 0x0409 tx timeout [ 608.676318][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.751573][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.809242][T13892] device bridge_slave_0 entered promiscuous mode [ 608.836492][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.868110][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.909135][T13892] device bridge_slave_1 entered promiscuous mode [ 609.053627][T13892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.173092][T13957] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 609.261683][T13892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.398102][T13957] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3007'. [ 609.448727][T13892] team0: Port device team_slave_0 added [ 609.462371][T13892] team0: Port device team_slave_1 added [ 609.777560][T13892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.807973][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.873534][T13892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.947815][T13971] netlink: 'syz.4.3012': attribute type 10 has an invalid length. [ 610.304597][T13979] netlink: 'syz.0.3015': attribute type 3 has an invalid length. [ 610.339910][T13979] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3015'. [ 610.618307][T13893] Bluetooth: hci0: command 0x041b tx timeout [ 611.109393][T13971] team0: Device gre0 is of different type [ 611.583692][T13892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.608462][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.697895][T13892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.789738][T13992] netlink: 'syz.2.3018': attribute type 10 has an invalid length. [ 612.030825][T13992] team0: Device gre0 is of different type [ 612.698714][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 613.069407][T13892] device hsr_slave_0 entered promiscuous mode [ 613.089673][T13892] device hsr_slave_1 entered promiscuous mode [ 613.105658][T13892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.115584][T13892] Cannot create hsr debugfs directory [ 614.197997][T10015] device hsr0 left promiscuous mode [ 614.204463][T10015] nr0: port 1(hsr0) entered disabled state [ 614.350667][T10015] device hsr_slave_0 left promiscuous mode [ 614.372168][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.403675][T10015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.462296][T10015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.470313][T10015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.496191][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.526892][T10015] device bridge_slave_0 left promiscuous mode [ 614.536925][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.627688][T10015] device veth1_macvtap left promiscuous mode [ 614.637346][T10015] device veth0_macvtap left promiscuous mode [ 614.655695][T10015] device veth1_vlan left promiscuous mode [ 614.778185][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 615.904456][T10015] team0 (unregistering): Port device team_slave_1 removed [ 615.950341][T10015] team0 (unregistering): Port device team_slave_0 removed [ 616.007532][T10015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.056618][T10015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.356793][T10015] bond0 (unregistering): Released all slaves [ 616.466439][T14032] netlink: 'syz.1.3026': attribute type 21 has an invalid length. [ 616.494960][T14032] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 616.935328][T14040] netlink: 'syz.1.3028': attribute type 3 has an invalid length. [ 616.946652][T14040] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3028'. [ 617.257421][T14047] netlink: 'syz.4.3031': attribute type 10 has an invalid length. [ 617.493847][T14047] team0: Device gre0 is of different type [ 618.085908][T13892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.122418][T13892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 618.163044][T13892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.241782][T13892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.475791][T14073] netlink: 'syz.1.3035': attribute type 10 has an invalid length. [ 618.670286][T14073] team0: Device gre0 is of different type [ 619.123740][T14082] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 619.266831][T14082] bridge0: port 3(team0) entered disabled state [ 619.274205][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.281955][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.349776][T14082] bridge0: port 3(team0) entered blocking state [ 619.356304][T14082] bridge0: port 3(team0) entered forwarding state [ 619.363748][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.371266][T14082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.379358][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.386688][T14082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.616324][T14082] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 619.855845][T13892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.972726][T10022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 619.997406][T10022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.086349][T14091] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 620.635734][T14097] netlink: 'syz.0.3041': attribute type 3 has an invalid length. [ 620.656217][T14097] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 620.993692][T14091] team0: Device gre0 is of different type [ 621.058495][T13892] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.071723][T14095] netlink: 'syz.4.3040': attribute type 21 has an invalid length. [ 621.086425][T14095] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 621.165724][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.179910][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.197261][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.204515][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.219523][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 621.236039][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 621.246698][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.253847][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.295381][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 621.314807][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 621.366328][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 621.422791][T14103] netlink: 'syz.4.3044': attribute type 10 has an invalid length. [ 621.606560][T14103] team0: Device gre0 is of different type [ 621.792286][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 621.831097][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 621.845817][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 621.869028][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 621.888424][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 621.925820][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 621.974161][T13892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.036379][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.071567][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.086870][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.116617][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.235028][T14112] netlink: 'syz.0.3046': attribute type 10 has an invalid length. [ 622.255502][T14112] device hsr0 left promiscuous mode [ 622.265482][T14112] nr0: port 1(hsr0) entered disabled state [ 622.329749][T14112] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 622.634386][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.643262][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.685522][T13892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.773830][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 622.796900][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.854001][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.880679][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.912996][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.935081][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 622.963584][T13892] device veth0_vlan entered promiscuous mode [ 623.062971][T14129] netlink: 'syz.0.3056': attribute type 10 has an invalid length. [ 623.089364][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.097059][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.187799][T13892] device veth1_vlan entered promiscuous mode [ 623.452809][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 623.468619][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 623.581535][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 623.611096][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 623.660288][T13892] device veth0_macvtap entered promiscuous mode [ 623.720997][T13892] device veth1_macvtap entered promiscuous mode [ 623.824858][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.896117][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.920163][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.944646][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.974737][T13892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.040889][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.075016][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.144491][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.175273][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.194461][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.206827][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.218941][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.236355][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.249879][T13892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.267938][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 624.333663][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 624.400478][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 624.422764][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 624.452969][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 624.493636][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 624.547960][T14156] netlink: 'syz.2.3052': attribute type 10 has an invalid length. [ 624.622963][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.630021][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.695186][T14156] team0: Device gre0 is of different type [ 625.051773][T13892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.141023][T13892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.164179][T13892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.228051][T13892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.552517][T14175] netlink: 'syz.0.3054': attribute type 21 has an invalid length. [ 625.577142][T14175] netlink: 'syz.0.3054': attribute type 1 has an invalid length. [ 625.677790][T10028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.708634][T10028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.791299][T14182] netlink: 'syz.4.3057': attribute type 10 has an invalid length. [ 626.231212][T14190] netlink: 'syz.1.3059': attribute type 3 has an invalid length. [ 626.276250][T14190] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3059'. [ 627.315645][T14182] team0: Device gre0 is of different type [ 627.392301][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 627.422253][T14194] netlink: 'syz.0.3060': attribute type 10 has an invalid length. [ 627.610066][T10015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.649497][T10015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.684425][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 629.182713][T13893] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.193485][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.194534][T10011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.214895][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.223333][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.235891][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 629.243765][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.482889][T10011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.640202][T14250] netlink: 'syz.2.3070': attribute type 3 has an invalid length. [ 629.661226][T14250] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3070'. [ 629.702650][T10011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.836835][T14257] netlink: 'syz.4.3072': attribute type 3 has an invalid length. [ 629.871030][T10011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.882051][T14257] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3072'. [ 630.050153][T14252] netlink: 'syz.1.3071': attribute type 29 has an invalid length. [ 630.098795][T14252] netlink: 'syz.1.3071': attribute type 29 has an invalid length. [ 630.213349][T14252] netlink: 'syz.1.3071': attribute type 29 has an invalid length. [ 630.263165][T14240] chnl_net:caif_netlink_parms(): no params data found [ 630.708456][T14240] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.715671][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.745173][T14240] device bridge_slave_0 entered promiscuous mode [ 630.958885][T14240] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.966410][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.977457][T14240] device bridge_slave_1 entered promiscuous mode [ 630.985461][T14289] netlink: 'syz.1.3079': attribute type 3 has an invalid length. [ 630.985754][T14291] netlink: 'syz.4.3080': attribute type 39 has an invalid length. [ 631.027499][T14289] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3079'. [ 631.219579][T14240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.258216][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 631.310478][T14240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.490128][T14240] team0: Port device team_slave_0 added [ 631.560585][T14240] team0: Port device team_slave_1 added [ 631.674821][T14240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.696815][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.778114][T14240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.883699][T14240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.908013][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.956707][T14318] netlink: 'syz.1.3088': attribute type 3 has an invalid length. [ 631.988415][T14318] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3088'. [ 632.008352][T14240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.259350][T14240] device hsr_slave_0 entered promiscuous mode [ 632.301709][T14240] device hsr_slave_1 entered promiscuous mode [ 632.607433][T14336] netlink: 'syz.2.3092': attribute type 3 has an invalid length. [ 632.662347][T14336] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3092'. [ 633.339496][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 633.554702][T10011] device hsr_slave_0 left promiscuous mode [ 633.597254][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.637143][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.688518][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.696105][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.741225][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.776285][T10011] device bridge_slave_0 left promiscuous mode [ 633.808610][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.840421][T14361] netlink: 'syz.1.3100': attribute type 3 has an invalid length. [ 633.865266][T14361] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3100'. [ 633.876875][T10011] device veth1_macvtap left promiscuous mode [ 633.883474][T10011] device veth0_macvtap left promiscuous mode [ 633.890292][T10011] device veth1_vlan left promiscuous mode [ 634.318623][T10011] team0 (unregistering): Port device macvlan0 removed [ 634.823359][T14382] netlink: 'syz.4.3102': attribute type 3 has an invalid length. [ 634.823709][T10011] team0 (unregistering): Port device team_slave_1 removed [ 634.832208][T14382] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3102'. [ 634.893985][T10011] team0 (unregistering): Port device team_slave_0 removed [ 635.373899][T14357] netlink: 'syz.3.3099': attribute type 39 has an invalid length. [ 635.422034][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 635.450875][T14357] device hsr_slave_1 left promiscuous mode [ 636.378697][T14403] netlink: 'syz.1.3108': attribute type 3 has an invalid length. [ 636.387548][T14403] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3108'. [ 636.601468][T14240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 636.656327][T14240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 636.728166][T14240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 636.813194][T14421] netlink: 'syz.2.3114': attribute type 10 has an invalid length. [ 636.821077][T14417] netlink: 'syz.4.3113': attribute type 3 has an invalid length. [ 636.837563][T14417] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3113'. [ 637.271607][T14421] team0: Device gre0 is of different type [ 637.498160][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 637.925160][T14240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.028981][T14428] netlink: 'syz.3.3116': attribute type 39 has an invalid length. [ 638.412078][T14240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.487497][T14443] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 638.587566][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.595816][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.704823][T14443] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.712219][T14443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.720407][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.727766][T14443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.752603][T14443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 638.822796][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.857266][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.915428][T14240] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.983341][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.023735][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.068618][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.075798][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.099463][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.131580][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.160445][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.168532][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.196118][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.234267][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.282562][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.329199][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.390684][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.467638][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.496967][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.528793][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.555017][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.564968][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.579120][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.618848][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.662965][T14240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.693243][T14469] netlink: 'syz.3.3125': attribute type 21 has an invalid length. [ 639.716774][T14469] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 640.251688][T14483] netlink: 'syz.3.3129': attribute type 39 has an invalid length. [ 640.304138][T14481] netlink: 'syz.1.3128': attribute type 39 has an invalid length. [ 640.937684][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.975382][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.024557][T14240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.122869][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.187092][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.273727][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.301594][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.335629][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.364493][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.410220][T14240] device veth0_vlan entered promiscuous mode [ 641.491388][T14240] device veth1_vlan entered promiscuous mode [ 641.539084][T14517] netlink: 'syz.1.3137': attribute type 21 has an invalid length. [ 641.580101][T14517] netlink: 'syz.1.3137': attribute type 1 has an invalid length. [ 641.901109][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 641.924715][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 641.960907][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.003030][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.049895][T14523] netlink: 'syz.2.3139': attribute type 21 has an invalid length. [ 642.075029][T14523] netlink: 'syz.2.3139': attribute type 1 has an invalid length. [ 642.111313][T14240] device veth0_macvtap entered promiscuous mode [ 642.176627][T14240] device veth1_macvtap entered promiscuous mode [ 642.212810][T14529] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3140'. [ 642.280881][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.320592][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.341270][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.352866][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.416331][T14240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.464409][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.481385][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.571051][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.630019][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.656047][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.667229][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.677697][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.695202][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.707521][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.724897][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.759587][T14240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.770684][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.806032][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.862612][T14240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.890990][T14240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.912505][T14240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.944126][T14240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.237099][T10015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.275064][T10015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.320933][T14553] validate_nla: 2 callbacks suppressed [ 643.321216][T14553] netlink: 'syz.3.3148': attribute type 3 has an invalid length. [ 643.368245][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 643.407317][T10013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.417028][T14553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3148'. [ 643.450025][T10013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.482436][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 643.648736][T14560] netlink: 'syz.1.3149': attribute type 21 has an invalid length. [ 643.710127][T14560] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 643.997268][T14564] netlink: 'syz.0.3063': attribute type 3 has an invalid length. [ 644.011015][T14564] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3063'. [ 644.221457][T14570] netlink: 'syz.3.3153': attribute type 3 has an invalid length. [ 644.226733][T14572] netlink: 'syz.1.3154': attribute type 39 has an invalid length. [ 644.276962][T14570] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3153'. [ 644.989210][T14584] netlink: 'syz.1.3157': attribute type 21 has an invalid length. [ 645.032436][T14584] netlink: 'syz.1.3157': attribute type 1 has an invalid length. [ 645.162137][T10011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.190039][T14590] netlink: 'syz.3.3162': attribute type 3 has an invalid length. [ 645.213708][T14590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3162'. [ 645.226234][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 645.239128][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 645.241437][T14586] netlink: 'syz.2.3161': attribute type 39 has an invalid length. [ 645.274361][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 645.283843][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 645.295507][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 645.303747][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 645.460619][T10011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.644541][T10011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.795766][T10011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.835982][T14608] team0: Device gre0 is of different type [ 647.247240][T14591] chnl_net:caif_netlink_parms(): no params data found [ 647.269070][T14629] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3175'. [ 647.338202][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 648.142724][T14637] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.150569][T14637] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.353293][T14591] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.361640][T14591] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.426282][T14591] device bridge_slave_0 entered promiscuous mode [ 648.658938][T14591] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.686513][T14591] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.705637][T14591] device bridge_slave_1 entered promiscuous mode [ 649.004311][T14591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.081568][T14591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.282599][T14591] team0: Port device team_slave_0 added [ 649.307175][T14672] validate_nla: 11 callbacks suppressed [ 649.307222][T14672] netlink: 'syz.2.3185': attribute type 3 has an invalid length. [ 649.379844][T14672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3185'. [ 649.386195][T14591] team0: Port device team_slave_1 added [ 649.418381][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 649.425318][T14674] netlink: 'syz.3.3184': attribute type 3 has an invalid length. [ 649.444406][T14674] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3184'. [ 649.487068][T14677] netlink: 'syz.1.3186': attribute type 3 has an invalid length. [ 649.520781][T14677] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3186'. [ 649.554884][T14591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.585132][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.612344][T14591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.710205][T14591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.720166][T14591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.838045][T14591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.885763][T14682] netlink: 'syz.2.3187': attribute type 21 has an invalid length. [ 649.908933][T14682] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 650.252525][T14591] device hsr_slave_0 entered promiscuous mode [ 650.313885][T14591] device hsr_slave_1 entered promiscuous mode [ 650.359450][T14591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.367365][T14591] Cannot create hsr debugfs directory [ 650.795967][T14691] netlink: 'syz.3.3188': attribute type 21 has an invalid length. [ 650.845669][T14691] netlink: 'syz.3.3188': attribute type 1 has an invalid length. [ 650.928904][T14693] netlink: 'syz.2.3191': attribute type 10 has an invalid length. [ 650.999071][T14693] bridge0: port 3(team0) entered disabled state [ 651.007716][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.016536][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.174214][T10011] device hsr_slave_0 left promiscuous mode [ 651.199385][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.218202][T10011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.236573][T10011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.282659][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.321267][T10011] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 651.368240][T10011] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 651.419302][T10011] bridge0: port 3(hsr0) entered disabled state [ 651.481397][T10011] device bridge_slave_1 left promiscuous mode [ 651.517244][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 651.528990][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.551865][T14710] netlink: 'syz.2.3196': attribute type 3 has an invalid length. [ 651.590528][T14710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3196'. [ 651.594437][T14712] netlink: 'syz.0.3197': attribute type 3 has an invalid length. [ 651.612274][T10011] device bridge_slave_0 left promiscuous mode [ 651.620008][T14712] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3197'. [ 651.655347][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.738448][T10011] device veth1_macvtap left promiscuous mode [ 651.744982][T10011] device veth0_macvtap left promiscuous mode [ 651.760564][T10011] device veth1_vlan left promiscuous mode [ 652.443878][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3200'. [ 653.248598][T10011] team0 (unregistering): Port device team_slave_1 removed [ 653.367343][T10011] team0 (unregistering): Port device team_slave_0 removed [ 653.588359][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 654.428303][T14750] validate_nla: 5 callbacks suppressed [ 654.428320][T14750] netlink: 'syz.0.3203': attribute type 39 has an invalid length. [ 654.733191][T14753] netlink: 'syz.1.3207': attribute type 3 has an invalid length. [ 654.747439][T14750] device hsr_slave_1 left promiscuous mode [ 654.774800][T14753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3207'. [ 655.624470][T14770] netlink: 'syz.0.3212': attribute type 3 has an invalid length. [ 655.713348][T14770] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3212'. [ 655.942464][T14778] netlink: 'syz.2.3214': attribute type 21 has an invalid length. [ 655.980317][T14778] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 656.027210][T14782] netlink: 'syz.3.3215': attribute type 10 has an invalid length. [ 657.552756][T14804] netlink: 'syz.1.3220': attribute type 3 has an invalid length. [ 657.590643][T14804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3220'. [ 657.954060][T14782] team0: Device gre0 is of different type [ 657.964491][T14810] netlink: 'syz.1.3221': attribute type 3 has an invalid length. [ 657.975563][T14810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3221'. [ 658.047985][T14792] netlink: 'syz.0.3217': attribute type 10 has an invalid length. [ 658.135035][T14792] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.145611][T14792] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.175792][T14792] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.183538][T14792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.191681][T14792] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.199520][T14792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.224295][T14792] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 658.452730][T14591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.477718][T14591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.534565][T14591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.692846][T14591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.828825][T14816] netlink: 'syz.2.3223': attribute type 29 has an invalid length. [ 659.079019][T14826] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3227'. [ 660.271961][T14827] team0: Device gre0 is of different type [ 660.675563][T14849] validate_nla: 3 callbacks suppressed [ 660.675602][T14849] netlink: 'syz.1.3231': attribute type 10 has an invalid length. [ 661.002629][T14849] team0: Device gre0 is of different type [ 661.494259][T14591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.568578][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.587753][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.615167][T14591] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.634291][T14872] netlink: 'syz.0.3235': attribute type 10 has an invalid length. [ 661.689685][T14872] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.697950][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.791413][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.810838][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.849915][T10028] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.857158][T10028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.894460][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 661.935656][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.971169][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.015812][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.023564][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.092618][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.112890][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.162217][T14879] netlink: 'syz.2.3238': attribute type 29 has an invalid length. [ 662.187027][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.207276][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.228761][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.246229][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.339553][T14879] netlink: 'syz.2.3238': attribute type 29 has an invalid length. [ 662.387048][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.418879][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.447752][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.503753][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.519270][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.549593][T14591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.027681][T14896] netlink: 'syz.0.3241': attribute type 21 has an invalid length. [ 663.068289][T14896] netlink: 'syz.0.3241': attribute type 1 has an invalid length. [ 663.396976][T14904] netlink: 'syz.3.3242': attribute type 3 has an invalid length. [ 663.457337][T14904] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3242'. [ 663.887309][T10022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.923866][T10022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.972736][T14591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.040196][T14929] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 664.369516][T14941] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 665.645113][T14941] team0: Device gre0 is of different type [ 666.004808][T14945] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 666.079663][T14945] team0: Device gre0 is of different type [ 666.572395][T14972] netlink: 'syz.3.3254': attribute type 21 has an invalid length. [ 666.617089][T14972] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 666.688815][T14971] netlink: 'syz.0.3263': attribute type 3 has an invalid length. [ 666.729148][T14971] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3263'. [ 667.212474][T14986] netlink: 'syz.2.3258': attribute type 39 has an invalid length. [ 667.225392][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.271234][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.403247][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.414593][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.434032][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.468948][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.498508][T14591] device veth0_vlan entered promiscuous mode [ 667.540436][T14591] device veth1_vlan entered promiscuous mode [ 667.639717][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.689007][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.728228][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.788799][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.844384][T14996] netlink: 'syz.0.3262': attribute type 10 has an invalid length. [ 667.920372][T14591] device veth0_macvtap entered promiscuous mode [ 668.003066][T14591] device veth1_macvtap entered promiscuous mode [ 668.072125][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.114646][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.154610][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.169511][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.217232][T14591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.245591][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.274461][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.292667][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.310956][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.368002][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.401068][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.442531][T14591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.455378][T14591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.471584][T14591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.607118][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.666473][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.694377][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.721297][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.777035][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.812811][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.844452][T15010] netlink: 'syz.1.3266': attribute type 21 has an invalid length. [ 668.863683][T15010] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 668.909481][T14591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.936303][T14591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.954240][T14591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.965470][T14591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.008719][T15019] netlink: 'syz.0.3270': attribute type 10 has an invalid length. [ 670.108371][T15019] team0: Device gre0 is of different type [ 670.390805][T15032] netlink: 'syz.1.3275': attribute type 10 has an invalid length. [ 670.833546][T15032] team0: Device gre0 is of different type [ 671.218059][T10013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.238856][T10013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.252728][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.344529][T10013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.363579][T10013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.378802][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 672.027004][T15061] validate_nla: 1 callbacks suppressed [ 672.027026][T15061] netlink: 'syz.3.3283': attribute type 3 has an invalid length. [ 672.094110][T15061] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3283'. [ 672.804392][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.815326][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.836868][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.851578][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.860133][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 672.869074][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 673.062013][T10028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.566387][T15095] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 673.651324][T10028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.725596][T15095] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 673.784349][T15096] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 673.944863][T10028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.069544][T15101] netlink: 'syz.0.3296': attribute type 3 has an invalid length. [ 674.081727][T15101] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3296'. [ 674.095626][T10028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.938079][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 675.008579][T15073] chnl_net:caif_netlink_parms(): no params data found [ 676.539540][T15167] netlink: 'syz.0.3312': attribute type 3 has an invalid length. [ 676.558460][T15167] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3312'. [ 676.579960][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.634747][T15073] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.711465][T15073] device bridge_slave_0 entered promiscuous mode [ 676.812908][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.829500][T15073] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.848928][T15073] device bridge_slave_1 entered promiscuous mode [ 677.021434][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 677.881181][T15073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.924435][T15073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.083688][T15196] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3318'. [ 678.153875][T15200] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3319'. [ 678.188823][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3319'. [ 678.262834][T15073] team0: Port device team_slave_0 added [ 678.385520][T15073] team0: Port device team_slave_1 added [ 679.099206][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 679.717128][T15227] netlink: 'syz.3.3325': attribute type 3 has an invalid length. [ 679.791749][T15227] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3325'. [ 680.209470][T15218] netlink: 'syz.0.3323': attribute type 10 has an invalid length. [ 680.335583][T15218] team0: Device gre0 is of different type [ 680.499363][T15233] netlink: 'syz.4.3326': attribute type 10 has an invalid length. [ 680.947432][T15233] team0: Device gre0 is of different type [ 681.140772][T15073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.152241][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.187012][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 681.199000][T15073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.256806][T15073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.291228][T15073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.332740][T15073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.539998][T15253] netlink: 'syz.2.3340': attribute type 10 has an invalid length. [ 682.305944][T15253] team0: Device gre0 is of different type [ 682.845261][T10028] device hsr0 left promiscuous mode [ 682.865419][T10028] nr0: port 1(hsr0) entered disabled state [ 682.886290][T10028] device hsr_slave_0 left promiscuous mode [ 682.897661][T10028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.906902][T10028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.915425][T10028] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 682.923595][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.953649][T10028] device bridge_slave_0 left promiscuous mode [ 682.967440][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.021837][T10028] device veth1_macvtap left promiscuous mode [ 683.047221][T10028] device veth0_macvtap left promiscuous mode [ 683.055158][T10028] device veth1_vlan left promiscuous mode [ 683.749633][T10028] team0 (unregistering): Port device team_slave_1 removed [ 683.806453][T10028] team0 (unregistering): Port device team_slave_0 removed [ 684.363909][T15073] device hsr_slave_0 entered promiscuous mode [ 684.372062][T15073] device hsr_slave_1 entered promiscuous mode [ 684.379670][T15073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.387467][T15073] Cannot create hsr debugfs directory [ 684.648291][T15278] netlink: 'syz.3.3337': attribute type 3 has an invalid length. [ 684.658469][T15278] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3337'. [ 684.984357][T15285] netlink: 'syz.3.3338': attribute type 10 has an invalid length. [ 686.035047][T15073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 686.060286][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.067973][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.153399][T15073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 686.239706][T15073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 686.314682][T15073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 686.365492][T15313] netlink: 'syz.3.3348': attribute type 3 has an invalid length. [ 686.382642][T15313] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3348'. [ 686.609357][T15322] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3349'. [ 686.738538][T15073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.760830][T15325] netlink: 'syz.3.3350': attribute type 10 has an invalid length. [ 686.885143][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 686.897299][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.084520][T15073] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.164479][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.176739][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 687.186662][T10028] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.194472][T10028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.205549][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.247199][T10013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.321749][T10013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.372071][T10013] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.380243][T10013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.538037][T10013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.589254][T10013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.667621][T15331] netlink: 'syz.2.3351': attribute type 10 has an invalid length. [ 690.090409][T15331] team0: Device gre0 is of different type [ 690.268955][T15341] netlink: 'syz.4.3355': attribute type 10 has an invalid length. [ 690.283184][T15341] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.291709][T15341] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.338926][T15341] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.346519][T15341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.354490][T15341] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.361967][T15341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.425893][T15341] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 690.501289][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.516654][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.528013][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.567352][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.586290][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.653894][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.696279][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.767183][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.793636][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.842802][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.870140][T15348] netlink: 'syz.0.3356': attribute type 21 has an invalid length. [ 690.878956][T15348] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 690.925588][T15350] netlink: 'syz.4.3357': attribute type 3 has an invalid length. [ 690.947121][T15350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3357'. [ 691.496671][T15364] netlink: 'syz.4.3359': attribute type 3 has an invalid length. [ 691.518669][T15364] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3359'. [ 691.714127][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.723334][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.763076][T15073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.824072][T15371] netlink: 'syz.0.3360': attribute type 39 has an invalid length. [ 691.932239][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 691.948751][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 692.011249][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 692.061179][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 692.100915][T15073] device veth0_vlan entered promiscuous mode [ 692.146558][T15377] netlink: 'syz.2.3362': attribute type 10 has an invalid length. [ 692.161147][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 692.190799][T10007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 692.226989][T15073] device veth1_vlan entered promiscuous mode [ 692.354809][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 692.468423][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 692.492509][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.509336][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.627873][T15073] device veth0_macvtap entered promiscuous mode [ 692.636271][T15381] netlink: 'syz.3.3363': attribute type 21 has an invalid length. [ 692.680237][T15381] netlink: 'syz.3.3363': attribute type 1 has an invalid length. [ 692.794589][T10028] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.824795][T15073] device veth1_macvtap entered promiscuous mode [ 692.832923][T15395] netlink: 'syz.2.3366': attribute type 29 has an invalid length. [ 692.922665][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.944343][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.966980][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.986786][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.023662][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.062827][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.116831][T15073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.141992][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.166807][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.198861][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.226834][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.272214][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.326794][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.373527][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.411934][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.443285][T15073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.470905][T15073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.493962][T15073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.524068][T15073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.544503][T15073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.556986][T15073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.588388][T15073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.630063][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.649450][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 695.409393][T10017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.417384][T10017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.489227][T10028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.497297][T10028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.499994][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 695.523486][T15416] validate_nla: 1 callbacks suppressed [ 695.523547][T15416] netlink: 'syz.4.3368': attribute type 3 has an invalid length. [ 695.567025][T15416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3368'. [ 695.595114][T10017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 695.675494][T15418] netlink: 'syz.0.3367': attribute type 10 has an invalid length. [ 695.845384][T15427] netlink: 'syz.3.3369': attribute type 21 has an invalid length. [ 695.888153][T15427] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3369'. [ 695.943088][T15427] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3369'. [ 696.414215][T15436] netlink: 'syz.4.3371': attribute type 3 has an invalid length. [ 696.516147][T15436] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3371'. [ 696.750712][T15439] netlink: 'syz.0.3372': attribute type 10 has an invalid length. [ 697.489384][T15439] team0: Device gre0 is of different type [ 697.815970][T15460] netlink: 'syz.1.3375': attribute type 10 has an invalid length. [ 697.850389][T15460] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.860179][T15460] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.061915][T15460] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.070520][T15460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.079332][T15460] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.087612][T15460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.112980][T15460] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 698.270296][T15459] netlink: 'syz.2.3374': attribute type 39 has an invalid length. [ 698.929161][T15475] netlink: 'syz.4.3379': attribute type 21 has an invalid length. [ 698.949211][T15475] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 699.085300][T15485] netlink: 'syz.0.3381': attribute type 3 has an invalid length. [ 699.112561][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3381'. [ 701.902602][T15529] validate_nla: 8 callbacks suppressed [ 701.902622][T15529] netlink: 'syz.2.3392': attribute type 29 has an invalid length. [ 703.339296][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.347062][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.626436][T15529] netlink: 'syz.2.3392': attribute type 29 has an invalid length. [ 703.990483][T15555] netlink: 'syz.3.3397': attribute type 39 has an invalid length. [ 704.240419][T15559] netlink: 'syz.4.3398': attribute type 3 has an invalid length. [ 704.290400][T15559] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3398'. [ 704.999303][T15574] netlink: 'syz.2.3402': attribute type 39 has an invalid length. [ 705.065891][T15569] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 705.168063][T15569] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 705.187736][T15573] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 705.387528][T15579] netlink: 'syz.2.3404': attribute type 3 has an invalid length. [ 705.408619][T15579] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3404'. [ 706.097601][T15593] netlink: 'syz.3.3408': attribute type 3 has an invalid length. [ 706.134534][T15593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3408'. [ 707.570240][T15603] device hsr_slave_1 left promiscuous mode [ 707.670108][T15607] validate_nla: 4 callbacks suppressed [ 707.670156][T15607] netlink: 'syz.3.3412': attribute type 21 has an invalid length. [ 707.692370][T15607] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 707.710181][T15616] netlink: 'syz.0.3414': attribute type 39 has an invalid length. [ 708.075136][T15628] netlink: 'syz.1.3417': attribute type 3 has an invalid length. [ 708.238257][T15628] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3417'. [ 708.744491][T15633] netlink: 'syz.3.3421': attribute type 21 has an invalid length. [ 708.765939][T15633] netlink: 'syz.3.3421': attribute type 1 has an invalid length. [ 708.773536][T15635] netlink: 'syz.4.3422': attribute type 3 has an invalid length. [ 708.789988][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3422'. [ 709.371599][T15645] netlink: 'syz.3.3424': attribute type 10 has an invalid length. [ 709.629147][T15642] netlink: 'syz.4.3425': attribute type 21 has an invalid length. [ 709.658941][T15642] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 709.881208][T15651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3427'. [ 709.916264][T15651] netlink: 8062 bytes leftover after parsing attributes in process `syz.3.3427'. [ 710.018337][T15651] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.3427'. [ 710.932237][T15675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3435'. [ 710.956638][T15672] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3433'. [ 712.185941][T15697] netlink: 'syz.4.3441': attribute type 11 has an invalid length. [ 712.205349][T15697] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3441'. [ 712.546446][T15696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.674108][T15701] device syzkaller0 entered promiscuous mode [ 715.819620][T15722] validate_nla: 12 callbacks suppressed [ 715.819638][T15722] netlink: 'syz.1.3447': attribute type 39 has an invalid length. [ 716.639249][T15732] netlink: 'syz.0.3451': attribute type 3 has an invalid length. [ 716.652094][T15732] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3451'. [ 717.040146][T15741] netlink: 'syz.1.3454': attribute type 21 has an invalid length. [ 717.075842][T15741] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 718.221204][T15763] netlink: 'syz.1.3461': attribute type 39 has an invalid length. [ 719.044688][T15777] netlink: 'syz.4.3466': attribute type 9 has an invalid length. [ 719.114646][T15777] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3466'. [ 719.143190][T15776] netlink: 'syz.0.3465': attribute type 3 has an invalid length. [ 719.166978][T15776] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3465'. [ 719.198997][T15780] netlink: 'syz.3.3467': attribute type 21 has an invalid length. [ 719.231269][T15780] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 720.196405][T15799] netlink: 'syz.3.3474': attribute type 39 has an invalid length. [ 720.952027][T15807] bridge0: port 3(team0) entered disabled state [ 721.083162][T15807] device bridge_slave_1 left promiscuous mode [ 721.120580][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.195687][T15807] device bridge_slave_0 left promiscuous mode [ 721.211677][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.374859][T15807] bond0: (slave bridge0): Releasing backup interface [ 721.489917][T15825] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 721.498869][T15825] syzkaller1: group set to 778 [ 721.868093][T15829] netlink: 'syz.0.3480': attribute type 21 has an invalid length. [ 721.964161][T15829] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 722.296759][T15830] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 722.333346][T15830] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3481'. [ 722.719775][T15846] netlink: 'syz.2.3487': attribute type 8 has an invalid length. [ 722.763303][T15846] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3487'. [ 722.934494][T15852] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3489'. [ 722.996236][T15852] device hsr_slave_0 left promiscuous mode [ 723.599806][T15869] netlink: 'syz.1.3494': attribute type 21 has an invalid length. [ 723.631812][T15869] netlink: 'syz.1.3494': attribute type 1 has an invalid length. [ 724.137534][T15876] netlink: 'syz.4.3498': attribute type 3 has an invalid length. [ 724.160085][T15876] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3498'. [ 724.295709][T15890] FAULT_INJECTION: forcing a failure. [ 724.295709][T15890] name failslab, interval 1, probability 0, space 0, times 0 [ 724.318486][ T4289] Bluetooth: hci2: Malformed HCI Event [ 724.325209][T15890] CPU: 1 PID: 15890 Comm: syz.1.3503 Not tainted syzkaller #0 [ 724.333077][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.343540][T15890] Call Trace: [ 724.347122][T15890] [ 724.350375][T15890] dump_stack_lvl+0x188/0x24e [ 724.355349][T15890] ? show_regs_print_info+0x12/0x12 [ 724.360749][T15890] ? load_image+0x410/0x410 [ 724.365273][T15890] ? __might_sleep+0xd0/0xd0 [ 724.370055][T15890] ? __lock_acquire+0x7c40/0x7c40 [ 724.375812][T15890] ? tcp_current_mss+0x6e0/0x6e0 [ 724.381328][T15890] should_fail_ex+0x390/0x4c0 [ 724.386788][T15890] should_failslab+0x5/0x20 [ 724.391961][T15890] slab_pre_alloc_hook+0x59/0x300 [ 724.397183][T15890] kmem_cache_alloc_node+0x5a/0x310 [ 724.402519][T15890] ? __alloc_skb+0xf9/0x7d0 [ 724.407353][T15890] __alloc_skb+0xf9/0x7d0 [ 724.412167][T15890] tcp_stream_alloc_skb+0x3e/0x330 [ 724.417467][T15890] tcp_sendmsg_locked+0xca4/0x39e0 [ 724.422766][T15890] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 724.428990][T15890] ? tcp_set_state+0x520/0x520 [ 724.434095][T15890] tcp_sendmsg+0x2b/0x40 [ 724.438403][T15890] sock_write_iter+0x2d5/0x3e0 [ 724.443485][T15890] ? sock_read_iter+0x3a0/0x3a0 [ 724.448686][T15890] ? common_file_perm+0x171/0x1c0 [ 724.454105][T15890] vfs_write+0x482/0x9a0 [ 724.458486][T15890] ? file_end_write+0x250/0x250 [ 724.463361][T15890] ? __fget_files+0x3fc/0x460 [ 724.468176][T15890] ? __fdget_pos+0x1d4/0x360 [ 724.472782][T15890] ? ksys_write+0x70/0x260 [ 724.477841][T15890] ksys_write+0x14d/0x260 [ 724.482274][T15890] ? __ia32_sys_read+0x80/0x80 [ 724.487149][T15890] ? lockdep_hardirqs_on+0x94/0x140 [ 724.492884][T15890] do_syscall_64+0x4c/0xa0 [ 724.497844][T15890] ? clear_bhb_loop+0x60/0xb0 [ 724.502899][T15890] ? clear_bhb_loop+0x60/0xb0 [ 724.508067][T15890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.514253][T15890] RIP: 0033:0x7ffa6999e0d9 [ 724.519310][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.540434][T15890] RSP: 002b:00007ffa6a77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 724.548969][T15890] RAX: ffffffffffffffda RBX: 00007ffa69c25fa0 RCX: 00007ffa6999e0d9 [ 724.556976][T15890] RDX: 000000000000effd RSI: 0000000000000000 RDI: 0000000000000003 [ 724.565665][T15890] RBP: 00007ffa6a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 724.574459][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.582633][T15890] R13: 00007ffa69c26038 R14: 00007ffa69c25fa0 R15: 00007ffd5cfcb848 [ 724.590642][T15890] [ 725.800365][T15905] netlink: 'syz.1.3511': attribute type 8 has an invalid length. [ 725.879936][T15905] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3511'. [ 726.777428][T15908] netlink: 'syz.2.3510': attribute type 21 has an invalid length. [ 727.029410][T15908] netlink: 'syz.2.3510': attribute type 1 has an invalid length. [ 727.776523][T15937] netlink: 'syz.1.3515': attribute type 3 has an invalid length. [ 727.954356][T15937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3515'. [ 728.151923][ T4290] Bluetooth: hci0: Malformed HCI Event [ 728.441220][T15948] netlink: 'syz.0.3522': attribute type 39 has an invalid length. [ 729.041157][T15959] netlink: 'syz.0.3526': attribute type 21 has an invalid length. [ 729.082255][T15959] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 729.098040][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 729.547109][T15964] netlink: 'syz.4.3529': attribute type 39 has an invalid length. [ 729.951994][T15964] device hsr_slave_1 left promiscuous mode [ 730.884757][T15972] netlink: 'syz.4.3533': attribute type 3 has an invalid length. [ 730.904371][T15972] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3533'. [ 731.369691][ T4289] Bluetooth: hci1: Malformed HCI Event [ 731.586828][T15982] netlink: 'syz.4.3536': attribute type 39 has an invalid length. [ 732.350145][T15990] netlink: 'syz.1.3540': attribute type 21 has an invalid length. [ 732.464147][T16000] netlink: 'syz.0.3543': attribute type 8 has an invalid length. [ 732.473764][T15990] netlink: 'syz.1.3540': attribute type 1 has an invalid length. [ 732.503196][T16000] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3543'. [ 732.619685][T15993] netlink: 'syz.3.3541': attribute type 29 has an invalid length. [ 732.668440][T15993] netlink: 'syz.3.3541': attribute type 29 has an invalid length. [ 732.731609][T15993] netlink: 'syz.3.3541': attribute type 29 has an invalid length. [ 733.164577][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 733.244792][T16014] netlink: 16094 bytes leftover after parsing attributes in process `syz.2.3544'. [ 734.040475][T16028] device bridge_slave_1 left promiscuous mode [ 734.169877][T16028] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.492121][T16028] device bridge_slave_0 left promiscuous mode [ 734.564147][T16028] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.962289][T16028] bond0: (slave bridge0): Releasing backup interface [ 735.163374][T16042] netlink: 'syz.4.3555': attribute type 21 has an invalid length. [ 735.213466][T16042] netlink: 'syz.4.3555': attribute type 1 has an invalid length. [ 735.804969][T16051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3559'. [ 735.835754][T16052] netlink: 'syz.3.3559': attribute type 12 has an invalid length. [ 735.891957][T16052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3559'. [ 735.953093][T16049] netlink: 'syz.1.3558': attribute type 29 has an invalid length. [ 737.679696][T16077] validate_nla: 2 callbacks suppressed [ 737.679881][T16077] netlink: 'syz.3.3567': attribute type 39 has an invalid length. [ 737.742313][T16081] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3569'. [ 737.965733][T16085] netlink: 'syz.1.3570': attribute type 21 has an invalid length. [ 738.046128][T16085] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 738.707413][T16102] FAULT_INJECTION: forcing a failure. [ 738.707413][T16102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.794968][T16102] CPU: 1 PID: 16102 Comm: syz.2.3576 Not tainted syzkaller #0 [ 738.802812][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 738.813533][T16102] Call Trace: [ 738.816960][T16102] [ 738.820132][T16102] dump_stack_lvl+0x188/0x24e [ 738.824881][T16102] ? show_regs_print_info+0x12/0x12 [ 738.830228][T16102] ? load_image+0x410/0x410 [ 738.834802][T16102] ? __lock_acquire+0x7c40/0x7c40 [ 738.839908][T16102] should_fail_ex+0x390/0x4c0 [ 738.844661][T16102] _copy_from_user+0x2c/0x170 [ 738.849577][T16102] iovec_from_user+0x143/0x360 [ 738.854457][T16102] __import_iovec+0x6c/0x510 [ 738.859133][T16102] import_iovec+0x6f/0xa0 [ 738.863590][T16102] ___sys_sendmsg+0x252/0x360 [ 738.868451][T16102] ? __sys_sendmsg+0x2a0/0x2a0 [ 738.873274][T16102] ? __lock_acquire+0x7c40/0x7c40 [ 738.878375][T16102] __se_sys_sendmsg+0x1c3/0x2b0 [ 738.883358][T16102] ? __x64_sys_sendmsg+0x80/0x80 [ 738.888664][T16102] ? lockdep_hardirqs_on+0x94/0x140 [ 738.894486][T16102] do_syscall_64+0x4c/0xa0 [ 738.898955][T16102] ? clear_bhb_loop+0x60/0xb0 [ 738.903765][T16102] ? clear_bhb_loop+0x60/0xb0 [ 738.908482][T16102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.914493][T16102] RIP: 0033:0x7fb1c059e0d9 [ 738.918944][T16102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.938850][T16102] RSP: 002b:00007fb1c13f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.947506][T16102] RAX: ffffffffffffffda RBX: 00007fb1c0825fa0 RCX: 00007fb1c059e0d9 [ 738.955857][T16102] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 738.964212][T16102] RBP: 00007fb1c13f5090 R08: 0000000000000000 R09: 0000000000000000 [ 738.973188][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.982315][T16102] R13: 00007fb1c0826038 R14: 00007fb1c0825fa0 R15: 00007ffe4ff5a4e8 [ 738.990967][T16102] [ 739.322472][T16101] netlink: 'syz.0.3575': attribute type 29 has an invalid length. [ 739.472503][T16101] netlink: 'syz.0.3575': attribute type 29 has an invalid length. [ 739.559060][T16109] netlink: 'syz.0.3575': attribute type 29 has an invalid length. [ 740.068161][T16122] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3582'. [ 740.659623][T16129] netlink: 'syz.4.3584': attribute type 21 has an invalid length. [ 740.708282][T16129] netlink: 'syz.4.3584': attribute type 1 has an invalid length. [ 742.833909][T16168] netlink: 'syz.1.3598': attribute type 21 has an invalid length. [ 742.865229][T16168] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 743.260697][T16178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3602'. [ 743.343767][T16178] netlink: 'syz.1.3602': attribute type 12 has an invalid length. [ 743.402380][T16178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3602'. [ 744.871357][T16203] netlink: 'syz.3.3608': attribute type 3 has an invalid length. [ 744.958931][T16203] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3608'. [ 745.065897][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3611'. [ 745.508047][T16221] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 745.576225][T16228] netlink: 'syz.1.3623': attribute type 2 has an invalid length. [ 745.618027][T16228] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3623'. [ 745.830525][T16230] device bridge_slave_1 left promiscuous mode [ 745.860022][T16230] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.978883][T16230] device bridge_slave_0 left promiscuous mode [ 746.002251][T16230] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.272970][T16230] bond0: (slave bridge0): Releasing backup interface [ 746.495727][T16239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3617'. [ 746.505502][T16241] netlink: 'syz.2.3617': attribute type 12 has an invalid length. [ 746.516143][T16241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3617'. [ 747.212410][T16255] netlink: 'syz.2.3624': attribute type 3 has an invalid length. [ 747.232761][T16255] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3624'. [ 747.337249][T16260] device syzkaller0 entered promiscuous mode [ 747.508417][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.515425][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.741532][T16272] netlink: 'syz.4.3628': attribute type 21 has an invalid length. [ 747.849716][T16272] netlink: 'syz.4.3628': attribute type 1 has an invalid length. [ 750.280395][T16312] FAULT_INJECTION: forcing a failure. [ 750.280395][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 750.293872][T16312] CPU: 0 PID: 16312 Comm: syz.4.3642 Not tainted syzkaller #0 [ 750.301737][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 750.311998][T16312] Call Trace: [ 750.315281][T16312] [ 750.318389][T16312] dump_stack_lvl+0x188/0x24e [ 750.323069][T16312] ? show_regs_print_info+0x12/0x12 [ 750.328268][T16312] ? load_image+0x410/0x410 [ 750.332772][T16312] ? __might_sleep+0xd0/0xd0 [ 750.337654][T16312] ? __lock_acquire+0x7c40/0x7c40 [ 750.342897][T16312] should_fail_ex+0x390/0x4c0 [ 750.347799][T16312] should_failslab+0x5/0x20 [ 750.352516][T16312] slab_pre_alloc_hook+0x59/0x300 [ 750.357652][T16312] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 750.364259][T16312] __kmem_cache_alloc_node+0x4f/0x270 [ 750.369647][T16312] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 750.376338][T16312] __kmalloc+0xa3/0x240 [ 750.380872][T16312] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 750.387335][T16312] ? xdp_convert_buff_to_md+0x200/0x200 [ 750.392930][T16312] ? __fget_files+0x28/0x460 [ 750.397636][T16312] ? __fget_files+0x3fc/0x460 [ 750.402425][T16312] ? xdp_convert_buff_to_md+0x200/0x200 [ 750.408081][T16312] bpf_prog_test_run+0x31c/0x390 [ 750.413129][T16312] __sys_bpf+0x62b/0x780 [ 750.417585][T16312] ? bpf_link_show_fdinfo+0x380/0x380 [ 750.423162][T16312] ? lock_chain_count+0x20/0x20 [ 750.428135][T16312] __x64_sys_bpf+0x78/0x90 [ 750.432592][T16312] do_syscall_64+0x4c/0xa0 [ 750.437201][T16312] ? clear_bhb_loop+0x60/0xb0 [ 750.442012][T16312] ? clear_bhb_loop+0x60/0xb0 [ 750.446792][T16312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 750.452891][T16312] RIP: 0033:0x7f38d339e0d9 [ 750.457429][T16312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.477406][T16312] RSP: 002b:00007f38d422d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 750.485957][T16312] RAX: ffffffffffffffda RBX: 00007f38d3625fa0 RCX: 00007f38d339e0d9 [ 750.494041][T16312] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a [ 750.502111][T16312] RBP: 00007f38d422d090 R08: 0000000000000000 R09: 0000000000000000 [ 750.510091][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.518246][T16312] R13: 00007f38d3626038 R14: 00007f38d3625fa0 R15: 00007ffc8b7abfd8 [ 750.526481][T16312] [ 751.701632][T16328] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3648'. [ 753.222830][T16336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3650'. [ 753.479213][T16342] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3654'. [ 753.577533][T16342] netlink: zone id is out of range [ 753.599176][T16342] netlink: zone id is out of range [ 753.628797][T16342] netlink: zone id is out of range [ 753.655440][T16342] netlink: zone id is out of range [ 753.678001][T16342] netlink: zone id is out of range [ 753.698137][T16342] netlink: zone id is out of range [ 753.709669][T16342] netlink: zone id is out of range [ 753.738880][T16342] netlink: zone id is out of range [ 753.744955][T16345] netlink: 'syz.0.3653': attribute type 9 has an invalid length. [ 753.748233][T16342] netlink: zone id is out of range [ 753.764559][T16345] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3653'. [ 753.778904][T16342] netlink: zone id is out of range [ 753.837935][T16352] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3657'. [ 753.941776][T16354] netlink: 'syz.3.3657': attribute type 11 has an invalid length. [ 754.701295][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 756.783745][T16364] netlink: 'syz.0.3660': attribute type 10 has an invalid length. [ 756.792758][T16364] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3660'. [ 756.807220][T16364] batman_adv: batadv0: Adding interface: vlan1 [ 756.816314][T16364] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.856894][T16364] batman_adv: batadv0: Interface activated: vlan1 [ 756.903203][T16378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3663'. [ 757.015589][T16380] FAULT_INJECTION: forcing a failure. [ 757.015589][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.055749][T16380] CPU: 1 PID: 16380 Comm: syz.1.3664 Not tainted syzkaller #0 [ 757.063627][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.073988][T16380] Call Trace: [ 757.077318][T16380] [ 757.080293][T16380] dump_stack_lvl+0x188/0x24e [ 757.085127][T16380] ? show_regs_print_info+0x12/0x12 [ 757.090384][T16380] ? load_image+0x410/0x410 [ 757.095605][T16380] ? __lock_acquire+0x7c40/0x7c40 [ 757.101121][T16380] should_fail_ex+0x390/0x4c0 [ 757.105853][T16380] _copy_from_user+0x2c/0x170 [ 757.110583][T16380] bpf_ctx_init+0x127/0x190 [ 757.115135][T16380] bpf_prog_test_run_skb+0x2bf/0x18e0 [ 757.120734][T16380] ? __fget_files+0x28/0x460 [ 757.125561][T16380] ? __fget_files+0x3fc/0x460 [ 757.130390][T16380] ? cpu_online+0xa0/0xa0 [ 757.134853][T16380] bpf_prog_test_run+0x31c/0x390 [ 757.140116][T16380] __sys_bpf+0x62b/0x780 [ 757.144558][T16380] ? bpf_link_show_fdinfo+0x380/0x380 [ 757.149999][T16380] ? lock_chain_count+0x20/0x20 [ 757.155003][T16380] __x64_sys_bpf+0x78/0x90 [ 757.159560][T16380] do_syscall_64+0x4c/0xa0 [ 757.164106][T16380] ? clear_bhb_loop+0x60/0xb0 [ 757.168848][T16380] ? clear_bhb_loop+0x60/0xb0 [ 757.173662][T16380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.179601][T16380] RIP: 0033:0x7ffa6999e0d9 [ 757.184148][T16380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.204136][T16380] RSP: 002b:00007ffa6a77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.212829][T16380] RAX: ffffffffffffffda RBX: 00007ffa69c25fa0 RCX: 00007ffa6999e0d9 [ 757.220902][T16380] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 757.228982][T16380] RBP: 00007ffa6a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 757.237081][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.245162][T16380] R13: 00007ffa69c26038 R14: 00007ffa69c25fa0 R15: 00007ffd5cfcb848 [ 757.253348][T16380] [ 757.525997][T16391] FAULT_INJECTION: forcing a failure. [ 757.525997][T16391] name failslab, interval 1, probability 0, space 0, times 0 [ 757.567440][ T4324] tipc: Subscription rejected, illegal request [ 757.627895][T16391] CPU: 0 PID: 16391 Comm: syz.1.3669 Not tainted syzkaller #0 [ 757.635610][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 757.645937][T16391] Call Trace: [ 757.649230][T16391] [ 757.652192][T16391] dump_stack_lvl+0x188/0x24e [ 757.657080][T16391] ? show_regs_print_info+0x12/0x12 [ 757.662467][T16391] ? load_image+0x410/0x410 [ 757.667243][T16391] ? __might_sleep+0xd0/0xd0 [ 757.671866][T16391] ? __lock_acquire+0x7c40/0x7c40 [ 757.676911][T16391] should_fail_ex+0x390/0x4c0 [ 757.681714][T16391] should_failslab+0x5/0x20 [ 757.686409][T16391] slab_pre_alloc_hook+0x59/0x300 [ 757.691652][T16391] ? bpf_ctx_init+0xb2/0x190 [ 757.696274][T16391] ? bpf_ctx_init+0xb2/0x190 [ 757.700966][T16391] __kmem_cache_alloc_node+0x4f/0x270 [ 757.706700][T16391] ? bpf_ctx_init+0xb2/0x190 [ 757.711496][T16391] __kmalloc+0xa3/0x240 [ 757.716117][T16391] ? __might_fault+0xc2/0x120 [ 757.720892][T16391] ? __might_fault+0xa6/0x120 [ 757.726629][T16391] bpf_ctx_init+0xb2/0x190 [ 757.731163][T16391] bpf_prog_test_run_skb+0x2bf/0x18e0 [ 757.736984][T16391] ? __fget_files+0x28/0x460 [ 757.741872][T16391] ? __fget_files+0x3fc/0x460 [ 757.746597][T16391] ? cpu_online+0xa0/0xa0 [ 757.751146][T16391] bpf_prog_test_run+0x31c/0x390 [ 757.756375][T16391] __sys_bpf+0x62b/0x780 [ 757.760815][T16391] ? bpf_link_show_fdinfo+0x380/0x380 [ 757.766395][T16391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 757.772580][T16391] __x64_sys_bpf+0x78/0x90 [ 757.777014][T16391] do_syscall_64+0x4c/0xa0 [ 757.781537][T16391] ? clear_bhb_loop+0x60/0xb0 [ 757.786577][T16391] ? clear_bhb_loop+0x60/0xb0 [ 757.791270][T16391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.797194][T16391] RIP: 0033:0x7ffa6999e0d9 [ 757.801706][T16391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.821766][T16391] RSP: 002b:00007ffa6a77f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.830207][T16391] RAX: ffffffffffffffda RBX: 00007ffa69c25fa0 RCX: 00007ffa6999e0d9 [ 757.838191][T16391] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 757.846179][T16391] RBP: 00007ffa6a77f090 R08: 0000000000000000 R09: 0000000000000000 [ 757.854238][T16391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.862394][T16391] R13: 00007ffa69c26038 R14: 00007ffa69c25fa0 R15: 00007ffd5cfcb848 [ 757.870407][T16391] [ 757.919202][T16396] pimreg: tun_chr_ioctl cmd 1074025677 [ 757.929458][T16396] pimreg: linktype set to 6 [ 758.050740][T16400] netlink: 'syz.4.3673': attribute type 39 has an invalid length. [ 758.076884][T16399] netlink: 'syz.2.3672': attribute type 9 has an invalid length. [ 758.118323][T16399] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3672'. [ 758.338315][T16409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3676'. [ 758.403221][T16410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3677'. [ 758.640365][T16418] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3679'. [ 758.675496][T16418] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 758.738095][T16422] netlink: 'syz.4.3679': attribute type 11 has an invalid length. [ 758.882665][T16420] netlink: 'syz.2.3681': attribute type 10 has an invalid length. [ 758.926228][T16420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3681'. [ 758.957051][T16420] net_ratelimit: 2 callbacks suppressed [ 758.957072][T16420] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 759.315557][T16434] netlink: 'syz.4.3686': attribute type 39 has an invalid length. [ 759.324267][T16438] netlink: 'syz.3.3687': attribute type 2 has an invalid length. [ 759.383073][T16436] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3685'. [ 759.428095][T16438] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3687'. [ 759.441130][T16436] netlink: zone id is out of range [ 759.459115][T16436] netlink: zone id is out of range [ 759.464816][T16436] netlink: zone id is out of range [ 759.520158][T16436] netlink: zone id is out of range [ 759.569513][T16436] netlink: zone id is out of range [ 759.574875][T16436] netlink: zone id is out of range [ 759.628163][T16436] netlink: zone id is out of range [ 759.658151][T16436] netlink: zone id is out of range [ 759.674686][T16436] netlink: zone id is out of range [ 759.891134][T16448] netlink: 'syz.0.3690': attribute type 9 has an invalid length. [ 759.911704][T16448] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3690'. [ 760.315064][T16452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 760.888668][T16475] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 760.960891][T16478] netlink: 'syz.1.3699': attribute type 11 has an invalid length. [ 761.059677][T16477] netlink: 'syz.4.3700': attribute type 39 has an invalid length. [ 761.066049][T16480] FAULT_INJECTION: forcing a failure. [ 761.066049][T16480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.093240][T16480] CPU: 0 PID: 16480 Comm: syz.3.3701 Not tainted syzkaller #0 [ 761.100976][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.111255][T16480] Call Trace: [ 761.114569][T16480] [ 761.117536][T16480] dump_stack_lvl+0x188/0x24e [ 761.122297][T16480] ? show_regs_print_info+0x12/0x12 [ 761.127630][T16480] ? load_image+0x410/0x410 [ 761.132179][T16480] ? __lock_acquire+0x7c40/0x7c40 [ 761.137365][T16480] should_fail_ex+0x390/0x4c0 [ 761.142107][T16480] _copy_from_user+0x2c/0x170 [ 761.147439][T16480] ___sys_sendmsg+0x1c3/0x360 [ 761.152176][T16480] ? __sys_sendmsg+0x2a0/0x2a0 [ 761.157038][T16480] __se_sys_sendmsg+0x1c3/0x2b0 [ 761.161936][T16480] ? __x64_sys_sendmsg+0x80/0x80 [ 761.166954][T16480] ? lockdep_hardirqs_on+0x94/0x140 [ 761.172208][T16480] do_syscall_64+0x4c/0xa0 [ 761.176678][T16480] ? clear_bhb_loop+0x60/0xb0 [ 761.181675][T16480] ? clear_bhb_loop+0x60/0xb0 [ 761.186410][T16480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.192447][T16480] RIP: 0033:0x7f23f519e0d9 [ 761.196922][T16480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.217103][T16480] RSP: 002b:00007f23f6096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.225744][T16480] RAX: ffffffffffffffda RBX: 00007f23f5425fa0 RCX: 00007f23f519e0d9 [ 761.233863][T16480] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a [ 761.242144][T16480] RBP: 00007f23f6096090 R08: 0000000000000000 R09: 0000000000000000 [ 761.250262][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.258285][T16480] R13: 00007f23f5426038 R14: 00007f23f5425fa0 R15: 00007ffea25748b8 [ 761.266506][T16480] [ 761.526523][T16491] netlink: 'syz.1.3705': attribute type 9 has an invalid length. [ 762.057508][T16496] device syzkaller0 entered promiscuous mode [ 762.060322][T16502] netlink: 'syz.1.3718': attribute type 9 has an invalid length. [ 762.077728][T16504] __nla_validate_parse: 2 callbacks suppressed [ 762.105622][T16502] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3718'. [ 762.173166][T16504] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3708'. [ 765.878533][T16513] netlink: 'syz.0.3712': attribute type 39 has an invalid length. [ 765.977693][T16523] device syzkaller0 entered promiscuous mode [ 765.987230][T16532] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 766.018606][T16532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3719'. [ 766.102040][T16532] batman_adv: batadv0: Adding interface: vlan1 [ 766.110165][T16532] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.139631][T16532] batman_adv: batadv0: Interface activated: vlan1 [ 766.266611][T16537] netlink: 'syz.3.3721': attribute type 9 has an invalid length. [ 766.277501][T16537] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3721'. [ 766.413760][T16540] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3722'. [ 766.423811][T16540] net_ratelimit: 16 callbacks suppressed [ 766.423827][T16540] netlink: zone id is out of range [ 766.435389][T16540] netlink: zone id is out of range [ 766.442286][T16540] netlink: zone id is out of range [ 766.448940][T16540] netlink: zone id is out of range [ 766.454628][T16540] netlink: zone id is out of range [ 766.460826][T16540] netlink: zone id is out of range [ 766.466254][T16540] netlink: zone id is out of range [ 766.472294][T16540] netlink: zone id is out of range [ 766.486528][T16540] netlink: zone id is out of range [ 766.492540][T16540] netlink: zone id is out of range [ 767.042975][T16532] ------------[ cut here ]------------ [ 767.049045][T16532] WARNING: CPU: 0 PID: 16532 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 767.059066][T16532] Modules linked in: [ 767.063049][T16532] CPU: 0 PID: 16532 Comm: syz.1.3719 Not tainted syzkaller #0 [ 767.070797][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.081470][T16532] RIP: 0010:perf_pending_task+0x353/0x480 [ 767.087341][T16532] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 767.108090][T16532] RSP: 0018:ffffc9000338f8e8 EFLAGS: 00010293 [ 767.114323][T16532] RAX: ffffffff81a7add3 RBX: ffff88803033ba58 RCX: ffff88801cfebc00 [ 767.122478][T16532] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 767.130683][T16532] RBP: ffff88803033b820 R08: ffff88801cfec603 R09: 1ffff110039fd8c0 [ 767.139001][T16532] R10: dffffc0000000000 R11: ffffed10039fd8c1 R12: ffff88801cfebc00 [ 767.147478][T16532] R13: ffff888058127560 R14: 0000000000000000 R15: 1ffff11006067704 [ 767.156046][T16532] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 767.165127][T16532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 767.171790][T16532] CR2: 00007f23f51eb7c0 CR3: 000000005eeef000 CR4: 00000000003506f0 [ 767.179931][T16532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.188437][T16532] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 767.196633][T16532] Call Trace: [ 767.200112][T16532] [ 767.203098][T16532] task_work_run+0x1d0/0x260 [ 767.208149][T16532] ? task_work_cancel+0x220/0x220 [ 767.213561][T16532] ? do_raw_spin_unlock+0x11d/0x230 [ 767.219306][T16532] do_exit+0x9d5/0x2570 [ 767.223576][T16532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 767.229671][T16532] ? put_task_struct+0x80/0x80 [ 767.234737][T16532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.241059][T16532] ? lockdep_hardirqs_on+0x94/0x140 [ 767.246297][T16532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.252657][T16532] do_group_exit+0x229/0x2e0 [ 767.257468][T16532] ? _raw_spin_unlock_irq+0x25/0x40 [ 767.262773][T16532] get_signal+0x1259/0x1340 [ 767.267363][T16532] arch_do_signal_or_restart+0xc4/0x1310 [ 767.273253][T16532] ? __lock_acquire+0x7c40/0x7c40 [ 767.278760][T16532] ? do_futex+0x310/0x320 [ 767.283664][T16532] ? get_sigframe_size+0x10/0x10 [ 767.288728][T16532] ? exit_to_user_mode_loop+0x3b/0x110 [ 767.294913][T16532] exit_to_user_mode_loop+0x70/0x110 [ 767.300482][T16532] exit_to_user_mode_prepare+0xee/0x180 [ 767.306065][T16532] syscall_exit_to_user_mode+0x16/0x40 [ 767.311809][T16532] do_syscall_64+0x58/0xa0 [ 767.316259][T16532] ? clear_bhb_loop+0x60/0xb0 [ 767.321029][T16532] ? clear_bhb_loop+0x60/0xb0 [ 767.325752][T16532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.331916][T16532] RIP: 0033:0x7ffa6999e0d9 [ 767.336624][T16532] Code: Unable to access opcode bytes at 0x7ffa6999e0af. [ 767.343959][T16532] RSP: 002b:00007ffa6a77f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 767.352531][T16532] RAX: fffffffffffffe00 RBX: 00007ffa69c25fa8 RCX: 00007ffa6999e0d9 [ 767.360679][T16532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa69c25fa8 [ 767.368908][T16532] RBP: 00007ffa69c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 767.377018][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.385575][T16532] R13: 00007ffa69c26038 R14: 00007ffd5cfcb760 R15: 00007ffd5cfcb848 [ 767.394238][T16532] [ 767.397461][T16532] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 767.404930][T16532] CPU: 0 PID: 16532 Comm: syz.1.3719 Not tainted syzkaller #0 [ 767.412409][T16532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.423198][T16532] Call Trace: [ 767.426572][T16532] [ 767.429511][T16532] dump_stack_lvl+0x188/0x24e [ 767.434198][T16532] ? memcpy+0x3c/0x60 [ 767.438239][T16532] ? show_regs_print_info+0x12/0x12 [ 767.443447][T16532] ? load_image+0x410/0x410 [ 767.448148][T16532] panic+0x2d3/0x710 [ 767.452194][T16532] ? bpf_jit_dump+0xd0/0xd0 [ 767.456720][T16532] __warn+0x2f8/0x4f0 [ 767.460724][T16532] ? perf_pending_task+0x353/0x480 [ 767.465848][T16532] ? perf_pending_task+0x353/0x480 [ 767.470973][T16532] report_bug+0x2ba/0x4f0 [ 767.475453][T16532] ? perf_pending_task+0x353/0x480 [ 767.480576][T16532] handle_bug+0x3a/0x70 [ 767.484917][T16532] exc_invalid_op+0x16/0x40 [ 767.489530][T16532] asm_exc_invalid_op+0x16/0x20 [ 767.494806][T16532] RIP: 0010:perf_pending_task+0x353/0x480 [ 767.500749][T16532] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 767.520723][T16532] RSP: 0018:ffffc9000338f8e8 EFLAGS: 00010293 [ 767.526804][T16532] RAX: ffffffff81a7add3 RBX: ffff88803033ba58 RCX: ffff88801cfebc00 [ 767.534873][T16532] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 767.542908][T16532] RBP: ffff88803033b820 R08: ffff88801cfec603 R09: 1ffff110039fd8c0 [ 767.551266][T16532] R10: dffffc0000000000 R11: ffffed10039fd8c1 R12: ffff88801cfebc00 [ 767.559941][T16532] R13: ffff888058127560 R14: 0000000000000000 R15: 1ffff11006067704 [ 767.568284][T16532] ? perf_pending_task+0x353/0x480 [ 767.573500][T16532] ? perf_pending_task+0x353/0x480 [ 767.578724][T16532] task_work_run+0x1d0/0x260 [ 767.583333][T16532] ? task_work_cancel+0x220/0x220 [ 767.588372][T16532] ? do_raw_spin_unlock+0x11d/0x230 [ 767.593690][T16532] do_exit+0x9d5/0x2570 [ 767.597873][T16532] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 767.604138][T16532] ? put_task_struct+0x80/0x80 [ 767.608914][T16532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.615257][T16532] ? lockdep_hardirqs_on+0x94/0x140 [ 767.620725][T16532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 767.626921][T16532] do_group_exit+0x229/0x2e0 [ 767.631525][T16532] ? _raw_spin_unlock_irq+0x25/0x40 [ 767.636819][T16532] get_signal+0x1259/0x1340 [ 767.641349][T16532] arch_do_signal_or_restart+0xc4/0x1310 [ 767.647138][T16532] ? __lock_acquire+0x7c40/0x7c40 [ 767.652177][T16532] ? do_futex+0x310/0x320 [ 767.656528][T16532] ? get_sigframe_size+0x10/0x10 [ 767.661602][T16532] ? exit_to_user_mode_loop+0x3b/0x110 [ 767.667271][T16532] exit_to_user_mode_loop+0x70/0x110 [ 767.672666][T16532] exit_to_user_mode_prepare+0xee/0x180 [ 767.678927][T16532] syscall_exit_to_user_mode+0x16/0x40 [ 767.684517][T16532] do_syscall_64+0x58/0xa0 [ 767.689045][T16532] ? clear_bhb_loop+0x60/0xb0 [ 767.694861][T16532] ? clear_bhb_loop+0x60/0xb0 [ 767.699551][T16532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.705714][T16532] RIP: 0033:0x7ffa6999e0d9 [ 767.710349][T16532] Code: Unable to access opcode bytes at 0x7ffa6999e0af. [ 767.717383][T16532] RSP: 002b:00007ffa6a77f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 767.725900][T16532] RAX: fffffffffffffe00 RBX: 00007ffa69c25fa8 RCX: 00007ffa6999e0d9 [ 767.734328][T16532] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffa69c25fa8 [ 767.743200][T16532] RBP: 00007ffa69c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 767.752079][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.760326][T16532] R13: 00007ffa69c26038 R14: 00007ffd5cfcb760 R15: 00007ffd5cfcb848 [ 767.768579][T16532] [ 767.772058][T16532] Kernel Offset: disabled [ 767.776651][T16532] Rebooting in 86400 seconds..