last executing test programs: 2m22.938283841s ago: executing program 4 (id=207): socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) (async, rerun: 64) r1 = socket$kcm(0x2, 0x5, 0x0) (rerun: 64) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="3800000000000000000000400000000818111800", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) 2m22.709496001s ago: executing program 4 (id=211): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220081, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f91524fc6010000a000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x41, 0x0, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 32) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) (rerun: 32) ioctl$TUNSETOFFLOAD(r3, 0x4004743b, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m21.861326509s ago: executing program 4 (id=220): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x102200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000740)) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001cc0)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, 0x0, 0xc801) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x3e}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242", 0xcb}], 0x1}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) 2m21.484439335s ago: executing program 4 (id=227): syz_clone(0x100000, &(0x7f0000000040)="81551063b35a271cbd051c1e524574b4290aff91f8dbff12cdd42c053b9749cb6ecab99b0ddef2f76c75ac6db6651f9c01fc", 0x32, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000880)="fbefd0677d0766cc35f9ee0ba420c902ce92b504b494cc5805617da56e981024c0a95029ae512bf2829be75f440f879bd24dbbdac5107e323729bbb84b1d01078e26b95d0056bce8f4b0a9189aff7758872cb6a44549b78fe321934660a60dac8c66043c590bae9aa4fd98d59cddf0989a27169ad834205aa0fe83cc177654ac57e7afacbe12d65788b347cb53cdb44d1cccb59dad22553c95f881086ed5d98c5134f1f9ce076078761e8a8b5668a69f65770cbcef29fb63c012f993f005ab8d7a93a950a46272f5e45097e23b67277fbe64c63edb57031b2fbcb74bd6") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40200000000000061177d000000000085000000270000009500000000000000c9c3a409a74c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xc9, 0x85, &(0x7f0000000180)="06c14ac53bc59e512de1ae5c09adceb9a239ff7c995cb1517ce42b3b9df98126f96077dbe88d556e1486567ce6cb8e53af2401ce7c212f4d42a3cac1e08c3010e644ee13666c063b4eceb7cce7f018e20ae8b05413b9e5b1ee194c2bce84f85b7fedc49e1efbd11c4945a8b8f7b911910c82f36b8ca870fcfcba9f1d1eec08b46a8a8441faaaaa66c1708f0e09db3dbabd330d65bc3e4e5e6bef8b10ec54a870adb92cc4584a264b66a9959c7afe72622df57f6882b7e2dd3743c9f54cc01ff2c4a21c51c291558fe3", &(0x7f00000007c0)=""/133, 0x87, 0x0, 0x89, 0x59, &(0x7f0000000500)="36f5c5b34ef5c92440efd779bdef6c8e073e4443cd747bbc966ce838626b44e9b6cf2d90247158df322ee16df07e86b2896e5faef063249de9c78ef55d25f1b3d45805e98240d87e96752b16123d4b2e37aa0011aba6a2a2afebf484bda84bfdc04a7c315b44cb0af64f31db75cb5f1c5beb6327a7219646b400a4816fbe286d53f3e85372890835fa", &(0x7f00000005c0)="89c721f41d1c2bf9840b57a88857cb7aa6b3590ad6fa01445567f04c7160593069ac9a88fddb5e3ccc462d2df06f78f9e14a3d115eb1a9a1bb45c58c633fcedf8f0eda60afb7f45f61988043fd8cc0d606df9c047f93abf0e2", 0x4, 0x0, 0x3}, 0x50) 2m21.182819218s ago: executing program 4 (id=231): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0x5, 0xc, 0x3, 0xb, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xd, 0x9}, 0x20, 0x7, 0x1, 0x8, 0x1, 0x7, 0x7fff, 0x0, 0x3, 0x0, 0x98}, r1, 0x4, r0, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @func={0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000040)=""/203, 0x3a, 0xcb, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x11, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000580)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x12, r10, 0x8, &(0x7f0000000740)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xe, 0x401, 0x15}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r6, r9, r7, r9, r9], 0x0, 0x10, 0xfda7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.963606411s ago: executing program 4 (id=240): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff148, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000)=r6, 0x8) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000)=r6, 0x8) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0xf, 0x8, 0x2, 0x1, 0x0, 0x3, 0x28009, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000680)}, 0xc, 0x9, 0x3, 0x5, 0xa4, 0x7, 0x2, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xe) (async) r7 = perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0xf, 0x8, 0x2, 0x1, 0x0, 0x3, 0x28009, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000680)}, 0xc, 0x9, 0x3, 0x5, 0xa4, 0x7, 0x2, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xe) perf_event_open$cgroup(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x9}, 0x2040, 0xc595, 0x9, 0x0, 0xc, 0x812, 0x2d, 0x0, 0x2, 0x0, 0x7fff}, r6, 0xffffffffffffffff, r7, 0x1) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="350400004100f787d25a35400c0002000200002037153e370e04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10049014) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="27030200590200000000002f1eafbcf706e1050000008906000f", 0x16}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffffff29, 0x8094, 0xb4, 0x1140, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x640000, 0x0) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000540)=r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffbf0000000000040000851000000200000004000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000b40)='./cgroup/../file0\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m4.646119433s ago: executing program 32 (id=240): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff148, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000)=r6, 0x8) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x76, &(0x7f0000000000)=r6, 0x8) perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0xf, 0x8, 0x2, 0x1, 0x0, 0x3, 0x28009, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000680)}, 0xc, 0x9, 0x3, 0x5, 0xa4, 0x7, 0x2, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xe) (async) r7 = perf_event_open(&(0x7f0000000700)={0x4, 0x80, 0xf, 0x8, 0x2, 0x1, 0x0, 0x3, 0x28009, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000680)}, 0xc, 0x9, 0x3, 0x5, 0xa4, 0x7, 0x2, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xe) perf_event_open$cgroup(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x9}, 0x2040, 0xc595, 0x9, 0x0, 0xc, 0x812, 0x2d, 0x0, 0x2, 0x0, 0x7fff}, r6, 0xffffffffffffffff, r7, 0x1) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="350400004100f787d25a35400c0002000200002037153e370e04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000e80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2565efde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x10049014) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="27030200590200000000002f1eafbcf706e1050000008906000f", 0x16}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xffffff29, 0x8094, 0xb4, 0x1140, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x640000, 0x0) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000540)=r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffbf0000000000040000851000000200000004000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000b40)='./cgroup/../file0\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r11) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.300254062s ago: executing program 0 (id=1209): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e4", 0x55}], 0x1, 0x0, 0x0, 0x7400}, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b"], 0x66) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x105010, 0x0, 0x0, 0x5, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfd1c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r2, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000fc00000000060000100000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0x5}, 0x10) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x4, 0x1f}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f00000004c0)={{r7}, 0x0, &(0x7f0000000480)='%pi6 \x00'}, 0x20) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000600000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) (async) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r9, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380), 0xffffff65}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 19.218894686s ago: executing program 2 (id=1211): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000880)=ANY=[@ANYBLOB='1-0:', @ANYRESDEC], 0x31) (async) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) 18.925532797s ago: executing program 2 (id=1215): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0xf156, 0x0, 0x0, 0x3, 0x253, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) close(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{}, 0x0, &(0x7f0000001500)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 18.290755529s ago: executing program 0 (id=1218): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03"], 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x15, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x7, 0x2, 0x54158dafb66f1392}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x947}], &(0x7f0000000700)='syzkaller\x00', 0xfff, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x41, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001980), &(0x7f00000019c0)=[{0x2, 0x4, 0x6, 0x5}, {0x4, 0x3, 0xc, 0x9}, {0x5, 0x5, 0x0, 0x9}, {0x3, 0x3, 0x5, 0x9}], 0x10, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0xe, 0xa, 0x4, 0x6, 0x0, 0x8, 0x4008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x2400, 0xf3, 0x1ff, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}, r1, 0xb, r1, 0x8) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r5}, 0x20) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00') syz_open_procfs$namespace(0x0, 0x0) 18.035989033s ago: executing program 2 (id=1219): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x102200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001cc0)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, 0x0, 0xc801) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242", 0xcb}], 0x1}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000100)=r2, 0x4) r6 = getpid() sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='CJ', 0x2}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee01}}}], 0x20, 0x10}, 0xa8d1) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0xa, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000880)=r7, 0x4) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0xc, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x2000, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 18.035187463s ago: executing program 3 (id=1220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x3}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000010140)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffff220d08596a", 0x14}], 0x1}, 0x4080) 17.962736206s ago: executing program 3 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000940)=""/156, 0x40f00, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r7 = openat$cgroup(r3, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="1300000020000000", @ANYRES32, @ANYRES64], 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\xa0\x7f\x7f\x04xK\x95\x04\x00\x02]`\xb3\x15R+L\xa3U\xab\xc0\xd6E4\xca0\x80\t\a\xf0\xcd\xbfM{h{\xcd\xeb\xde\xd8rl\xc5+CF\x8fD_\xef\xfa\x81\xc8E9X\x82W\x83\x01\x9c1M\v\x89\xc7h\xf3\x94[\x88`e\xf3\xed\x91\x90\xb0\x95\x7fX\xe27I)\r\x80\xf4\x82\xf5\x12\xdf\xfa\xd44\xd8\xa3I\xa3\t\xd7\xaf\x14\x98\xb4\"\xd4n?\x007c\xbcM\xeb%\xd3-#G\xa3\xc6:\x12\x93\x91\x8f\x06\x13\xa9\xb3\xa4\x9f\x84.n\xb0l\xa1w\xf2\v\xe3]\x0f\xa0Y\xc6VC\xe1\xf0\xc7!\bw)x&\x1eQ/\x95\xf5\x97:y\x13O\xe5G\x8c\xafe\x11k\rn=\x9c\xc9\x10\xda\x9a;\xf9\x9d+b\xd7K\x1dy\xb2lC;3*\x0f{\x1e\x94\xba+\xba\xfd\xec\x97\x8a\xac\xbb\xd2\xa7\xda\xb7\x8e\xfeE?\xe1\x14l&,q0+\xddle\xe8\xdd\x9c\x18\xb4Q\xcb.\xa1\xf7>\xa5\xc2\xd7\xa6\xc3\xe1\x98\xe8\xaf$;\xdf\x1fv#dCj\xbe\xd6g\xd3\x04\r\xc6\xf3N') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) 17.961033826s ago: executing program 0 (id=1222): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x108170, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) close(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x6, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x1, 0x0, 0x5, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{}, 0x0, &(0x7f0000001500)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 17.680674056s ago: executing program 0 (id=1224): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106000, 0x0, 0x80, 0x5, 0x7, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x6890) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) 17.680326356s ago: executing program 5 (id=1225): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040)="e009337d933f16acd6e2e68ea451a4bacd94c8fb5d9ce9b7c0568aefb045dd8e0eefdd", &(0x7f0000000140)=""/63, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 17.600670189s ago: executing program 5 (id=1227): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="010000000600000008000000080000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x1000, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000bea10a31911c62c1b64dab7bb9205400"], 0x0, 0x1a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="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", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 17.579015833s ago: executing program 0 (id=1228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x82b}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={r3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="188000"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 17.557224207s ago: executing program 2 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000058500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2, 0x2, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000200)="1400000015000b63d25a9a648c0f9de72a2e4a1d", 0x14}], 0x1}, 0x2000c884) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0xd}, 0x40000062) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffc00, 0x4, 0x10406, 0x6}]}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_clone(0x1184600, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x2, 0x0, 0x1, 0x0, 0xfff, 0x820, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x4, 0x18f4a664, 0x81, 0x9, 0x2, 0x93, 0xfffb, 0x0, 0x2, 0x0, 0x3ff}, 0xffffffffffffffff, 0x7, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xf5, 0xff, 0x0, 0x1, 0x0, 0x9c4, 0x6d01, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x340, 0x1, 0x5, 0x6, 0x12a2, 0x10001, 0xfffd, 0x0, 0x1, 0x0, 0x4bc1}, 0xffffffffffffffff, 0xe, r9, 0xa) 17.492955178s ago: executing program 1 (id=1230): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x54b) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 17.190705621s ago: executing program 2 (id=1231): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03"], 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$kcm(0x10, 0x2, 0x4) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x15, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xa1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x7, 0x2, 0x54158dafb66f1392}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x947}], &(0x7f0000000700)='syzkaller\x00', 0xfff, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x41, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001980), &(0x7f00000019c0)=[{0x2, 0x4, 0x6, 0x5}, {0x4, 0x3, 0xc, 0x9}, {0x5, 0x5, 0x0, 0x9}, {0x3, 0x3, 0x5, 0x9}], 0x10, 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0xe, 0xa, 0x4, 0x6, 0x0, 0x8, 0x4008, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x2400, 0xf3, 0x1ff, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}, r1, 0xb, r1, 0x8) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r5}, 0x20) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/time\x00') syz_open_procfs$namespace(0x0, 0x0) 17.190470762s ago: executing program 5 (id=1232): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) socketpair(0x8, 0x8, 0x2, &(0x7f0000000240)) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0x0, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x10, 0x8, 0x1, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080d0000000000000900000073117900000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 16.935661566s ago: executing program 1 (id=1233): r0 = socket$kcm(0xa, 0x6, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x3, 0x40, 0xc0, 0x0, 0x7f, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0x9}, 0x402, 0xf781, 0x1, 0x4, 0x0, 0x4, 0x1a, 0x0, 0x81, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffeffffffffffffb, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) 16.79821306s ago: executing program 3 (id=1234): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0200001", @ANYRES16], 0x30}, 0x24040880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xfff0000000000002, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getpid() (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e0200001", @ANYRES16], 0x30}, 0x24040880) (async) 16.728921122s ago: executing program 5 (id=1235): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x108170, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) close(r1) openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x6, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x1, 0x0, 0x5, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{}, 0x0, &(0x7f0000001500)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 16.546611494s ago: executing program 2 (id=1236): socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xc0045878, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(r2, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000000845bdc36ed033e9020357868d5f03000000000000000c6b0de708963f83890de4bc02b10b5fff679640", @ANYRES32=0x1, @ANYBLOB='j\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000020000000100"/28], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000080000001900000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r6], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x3, 0x8, 0x7, 0x1, 0x0, 0x400000000, 0xc178, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000700), 0x1}, 0x800, 0x8, 0xfffffff9, 0x3, 0x7, 0x9, 0x29d, 0x0, 0x10, 0x0, 0x5}, r5, 0x0, r3, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x40db, 0x0, 0x3, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x3e) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r10}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 16.51134303s ago: executing program 1 (id=1237): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x53, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000100014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 16.428841044s ago: executing program 0 (id=1238): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000801000000000061000000005f00768170517dff8cba5465afcf3b516bd831ff72edfe8a18d8bd53982d065f07b70a036edabdca05ac8336b58c774ef6354c693b406c5baf1fa0ece0a2486649cc6d7fca3c7378febe319b2cb415d530ecd68f0000000000000000"], &(0x7f0000000300)=""/256, 0x2d, 0x100, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00034006040400010404009bbc7a46e3988285dcdf12f213e6f768fe", 0x69}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0xd99b}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fffffe100004000638877fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="2b7314e09a92bafb", 0x8}], 0x1}, 0x4044004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 16.399806789s ago: executing program 3 (id=1239): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106000, 0x0, 0x80, 0x5, 0x7, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x6890) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) 16.324319153s ago: executing program 1 (id=1240): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x4, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 16.246692796s ago: executing program 5 (id=1241): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="010000000600000008000000080000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4}, 0x1000, 0x0, 0x8, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000bea10a31911c62c1b64dab7bb9205400"], 0x0, 0x1a}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a4fc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b87f7c40a1702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f600e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80729fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a85430600f1e49db5a5517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000047e628cd57cde4268f47c9aaec3a3dfe43e032b88ea53656a8740c1a4e0a99be5c97ba451d8b2b0f4e12ba96082e0f6b2dabe716699090058e61a38ce85611945106dd1309087d3a2cf3aaef6216ff3720c3917170544a509071166565eaa3"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a4335555c631923a26cb9786fdacabd665d94e7687cec1b23cf08b5de17045201e7fae08db9c47cfa19a8ffef7762daf9ca316925775225ed050a32ac01458e3865d17d1cd62841819316e98ca36c8651a8ef808cf1bc7188969bcd205f004c58159bc941c6399a88bc124c8a0a47dc4e3546429ec3c363375811e7653317492a4486debfcab21d7af4fa39528e49a6b2885edd369dc1c6ec7b8c2311c393c725856147b06ce109172c480cc4ea6e3c30198ac84e75318f2f6a4ddad661ea76b41c1b614d2353ecd1e005772fff23095f20d54046cd7c0f938fa1c9d5c27adda5ef552a1d6fc1f271da3816f7b82540b12923b2d38f906912a8031e24fe6c1f9e6692b074128a3cd03faafeed41e5615bdb86ce3aa1e000c18010e95934b1c8a1dd14922773e8951889f9be3291b6842845ac06a28e233a394a57e6ce572b8810e98f7a7256ca494de41fe6c72099d38a6f4964f32ca61880c695d757d3346a0dc8e7c92e555e5c12b8cb9be8d9289fee2f17ef988d3e7acc8eeae5e7cde98153c409c48504eccd618b2676930711159b631c76b69c792a44a3696979495f06ddaffb7f60af1af0ab2df1ff3653a902201ffa93f77202b4637abfe654ab42abfadac65a09c45afde7aaec8623f9424885ec7c5fd4adf111192a5d36bb73e79cdc2a6a25e3a29d665beae71db419984f05bce4b0576d44e0c7f26c722aff26af467acaf2fd2e0d153b95281d59c985229772a2deeda2e27cda3010c66abf08dbb7d7b461bbe1f143762c03b755f81d829b77314e6cfc2fcca5269567b206530e15263c55045707db56b51ed3f797e086fde879863eff033bcacf01880c634df426cfb495c81c4048754a3f05b212909ac7a2a050461a60821b2b7e99a2ed2b2a87e90fa5995cfa3884758eca6d4aa8e35b952d3f4be73ad9c27bcdd287e895597b6ce0294ceede0abd6b8cf60cd5dfb0afcd2088611d10a39736eb224e369ff117bbd94c5a311c9b7075b739f0ac7780d1412d552dcd278245f98251b93b326c8d1ccb3c2a96bb7c161363bfc4f52aaa252af790c3a57979d1d81df8e147e0bdd46704a51d48765c1d1fff316c892b66b8d13319783ead3c7f89600e8f4440393eb2e3fff2319fc45cefb740c59db8680c9d17fb2f37f194d317e5e989d0c5c361f0915ebe2efea196dd3d8d2fd747043738d91fe4a4c02a7369c333c253a78eed8098fda8b92bd37b65bdfec9f1c499cfbd8dff47a81d01d88633984a63eb4277dc34d7c42eaf891c14d9a12b6971436023ffb223cc973382ec5c4d1188d2b9ccdb1faf96062088bdd25284f311bc2fb8b4d1e355e2f76ec15342d4d9413fed8987965eddcf69335c62d2d3fb66d68e203f9b71c998abd92a5b5b9f07da2ddb44eb05b25a1a8a991d7c602558ca40cddfa98371c893b1002f7f8cdcf913fc085a20aa584fee9614a7d3d7444c8a4a00cdcefb0c172ffcd9c6cd0653ecaf3526318f3b3cddc32c84d76c0f93f7d18cc625bb02b89df352a8eeba1662b4bd2a948266b2fb9dccae4d8fca25a9f3121fcb8056a0f8cbf31fc694035f588c46769d8ef23bd63de1c9fbbfab871d0d47764ef1805f86a09b35f6038c3c28bdd2dd8c61742f49e138fb833dec4d899057f676b9b91aa1d3f3eb54afa17c9ba78e678679ac88f4192ba7edf891b043d5020fd09246615e9e9941fb47cf6a6ee83115e2ef7d5aa9ffa63b7cb90068f4f769dbf78039e7dc794e41845ecafc75c126816e673fd534cec3c1304ea915b8e9a0cd8970722a419994e44d04db4ee81dfe23cc3abfd2c060a6ae7e6bac7589a2c8d4abc58aa90b6560823d5b82f6158adc8b61bca70b554d23cb6d5f7e06f6f05", 0x595}], 0x1}, 0x400c000) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 16.218231821s ago: executing program 3 (id=1242): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@isdn={0x22, 0xab, 0x7, 0xfe, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="518d3a90ed6bcba4a1c37dd8caee2fee0530208b6d60389d49e937612c29b5e227a42c820bbfadfa7e875a7a5790d191a7cdf1564bc5941bd2ddd4822c1e652f40a76685df32d7c7c7add37abdf120a402b56215c70091ea6a610bc7bcbed3dca44b5cdbae9a10c9a1c5eb098f622c3f95ccead4cc9978c113be81a9e645960c90ec8d8df29fa75e43e1fe2ffe3e712914bfdce1a6af94a5e6cc21b21db878995a9da2b0fd382abe53d5f774ec890266425f2ac5fe60d688049e5d25dcb3", 0xbe}, {&(0x7f00000001c0)="01eadacf9ddf440a252b74f4c9a5944779fe40d62bf89b19830d8539f31a3f926270bd55555467b4aa8ed4c8eb43d7d6cc209c3f253758391da0d3fafaf1578e76822ef2aea7587893a18e89b6856dde2f727e5ed80f896ca5088097501ad20399f81c5ad84f36d49200e7c9d7d5c57ae4182f5b50e02ed7640c31a86d564e89be46f7190e905ce25be8a61e483aba84bb63dcf048f5edbae6a1ef78fcd67de7c3d720f34909ce0fd6623a21d36376ecfd5d3446d92a1ca77cf2f1c851b9e76f96f1138401", 0xc5}], 0x2, &(0x7f0000000300)=[{0xb8, 0x113, 0x5, "7700ed629a33a6e164990ee2d13c198db681cb5aa67443a8d9f77978a1d613dfe75251b8851fe98247c7c1bbafc55aac09b9ce71f740babad20f2cbba2b011279cc126dfda499241e01e2c5b5eedc052ff368b8f44cf486343e66d56e83a689d324826611869ad2e2ead2e1b3ab0658eaeea68db8d9a165d333b3061c711b9ba914cff3459587c93e3e6c051ef867626df7be014405746220cdf1fca4b713493ddd489"}, {0xe0, 0x10c, 0x7, "78b192b5bd3fcce43c845ad7c82050464ef64669dce3306d3f2f8a258aeb068b48bf4b5148bbed97b137be6bdea8ebdcae074f44812ce753b847388f63d7b68b1a197f69f4f3d3a9a301f74a8299e360b560ec3cd9191dc750a3e6db70d1adb4a3cf8a82aad7b42a4806209f55b9b2e4879e2e54b613b6c508800b6498ca561ded33ef8d81621b594a0bf312aaf300507cb02f79a3329084b6c263a018a5394b8e3e9f1a3b688423bc47c13f1f8f56701dcaa2f8afcb307610f0fa81fc5f06b186dc189a6a73e4b4ee61211b"}], 0x198}, 0x20048041) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='.\x00', 0x0, 0x8}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000007c0)={&(0x7f0000000500)="88ad8b55986984b7fc0a737b2ec464cb5b00fa5f5cade2f1e93328f016734b2566073e21ee98984ed2daf5970502dc5855d2b978debdd1243918843ba800e1bd14db1059e5bbba3daa295844593cb9b856bbf87aee76a724a91dd162bce5b92e0167399d316f3248dbb9d521ab0eaf339fb7d8e76c1efc58054b6a750023384a0523ab8b316f07ac7acb9fc46f10e9f6989c2b3799a75ebe219ec0e1c59b6bba2d38fc40421a4a683567ac7ec2d63dfdbb6463db70e66dc4b47b97a55fe96514cf1d8ca1a25032b59f079e03b7c99dab5a4e01619289aa8023c40a72a5b9b9caf1fa7400dcc565c46aeb23f8049e71a8e9", &(0x7f0000000600)=""/94, &(0x7f0000000680)="e4e45b7fb8319ae5ca4b66a2625f39f09755af0e068dd1c0650fb509e94259bb83ee889ab74b7628a8b2c857e399c54a143a0f94415ac4a279d2952278d2532747383ab68232", &(0x7f0000000700)="948534808998776370394ddd942593", 0xf, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={0xffffffffffffffff, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000001b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0xec, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x1c, &(0x7f0000000900)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x0, 0xe, 0x0, 0x81, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x3, 0x2, 0x0, r2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0x2, 0x1, 0x6, 0xa, 0x4}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000a00)='GPL\x00', 0xffff12c4, 0x1000, &(0x7f0000000a40)=""/4096, 0x40f00, 0x28, '\x00', r5, 0x25, r7, 0x8, &(0x7f0000001d80)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x0, 0xa, 0x6, 0xffff1d0b}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001e00)=[{0x3, 0x4, 0x6, 0x3}, {0x0, 0x2, 0x9, 0x3}, {0x3, 0x1, 0xb, 0x9}, {0x4, 0x1, 0x3, 0x4}, {0x1, 0x3, 0x4, 0x5}, {0x1, 0x2, 0xa, 0xc}, {0x5, 0x5, 0x3, 0x4}, {0x3, 0x3, 0xa, 0x2}, {0x1, 0x2, 0x4}], 0x10, 0xfffff983}, 0x94) r8 = syz_clone(0x808000, &(0x7f0000001f80)="5ab1e4067f00e13ec1c6f56b0e7a7de4a71c4a1d448e35c17f556bf7d8cc96b8496b5b919766e4296bd528e5f0bfe617b1d3f5f79c9610a89a8811bed23faccf4f7c286520e15cb703f876aa91f2eca816cd59f32d4778731748f45ec270dff9c7308c21c58d6700ed6ca5148b3935b1d1a9898ac46035323b83ea2f2823", 0x7e, &(0x7f0000002000), &(0x7f0000002040), &(0x7f0000002080)="4d3ee0fef845e557f047ebd51395466d8d20088ea12f7b4a1f7ef26e69d37fb24dbd158d6e6db1d8b518d9b2eecd3a0dabe69d81024e6be9cfbbb1c454f20da583909f691ff5abffbc83c27f14d81fea097824b7ad7867bb9021191a79fdda214f2f19d8939f86a8306e43f041e5d266dff21d01c5ddf421791ad71abb1f50ab8e552e4d2e5328dfe5842062fdf8949139406f1488aa81f3eb3f7b4b6438112b0ffeb5417277ea7f46ac56fd945559f3d160") write$cgroup_pid(r7, &(0x7f0000002140)=r8, 0x12) getpid() recvmsg$unix(r7, &(0x7f0000002500)={&(0x7f0000002180), 0x6e, &(0x7f0000002400)=[{&(0x7f0000002200)=""/246, 0xf6}, {&(0x7f0000002300)=""/58, 0x3a}, {&(0x7f0000002340)=""/5, 0x5}, {&(0x7f0000002380)=""/78, 0x4e}], 0x4, &(0x7f0000002440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x98}, 0x20) write$cgroup_devices(r17, &(0x7f0000002540)={'c', ' *:* ', 'r\x00'}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x18, 0x11, &(0x7f0000002580)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000002640)='syzkaller\x00', 0x0, 0x60, &(0x7f0000002680)=""/96, 0x41000, 0x10, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000002700)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002740)={0x0, 0x7, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002780)=[r2, r13], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r13}, &(0x7f0000002880), &(0x7f00000028c0)=r15}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002940)={0x9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0xd, 0x5, &(0x7f0000002980)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @generic={0x10, 0x6, 0x4, 0x80, 0x8000}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc}], &(0x7f00000029c0)='GPL\x00', 0xc8e0, 0x0, 0x0, 0x40f00, 0x56, '\x00', r5, @sock_ops, r15, 0x8, &(0x7f0000002a00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002a40)={0x0, 0x9, 0x6, 0x5}, 0x10, r6, r9, 0x1, 0x0, &(0x7f0000002a80)=[{0x1, 0x2, 0x4, 0x7}], 0x10, 0xfffffff7}, 0x94) sendmsg(r18, &(0x7f0000003d40)={&(0x7f0000002b80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002c00)="a0ecc1a8e137e833bbc072adb89fa296e392c79dea32034a2121beb4cd9a8e3fbf01ec0d36e92432c168a3812a72a1f04a00de91bcfa8c6543afaf964025a0c72f96d9ca240acaadb615a08a5a0d5e7a11df2f620bb520bc8c462148892de7dc45d494bac8301884a406945b236b4affe8fe1ab153de1fdb8f30a3ebdf0949d585fa75dd16642fc2c5f4506a77f0e98f11416b95f913ba63c425", 0x9a}, {&(0x7f0000002cc0)="2199bbd251d1c42e3c6f94255b38249ebfd451b673c040659f8a9bd813b335d1ac9e99e823b979", 0x27}, {&(0x7f0000002d00)="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", 0x1000}], 0x3}, 0x8000) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r20 = perf_event_open(&(0x7f0000003dc0)={0x4, 0x80, 0x6, 0x9, 0x3, 0x5, 0x0, 0x9, 0x518c0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000003d80), 0x6}, 0x4010, 0xffffffffffffff01, 0x4, 0x7, 0x3, 0x8, 0x101, 0x0, 0x9, 0x0, 0x9}, r19, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r20, 0x4008240b, &(0x7f0000003e80)={0x0, 0x80, 0x9, 0xfa, 0x3, 0x96, 0x0, 0x9, 0x51002, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000003e40), 0xc}, 0x2004, 0x6, 0x7, 0x5, 0x9, 0x4, 0x4, 0x0, 0x8000, 0x0, 0xd838}) openat$cgroup_ro(r11, &(0x7f0000003f00)='cpuacct.usage_all\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003f40)='./cgroup.cpu/syz1\x00', 0x1ff) r21 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000041c0)={0x6, 0x11, &(0x7f0000003f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004040)='syzkaller\x00', 0xa, 0x25, &(0x7f0000004080)=""/37, 0x41000, 0x0, '\x00', r5, 0x25, r13, 0x8, &(0x7f00000040c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000004100)={0x4, 0xc, 0x401, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004140)=[r14], &(0x7f0000004180)=[{0x2, 0x3, 0xe}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004380)={@map=r17, 0x7, 0x0, 0x8, &(0x7f0000004280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000042c0)=[0x0, 0x0], &(0x7f0000004300)=[0x0], &(0x7f0000004340)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000043c0)={@fallback=r7, r16, 0x17, 0x8, r21, @void, @value, @void, @void, r22}, 0x20) 16.217035241s ago: executing program 1 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x54b) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 16.072109867s ago: executing program 5 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000040000000060000000400006e1a28657c88e7cf42160000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1) (async) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x2004fc10) (async) close(r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000040000000900000000300100", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000131f33e35b423528", @ANYRES32=r0, @ANYBLOB], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xc2e00}, 0x94) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x40, 0x80100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b26, 0x0, 0x0, 0x0, 0x10001}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x101608, 0x2, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x6, 0x1f, &(0x7f0000000500), 0x4) 15.692978423s ago: executing program 1 (id=1245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000940)=""/156, 0x40f00, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r7 = openat$cgroup(r3, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="1300000020000000", @ANYRES32, @ANYRES64], 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\xa0\x7f\x7f\x04xK\x95\x04\x00\x02]`\xb3\x15R+L\xa3U\xab\xc0\xd6E4\xca0\x80\t\a\xf0\xcd\xbfM{h{\xcd\xeb\xde\xd8rl\xc5+CF\x8fD_\xef\xfa\x81\xc8E9X\x82W\x83\x01\x9c1M\v\x89\xc7h\xf3\x94[\x88`e\xf3\xed\x91\x90\xb0\x95\x7fX\xe27I)\r\x80\xf4\x82\xf5\x12\xdf\xfa\xd44\xd8\xa3I\xa3\t\xd7\xaf\x14\x98\xb4\"\xd4n?\x007c\xbcM\xeb%\xd3-#G\xa3\xc6:\x12\x93\x91\x8f\x06\x13\xa9\xb3\xa4\x9f\x84.n\xb0l\xa1w\xf2\v\xe3]\x0f\xa0Y\xc6VC\xe1\xf0\xc7!\bw)x&\x1eQ/\x95\xf5\x97:y\x13O\xe5G\x8c\xafe\x11k\rn=\x9c\xc9\x10\xda\x9a;\xf9\x9d+b\xd7K\x1dy\xb2lC;3*\x0f{\x1e\x94\xba+\xba\xfd\xec\x97\x8a\xac\xbb\xd2\xa7\xda\xb7\x8e\xfeE?\xe1\x14l&,q0+\xddle\xe8\xdd\x9c\x18\xb4Q\xcb.\xa1\xf7>\xa5\xc2\xd7\xa6\xc3\xe1\x98\xe8\xaf$;\xdf\x1fv#dCj\xbe\xd6g\xd3\x04\r\xc6\xf3N') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) 15.692690103s ago: executing program 3 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003022f06b339e66f89c67875f5fcd0000000000000000000000000700"/42], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000004000000050000007f000000e0010000", @ANYRES32=r6, @ANYBLOB='\b\x00'/20, @ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="0415000000000000030000000300"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80146, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) 0s ago: executing program 33 (id=1245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000"], 0x0, 0x32}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000940)=""/156, 0x40f00, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x11, 0x3, 0x0) r7 = openat$cgroup(r3, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="1300000020000000", @ANYRES32, @ANYRES64], 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000500)='\xa0\x7f\x7f\x04xK\x95\x04\x00\x02]`\xb3\x15R+L\xa3U\xab\xc0\xd6E4\xca0\x80\t\a\xf0\xcd\xbfM{h{\xcd\xeb\xde\xd8rl\xc5+CF\x8fD_\xef\xfa\x81\xc8E9X\x82W\x83\x01\x9c1M\v\x89\xc7h\xf3\x94[\x88`e\xf3\xed\x91\x90\xb0\x95\x7fX\xe27I)\r\x80\xf4\x82\xf5\x12\xdf\xfa\xd44\xd8\xa3I\xa3\t\xd7\xaf\x14\x98\xb4\"\xd4n?\x007c\xbcM\xeb%\xd3-#G\xa3\xc6:\x12\x93\x91\x8f\x06\x13\xa9\xb3\xa4\x9f\x84.n\xb0l\xa1w\xf2\v\xe3]\x0f\xa0Y\xc6VC\xe1\xf0\xc7!\bw)x&\x1eQ/\x95\xf5\x97:y\x13O\xe5G\x8c\xafe\x11k\rn=\x9c\xc9\x10\xda\x9a;\xf9\x9d+b\xd7K\x1dy\xb2lC;3*\x0f{\x1e\x94\xba+\xba\xfd\xec\x97\x8a\xac\xbb\xd2\xa7\xda\xb7\x8e\xfeE?\xe1\x14l&,q0+\xddle\xe8\xdd\x9c\x18\xb4Q\xcb.\xa1\xf7>\xa5\xc2\xd7\xa6\xc3\xe1\x98\xe8\xaf$;\xdf\x1fv#dCj\xbe\xd6g\xd3\x04\r\xc6\xf3N') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e14060200000000", 0x20}], 0x1}, 0x40000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) kernel console output (not intermixed with test programs): [ 111.408054][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.417531][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.426511][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.463558][ T5586] device veth0_vlan entered promiscuous mode [ 111.563605][ T5586] device veth1_vlan entered promiscuous mode [ 111.620232][ T5791] device hsr_slave_0 entered promiscuous mode [ 111.630495][ T5791] device hsr_slave_1 entered promiscuous mode [ 111.638060][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.646811][ T5791] Cannot create hsr debugfs directory [ 111.657118][ T5837] netlink: 10750 bytes leftover after parsing attributes in process `syz.1.364'. [ 111.719644][ T5837] netlink: 10750 bytes leftover after parsing attributes in process `syz.1.364'. [ 111.813474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.835727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.889249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.909025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.939417][ T5586] device veth0_macvtap entered promiscuous mode [ 111.964731][ T5586] device veth1_macvtap entered promiscuous mode [ 112.051195][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.063419][ T5845] netlink: 14 bytes leftover after parsing attributes in process `syz.3.366'. [ 112.077989][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.100129][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.121661][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.151212][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.175736][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.209751][ T4225] Bluetooth: hci1: command 0x0409 tx timeout [ 112.244541][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.253363][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.271241][ T5586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.281197][ T5586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.291012][ T5586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.302703][ T5586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.320381][ T5856] netlink: 'syz.0.368': attribute type 21 has an invalid length. [ 112.479797][ T5791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.764583][ T4962] Bluetooth: hci5: command 0x040f tx timeout [ 113.474782][ T5882] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 113.482493][ T5882] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.375'. [ 113.741563][ T5224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.767128][ T5224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.821485][ T5791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.002246][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.253354][ T5791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.284268][ T4950] Bluetooth: hci1: command 0x041b tx timeout [ 114.309187][ T5898] netlink: 'syz.1.379': attribute type 21 has an invalid length. [ 114.331187][ T5269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.358030][ T5269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.371429][ T5269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.821117][ T5791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.863322][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 115.955144][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.015220][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.204967][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.239489][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.364163][ T4962] Bluetooth: hci1: command 0x040f tx timeout [ 117.400150][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.456558][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.495032][ T5969] netlink: 164 bytes leftover after parsing attributes in process `syz.3.395'. [ 117.630055][ T5972] netlink: 164 bytes leftover after parsing attributes in process `syz.3.395'. [ 117.774908][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.806880][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.883711][ T5981] netlink: 'syz.0.396': attribute type 10 has an invalid length. [ 118.000693][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.026419][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.065751][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.073039][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.234125][ T4251] device hsr_slave_0 left promiscuous mode [ 118.258491][ T4251] device hsr_slave_1 left promiscuous mode [ 118.286562][ T4251] device bridge_slave_1 left promiscuous mode [ 118.294339][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.333495][ T4251] device bridge_slave_0 left promiscuous mode [ 118.350387][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.437433][ T4251] device veth1_macvtap left promiscuous mode [ 118.444184][ T4959] Bluetooth: hci1: command 0x0419 tx timeout [ 118.451332][ T4251] device veth0_macvtap left promiscuous mode [ 118.471162][ T4251] device veth1_vlan left promiscuous mode [ 118.491849][ T4251] device veth0_vlan left promiscuous mode [ 119.181241][ T6001] netlink: 'syz.3.405': attribute type 3 has an invalid length. [ 119.217024][ T6001] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.405'. [ 119.428714][ T4251] team0 (unregistering): Port device team_slave_1 removed [ 119.474584][ T4251] team0 (unregistering): Port device team_slave_0 removed [ 119.529141][ T4251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.591099][ T4251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.783653][ T4251] bond0 (unregistering): Released all slaves [ 119.936124][ T5985] netlink: 'syz.5.398': attribute type 10 has an invalid length. [ 120.006544][ T5985] team0: Port device geneve1 added [ 120.026877][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.053145][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.083359][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.111498][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.119091][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.119606][ T5985] syz.5.398 (5985) used greatest stack depth: 19184 bytes left [ 120.333360][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.394708][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.415802][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.439600][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.517615][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.563674][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.610753][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.653672][ T6008] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 120.705595][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.730765][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.750737][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.780513][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.833192][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.078901][ T6016] netlink: 'syz.3.408': attribute type 13 has an invalid length. [ 121.214509][ T6016] netlink: 168 bytes leftover after parsing attributes in process `syz.3.408'. [ 122.277603][ T6039] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.411'. [ 122.343148][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.366222][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.378668][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.471487][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.482839][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.642045][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.655713][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.688721][ T5791] device veth0_vlan entered promiscuous mode [ 122.716385][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.749884][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.839730][ T5791] device veth1_vlan entered promiscuous mode [ 123.012753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.030400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.085056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.144899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.169414][ T5791] device veth0_macvtap entered promiscuous mode [ 123.249008][ T6044] delete_channel: no stack [ 123.256310][ T5791] device veth1_macvtap entered promiscuous mode [ 123.364306][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.386798][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.426005][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.444216][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.478793][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.556273][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.601075][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.631273][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.662437][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.705495][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.751959][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.772894][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.807514][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.830388][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.864105][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.872833][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.194151][ T5224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.202016][ T5224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.239569][ T5271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.259227][ T5271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.267814][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.288289][ T5271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.529083][ T6081] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.417'. [ 124.558992][ T6086] netlink: 'syz.2.353': attribute type 3 has an invalid length. [ 124.606072][ T6086] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.353'. [ 125.115907][ T6103] netlink: 'syz.5.420': attribute type 10 has an invalid length. [ 125.186974][ T6103] device hsr0 entered promiscuous mode [ 125.307501][ T6103] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 125.354360][ T6103] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 125.393338][ T6103] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 125.444112][ T6103] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 125.459420][ T6109] netlink: 'syz.2.421': attribute type 1 has an invalid length. [ 125.526033][ T6109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.421'. [ 125.568958][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.421'. [ 125.846898][ T6117] netlink: 'syz.5.422': attribute type 9 has an invalid length. [ 125.964568][ T6117] netlink: 155304 bytes leftover after parsing attributes in process `syz.5.422'. [ 126.486369][ T4949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.589500][ T6156] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.430'. [ 127.467408][ T6208] netlink: 'syz.3.437': attribute type 21 has an invalid length. [ 127.492824][ T6208] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 127.502732][ T6208] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.437'. [ 128.164866][ T6262] netlink: 'syz.3.450': attribute type 27 has an invalid length. [ 128.274157][ T6262] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 128.309226][ T6262] netlink: 'syz.3.450': attribute type 27 has an invalid length. [ 128.319572][ T6262] netlink: 'syz.3.450': attribute type 3 has an invalid length. [ 128.640533][ T6280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.454'. [ 128.727846][ T6287] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.458'. [ 128.922229][ T6293] netlink: 152 bytes leftover after parsing attributes in process `syz.2.459'. [ 129.193658][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.252357][ T6308] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.639320][ T6337] validate_nla: 132 callbacks suppressed [ 129.639336][ T6337] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 129.678622][ T6337] __nla_validate_parse: 1 callbacks suppressed [ 129.678637][ T6337] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.467'. [ 129.757201][ T6342] netlink: 'syz.3.467': attribute type 17 has an invalid length. [ 129.803142][ T6342] netlink: 148 bytes leftover after parsing attributes in process `syz.3.467'. [ 130.171340][ T6350] device syzkaller0 entered promiscuous mode [ 130.525967][ T6390] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 130.688732][ T6391] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.477'. [ 131.038210][ T6408] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.480'. [ 131.419949][ T6417] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.483'. [ 131.534719][ T6414] syz.0.482 (6414) used greatest stack depth: 16928 bytes left [ 131.556024][ T6419] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 131.749248][ T6419] team0: Port device wlan1 added [ 131.818663][ T6438] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.489'. [ 131.980905][ T6443] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.001543][ T6443] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.003550][ T6447] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.492'. [ 132.021181][ T6446] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.048294][ T6443] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.066268][ T6448] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.074546][ T6448] netlink: 'syz.3.491': attribute type 29 has an invalid length. [ 132.170131][ T6465] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.495'. [ 132.179913][ T6465] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 132.343156][ T6469] netlink: 14 bytes leftover after parsing attributes in process `syz.0.496'. [ 132.360005][ T6469] device hsr_slave_0 left promiscuous mode [ 132.377793][ T6469] device hsr_slave_1 left promiscuous mode [ 132.407288][ T6469] bridge0: port 2(hsr0) entered disabled state [ 132.431404][ T6469] bridge0: port 2(hsr0) entered disabled state [ 132.513279][ T6487] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 132.629494][ T6499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.504'. [ 132.934920][ T6496] delete_channel: no stack [ 133.807355][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.813821][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.706944][ T6596] device syzkaller0 entered promiscuous mode [ 134.744877][ T6592] __nla_validate_parse: 7 callbacks suppressed [ 134.744893][ T6592] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.525'. [ 135.932337][ T6599] netlink: 180 bytes leftover after parsing attributes in process `syz.5.527'. [ 137.118944][ T6673] netlink: 271 bytes leftover after parsing attributes in process `syz.3.540'. [ 137.966067][ T6721] netlink: 184 bytes leftover after parsing attributes in process `syz.1.543'. [ 138.140423][ T6688] device syzkaller0 entered promiscuous mode [ 138.597441][ T6737] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.554'. [ 138.825733][ T6736] validate_nla: 30 callbacks suppressed [ 138.825747][ T6736] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 138.887776][ T6736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.553'. [ 138.929492][ T6736] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 139.476704][ T6757] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 139.500630][ T6757] netlink: 'syz.1.558': attribute type 8 has an invalid length. [ 139.549771][ T6757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 139.621304][ T6759] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 139.641265][ T6759] netlink: 'syz.1.558': attribute type 8 has an invalid length. [ 139.693673][ T6759] netlink: 132 bytes leftover after parsing attributes in process `syz.1.558'. [ 139.956336][ T6774] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 140.038618][ T6774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.562'. [ 140.985363][ T6812] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 141.134935][ T6812] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.566'. [ 141.372694][ T6821] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 141.420150][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.542266][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.549580][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.638883][ T6821] team0: Port device bridge0 added [ 142.009708][ T6837] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.572'. [ 142.067760][ T6837] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 142.239807][ T6838] netlink: 'syz.3.573': attribute type 2 has an invalid length. [ 142.324174][ T6838] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.573'. [ 142.396142][ T6848] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.574'. [ 142.455349][ T6848] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.574'. [ 142.475557][ T6848] tc_dump_action: action bad kind [ 142.480320][ T6853] cgroup: fork rejected by pids controller in /syz1 [ 143.480846][ T6961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.577'. [ 145.161146][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 145.657275][ T7024] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.586'. [ 145.808041][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.815841][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.824876][ T6996] device bridge_slave_0 entered promiscuous mode [ 146.006996][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.014334][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.032962][ T6996] device bridge_slave_1 entered promiscuous mode [ 146.157995][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.179866][ T7035] netlink: 14 bytes leftover after parsing attributes in process `syz.0.588'. [ 146.298203][ T7035] team0: Port device team_slave_0 removed [ 146.377142][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.483802][ T6996] team0: Port device team_slave_0 added [ 146.517793][ T6996] team0: Port device team_slave_1 added [ 146.605318][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 146.631236][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.665113][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.753819][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.799754][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.867054][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.020683][ T7067] netlink: 209796 bytes leftover after parsing attributes in process `syz.0.590'. [ 147.034127][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.068934][ T7069] netlink: 'syz.3.591': attribute type 39 has an invalid length. [ 147.078848][ T7067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.292034][ T6996] device hsr_slave_0 entered promiscuous mode [ 147.332743][ T6996] device hsr_slave_1 entered promiscuous mode [ 147.370349][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.386681][ T6996] Cannot create hsr debugfs directory [ 147.711109][ T7099] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.597'. [ 147.738874][ T6996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.651476][ T6996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.684247][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 148.846992][ T6996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.962687][ T7119] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.600'. [ 148.991716][ T6996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.310666][ T6996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.365144][ T6996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.414153][ T6996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.448457][ T6996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.488551][ T7146] netlink: 'syz.5.605': attribute type 2 has an invalid length. [ 149.747955][ T7166] netlink: 160660 bytes leftover after parsing attributes in process `syz.5.609'. [ 149.865908][ T7162] netlink: 52 bytes leftover after parsing attributes in process `syz.5.609'. [ 149.970365][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.038841][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.083553][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.112094][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.133606][ T7177] netlink: 76 bytes leftover after parsing attributes in process `syz.2.611'. [ 150.179292][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.236618][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.256263][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.263449][ T5224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.323559][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.366761][ T7183] device syzkaller0 entered promiscuous mode [ 150.399388][ T7179] netlink: 168 bytes leftover after parsing attributes in process `syz.5.613'. [ 150.433361][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.458161][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.495923][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.503126][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.549684][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.577943][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.593825][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.629367][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.667607][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.692079][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.711420][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.743702][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.764394][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 150.783668][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.801164][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.817074][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.875294][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.237161][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.255848][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.309213][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.376743][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.397078][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.445023][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.460322][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.473799][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.489920][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.508699][ T6996] device veth0_vlan entered promiscuous mode [ 151.543100][ T6996] device veth1_vlan entered promiscuous mode [ 151.602719][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.618426][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 151.631605][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.653014][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.674505][ T6996] device veth0_macvtap entered promiscuous mode [ 151.706307][ T6996] device veth1_macvtap entered promiscuous mode [ 151.751765][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.763160][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.778296][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.791444][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.809162][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.820691][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.835323][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.844697][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.854844][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.868977][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.881385][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.896810][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.910768][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.926197][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.937809][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.947776][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.959855][ T6996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.970025][ T6996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.982288][ T6996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.993285][ T6996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.844908][ T4962] Bluetooth: hci0: command 0x0419 tx timeout [ 153.146105][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.185454][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.225463][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.292888][ T7211] netlink: 144 bytes leftover after parsing attributes in process `syz.5.619'. [ 153.317911][ T7208] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 153.361897][ T7208] team0: Device vxcan1 is of different type [ 153.386250][ T7219] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.621'. [ 153.426808][ T7219] openvswitch: netlink: Flow key attr not present in new flow. [ 153.429843][ T7218] netlink: 'syz.3.621': attribute type 29 has an invalid length. [ 153.441619][ T5224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.476529][ T5224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.480584][ T7218] netlink: 'syz.3.621': attribute type 29 has an invalid length. [ 153.568097][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.592809][ T7220] netlink: 'syz.3.621': attribute type 29 has an invalid length. [ 153.601466][ T7223] netlink: 'syz.3.621': attribute type 29 has an invalid length. [ 154.128472][ T7248] netlink: 14 bytes leftover after parsing attributes in process `syz.3.627'. [ 154.339749][ T7266] netlink: 156 bytes leftover after parsing attributes in process `syz.5.633'. [ 154.375606][ T7254] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.630'. [ 154.411869][ T7254] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.630'. [ 154.428049][ T7254] tc_dump_action: action bad kind [ 154.638515][ T7277] netlink: 'syz.5.636': attribute type 13 has an invalid length. [ 154.649829][ T7277] netlink: 24643 bytes leftover after parsing attributes in process `syz.5.636'. [ 154.905666][ T7286] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.639'. [ 155.028409][ T7289] device syzkaller0 entered promiscuous mode [ 155.502365][ T7322] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.647'. [ 155.979866][ T7331] device syzkaller0 entered promiscuous mode [ 156.278697][ T144] device hsr_slave_0 left promiscuous mode [ 156.287890][ T144] device hsr_slave_1 left promiscuous mode [ 156.300597][ T144] device bridge_slave_1 left promiscuous mode [ 156.313034][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.369289][ T7343] netlink: 'syz.3.653': attribute type 3 has an invalid length. [ 156.384561][ T144] device bridge_slave_0 left promiscuous mode [ 156.389089][ T7343] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.653'. [ 156.395918][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.461775][ T144] device veth1_macvtap left promiscuous mode [ 156.476493][ T144] device veth0_macvtap left promiscuous mode [ 156.491738][ T144] device veth1_vlan left promiscuous mode [ 156.503184][ T144] device veth0_vlan left promiscuous mode [ 156.806876][ T144] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 156.893977][ T144] team0 (unregistering): Port device team_slave_1 removed [ 156.925378][ T144] team0 (unregistering): Port device team_slave_0 removed [ 156.953277][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.985258][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.086924][ T144] bond0 (unregistering): (slave team0): Releasing backup interface [ 157.138829][ T144] bond0 (unregistering): Released all slaves [ 157.368022][ T7378] netlink: 'syz.1.658': attribute type 11 has an invalid length. [ 157.402542][ T7378] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 157.725640][ T7411] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 157.881677][ T7419] netlink: 'syz.1.668': attribute type 3 has an invalid length. [ 157.917323][ T7419] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 158.982825][ T7436] __nla_validate_parse: 4 callbacks suppressed [ 158.982868][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'. [ 159.015045][ T7443] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.676'. [ 159.024335][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'. [ 159.079053][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.673'. [ 159.081041][ T7448] netlink: 'syz.3.677': attribute type 3 has an invalid length. [ 159.118855][ T7443] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.676'. [ 159.137432][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.677'. [ 159.403218][ T7470] device syzkaller0 entered promiscuous mode [ 159.485942][ T7489] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.685'. [ 159.940572][ T7513] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.692'. [ 160.041712][ T7520] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 160.152265][ T7520] netlink: 'syz.2.693': attribute type 4 has an invalid length. [ 160.163816][ T7520] netlink: 116 bytes leftover after parsing attributes in process `syz.2.693'. [ 160.186687][ T7520] wlan1: mtu greater than device maximum [ 160.199221][ T7520] team0: Device wlan1 failed to change mtu [ 160.379110][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.3.694'. [ 161.256223][ T7591] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 161.323581][ T7599] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 161.400197][ T7591] team0: Device nlmon0 is of different type [ 161.778874][ T7638] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 161.834137][ T7632] netlink: 'syz.5.710': attribute type 21 has an invalid length. [ 161.858761][ T7642] tap0: tun_chr_ioctl cmd 1074812118 [ 161.871384][ T7637] -: renamed from syzkaller0 [ 161.889941][ T7642] netlink: zone id is out of range [ 162.122042][ T7648] netlink: 'syz.2.713': attribute type 5 has an invalid length. [ 162.148241][ T7647] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 162.203495][ T7647] team0: Port device macvlan0 added [ 162.407467][ T7660] netlink: 'syz.5.715': attribute type 3 has an invalid length. [ 162.714703][ T7663] team0: Port device geneve1 added [ 162.783359][ T7669] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.147921][ T7684] device ipvlan1 entered promiscuous mode [ 163.422799][ T7684] bridge0: port 3(ipvlan1) entered blocking state [ 163.458920][ T7684] bridge0: port 3(ipvlan1) entered disabled state [ 163.531734][ T7684] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 163.577015][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.592110][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.635942][ T7701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.667677][ T7701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.682666][ T7713] FAULT_INJECTION: forcing a failure. [ 163.682666][ T7713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.770821][ T7713] CPU: 1 PID: 7713 Comm: syz.2.732 Not tainted syzkaller #0 [ 163.778188][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.788282][ T7713] Call Trace: [ 163.791606][ T7713] [ 163.794578][ T7713] dump_stack_lvl+0x188/0x250 [ 163.799320][ T7713] ? show_regs_print_info+0x20/0x20 [ 163.804571][ T7713] ? load_image+0x410/0x410 [ 163.809126][ T7713] ? __lock_acquire+0x7b50/0x7b50 [ 163.814207][ T7713] should_fail+0x383/0x4b0 [ 163.818690][ T7713] _copy_from_iter+0x234/0x1160 [ 163.823590][ T7713] ? __lock_acquire+0x7b50/0x7b50 [ 163.828672][ T7713] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 163.834098][ T7713] ? __virt_addr_valid+0x3c6/0x470 [ 163.839248][ T7713] ? __phys_addr_symbol+0x2b/0x70 [ 163.844307][ T7713] ? __check_object_size+0x30c/0x410 [ 163.849643][ T7713] netlink_sendmsg+0x758/0xbe0 [ 163.854465][ T7713] ? netlink_getsockopt+0x570/0x570 [ 163.859704][ T7713] ? aa_sock_msg_perm+0x94/0x150 [ 163.864693][ T7713] ? apparmor_socket_sendmsg+0x88/0x230 [ 163.870289][ T7713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 163.875617][ T7713] ? security_socket_sendmsg+0x7c/0xa0 [ 163.881112][ T7713] ? netlink_getsockopt+0x570/0x570 [ 163.886365][ T7713] ____sys_sendmsg+0x5be/0x8f0 [ 163.891190][ T7713] ? __sys_sendmsg_sock+0x30/0x30 [ 163.896283][ T7713] ? import_iovec+0x6f/0xa0 [ 163.900841][ T7713] ___sys_sendmsg+0x236/0x2e0 [ 163.905577][ T7713] ? __sys_sendmsg+0x290/0x290 [ 163.910411][ T7713] ? trace_event_raw_event_lock+0x250/0x250 [ 163.916448][ T7713] __se_sys_sendmsg+0x1b7/0x2a0 [ 163.921360][ T7713] ? __x64_sys_sendmsg+0x80/0x80 [ 163.926332][ T7713] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 163.932392][ T7713] ? trace_sys_enter+0x1f/0x80 [ 163.937204][ T7713] do_syscall_64+0x4c/0xa0 [ 163.941652][ T7713] ? clear_bhb_loop+0x30/0x80 [ 163.946368][ T7713] ? clear_bhb_loop+0x30/0x80 [ 163.951089][ T7713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.957012][ T7713] RIP: 0033:0x7f931ce6c159 [ 163.961567][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.981202][ T7713] RSP: 002b:00007f931b0c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.989647][ T7713] RAX: ffffffffffffffda RBX: 00007f931d0f3fa0 RCX: 00007f931ce6c159 [ 163.997654][ T7713] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 164.005660][ T7713] RBP: 00007f931b0c4090 R08: 0000000000000000 R09: 0000000000000000 [ 164.013664][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.021668][ T7713] R13: 00007f931d0f4038 R14: 00007f931d0f3fa0 R15: 00007ffec2a73b88 [ 164.029711][ T7713] [ 164.076792][ T7708] __nla_validate_parse: 61 callbacks suppressed [ 164.076811][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 164.281114][ T7724] device syzkaller0 entered promiscuous mode [ 164.316391][ T7529] syzkaller0: tun_net_xmit 48 [ 164.416914][ T7731] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.736'. [ 164.436308][ T7739] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.733'. [ 164.519062][ T7733] device syzkaller0 entered promiscuous mode [ 164.588520][ T7731] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 164.649860][ T4228] syzkaller0: tun_net_xmit 48 [ 164.892985][ T7748] validate_nla: 4 callbacks suppressed [ 164.893006][ T7748] netlink: 'syz.1.740': attribute type 13 has an invalid length. [ 165.132709][ T7759] FAULT_INJECTION: forcing a failure. [ 165.132709][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.145557][ T7755] netlink: 'syz.2.742': attribute type 27 has an invalid length. [ 165.187057][ T7755] netlink: 164 bytes leftover after parsing attributes in process `syz.2.742'. [ 165.213867][ T7759] CPU: 1 PID: 7759 Comm: syz.5.745 Not tainted syzkaller #0 [ 165.221227][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.231312][ T7759] Call Trace: [ 165.234604][ T7759] [ 165.237532][ T7759] dump_stack_lvl+0x188/0x250 [ 165.242220][ T7759] ? show_regs_print_info+0x20/0x20 [ 165.247409][ T7759] ? load_image+0x410/0x410 [ 165.251913][ T7759] ? __lock_acquire+0x7b50/0x7b50 [ 165.256937][ T7759] should_fail+0x383/0x4b0 [ 165.261355][ T7759] _copy_from_iter+0x415/0x1160 [ 165.266221][ T7759] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 165.271644][ T7759] ? __virt_addr_valid+0x3c6/0x470 [ 165.276778][ T7759] ? __phys_addr_symbol+0x2b/0x70 [ 165.281798][ T7759] ? __check_object_size+0x30c/0x410 [ 165.287083][ T7759] netlink_sendmsg+0x758/0xbe0 [ 165.291853][ T7759] ? netlink_getsockopt+0x570/0x570 [ 165.297042][ T7759] ? aa_sock_msg_perm+0x94/0x150 [ 165.301984][ T7759] ? apparmor_socket_sendmsg+0x88/0x230 [ 165.307526][ T7759] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 165.312808][ T7759] ? security_socket_sendmsg+0x7c/0xa0 [ 165.318262][ T7759] ? netlink_getsockopt+0x570/0x570 [ 165.323499][ T7759] ____sys_sendmsg+0x5be/0x8f0 [ 165.328455][ T7759] ? __sys_sendmsg_sock+0x30/0x30 [ 165.333530][ T7759] ? import_iovec+0x6f/0xa0 [ 165.338039][ T7759] ___sys_sendmsg+0x236/0x2e0 [ 165.342725][ T7759] ? __sys_sendmsg+0x290/0x290 [ 165.347498][ T7759] ? trace_event_raw_event_lock+0x250/0x250 [ 165.353434][ T7759] __se_sys_sendmsg+0x1b7/0x2a0 [ 165.358285][ T7759] ? __x64_sys_sendmsg+0x80/0x80 [ 165.363217][ T7759] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 165.369208][ T7759] ? lockdep_hardirqs_on+0x94/0x140 [ 165.374404][ T7759] do_syscall_64+0x4c/0xa0 [ 165.378807][ T7759] ? clear_bhb_loop+0x30/0x80 [ 165.383486][ T7759] ? clear_bhb_loop+0x30/0x80 [ 165.388157][ T7759] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.394068][ T7759] RIP: 0033:0x7fcd6e99e159 [ 165.398482][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.418078][ T7759] RSP: 002b:00007fcd6cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.426485][ T7759] RAX: ffffffffffffffda RBX: 00007fcd6ec25fa0 RCX: 00007fcd6e99e159 [ 165.434448][ T7759] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 165.442403][ T7759] RBP: 00007fcd6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.450363][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.458323][ T7759] R13: 00007fcd6ec26038 R14: 00007fcd6ec25fa0 R15: 00007ffcd6bfa1d8 [ 165.466308][ T7759] [ 165.512045][ T7764] netlink: 'syz.0.746': attribute type 21 has an invalid length. [ 165.543993][ T7764] netlink: 128 bytes leftover after parsing attributes in process `syz.0.746'. [ 165.558709][ T7764] netlink: 'syz.0.746': attribute type 5 has an invalid length. [ 165.989238][ T7792] netlink: 'syz.5.755': attribute type 4 has an invalid length. [ 166.000736][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.5.755'. [ 166.052605][ T7790] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.753'. [ 166.067940][ T7788] device syzkaller0 entered promiscuous mode [ 166.113482][ T7790] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 166.126819][ T7788] syzkaller0: tun_net_xmit 1280 [ 166.132352][ T7788] syzkaller0: create flow: hash 1606537059 index 1 [ 166.145816][ T7790] CPU: 1 PID: 7790 Comm: syz.3.753 Not tainted syzkaller #0 [ 166.153139][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.163204][ T7790] Call Trace: [ 166.166496][ T7790] [ 166.169425][ T7790] dump_stack_lvl+0x188/0x250 [ 166.174105][ T7790] ? show_regs_print_info+0x20/0x20 [ 166.179301][ T7790] ? load_image+0x410/0x410 [ 166.183812][ T7790] sysfs_warn_dup+0x8a/0xa0 [ 166.188419][ T7790] sysfs_do_create_link_sd+0xc0/0x110 [ 166.193784][ T7790] device_add+0x83b/0x1050 [ 166.198216][ T7790] wiphy_register+0x1e74/0x2c40 [ 166.203073][ T7790] ? cfg80211_event_work+0x40/0x40 [ 166.208179][ T7790] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 166.214337][ T7790] ? ieee80211_register_hw+0x2414/0x3a60 [ 166.219962][ T7790] ieee80211_register_hw+0x2a03/0x3a60 [ 166.225417][ T7790] ? ieee80211_register_hw+0xb21/0x3a60 [ 166.231050][ T7790] ? ieee80211_tasklet_handler+0x20/0x20 [ 166.236677][ T7790] ? rcu_is_watching+0x11/0xa0 [ 166.241455][ T7790] ? hrtimer_init+0x10c/0x220 [ 166.246125][ T7790] mac80211_hwsim_new_radio+0x209d/0x4050 [ 166.251855][ T7790] hwsim_new_radio_nl+0xa7d/0xc50 [ 166.256881][ T7790] genl_rcv_msg+0xd0b/0xfa0 [ 166.261384][ T7790] ? genl_bind+0x370/0x370 [ 166.265795][ T7790] ? __dev_queue_xmit+0x1b64/0x2e50 [ 166.270981][ T7790] ? verify_lock_unused+0x140/0x140 [ 166.276181][ T7790] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 166.281902][ T7790] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 166.288230][ T7790] netlink_rcv_skb+0x1e9/0x430 [ 166.292987][ T7790] ? genl_bind+0x370/0x370 [ 166.297392][ T7790] ? netlink_ack+0xb10/0xb10 [ 166.301978][ T7790] ? down_read+0x1aa/0x2e0 [ 166.306383][ T7790] genl_rcv+0x24/0x40 [ 166.310351][ T7790] netlink_unicast+0x78f/0x940 [ 166.315111][ T7790] netlink_sendmsg+0x8ba/0xbe0 [ 166.320095][ T7790] ? lockdep_hardirqs_on+0x94/0x140 [ 166.325311][ T7790] ? netlink_getsockopt+0x570/0x570 [ 166.330524][ T7790] ? security_socket_sendmsg+0x56/0xa0 [ 166.335992][ T7790] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.341277][ T7790] ? security_socket_sendmsg+0x7c/0xa0 [ 166.346722][ T7790] ? netlink_getsockopt+0x570/0x570 [ 166.351919][ T7790] ____sys_sendmsg+0x5be/0x8f0 [ 166.356685][ T7790] ? __sys_sendmsg_sock+0x30/0x30 [ 166.361710][ T7790] ? import_iovec+0x6f/0xa0 [ 166.366208][ T7790] ___sys_sendmsg+0x236/0x2e0 [ 166.370887][ T7790] ? __sys_sendmsg+0x290/0x290 [ 166.375651][ T7790] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 166.381393][ T7790] __se_sys_sendmsg+0x1b7/0x2a0 [ 166.386259][ T7790] ? __x64_sys_sendmsg+0x80/0x80 [ 166.391206][ T7790] ? lockdep_hardirqs_on+0x94/0x140 [ 166.396422][ T7790] do_syscall_64+0x4c/0xa0 [ 166.400831][ T7790] ? clear_bhb_loop+0x30/0x80 [ 166.405498][ T7790] ? clear_bhb_loop+0x30/0x80 [ 166.410167][ T7790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.416052][ T7790] RIP: 0033:0x7f3d7cbc2159 [ 166.420459][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.440050][ T7790] RSP: 002b:00007f3d7ae1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.448543][ T7790] RAX: ffffffffffffffda RBX: 00007f3d7ce49fa0 RCX: 00007f3d7cbc2159 [ 166.456517][ T7790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 166.464493][ T7790] RBP: 00007f3d7cc5906b R08: 0000000000000000 R09: 0000000000000000 [ 166.472535][ T7790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.480508][ T7790] R13: 00007f3d7ce4a038 R14: 00007f3d7ce49fa0 R15: 00007ffd4b415078 [ 166.488482][ T7790] [ 166.538667][ T7787] syzkaller0: delete flow: hash 1606537059 index 1 [ 166.649599][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 166.705549][ T7813] FAULT_INJECTION: forcing a failure. [ 166.705549][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 166.720105][ T7813] CPU: 0 PID: 7813 Comm: syz.0.761 Not tainted syzkaller #0 [ 166.727587][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.737673][ T7813] Call Trace: [ 166.740973][ T7813] [ 166.743901][ T7813] dump_stack_lvl+0x188/0x250 [ 166.748612][ T7813] ? show_regs_print_info+0x20/0x20 [ 166.753836][ T7813] ? load_image+0x410/0x410 [ 166.758374][ T7813] ? __might_sleep+0xf0/0xf0 [ 166.763001][ T7813] ? __lock_acquire+0x7b50/0x7b50 [ 166.768058][ T7813] should_fail+0x383/0x4b0 [ 166.772489][ T7813] should_failslab+0x5/0x20 [ 166.777008][ T7813] slab_pre_alloc_hook+0x51/0xc0 [ 166.782045][ T7813] __kmalloc+0x6b/0x340 [ 166.786197][ T7813] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 166.792463][ T7813] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 166.798548][ T7813] genl_rcv_msg+0xa91/0xfa0 [ 166.803069][ T7813] ? genl_bind+0x370/0x370 [ 166.807498][ T7813] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 166.813216][ T7813] ? verify_lock_unused+0x140/0x140 [ 166.818433][ T7813] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 166.824175][ T7813] ? perf_trace_lock+0x301/0x390 [ 166.829273][ T7813] ? seg6_genl_set_tunsrc+0x140/0x140 [ 166.834702][ T7813] netlink_rcv_skb+0x1e9/0x430 [ 166.839507][ T7813] ? genl_bind+0x370/0x370 [ 166.843959][ T7813] ? netlink_ack+0xb10/0xb10 [ 166.848604][ T7813] ? down_read+0x1aa/0x2e0 [ 166.853043][ T7813] genl_rcv+0x24/0x40 [ 166.857030][ T7813] netlink_unicast+0x78f/0x940 [ 166.861817][ T7813] netlink_sendmsg+0x8ba/0xbe0 [ 166.866687][ T7813] ? netlink_getsockopt+0x570/0x570 [ 166.871888][ T7813] ? aa_sock_msg_perm+0x94/0x150 [ 166.876841][ T7813] ? apparmor_socket_sendmsg+0x88/0x230 [ 166.882388][ T7813] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.887701][ T7813] ? security_socket_sendmsg+0x7c/0xa0 [ 166.893169][ T7813] ? netlink_getsockopt+0x570/0x570 [ 166.898376][ T7813] ____sys_sendmsg+0x5be/0x8f0 [ 166.903164][ T7813] ? __sys_sendmsg_sock+0x30/0x30 [ 166.908201][ T7813] ? import_iovec+0x6f/0xa0 [ 166.912741][ T7813] ___sys_sendmsg+0x236/0x2e0 [ 166.917437][ T7813] ? __sys_sendmsg+0x290/0x290 [ 166.922245][ T7813] ? trace_event_raw_event_lock+0x250/0x250 [ 166.928183][ T7813] __se_sys_sendmsg+0x1b7/0x2a0 [ 166.933069][ T7813] ? __x64_sys_sendmsg+0x80/0x80 [ 166.938013][ T7813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.944120][ T7813] ? lockdep_hardirqs_on+0x94/0x140 [ 166.949332][ T7813] do_syscall_64+0x4c/0xa0 [ 166.953750][ T7813] ? clear_bhb_loop+0x30/0x80 [ 166.958457][ T7813] ? clear_bhb_loop+0x30/0x80 [ 166.963186][ T7813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.969108][ T7813] RIP: 0033:0x7fa0a856b159 [ 166.973571][ T7813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.993204][ T7813] RSP: 002b:00007fa0a67c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.001635][ T7813] RAX: ffffffffffffffda RBX: 00007fa0a87f2fa0 RCX: 00007fa0a856b159 [ 167.009624][ T7813] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 167.017606][ T7813] RBP: 00007fa0a67c3090 R08: 0000000000000000 R09: 0000000000000000 [ 167.025595][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.033570][ T7813] R13: 00007fa0a87f3038 R14: 00007fa0a87f2fa0 R15: 00007ffc6d045898 [ 167.041569][ T7813] [ 167.069463][ T7814] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.759'. [ 167.092170][ T7814] netlink: zone id is out of range [ 167.107280][ T7814] netlink: zone id is out of range [ 167.112561][ T7814] netlink: zone id is out of range [ 167.123813][ T7814] netlink: zone id is out of range [ 167.133561][ T7818] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.762'. [ 167.143219][ T7814] netlink: zone id is out of range [ 167.151525][ T7814] netlink: zone id is out of range [ 167.157204][ T7818] netlink: 'syz.3.762': attribute type 2 has an invalid length. [ 167.158208][ T7814] netlink: zone id is out of range [ 167.172915][ T7814] netlink: zone id is out of range [ 167.178385][ T7814] netlink: zone id is out of range [ 167.188407][ T7814] netlink: zone id is out of range [ 167.709010][ T7846] device syzkaller0 entered promiscuous mode [ 167.751295][ T7856] syzkaller0: tun_net_xmit 1280 [ 167.781169][ T7856] syzkaller0: create flow: hash 1606537059 index 1 [ 167.839664][ T7845] syzkaller0: delete flow: hash 1606537059 index 1 [ 168.008563][ T7870] FAULT_INJECTION: forcing a failure. [ 168.008563][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 168.052183][ T7870] CPU: 1 PID: 7870 Comm: syz.3.775 Not tainted syzkaller #0 [ 168.059536][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 168.069622][ T7870] Call Trace: [ 168.072928][ T7870] [ 168.075883][ T7870] dump_stack_lvl+0x188/0x250 [ 168.080616][ T7870] ? show_regs_print_info+0x20/0x20 [ 168.085846][ T7870] ? load_image+0x410/0x410 [ 168.090388][ T7870] ? __might_sleep+0xf0/0xf0 [ 168.095026][ T7870] ? __lock_acquire+0x7b50/0x7b50 [ 168.100102][ T7870] should_fail+0x383/0x4b0 [ 168.104562][ T7870] should_failslab+0x5/0x20 [ 168.109090][ T7870] slab_pre_alloc_hook+0x51/0xc0 [ 168.114059][ T7870] __kmalloc+0x6b/0x340 [ 168.118233][ T7870] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 168.124519][ T7870] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 168.130721][ T7870] genl_rcv_msg+0xa91/0xfa0 [ 168.135289][ T7870] ? genl_bind+0x370/0x370 [ 168.139775][ T7870] ? __dev_queue_xmit+0x1b64/0x2e50 [ 168.144999][ T7870] ? verify_lock_unused+0x140/0x140 [ 168.150207][ T7870] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 168.155941][ T7870] ? perf_trace_lock+0x301/0x390 [ 168.160902][ T7870] ? seg6_genl_set_tunsrc+0x140/0x140 [ 168.166304][ T7870] netlink_rcv_skb+0x1e9/0x430 [ 168.171071][ T7870] ? genl_bind+0x370/0x370 [ 168.175486][ T7870] ? netlink_ack+0xb10/0xb10 [ 168.180089][ T7870] ? down_read+0x1aa/0x2e0 [ 168.184506][ T7870] genl_rcv+0x24/0x40 [ 168.188480][ T7870] netlink_unicast+0x78f/0x940 [ 168.193256][ T7870] netlink_sendmsg+0x8ba/0xbe0 [ 168.198032][ T7870] ? netlink_getsockopt+0x570/0x570 [ 168.203227][ T7870] ? aa_sock_msg_perm+0x94/0x150 [ 168.208197][ T7870] ? apparmor_socket_sendmsg+0x88/0x230 [ 168.213747][ T7870] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.219041][ T7870] ? security_socket_sendmsg+0x7c/0xa0 [ 168.224590][ T7870] ? netlink_getsockopt+0x570/0x570 [ 168.229792][ T7870] ____sys_sendmsg+0x5be/0x8f0 [ 168.234573][ T7870] ? __sys_sendmsg_sock+0x30/0x30 [ 168.239606][ T7870] ? import_iovec+0x6f/0xa0 [ 168.244112][ T7870] ___sys_sendmsg+0x236/0x2e0 [ 168.248796][ T7870] ? __sys_sendmsg+0x290/0x290 [ 168.253575][ T7870] ? trace_event_raw_event_lock+0x250/0x250 [ 168.259510][ T7870] __se_sys_sendmsg+0x1b7/0x2a0 [ 168.264365][ T7870] ? __x64_sys_sendmsg+0x80/0x80 [ 168.269310][ T7870] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 168.275314][ T7870] ? lockdep_hardirqs_on+0x94/0x140 [ 168.280515][ T7870] do_syscall_64+0x4c/0xa0 [ 168.284928][ T7870] ? clear_bhb_loop+0x30/0x80 [ 168.289599][ T7870] ? clear_bhb_loop+0x30/0x80 [ 168.294280][ T7870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.300183][ T7870] RIP: 0033:0x7f3d7cbc2159 [ 168.304596][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.324195][ T7870] RSP: 002b:00007f3d7ae1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.332604][ T7870] RAX: ffffffffffffffda RBX: 00007f3d7ce49fa0 RCX: 00007f3d7cbc2159 [ 168.340572][ T7870] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 168.348536][ T7870] RBP: 00007f3d7ae1a090 R08: 0000000000000000 R09: 0000000000000000 [ 168.356499][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.364460][ T7870] R13: 00007f3d7ce4a038 R14: 00007f3d7ce49fa0 R15: 00007ffd4b415078 [ 168.372470][ T7870] [ 168.848713][ T7904] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 168.977836][ T7914] netlink: 'syz.1.789': attribute type 7 has an invalid length. [ 169.120280][ T7918] device syzkaller0 entered promiscuous mode [ 169.158865][ T7927] __nla_validate_parse: 34 callbacks suppressed [ 169.158883][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 169.204997][ T7918] syzkaller0: tun_net_xmit 1280 [ 169.210124][ T7918] syzkaller0: create flow: hash 1606537059 index 1 [ 169.448392][ T7941] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.796'. [ 169.472913][ T7941] FAULT_INJECTION: forcing a failure. [ 169.472913][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 169.518545][ T7941] CPU: 1 PID: 7941 Comm: syz.3.796 Not tainted syzkaller #0 [ 169.525914][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.536007][ T7941] Call Trace: [ 169.539305][ T7941] [ 169.542254][ T7941] dump_stack_lvl+0x188/0x250 [ 169.546967][ T7941] ? show_regs_print_info+0x20/0x20 [ 169.552186][ T7941] ? load_image+0x410/0x410 [ 169.556713][ T7941] ? __might_sleep+0xf0/0xf0 [ 169.561319][ T7941] ? __lock_acquire+0x7b50/0x7b50 [ 169.566383][ T7941] should_fail+0x383/0x4b0 [ 169.570842][ T7941] should_failslab+0x5/0x20 [ 169.575368][ T7941] slab_pre_alloc_hook+0x51/0xc0 [ 169.580343][ T7941] kmem_cache_alloc_node+0x47/0x2c0 [ 169.585567][ T7941] ? __alloc_skb+0xf4/0x750 [ 169.590101][ T7941] __alloc_skb+0xf4/0x750 [ 169.594557][ T7941] seg6_genl_get_tunsrc+0x59/0x580 [ 169.599741][ T7941] genl_rcv_msg+0xd0b/0xfa0 [ 169.604287][ T7941] ? genl_bind+0x370/0x370 [ 169.608744][ T7941] ? __dev_queue_xmit+0x1b64/0x2e50 [ 169.613988][ T7941] ? verify_lock_unused+0x140/0x140 [ 169.619209][ T7941] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 169.624956][ T7941] ? perf_trace_lock+0x301/0x390 [ 169.629931][ T7941] ? seg6_genl_set_tunsrc+0x140/0x140 [ 169.635361][ T7941] netlink_rcv_skb+0x1e9/0x430 [ 169.640254][ T7941] ? genl_bind+0x370/0x370 [ 169.644702][ T7941] ? netlink_ack+0xb10/0xb10 [ 169.649344][ T7941] ? down_read+0x1aa/0x2e0 [ 169.653795][ T7941] genl_rcv+0x24/0x40 [ 169.657808][ T7941] netlink_unicast+0x78f/0x940 [ 169.662624][ T7941] netlink_sendmsg+0x8ba/0xbe0 [ 169.667429][ T7941] ? netlink_getsockopt+0x570/0x570 [ 169.672641][ T7941] ? aa_sock_msg_perm+0x94/0x150 [ 169.677693][ T7941] ? apparmor_socket_sendmsg+0x88/0x230 [ 169.683269][ T7941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 169.688574][ T7941] ? security_socket_sendmsg+0x7c/0xa0 [ 169.694054][ T7941] ? netlink_getsockopt+0x570/0x570 [ 169.699285][ T7941] ____sys_sendmsg+0x5be/0x8f0 [ 169.704091][ T7941] ? __sys_sendmsg_sock+0x30/0x30 [ 169.709182][ T7941] ? import_iovec+0x6f/0xa0 [ 169.713715][ T7941] ___sys_sendmsg+0x236/0x2e0 [ 169.718432][ T7941] ? __sys_sendmsg+0x290/0x290 [ 169.723248][ T7941] ? trace_event_raw_event_lock+0x250/0x250 [ 169.729238][ T7941] __se_sys_sendmsg+0x1b7/0x2a0 [ 169.734126][ T7941] ? __x64_sys_sendmsg+0x80/0x80 [ 169.739090][ T7941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 169.745127][ T7941] ? lockdep_hardirqs_on+0x94/0x140 [ 169.750360][ T7941] do_syscall_64+0x4c/0xa0 [ 169.754794][ T7941] ? clear_bhb_loop+0x30/0x80 [ 169.759490][ T7941] ? clear_bhb_loop+0x30/0x80 [ 169.764365][ T7941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.770292][ T7941] RIP: 0033:0x7f3d7cbc2159 [ 169.774735][ T7941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.794377][ T7941] RSP: 002b:00007f3d7ae1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.802828][ T7941] RAX: ffffffffffffffda RBX: 00007f3d7ce49fa0 RCX: 00007f3d7cbc2159 [ 169.810821][ T7941] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 169.818822][ T7941] RBP: 00007f3d7ae1a090 R08: 0000000000000000 R09: 0000000000000000 [ 169.826819][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.834816][ T7941] R13: 00007f3d7ce4a038 R14: 00007f3d7ce49fa0 R15: 00007ffd4b415078 [ 169.842846][ T7941] [ 170.088658][ T7933] netlink: 'syz.1.795': attribute type 10 has an invalid length. [ 170.104041][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.795'. [ 170.127844][ T7938] netlink: 'syz.1.795': attribute type 13 has an invalid length. [ 170.182804][ T7912] syzkaller0: delete flow: hash 1606537059 index 1 [ 170.787485][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.840044][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.946615][ T7973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.012826][ T7973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.273545][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.806'. [ 171.532785][ T7998] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.813'. [ 171.562669][ T7998] FAULT_INJECTION: forcing a failure. [ 171.562669][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 171.617714][ T7998] CPU: 0 PID: 7998 Comm: syz.1.813 Not tainted syzkaller #0 [ 171.625059][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.635250][ T7998] Call Trace: [ 171.638546][ T7998] [ 171.641490][ T7998] dump_stack_lvl+0x188/0x250 [ 171.646191][ T7998] ? show_regs_print_info+0x20/0x20 [ 171.651401][ T7998] ? load_image+0x410/0x410 [ 171.655923][ T7998] ? __might_sleep+0xf0/0xf0 [ 171.660529][ T7998] ? __lock_acquire+0x7b50/0x7b50 [ 171.665576][ T7998] should_fail+0x383/0x4b0 [ 171.670019][ T7998] should_failslab+0x5/0x20 [ 171.674529][ T7998] slab_pre_alloc_hook+0x51/0xc0 [ 171.679489][ T7998] __kmalloc_node_track_caller+0x68/0x3a0 [ 171.685227][ T7998] ? seg6_genl_get_tunsrc+0x59/0x580 [ 171.690519][ T7998] ? __alloc_skb+0xf4/0x750 [ 171.695031][ T7998] ? seg6_genl_get_tunsrc+0x59/0x580 [ 171.700328][ T7998] __alloc_skb+0x22c/0x750 [ 171.704769][ T7998] seg6_genl_get_tunsrc+0x59/0x580 [ 171.709904][ T7998] genl_rcv_msg+0xd0b/0xfa0 [ 171.714448][ T7998] ? genl_bind+0x370/0x370 [ 171.718894][ T7998] ? __dev_queue_xmit+0x1b64/0x2e50 [ 171.724099][ T7998] ? verify_lock_unused+0x140/0x140 [ 171.729317][ T7998] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 171.735064][ T7998] ? perf_trace_lock+0x301/0x390 [ 171.740036][ T7998] ? seg6_genl_set_tunsrc+0x140/0x140 [ 171.745449][ T7998] netlink_rcv_skb+0x1e9/0x430 [ 171.750460][ T7998] ? genl_bind+0x370/0x370 [ 171.754919][ T7998] ? netlink_ack+0xb10/0xb10 [ 171.759663][ T7998] ? down_read+0x1aa/0x2e0 [ 171.764099][ T7998] genl_rcv+0x24/0x40 [ 171.768090][ T7998] netlink_unicast+0x78f/0x940 [ 171.772889][ T7998] netlink_sendmsg+0x8ba/0xbe0 [ 171.777682][ T7998] ? netlink_getsockopt+0x570/0x570 [ 171.782883][ T7998] ? aa_sock_msg_perm+0x94/0x150 [ 171.787840][ T7998] ? apparmor_socket_sendmsg+0x88/0x230 [ 171.793394][ T7998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.798693][ T7998] ? security_socket_sendmsg+0x7c/0xa0 [ 171.804159][ T7998] ? netlink_getsockopt+0x570/0x570 [ 171.809471][ T7998] ____sys_sendmsg+0x5be/0x8f0 [ 171.814285][ T7998] ? __sys_sendmsg_sock+0x30/0x30 [ 171.819342][ T7998] ? import_iovec+0x6f/0xa0 [ 171.823868][ T7998] ___sys_sendmsg+0x236/0x2e0 [ 171.828590][ T7998] ? __sys_sendmsg+0x290/0x290 [ 171.833393][ T7998] ? trace_event_raw_event_lock+0x250/0x250 [ 171.839356][ T7998] __se_sys_sendmsg+0x1b7/0x2a0 [ 171.844238][ T7998] ? __x64_sys_sendmsg+0x80/0x80 [ 171.849182][ T7998] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 171.855202][ T7998] ? lockdep_hardirqs_on+0x94/0x140 [ 171.860428][ T7998] do_syscall_64+0x4c/0xa0 [ 171.864854][ T7998] ? clear_bhb_loop+0x30/0x80 [ 171.869722][ T7998] ? clear_bhb_loop+0x30/0x80 [ 171.874510][ T7998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.880413][ T7998] RIP: 0033:0x7fb366d3f159 [ 171.884843][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.904459][ T7998] RSP: 002b:00007fb364f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.912892][ T7998] RAX: ffffffffffffffda RBX: 00007fb366fc6fa0 RCX: 00007fb366d3f159 [ 171.920875][ T7998] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 171.928854][ T7998] RBP: 00007fb364f97090 R08: 0000000000000000 R09: 0000000000000000 [ 171.936836][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.944814][ T7998] R13: 00007fb366fc7038 R14: 00007fb366fc6fa0 R15: 00007ffdc0b22fb8 [ 171.952829][ T7998] [ 171.987535][ T8006] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.815'. [ 172.111859][ T8009] device syzkaller0 entered promiscuous mode [ 172.157663][ T8009] syzkaller0: tun_net_xmit 1280 [ 172.163123][ T8009] syzkaller0: create flow: hash 1606537059 index 1 [ 172.280409][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.821'. [ 172.321152][ T8007] syzkaller0: delete flow: hash 1606537059 index 1 [ 172.395244][ T8028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.545632][ T8039] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.825'. [ 172.594236][ T8052] netlink: 'syz.2.827': attribute type 21 has an invalid length. [ 172.616221][ T8052] netlink: 128 bytes leftover after parsing attributes in process `syz.2.827'. [ 172.655836][ T8052] netlink: 'syz.2.827': attribute type 5 has an invalid length. [ 172.672751][ T8055] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.829'. [ 172.692739][ T8055] FAULT_INJECTION: forcing a failure. [ 172.692739][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 172.709165][ T8048] netlink: 'syz.3.826': attribute type 39 has an invalid length. [ 172.747217][ T8055] CPU: 1 PID: 8055 Comm: syz.0.829 Not tainted syzkaller #0 [ 172.754559][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.764634][ T8055] Call Trace: [ 172.767932][ T8055] [ 172.771000][ T8055] dump_stack_lvl+0x188/0x250 [ 172.775713][ T8055] ? show_regs_print_info+0x20/0x20 [ 172.780936][ T8055] ? load_image+0x410/0x410 [ 172.785491][ T8055] ? __might_sleep+0xf0/0xf0 [ 172.790111][ T8055] ? __lock_acquire+0x7b50/0x7b50 [ 172.795167][ T8055] should_fail+0x383/0x4b0 [ 172.799615][ T8055] should_failslab+0x5/0x20 [ 172.804139][ T8055] slab_pre_alloc_hook+0x51/0xc0 [ 172.809134][ T8055] kmem_cache_alloc_node+0x47/0x2c0 [ 172.814360][ T8055] ? __alloc_skb+0xf4/0x750 [ 172.818897][ T8055] __alloc_skb+0xf4/0x750 [ 172.823259][ T8055] netlink_ack+0x35c/0xb10 [ 172.827707][ T8055] ? netlink_dump+0xdd0/0xdd0 [ 172.832416][ T8055] netlink_rcv_skb+0x267/0x430 [ 172.837210][ T8055] ? genl_bind+0x370/0x370 [ 172.841649][ T8055] ? netlink_ack+0xb10/0xb10 [ 172.846274][ T8055] ? down_read+0x1aa/0x2e0 [ 172.850707][ T8055] genl_rcv+0x24/0x40 [ 172.854706][ T8055] netlink_unicast+0x78f/0x940 [ 172.859501][ T8055] netlink_sendmsg+0x8ba/0xbe0 [ 172.864296][ T8055] ? netlink_getsockopt+0x570/0x570 [ 172.869593][ T8055] ? aa_sock_msg_perm+0x94/0x150 [ 172.874556][ T8055] ? apparmor_socket_sendmsg+0x88/0x230 [ 172.880118][ T8055] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 172.885526][ T8055] ? security_socket_sendmsg+0x7c/0xa0 [ 172.891006][ T8055] ? netlink_getsockopt+0x570/0x570 [ 172.896220][ T8055] ____sys_sendmsg+0x5be/0x8f0 [ 172.901011][ T8055] ? __sys_sendmsg_sock+0x30/0x30 [ 172.906067][ T8055] ? import_iovec+0x6f/0xa0 [ 172.910602][ T8055] ___sys_sendmsg+0x236/0x2e0 [ 172.915310][ T8055] ? __sys_sendmsg+0x290/0x290 [ 172.920108][ T8055] ? trace_event_raw_event_lock+0x250/0x250 [ 172.926047][ T8055] __se_sys_sendmsg+0x1b7/0x2a0 [ 172.930924][ T8055] ? __x64_sys_sendmsg+0x80/0x80 [ 172.935884][ T8055] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 172.941899][ T8055] ? lockdep_hardirqs_on+0x94/0x140 [ 172.947134][ T8055] do_syscall_64+0x4c/0xa0 [ 172.951573][ T8055] ? clear_bhb_loop+0x30/0x80 [ 172.956270][ T8055] ? clear_bhb_loop+0x30/0x80 [ 172.960974][ T8055] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.966896][ T8055] RIP: 0033:0x7fa0a856b159 [ 172.971335][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.990958][ T8055] RSP: 002b:00007fa0a67c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.999573][ T8055] RAX: ffffffffffffffda RBX: 00007fa0a87f2fa0 RCX: 00007fa0a856b159 [ 173.007572][ T8055] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 173.015562][ T8055] RBP: 00007fa0a67c3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.023555][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.031634][ T8055] R13: 00007fa0a87f3038 R14: 00007fa0a87f2fa0 R15: 00007ffc6d045898 [ 173.039654][ T8055] [ 173.083183][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.119670][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.138493][ T8063] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 173.165968][ T8063] syzkaller1: linktype set to 769 [ 173.208248][ T8067] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 173.265203][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.340775][ T8082] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 173.355785][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.402591][ T8075] netlink: 'syz.0.833': attribute type 40 has an invalid length. [ 173.475299][ T8067] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 173.554203][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.572113][ T8064] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 173.597082][ T8085] delete_channel: no stack [ 173.615068][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.659343][ T8105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.660023][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.754680][ T8101] device syzkaller0 entered promiscuous mode [ 173.786333][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.860897][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 173.872804][ T8107] tap0: tun_chr_ioctl cmd 1074025673 [ 173.898478][ T8100] syzkaller0: delete flow: hash 1606537059 index 1 [ 173.998834][ T8065] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 174.300898][ T8131] __nla_validate_parse: 4 callbacks suppressed [ 174.300916][ T8131] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.843'. [ 174.347864][ T8131] FAULT_INJECTION: forcing a failure. [ 174.347864][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 174.391363][ T8131] CPU: 1 PID: 8131 Comm: syz.3.843 Not tainted syzkaller #0 [ 174.398700][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.408771][ T8131] Call Trace: [ 174.412075][ T8131] [ 174.415018][ T8131] dump_stack_lvl+0x188/0x250 [ 174.419713][ T8131] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 174.425457][ T8131] ? show_regs_print_info+0x20/0x20 [ 174.430675][ T8131] ? load_image+0x410/0x410 [ 174.435216][ T8131] should_fail+0x383/0x4b0 [ 174.439660][ T8131] should_failslab+0x5/0x20 [ 174.444180][ T8131] slab_pre_alloc_hook+0x51/0xc0 [ 174.449134][ T8131] ? skb_clone+0x1bd/0x350 [ 174.453566][ T8131] kmem_cache_alloc+0x3d/0x280 [ 174.458344][ T8131] skb_clone+0x1bd/0x350 [ 174.462610][ T8131] __netlink_deliver_tap+0x3cb/0x7c0 [ 174.467935][ T8131] netlink_deliver_tap+0x16c/0x180 [ 174.473070][ T8131] netlink_sendskb+0x64/0x130 [ 174.477761][ T8131] seg6_genl_get_tunsrc+0x4c4/0x580 [ 174.482969][ T8131] genl_rcv_msg+0xd0b/0xfa0 [ 174.487489][ T8131] ? genl_bind+0x370/0x370 [ 174.491919][ T8131] ? __dev_queue_xmit+0x1b64/0x2e50 [ 174.497115][ T8131] ? verify_lock_unused+0x140/0x140 [ 174.502333][ T8131] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 174.508076][ T8131] ? perf_trace_lock+0x301/0x390 [ 174.513033][ T8131] ? seg6_genl_set_tunsrc+0x140/0x140 [ 174.518430][ T8131] netlink_rcv_skb+0x1e9/0x430 [ 174.523207][ T8131] ? genl_bind+0x370/0x370 [ 174.527629][ T8131] ? netlink_ack+0xb10/0xb10 [ 174.532233][ T8131] ? down_read+0x1aa/0x2e0 [ 174.536658][ T8131] genl_rcv+0x24/0x40 [ 174.540647][ T8131] netlink_unicast+0x78f/0x940 [ 174.545426][ T8131] netlink_sendmsg+0x8ba/0xbe0 [ 174.550208][ T8131] ? netlink_getsockopt+0x570/0x570 [ 174.555410][ T8131] ? aa_sock_msg_perm+0x94/0x150 [ 174.560354][ T8131] ? apparmor_socket_sendmsg+0x88/0x230 [ 174.565902][ T8131] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 174.571196][ T8131] ? security_socket_sendmsg+0x7c/0xa0 [ 174.576660][ T8131] ? netlink_getsockopt+0x570/0x570 [ 174.581858][ T8131] ____sys_sendmsg+0x5be/0x8f0 [ 174.586631][ T8131] ? __sys_sendmsg_sock+0x30/0x30 [ 174.591669][ T8131] ? import_iovec+0x6f/0xa0 [ 174.596177][ T8131] ___sys_sendmsg+0x236/0x2e0 [ 174.600868][ T8131] ? __sys_sendmsg+0x290/0x290 [ 174.605641][ T8131] ? trace_event_raw_event_lock+0x250/0x250 [ 174.611557][ T8131] __se_sys_sendmsg+0x1b7/0x2a0 [ 174.616407][ T8131] ? __x64_sys_sendmsg+0x80/0x80 [ 174.621345][ T8131] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 174.627345][ T8131] ? lockdep_hardirqs_on+0x94/0x140 [ 174.632632][ T8131] do_syscall_64+0x4c/0xa0 [ 174.637046][ T8131] ? clear_bhb_loop+0x30/0x80 [ 174.641717][ T8131] ? clear_bhb_loop+0x30/0x80 [ 174.646392][ T8131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 174.652287][ T8131] RIP: 0033:0x7f3d7cbc2159 [ 174.656710][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.676316][ T8131] RSP: 002b:00007f3d7ae1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.684735][ T8131] RAX: ffffffffffffffda RBX: 00007f3d7ce49fa0 RCX: 00007f3d7cbc2159 [ 174.692708][ T8131] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 174.701315][ T8131] RBP: 00007f3d7ae1a090 R08: 0000000000000000 R09: 0000000000000000 [ 174.709425][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.717405][ T8131] R13: 00007f3d7ce4a038 R14: 00007f3d7ce49fa0 R15: 00007ffd4b415078 [ 174.725395][ T8131] [ 174.801529][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.837079][ T8139] net_ratelimit: 334 callbacks suppressed [ 174.837115][ T8139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.906385][ T8144] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.847'. [ 174.991444][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.849'. [ 175.016714][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 175.215815][ T8159] device syzkaller0 entered promiscuous mode [ 175.240267][ T1112] syzkaller0: tun_net_xmit 48 [ 175.255312][ T8161] syzkaller0: create flow: hash 2576718950 index 1 [ 175.287409][ T8158] syzkaller0: delete flow: hash 2576718950 index 1 [ 175.699274][ T8182] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.855'. [ 175.786123][ T8191] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.861'. [ 175.804360][ T8191] FAULT_INJECTION: forcing a failure. [ 175.804360][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 175.836951][ T8193] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.840829][ T8191] CPU: 1 PID: 8191 Comm: syz.3.861 Not tainted syzkaller #0 [ 175.862541][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.872640][ T8191] Call Trace: [ 175.875941][ T8191] [ 175.878892][ T8191] dump_stack_lvl+0x188/0x250 [ 175.883612][ T8191] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 175.889454][ T8191] ? show_regs_print_info+0x20/0x20 [ 175.894670][ T8191] ? load_image+0x410/0x410 [ 175.899235][ T8191] should_fail+0x383/0x4b0 [ 175.903686][ T8191] should_failslab+0x5/0x20 [ 175.908202][ T8191] slab_pre_alloc_hook+0x51/0xc0 [ 175.910951][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'. [ 175.913198][ T8191] ? skb_clone+0x1bd/0x350 [ 175.926379][ T8191] kmem_cache_alloc+0x3d/0x280 [ 175.931185][ T8191] skb_clone+0x1bd/0x350 [ 175.935463][ T8191] __netlink_deliver_tap+0x3cb/0x7c0 [ 175.940831][ T8191] netlink_deliver_tap+0x16c/0x180 [ 175.945979][ T8191] netlink_sendskb+0x64/0x130 [ 175.950690][ T8191] seg6_genl_get_tunsrc+0x4c4/0x580 [ 175.955922][ T8191] genl_rcv_msg+0xd0b/0xfa0 [ 175.960472][ T8191] ? genl_bind+0x370/0x370 [ 175.964942][ T8191] ? __dev_queue_xmit+0x1b64/0x2e50 [ 175.970168][ T8191] ? verify_lock_unused+0x140/0x140 [ 175.975403][ T8191] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 175.981168][ T8191] ? perf_trace_lock+0x301/0x390 [ 175.986160][ T8191] ? seg6_genl_set_tunsrc+0x140/0x140 [ 175.991606][ T8191] netlink_rcv_skb+0x1e9/0x430 [ 175.996417][ T8191] ? genl_bind+0x370/0x370 [ 176.000865][ T8191] ? netlink_ack+0xb10/0xb10 [ 176.005508][ T8191] ? down_read+0x1aa/0x2e0 [ 176.009953][ T8191] genl_rcv+0x24/0x40 [ 176.013944][ T8191] netlink_unicast+0x78f/0x940 [ 176.018740][ T8191] netlink_sendmsg+0x8ba/0xbe0 [ 176.023527][ T8191] ? netlink_getsockopt+0x570/0x570 [ 176.028718][ T8191] ? aa_sock_msg_perm+0x94/0x150 [ 176.033664][ T8191] ? apparmor_socket_sendmsg+0x88/0x230 [ 176.039213][ T8191] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 176.044510][ T8191] ? security_socket_sendmsg+0x7c/0xa0 [ 176.049965][ T8191] ? netlink_getsockopt+0x570/0x570 [ 176.055177][ T8191] ____sys_sendmsg+0x5be/0x8f0 [ 176.059969][ T8191] ? __sys_sendmsg_sock+0x30/0x30 [ 176.065014][ T8191] ? import_iovec+0x6f/0xa0 [ 176.069530][ T8191] ___sys_sendmsg+0x236/0x2e0 [ 176.074294][ T8191] ? __sys_sendmsg+0x290/0x290 [ 176.079102][ T8191] ? trace_event_raw_event_lock+0x250/0x250 [ 176.085070][ T8191] __se_sys_sendmsg+0x1b7/0x2a0 [ 176.089936][ T8191] ? __x64_sys_sendmsg+0x80/0x80 [ 176.094869][ T8191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.100884][ T8191] ? lockdep_hardirqs_on+0x94/0x140 [ 176.106094][ T8191] do_syscall_64+0x4c/0xa0 [ 176.110508][ T8191] ? clear_bhb_loop+0x30/0x80 [ 176.115181][ T8191] ? clear_bhb_loop+0x30/0x80 [ 176.119864][ T8191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.125756][ T8191] RIP: 0033:0x7f3d7cbc2159 [ 176.130176][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.149795][ T8191] RSP: 002b:00007f3d7ae1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.158218][ T8191] RAX: ffffffffffffffda RBX: 00007f3d7ce49fa0 RCX: 00007f3d7cbc2159 [ 176.166188][ T8191] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 176.174157][ T8191] RBP: 00007f3d7ae1a090 R08: 0000000000000000 R09: 0000000000000000 [ 176.182120][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.190086][ T8191] R13: 00007f3d7ce4a038 R14: 00007f3d7ce49fa0 R15: 00007ffd4b415078 [ 176.198094][ T8191] [ 176.285980][ T8202] validate_nla: 3 callbacks suppressed [ 176.285995][ T8202] netlink: 'syz.5.865': attribute type 19 has an invalid length. [ 176.379274][ T8204] netlink: 'syz.3.867': attribute type 6 has an invalid length. [ 176.402303][ T8204] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.867'. [ 176.481785][ T8210] netlink: 'syz.5.869': attribute type 2 has an invalid length. [ 176.494937][ T8210] netlink: 'syz.5.869': attribute type 4 has an invalid length. [ 176.513442][ T8210] netlink: 132 bytes leftover after parsing attributes in process `syz.5.869'. [ 176.682941][ T8213] device syzkaller0 entered promiscuous mode [ 176.733198][ T8211] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 176.767192][ T8211] netlink: 144 bytes leftover after parsing attributes in process `syz.1.866'. [ 176.823051][ T1112] syzkaller0: tun_net_xmit 48 [ 177.178547][ T8234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 177.264471][ T8234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.392744][ T8230] netlink: 'syz.0.873': attribute type 2 has an invalid length. [ 177.402448][ T8230] netlink: 'syz.0.873': attribute type 8 has an invalid length. [ 177.770526][ T8251] FAULT_INJECTION: forcing a failure. [ 177.770526][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 177.792092][ T8251] CPU: 1 PID: 8251 Comm: syz.5.878 Not tainted syzkaller #0 [ 177.799466][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.809544][ T8251] Call Trace: [ 177.812832][ T8251] [ 177.815761][ T8251] dump_stack_lvl+0x188/0x250 [ 177.820469][ T8251] ? show_regs_print_info+0x20/0x20 [ 177.825948][ T8251] ? load_image+0x410/0x410 [ 177.830478][ T8251] ? __might_sleep+0xf0/0xf0 [ 177.835085][ T8251] ? __lock_acquire+0x7b50/0x7b50 [ 177.840145][ T8251] should_fail+0x383/0x4b0 [ 177.844584][ T8251] should_failslab+0x5/0x20 [ 177.849089][ T8251] slab_pre_alloc_hook+0x51/0xc0 [ 177.854036][ T8251] __kmalloc_node_track_caller+0x68/0x3a0 [ 177.859777][ T8251] ? netlink_ack+0x35c/0xb10 [ 177.864367][ T8251] ? __alloc_skb+0xf4/0x750 [ 177.868871][ T8251] ? netlink_ack+0x35c/0xb10 [ 177.873464][ T8251] __alloc_skb+0x22c/0x750 [ 177.877957][ T8251] netlink_ack+0x35c/0xb10 [ 177.882394][ T8251] ? netlink_dump+0xdd0/0xdd0 [ 177.887092][ T8251] netlink_rcv_skb+0x267/0x430 [ 177.891855][ T8251] ? genl_bind+0x370/0x370 [ 177.896275][ T8251] ? netlink_ack+0xb10/0xb10 [ 177.901174][ T8251] ? down_read+0x1aa/0x2e0 [ 177.905595][ T8251] genl_rcv+0x24/0x40 [ 177.909579][ T8251] netlink_unicast+0x78f/0x940 [ 177.914366][ T8251] netlink_sendmsg+0x8ba/0xbe0 [ 177.919243][ T8251] ? netlink_getsockopt+0x570/0x570 [ 177.924464][ T8251] ? aa_sock_msg_perm+0x94/0x150 [ 177.929406][ T8251] ? apparmor_socket_sendmsg+0x88/0x230 [ 177.934951][ T8251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 177.940234][ T8251] ? security_socket_sendmsg+0x7c/0xa0 [ 177.945687][ T8251] ? netlink_getsockopt+0x570/0x570 [ 177.950889][ T8251] ____sys_sendmsg+0x5be/0x8f0 [ 177.955673][ T8251] ? __sys_sendmsg_sock+0x30/0x30 [ 177.960720][ T8251] ? import_iovec+0x6f/0xa0 [ 177.965231][ T8251] ___sys_sendmsg+0x236/0x2e0 [ 177.969923][ T8251] ? __sys_sendmsg+0x290/0x290 [ 177.974712][ T8251] ? trace_event_raw_event_lock+0x250/0x250 [ 177.980661][ T8251] __se_sys_sendmsg+0x1b7/0x2a0 [ 177.985521][ T8251] ? __x64_sys_sendmsg+0x80/0x80 [ 177.990454][ T8251] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.996462][ T8251] ? lockdep_hardirqs_on+0x94/0x140 [ 178.001667][ T8251] do_syscall_64+0x4c/0xa0 [ 178.006088][ T8251] ? clear_bhb_loop+0x30/0x80 [ 178.011017][ T8251] ? clear_bhb_loop+0x30/0x80 [ 178.015702][ T8251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.021592][ T8251] RIP: 0033:0x7fcd6e99e159 [ 178.026013][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.045614][ T8251] RSP: 002b:00007fcd6cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.054026][ T8251] RAX: ffffffffffffffda RBX: 00007fcd6ec25fa0 RCX: 00007fcd6e99e159 [ 178.061994][ T8251] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 178.069958][ T8251] RBP: 00007fcd6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.078013][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.085982][ T8251] R13: 00007fcd6ec26038 R14: 00007fcd6ec25fa0 R15: 00007ffcd6bfa1d8 [ 178.094000][ T8251] [ 178.111606][ T8254] netlink: 'syz.3.879': attribute type 11 has an invalid length. [ 178.221115][ T8256] delete_channel: no stack [ 178.230162][ T8256] delete_channel: no stack [ 178.382020][ T8269] openvswitch: netlink: Key type 11249 is out of range max 29 [ 178.440240][ T8271] device syzkaller0 entered promiscuous mode [ 178.485129][ T8271] syzkaller0: create flow: hash 356495780 index 1 [ 178.502092][ T8270] syzkaller0: delete flow: hash 356495780 index 1 [ 178.619155][ T8299] FAULT_INJECTION: forcing a failure. [ 178.619155][ T8299] name failslab, interval 1, probability 0, space 0, times 0 [ 178.635936][ T8299] CPU: 0 PID: 8299 Comm: syz.5.891 Not tainted syzkaller #0 [ 178.643444][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.653507][ T8299] Call Trace: [ 178.656785][ T8299] [ 178.659711][ T8299] dump_stack_lvl+0x188/0x250 [ 178.664391][ T8299] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 178.670118][ T8299] ? show_regs_print_info+0x20/0x20 [ 178.675314][ T8299] ? load_image+0x410/0x410 [ 178.679832][ T8299] should_fail+0x383/0x4b0 [ 178.684251][ T8299] should_failslab+0x5/0x20 [ 178.688746][ T8299] slab_pre_alloc_hook+0x51/0xc0 [ 178.693676][ T8299] ? skb_clone+0x1bd/0x350 [ 178.698087][ T8299] kmem_cache_alloc+0x3d/0x280 [ 178.702860][ T8299] skb_clone+0x1bd/0x350 [ 178.707114][ T8299] __netlink_deliver_tap+0x3cb/0x7c0 [ 178.712419][ T8299] netlink_deliver_tap+0x16c/0x180 [ 178.717525][ T8299] netlink_sendskb+0x64/0x130 [ 178.722225][ T8299] netlink_ack+0x856/0xb10 [ 178.726682][ T8299] ? netlink_dump+0xdd0/0xdd0 [ 178.731395][ T8299] netlink_rcv_skb+0x267/0x430 [ 178.736167][ T8299] ? genl_bind+0x370/0x370 [ 178.740587][ T8299] ? netlink_ack+0xb10/0xb10 [ 178.745201][ T8299] ? down_read+0x1aa/0x2e0 [ 178.749720][ T8299] genl_rcv+0x24/0x40 [ 178.753694][ T8299] netlink_unicast+0x78f/0x940 [ 178.758482][ T8299] netlink_sendmsg+0x8ba/0xbe0 [ 178.763256][ T8299] ? netlink_getsockopt+0x570/0x570 [ 178.768453][ T8299] ? aa_sock_msg_perm+0x94/0x150 [ 178.773389][ T8299] ? apparmor_socket_sendmsg+0x88/0x230 [ 178.778933][ T8299] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 178.784223][ T8299] ? security_socket_sendmsg+0x7c/0xa0 [ 178.789807][ T8299] ? netlink_getsockopt+0x570/0x570 [ 178.795031][ T8299] ____sys_sendmsg+0x5be/0x8f0 [ 178.799915][ T8299] ? __sys_sendmsg_sock+0x30/0x30 [ 178.804955][ T8299] ? import_iovec+0x6f/0xa0 [ 178.809462][ T8299] ___sys_sendmsg+0x236/0x2e0 [ 178.814150][ T8299] ? __sys_sendmsg+0x290/0x290 [ 178.818931][ T8299] ? trace_event_raw_event_lock+0x250/0x250 [ 178.824876][ T8299] __se_sys_sendmsg+0x1b7/0x2a0 [ 178.829731][ T8299] ? __x64_sys_sendmsg+0x80/0x80 [ 178.834673][ T8299] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.840678][ T8299] ? lockdep_hardirqs_on+0x94/0x140 [ 178.845914][ T8299] do_syscall_64+0x4c/0xa0 [ 178.850413][ T8299] ? clear_bhb_loop+0x30/0x80 [ 178.855210][ T8299] ? clear_bhb_loop+0x30/0x80 [ 178.859931][ T8299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.865956][ T8299] RIP: 0033:0x7fcd6e99e159 [ 178.870375][ T8299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.889980][ T8299] RSP: 002b:00007fcd6cbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.898395][ T8299] RAX: ffffffffffffffda RBX: 00007fcd6ec25fa0 RCX: 00007fcd6e99e159 [ 178.906361][ T8299] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 178.914340][ T8299] RBP: 00007fcd6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 178.922304][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.930269][ T8299] R13: 00007fcd6ec26038 R14: 00007fcd6ec25fa0 R15: 00007ffcd6bfa1d8 [ 178.938264][ T8299] [ 179.095919][ T8327] netlink: 'syz.1.897': attribute type 33 has an invalid length. [ 179.196277][ T8327] netlink: 'syz.1.897': attribute type 10 has an invalid length. [ 179.507104][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.516173][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.533687][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.542375][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.677787][ T8341] device veth0_vlan left promiscuous mode [ 179.696931][ T8341] device veth0_vlan entered promiscuous mode [ 179.719091][ T8341] team0: Device veth0_vlan failed to register rx_handler [ 179.788342][ T8342] __nla_validate_parse: 10 callbacks suppressed [ 179.788364][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 180.058290][ T8382] device syzkaller0 entered promiscuous mode [ 180.087070][ T8387] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.907'. [ 180.099136][ T8382] syzkaller0: create flow: hash 3121513738 index 1 [ 180.100270][ T8389] netlink: 144300 bytes leftover after parsing attributes in process `syz.1.908'. [ 180.116287][ T8387] FAULT_INJECTION: forcing a failure. [ 180.116287][ T8387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.131467][ T8380] syzkaller0: delete flow: hash 3121513738 index 1 [ 180.141409][ T8389] netlink: 5 bytes leftover after parsing attributes in process `syz.1.908'. [ 180.154070][ T8387] CPU: 0 PID: 8387 Comm: syz.5.907 Not tainted syzkaller #0 [ 180.161390][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.171459][ T8387] Call Trace: [ 180.174746][ T8387] [ 180.177685][ T8387] dump_stack_lvl+0x188/0x250 [ 180.182377][ T8387] ? show_regs_print_info+0x20/0x20 [ 180.187590][ T8387] ? load_image+0x410/0x410 [ 180.192111][ T8387] ? __lock_acquire+0x7b50/0x7b50 [ 180.197155][ T8387] should_fail+0x383/0x4b0 [ 180.201594][ T8387] _copy_to_user+0x2e/0x130 [ 180.206111][ T8387] simple_read_from_buffer+0xe3/0x150 [ 180.211504][ T8387] proc_fail_nth_read+0x1a6/0x220 [ 180.216545][ T8387] ? proc_fault_inject_write+0x310/0x310 [ 180.222198][ T8387] ? fsnotify_perm+0x254/0x560 [ 180.227057][ T8387] ? proc_fault_inject_write+0x310/0x310 [ 180.232698][ T8387] vfs_read+0x2ff/0xd50 [ 180.236864][ T8387] ? __lock_acquire+0x7b50/0x7b50 [ 180.241905][ T8387] ? kernel_read+0x1e0/0x1e0 [ 180.246522][ T8387] ? mutex_lock_nested+0x17/0x20 [ 180.251475][ T8387] ? __fdget_pos+0x2bf/0x370 [ 180.256071][ T8387] ? ksys_read+0x70/0x260 [ 180.260413][ T8387] ksys_read+0x153/0x260 [ 180.264664][ T8387] ? vfs_write+0xd70/0xd70 [ 180.269087][ T8387] ? lockdep_hardirqs_on+0x94/0x140 [ 180.274296][ T8387] do_syscall_64+0x4c/0xa0 [ 180.278711][ T8387] ? clear_bhb_loop+0x30/0x80 [ 180.283389][ T8387] ? clear_bhb_loop+0x30/0x80 [ 180.288076][ T8387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.293985][ T8387] RIP: 0033:0x7fcd6e95e98e [ 180.298406][ T8387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.318026][ T8387] RSP: 002b:00007fcd6cbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 180.326453][ T8387] RAX: ffffffffffffffda RBX: 00007fcd6cbf66c0 RCX: 00007fcd6e95e98e [ 180.334440][ T8387] RDX: 000000000000000f RSI: 00007fcd6cbf60a0 RDI: 0000000000000005 [ 180.342419][ T8387] RBP: 00007fcd6cbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.350400][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.358383][ T8387] R13: 00007fcd6ec26038 R14: 00007fcd6ec25fa0 R15: 00007ffcd6bfa1d8 [ 180.366378][ T8387] [ 181.040505][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 181.373691][ T8435] device syzkaller0 entered promiscuous mode [ 181.397166][ T8442] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.922'. [ 181.436442][ T8435] syzkaller0: create flow: hash 3061356236 index 1 [ 181.473487][ T8433] syzkaller0: delete flow: hash 3061356236 index 1 [ 181.572890][ T8456] delete_channel: no stack [ 181.580977][ T8456] delete_channel: no stack [ 181.772815][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 181.846037][ T8476] validate_nla: 1 callbacks suppressed [ 181.846056][ T8476] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 181.881752][ T8476] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.931'. [ 181.919523][ T8476] netlink: 9 bytes leftover after parsing attributes in process `syz.0.931'. [ 182.259335][ T8495] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 182.286674][ T8495] team0: Device nlmon0 is of different type [ 182.391818][ T8499] device syzkaller0 entered promiscuous mode [ 182.418841][ T8499] syzkaller0: create flow: hash 3758418106 index 1 [ 182.480741][ T8498] syzkaller0: delete flow: hash 3758418106 index 1 [ 182.511223][ T8508] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 182.519115][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.942'. [ 182.529853][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.546223][ T8508] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 182.565006][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.584105][ T8513] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 182.631307][ T8508] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 182.658042][ T8513] netlink: 'syz.1.943': attribute type 4 has an invalid length. [ 182.667275][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.723555][ T8526] device syzkaller0 entered promiscuous mode [ 182.730710][ T8515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.738047][ T8515] IPv6: NLM_F_CREATE should be set when creating new route [ 182.750573][ T8516] netlink: 'syz.3.944': attribute type 4 has an invalid length. [ 182.782111][ T8508] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 182.792108][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.858957][ T8508] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 182.872080][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.889021][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.914740][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 182.973726][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 183.033808][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 183.075737][ T8508] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 183.213531][ T8553] device syzkaller0 entered promiscuous mode [ 183.228648][ T8553] syzkaller0: create flow: hash 1381471840 index 1 [ 183.339928][ T8551] syzkaller0: delete flow: hash 1381471840 index 1 [ 183.371753][ T8558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.545099][ T8563] device wlan1 entered promiscuous mode [ 183.983421][ T8606] device syzkaller0 entered promiscuous mode [ 184.088909][ T8606] syzkaller0: create flow: hash 2128074447 index 1 [ 184.106856][ T8611] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.118029][ T8611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.125324][ T8611] IPv6: NLM_F_CREATE should be set when creating new route [ 184.132618][ T8611] IPv6: NLM_F_CREATE should be set when creating new route [ 184.157898][ T8605] syzkaller0: delete flow: hash 2128074447 index 1 [ 184.659786][ T8653] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 184.707065][ T8653] CPU: 1 PID: 8653 Comm: syz.0.985 Not tainted syzkaller #0 [ 184.714403][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.724479][ T8653] Call Trace: [ 184.727811][ T8653] [ 184.730753][ T8653] dump_stack_lvl+0x188/0x250 [ 184.735446][ T8653] ? show_regs_print_info+0x20/0x20 [ 184.740795][ T8653] ? load_image+0x410/0x410 [ 184.745337][ T8653] sysfs_warn_dup+0x8a/0xa0 [ 184.749865][ T8653] sysfs_do_create_link_sd+0xc0/0x110 [ 184.755261][ T8653] device_add+0x83b/0x1050 [ 184.759708][ T8653] wiphy_register+0x1e74/0x2c40 [ 184.764613][ T8653] ? cfg80211_event_work+0x40/0x40 [ 184.769761][ T8653] ? minstrel_ht_alloc+0x807/0x980 [ 184.774896][ T8653] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 184.780990][ T8653] ieee80211_register_hw+0x2a03/0x3a60 [ 184.786489][ T8653] ? ieee80211_register_hw+0xb21/0x3a60 [ 184.792159][ T8653] ? ieee80211_tasklet_handler+0x20/0x20 [ 184.797820][ T8653] ? rcu_is_watching+0x11/0xa0 [ 184.802605][ T8653] ? hrtimer_init+0x10c/0x220 [ 184.807305][ T8653] mac80211_hwsim_new_radio+0x209d/0x4050 [ 184.813069][ T8653] hwsim_new_radio_nl+0xa7d/0xc50 [ 184.818128][ T8653] genl_rcv_msg+0xd0b/0xfa0 [ 184.822667][ T8653] ? genl_bind+0x370/0x370 [ 184.827130][ T8653] ? verify_lock_unused+0x140/0x140 [ 184.832357][ T8653] ? verify_lock_unused+0x140/0x140 [ 184.837753][ T8653] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 184.843938][ T8653] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 184.850308][ T8653] netlink_rcv_skb+0x1e9/0x430 [ 184.855101][ T8653] ? genl_bind+0x370/0x370 [ 184.859550][ T8653] ? netlink_ack+0xb10/0xb10 [ 184.864174][ T8653] ? down_read+0x1aa/0x2e0 [ 184.868615][ T8653] genl_rcv+0x24/0x40 [ 184.872612][ T8653] netlink_unicast+0x78f/0x940 [ 184.877404][ T8653] netlink_sendmsg+0x8ba/0xbe0 [ 184.882193][ T8653] ? netlink_getsockopt+0x570/0x570 [ 184.887411][ T8653] ? aa_sock_msg_perm+0x94/0x150 [ 184.892398][ T8653] ? apparmor_socket_sendmsg+0x88/0x230 [ 184.897962][ T8653] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 184.903269][ T8653] ? security_socket_sendmsg+0x7c/0xa0 [ 184.908745][ T8653] ? netlink_getsockopt+0x570/0x570 [ 184.913962][ T8653] ____sys_sendmsg+0x5be/0x8f0 [ 184.918761][ T8653] ? __sys_sendmsg_sock+0x30/0x30 [ 184.923814][ T8653] ? import_iovec+0x6f/0xa0 [ 184.928407][ T8653] ___sys_sendmsg+0x236/0x2e0 [ 184.933120][ T8653] ? __sys_sendmsg+0x290/0x290 [ 184.937914][ T8653] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 184.944197][ T8653] __se_sys_sendmsg+0x1b7/0x2a0 [ 184.949082][ T8653] ? __x64_sys_sendmsg+0x80/0x80 [ 184.954052][ T8653] ? syscall_enter_from_user_mode+0x2a/0x70 [ 184.959985][ T8653] do_syscall_64+0x4c/0xa0 [ 184.964425][ T8653] ? clear_bhb_loop+0x30/0x80 [ 184.969116][ T8653] ? clear_bhb_loop+0x30/0x80 [ 184.973822][ T8653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.979744][ T8653] RIP: 0033:0x7fa0a856b159 [ 184.984181][ T8653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.003814][ T8653] RSP: 002b:00007fa0a67c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.012263][ T8653] RAX: ffffffffffffffda RBX: 00007fa0a87f2fa0 RCX: 00007fa0a856b159 [ 185.020260][ T8653] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 185.028255][ T8653] RBP: 00007fa0a860206b R08: 0000000000000000 R09: 0000000000000000 [ 185.036255][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.045367][ T8653] R13: 00007fa0a87f3038 R14: 00007fa0a87f2fa0 R15: 00007ffc6d045898 [ 185.053438][ T8653] [ 185.306464][ T8660] device syzkaller0 entered promiscuous mode [ 185.423183][ T8660] syzkaller0: create flow: hash 3108042188 index 1 [ 185.477755][ T8659] syzkaller0: delete flow: hash 3108042188 index 1 [ 185.698561][ T8678] __nla_validate_parse: 49 callbacks suppressed [ 185.698582][ T8678] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.993'. [ 185.820214][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 185.930057][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.953820][ T8693] syz.0.1000[8693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.953845][ T8688] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.955047][ T8693] syz.0.1000[8693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.992862][ T8699] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 186.087313][ T8699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.141873][ T8699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.175138][ T8699] bond0 (unregistering): (slave team0): Releasing backup interface [ 186.192499][ T8699] bond0 (unregistering): Released all slaves [ 186.486089][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1007'. [ 186.532976][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1007'. [ 186.574247][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1007'. [ 186.702499][ T8717] device syzkaller0 entered promiscuous mode [ 186.849797][ T8727] device syzkaller0 entered promiscuous mode [ 187.015851][ T8737] device syzkaller0 entered promiscuous mode [ 187.084787][ T8092] Bluetooth: hci4: command 0x0406 tx timeout [ 187.090857][ T8092] Bluetooth: hci2: command 0x0406 tx timeout [ 187.313766][ T8750] syz.3.1013[8750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.315534][ T8750] syz.3.1013[8750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.348297][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 187.409385][ T8752] validate_nla: 37 callbacks suppressed [ 187.409422][ T8752] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 187.519082][ T8752] team0: Device wg1 is of different type [ 187.663252][ T8751] delete_channel: no stack [ 187.760290][ T8786] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1025'. [ 187.797182][ T8784] device syzkaller0 entered promiscuous mode [ 187.810535][ T8791] syzkaller0: create flow: hash 1534504800 index 1 [ 187.826263][ T8783] syzkaller0: delete flow: hash 1534504800 index 1 [ 187.839038][ T8790] netlink: 'syz.0.1026': attribute type 1 has an invalid length. [ 187.870190][ T8790] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1026'. [ 188.001497][ T8794] netlink: 'syz.0.1026': attribute type 4 has an invalid length. [ 188.014328][ T8794] netlink: 'syz.0.1026': attribute type 16 has an invalid length. [ 188.022860][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1026'. [ 188.173709][ T8799] syz.2.1027[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.173816][ T8799] syz.2.1027[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.488540][ T8805] device syzkaller0 entered promiscuous mode [ 188.509547][ T8809] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 188.676338][ T8810] netlink: 'syz.0.1030': attribute type 15 has an invalid length. [ 188.696471][ T8810] netlink: 'syz.0.1030': attribute type 7 has an invalid length. [ 188.812133][ T8826] netlink: 'syz.2.1039': attribute type 39 has an invalid length. [ 188.886314][ T8824] device syzkaller0 entered promiscuous mode [ 188.924801][ T8824] syzkaller0: create flow: hash 3354109162 index 1 [ 188.958113][ T8829] netlink: 'syz.5.1040': attribute type 1 has an invalid length. [ 188.967300][ T8823] syzkaller0: delete flow: hash 3354109162 index 1 [ 189.076587][ T8834] netlink: 'syz.5.1040': attribute type 4 has an invalid length. [ 189.213249][ T8851] syz.1.1043[8851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.213537][ T8851] syz.1.1043[8851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.404988][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 189.441850][ T8874] net_ratelimit: 24 callbacks suppressed [ 189.441866][ T8874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.755544][ T8881] device syzkaller0 entered promiscuous mode [ 189.770744][ T8881] syzkaller0: create flow: hash 4017264982 index 1 [ 189.792663][ T8880] syzkaller0: delete flow: hash 4017264982 index 1 [ 189.872737][ T8883] cgroup: fork rejected by pids controller in /syz5 [ 190.664708][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.830456][ T8901] tun0: tun_chr_ioctl cmd 1074025677 [ 190.884435][ T8901] tun0: linktype set to 776 [ 190.898750][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.994953][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.109909][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.605468][ T8919] __nla_validate_parse: 14 callbacks suppressed [ 191.605486][ T8919] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.1067'. [ 191.640634][ T8930] device syzkaller0 entered promiscuous mode [ 191.671361][ T8930] syzkaller0: create flow: hash 2726039665 index 1 [ 191.674118][ T8912] chnl_net:caif_netlink_parms(): no params data found [ 191.880629][ T8929] syzkaller0: delete flow: hash 2726039665 index 1 [ 192.014523][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.034662][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.050699][ T8912] device bridge_slave_0 entered promiscuous mode [ 192.076856][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.084145][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.092391][ T8912] device bridge_slave_1 entered promiscuous mode [ 192.179044][ T8995] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1073'. [ 192.318685][ T9002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1073'. [ 193.244216][ T8087] Bluetooth: hci3: command 0x0409 tx timeout [ 195.142928][ T8912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.146486][ T9011] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1075'. [ 195.179950][ T8912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.240646][ T9017] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1076'. [ 195.252793][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.252872][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.316657][ T8912] team0: Port device team_slave_0 added [ 195.334194][ T8971] Bluetooth: hci3: command 0x041b tx timeout [ 195.334510][ T8912] team0: Port device team_slave_1 added [ 195.458651][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.475691][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.530822][ T8912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.611779][ T8912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.619295][ T8912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.676430][ T8912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.812115][ T8912] device hsr_slave_0 entered promiscuous mode [ 195.836273][ T8912] device hsr_slave_1 entered promiscuous mode [ 195.852059][ T8912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.867580][ T8912] Cannot create hsr debugfs directory [ 196.247479][ T9049] device syzkaller0 entered promiscuous mode [ 196.349442][ T8092] syzkaller0: tun_net_xmit 48 [ 196.676802][ T144] device hsr_slave_0 left promiscuous mode [ 196.690581][ T144] device hsr_slave_1 left promiscuous mode [ 196.716978][ T144] device bridge_slave_1 left promiscuous mode [ 196.723235][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.790299][ T144] device bridge_slave_0 left promiscuous mode [ 196.804169][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.828418][ T144] device veth1_macvtap left promiscuous mode [ 196.844030][ T144] device veth0_macvtap left promiscuous mode [ 196.850239][ T144] device veth1_vlan left promiscuous mode [ 196.864033][ T144] device veth0_vlan left promiscuous mode [ 197.100702][ T144] team0 (unregistering): Port device geneve1 removed [ 197.292509][ T144] team0 (unregistering): Port device team_slave_1 removed [ 197.331921][ T144] team0 (unregistering): Port device team_slave_0 removed [ 197.363646][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.404369][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.414239][ T8967] Bluetooth: hci3: command 0x040f tx timeout [ 197.486244][ T144] bond0 (unregistering): Released all slaves [ 197.972668][ T8912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.984916][ T8912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.996676][ T8912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.007392][ T8912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.211786][ T9097] validate_nla: 18 callbacks suppressed [ 198.211819][ T9097] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 198.218153][ T9094] device syzkaller0 entered promiscuous mode [ 198.254728][ T9097] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1085'. [ 198.296261][ T9099] syzkaller0: create flow: hash 1606537059 index 1 [ 198.296917][ T7529] syzkaller0: tun_net_xmit 48 [ 198.353498][ T8912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.369717][ T9093] syzkaller0: delete flow: hash 1606537059 index 1 [ 198.516995][ T9102] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 198.536730][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.556517][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.574250][ T9102] netlink: 'syz.1.1085': attribute type 16 has an invalid length. [ 198.577559][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.582109][ T9102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1085'. [ 198.622455][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.668881][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.714184][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.721366][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.788187][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.813513][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.828621][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.850521][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.857770][ T5256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.890888][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.946255][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.965829][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.014229][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.048885][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.086635][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.127071][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.144697][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.164279][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.219843][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.235911][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.264916][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.494218][ T8966] Bluetooth: hci3: command 0x0419 tx timeout [ 199.595096][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.610863][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.651688][ T8912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.836490][ T9178] device syzkaller0 entered promiscuous mode [ 199.862739][ T9178] syzkaller0: tun_net_xmit 1280 [ 199.893855][ T9178] syzkaller0: create flow: hash 1606537059 index 1 [ 199.925605][ T9177] syzkaller0: delete flow: hash 1606537059 index 1 [ 200.078624][ T9196] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 200.212624][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.236134][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.304754][ T9205] netlink: 'syz.2.1104': attribute type 10 has an invalid length. [ 200.307548][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.312883][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1104'. [ 200.333735][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.347162][ T8912] device veth0_vlan entered promiscuous mode [ 200.359761][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.394895][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.420617][ T8912] device veth1_vlan entered promiscuous mode [ 200.440625][ T9205] netlink: 'syz.2.1104': attribute type 10 has an invalid length. [ 200.465006][ T9205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1104'. [ 200.485161][ T9207] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1104'. [ 200.564851][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.583155][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.631965][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.652386][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.679107][ T8912] device veth0_macvtap entered promiscuous mode [ 200.692508][ T9221] netlink: 60759 bytes leftover after parsing attributes in process `syz.3.1108'. [ 200.703849][ T9221] netlink: 102 bytes leftover after parsing attributes in process `syz.3.1108'. [ 200.732736][ T8912] device veth1_macvtap entered promiscuous mode [ 200.812318][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.849769][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.870540][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.909835][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.927774][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.961791][ T8912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.995442][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.008998][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.038893][ T8912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.048252][ T8912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.061611][ T9239] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.070385][ T8912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.080940][ T8912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.173438][ T9239] netlink: 'syz.1.1112': attribute type 11 has an invalid length. [ 201.184631][ T9239] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1112'. [ 201.300111][ T9251] netlink: 'syz.0.1114': attribute type 27 has an invalid length. [ 201.329564][ T9251] netlink: 'syz.0.1114': attribute type 3 has an invalid length. [ 201.379885][ T5258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.404670][ T5258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.429123][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.536059][ T9259] device syzkaller0 entered promiscuous mode [ 201.657410][ T5238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.685968][ T5238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.811327][ T9260] device syzkaller0 entered promiscuous mode [ 201.844746][ T5238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.868458][ T9254] syzkaller0: delete flow: hash 1606537059 index 1 [ 202.000421][ T9280] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.1064'. [ 202.392763][ T9288] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 202.500514][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.523369][ T9288] bond0: (slave team0): Enslaving as an active interface with an up link [ 202.648232][ T9294] device syzkaller0 entered promiscuous mode [ 202.752827][ T9309] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.783480][ T9309] device syzkaller0 entered promiscuous mode [ 202.858820][ T9315] netlink: 'syz.5.1127': attribute type 11 has an invalid length. [ 202.897968][ T9293] syzkaller0: delete flow: hash 1606537059 index 1 [ 203.006508][ T9324] tc_dump_action: action bad kind [ 203.341245][ T144] team0: Port device wlan1 removed [ 203.442721][ T9348] netlink: 'syz.2.1135': attribute type 10 has an invalid length. [ 203.465913][ T9354] __nla_validate_parse: 5 callbacks suppressed [ 203.465932][ T9354] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1138'. [ 204.051350][ T9351] netlink: 'syz.0.1137': attribute type 25 has an invalid length. [ 204.072902][ T9351] netlink: 'syz.0.1137': attribute type 9 has an invalid length. [ 204.081848][ T9351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1137'. [ 204.101249][ T9365] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1150'. [ 204.156024][ T9359] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 204.231890][ T144] device hsr_slave_0 left promiscuous mode [ 204.246047][ T144] device hsr_slave_1 left promiscuous mode [ 204.246749][ T9370] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1141'. [ 204.261739][ T144] device bridge_slave_1 left promiscuous mode [ 204.271655][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.281268][ T144] device bridge_slave_0 left promiscuous mode [ 204.289446][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.304382][ T144] device veth1_macvtap left promiscuous mode [ 204.310891][ T144] device veth0_macvtap left promiscuous mode [ 204.319264][ T144] device veth1_vlan left promiscuous mode [ 204.325590][ T144] device veth0_vlan left promiscuous mode [ 204.407254][ T9370] netlink: 'syz.0.1141': attribute type 11 has an invalid length. [ 204.416143][ T9370] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1141'. [ 204.437531][ T9373] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 204.456040][ T9373] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1142'. [ 204.539120][ T144] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 204.591774][ T144] team0 (unregistering): Port device team_slave_1 removed [ 204.605463][ T144] team0 (unregistering): Port device team_slave_0 removed [ 204.620945][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.637944][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.700723][ T144] bond0 (unregistering): Released all slaves [ 204.750128][ T9371] netlink: 'syz.5.1140': attribute type 10 has an invalid length. [ 204.776415][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.785187][ T9371] bond0: (slave team0): Enslaving as an active interface with an up link [ 204.897353][ T9377] device syzkaller0 entered promiscuous mode [ 204.910304][ T9377] syzkaller0: create flow: hash 1606537059 index 1 [ 204.950331][ T8969] syzkaller0: tun_net_xmit 48 [ 204.975508][ T9376] syzkaller0: delete flow: hash 1606537059 index 1 [ 205.114722][ T9390] netlink: 189104 bytes leftover after parsing attributes in process `syz.3.1149'. [ 205.162503][ T9401] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 205.188643][ T9401] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1161'. [ 205.190366][ T9388] device syzkaller0 entered promiscuous mode [ 205.212754][ T9410] netlink: 'syz.1.1161': attribute type 9 has an invalid length. [ 205.254049][ T9410] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1161'. [ 205.439960][ T9401] netlink: 'syz.1.1161': attribute type 9 has an invalid length. [ 205.469299][ T9401] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1161'. [ 205.632246][ T9400] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 205.953626][ T9427] netlink: 'syz.5.1155': attribute type 10 has an invalid length. [ 206.016039][ T9425] netlink: 'syz.3.1154': attribute type 11 has an invalid length. [ 206.769053][ T9457] device syzkaller0 entered promiscuous mode [ 207.403852][ T9476] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 208.473825][ T9501] validate_nla: 2 callbacks suppressed [ 208.473843][ T9501] netlink: 'syz.3.1178': attribute type 9 has an invalid length. [ 208.505128][ T9501] __nla_validate_parse: 5 callbacks suppressed [ 208.505143][ T9501] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1178'. [ 208.652326][ T9519] device syzkaller0 entered promiscuous mode [ 208.662696][ T9518] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 209.091327][ T9531] device syzkaller0 entered promiscuous mode [ 209.184512][ T9532] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1187'. [ 209.402735][ T9547] netlink: 3554 bytes leftover after parsing attributes in process `syz.5.1192'. [ 209.609133][ T9543] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1188'. [ 209.709647][ T9543] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 209.913475][ T9574] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1196'. [ 210.188386][ T9588] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.1201'. [ 210.223536][ T9585] device syzkaller0 entered promiscuous mode [ 210.502787][ T1112] syzkaller0: tun_net_xmit 48 [ 210.599264][ T9602] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1214'. [ 210.765986][ T9606] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.1204'. [ 211.079839][ T9609] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1205'. [ 211.458314][ T9640] netlink: set zone limit has 8 unknown bytes [ 211.619982][ T9651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 211.783057][ T9654] device syzkaller0 entered promiscuous mode [ 211.871531][ T9661] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1215'. [ 212.102726][ T8967] syzkaller0: tun_net_xmit 48 [ 212.703558][ T9686] device wlan1 entered promiscuous mode [ 213.029646][ T9704] device syzkaller0 entered promiscuous mode [ 213.071875][ T9704] syzkaller0: tun_net_xmit 1280 [ 213.084412][ T9704] syzkaller0: create flow: hash 1606537059 index 1 [ 213.157112][ T9707] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 213.183179][ T9702] syzkaller0: delete flow: hash 1606537059 index 1 [ 213.915177][ T9735] __nla_validate_parse: 7 callbacks suppressed [ 213.915196][ T9735] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1235'. [ 214.042896][ T9740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.050210][ T9740] IPv6: NLM_F_CREATE should be set when creating new route [ 214.057537][ T9740] IPv6: NLM_F_CREATE should be set when creating new route [ 214.064819][ T9740] IPv6: NLM_F_CREATE should be set when creating new route [ 214.480460][ T9755] device syzkaller0 entered promiscuous mode [ 214.526503][ T9755] syzkaller0: tun_net_xmit 1280 [ 214.540146][ T9755] syzkaller0: create flow: hash 1606537059 index 1 [ 214.629908][ T9753] syzkaller0: delete flow: hash 1606537059 index 1 [ 233.195511][ T8969] Bluetooth: hci1: command 0x0406 tx timeout [ 320.093960][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 320.101177][ C0] rcu: 1-...!: (1 ticks this GP) idle=f11/1/0x4000000000000002 softirq=21837/21837 fqs=0 [ 320.112586][ C0] (detected by 0, t=10502 jiffies, g=29265, q=374) [ 320.119208][ C0] Sending NMI from CPU 0 to CPUs 1: [ 320.124439][ C1] NMI backtrace for cpu 1 [ 320.124456][ C1] CPU: 1 PID: 9773 Comm: syz.1.1245 Not tainted syzkaller #0 [ 320.124515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.124524][ C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 320.124643][ C1] Code: e9 a5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 a5 02 00 00 48 89 c4 48 89 e7 e8 aa 08 e1 ff e9 85 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 85 02 00 00 48 89 c4 48 89 e7 e8 7a 0d e1 ff [ 320.124659][ C1] RSP: 0018:ffffc90000dd0758 EFLAGS: 00000006 [ 320.124673][ C1] RAX: 32ed1f83af41f400 RBX: 1ffff920001ba0f4 RCX: 32ed1f83af41f400 [ 320.124684][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 320.124704][ C1] RBP: ffffc90000dd0860 R08: ffffffff901f11c7 R09: 1ffffffff203e238 [ 320.124714][ C1] R10: dffffc0000000000 R11: fffffbfff203e239 R12: ffffffff8c323400 [ 320.124725][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 320.124735][ C1] FS: 000055556fdb6500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 320.124748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.124758][ C1] CR2: 0000001b31c13ff8 CR3: 000000005737e000 CR4: 00000000003506e0 [ 320.124772][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.124781][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 320.124789][ C1] Call Trace: [ 320.124812][ C1] [ 320.124831][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 320.124936][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 42 0b 9d 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 320.124949][ C1] RSP: 0018:ffffc90000dd0780 EFLAGS: 00000206 [ 320.124970][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 320.124992][ C1] ? nf_hook+0x360/0x360 [ 320.125021][ C1] ? ip6_mtu+0x2fb/0x3d0 [ 320.125037][ C1] ? ip6_finish_output+0x627/0x790 [ 320.125057][ C1] __rcu_read_unlock+0x78/0xd0 [ 320.125073][ C1] ndisc_send_skb+0xd3b/0x1410 [ 320.125099][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 320.125116][ C1] ? rcu_lock_release+0x20/0x20 [ 320.125141][ C1] ? ndisc_send_rs+0x524/0x700 [ 320.125162][ C1] addrconf_rs_timer+0x367/0x640 [ 320.125182][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 320.125204][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 320.125227][ C1] call_timer_fn+0x17b/0x540 [ 320.125244][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 320.125261][ C1] ? __run_timers+0x810/0x810 [ 320.125281][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.125296][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.125310][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 320.125345][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 320.125362][ C1] __run_timers+0x56c/0x810 [ 320.125378][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 320.125422][ C1] ? detach_timer+0x2b0/0x2b0 [ 320.125436][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.125477][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 320.125494][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 320.125510][ C1] ? handle_softirqs+0x19f/0x830 [ 320.125546][ C1] run_timer_softirq+0x63/0xf0 [ 320.125563][ C1] handle_softirqs+0x336/0x830 [ 320.125581][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 320.125598][ C1] ? do_softirq+0x210/0x210 [ 320.125612][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 320.125630][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 320.125647][ C1] __irq_exit_rcu+0x13b/0x230 [ 320.125661][ C1] ? irq_exit_rcu+0x20/0x20 [ 320.125683][ C1] irq_exit_rcu+0x5/0x20 [ 320.125694][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 320.125713][ C1] [ 320.125716][ C1] [ 320.125741][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 320.125758][ C1] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 320.125773][ C1] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 0f 1f 44 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 320.125786][ C1] RSP: 0018:ffffc900043df7b8 EFLAGS: 00000282 [ 320.125803][ C1] RAX: 32ed1f83af41f400 RBX: ffff88804b059dc0 RCX: 32ed1f83af41f400 [ 320.125814][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 320.125825][ C1] RBP: 1ffff11017227613 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 320.125836][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff110172275c1 [ 320.125846][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 320.125872][ C1] finish_task_switch+0x12f/0x650 [ 320.125894][ C1] __schedule+0x11cb/0x4350 [ 320.125914][ C1] ? rcu_nmi_exit+0x6f/0xf0 [ 320.125932][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.125952][ C1] ? lock_chain_count+0x20/0x20 [ 320.125973][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 320.125989][ C1] ? release_firmware_map_entry+0x190/0x190 [ 320.126007][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.126022][ C1] ? _raw_spin_unlock+0x40/0x40 [ 320.126041][ C1] schedule+0x11b/0x1e0 [ 320.126058][ C1] futex_wait_queue_me+0x22b/0x440 [ 320.126080][ C1] futex_wait+0x256/0x680 [ 320.126095][ C1] ? verify_lock_unused+0x140/0x140 [ 320.126116][ C1] ? do_futex+0x12b0/0x12b0 [ 320.126133][ C1] ? __remove_hrtimer+0x3a0/0x3a0 [ 320.126160][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 320.126179][ C1] do_futex+0xdc2/0x12b0 [ 320.126199][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 320.126219][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 320.126235][ C1] ? ktime_get+0x7b/0x270 [ 320.126246][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 320.126261][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 320.126277][ C1] ? futex_exit_release+0x1c0/0x1c0 [ 320.126293][ C1] ? get_timespec64+0x116/0x1b0 [ 320.126307][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 320.126325][ C1] ? ktime_get+0x247/0x270 [ 320.126339][ C1] __se_sys_futex+0x389/0x420 [ 320.126359][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 320.126380][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 320.126397][ C1] do_syscall_64+0x4c/0xa0 [ 320.126410][ C1] ? clear_bhb_loop+0x30/0x80 [ 320.126424][ C1] ? clear_bhb_loop+0x30/0x80 [ 320.126440][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.126456][ C1] RIP: 0033:0x7fb366d3f159 [ 320.126472][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.126482][ C1] RSP: 002b:00007ffdc0b23118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 320.126496][ C1] RAX: ffffffffffffffda RBX: 0000000000034804 RCX: 00007fb366d3f159 [ 320.126507][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb366fc709c [ 320.126515][ C1] RBP: 0000000000000032 R08: 0002397d2df4033c R09: 0000000000000000 [ 320.126525][ C1] R10: 00007ffdc0b23220 R11: 0000000000000246 R12: 00007ffdc0b23240 [ 320.126534][ C1] R13: 00007fb366fc709c R14: 0000000000034836 R15: 00007ffdc0b23220 [ 320.126556][ C1] [ 320.127447][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g29265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 320.815750][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=16514 [ 320.823638][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g29265 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 320.835007][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 320.844969][ C0] rcu: RCU grace-period kthread stack dump: [ 320.850861][ C0] task:rcu_preempt state:I stack:27504 pid: 15 ppid: 2 flags:0x00004000 [ 320.860153][ C0] Call Trace: [ 320.863472][ C0] [ 320.866409][ C0] __schedule+0x11c3/0x4350 [ 320.870932][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 320.876830][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 320.882062][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.887953][ C0] ? _raw_spin_unlock+0x40/0x40 [ 320.892802][ C0] ? rcu_is_watching+0x11/0xa0 [ 320.897566][ C0] ? release_firmware_map_entry+0x190/0x190 [ 320.903471][ C0] schedule+0x11b/0x1e0 [ 320.907636][ C0] schedule_timeout+0x184/0x2d0 [ 320.912485][ C0] ? console_conditional_schedule+0x40/0x40 [ 320.918378][ C0] ? update_process_times+0x200/0x200 [ 320.923760][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 320.929315][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 320.934165][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.939395][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 320.944075][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 320.948850][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.954064][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 320.959280][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 320.964491][ C0] rcu_gp_kthread+0x9a/0x370 [ 320.969094][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.974219][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 320.980122][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 320.985151][ C0] kthread+0x42e/0x520 [ 320.989244][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 320.994353][ C0] ? kthread_blkcg+0xd0/0xd0 [ 320.998940][ C0] ret_from_fork+0x1f/0x30 [ 321.003370][ C0] [ 321.006384][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 321.012703][ C0] Sending NMI from CPU 0 to CPUs 1: [ 321.017905][ C1] NMI backtrace for cpu 1 [ 321.017913][ C1] CPU: 1 PID: 9773 Comm: syz.1.1245 Not tainted syzkaller #0 [ 321.017927][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 321.017935][ C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 321.017955][ C1] Code: e9 a5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 a5 02 00 00 48 89 c4 48 89 e7 e8 aa 08 e1 ff e9 85 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 85 02 00 00 48 89 c4 48 89 e7 e8 7a 0d e1 ff [ 321.017967][ C1] RSP: 0018:ffffc90000dd0758 EFLAGS: 00000006 [ 321.017980][ C1] RAX: 32ed1f83af41f400 RBX: 1ffff920001ba0f4 RCX: 32ed1f83af41f400 [ 321.017991][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 321.018002][ C1] RBP: ffffc90000dd0860 R08: ffffffff901f11c7 R09: 1ffffffff203e238 [ 321.018013][ C1] R10: dffffc0000000000 R11: fffffbfff203e239 R12: ffffffff8c323400 [ 321.018023][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000002 [ 321.018033][ C1] FS: 000055556fdb6500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 321.018046][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.018056][ C1] CR2: 0000001b31c13ff8 CR3: 000000005737e000 CR4: 00000000003506e0 [ 321.018069][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.018078][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 321.018087][ C1] Call Trace: [ 321.018093][ C1] [ 321.018098][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 321.018113][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 42 0b 9d 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 321.018125][ C1] RSP: 0018:ffffc90000dd0780 EFLAGS: 00000206 [ 321.018142][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 321.018158][ C1] ? nf_hook+0x360/0x360 [ 321.018170][ C1] ? ip6_mtu+0x2fb/0x3d0 [ 321.018185][ C1] ? ip6_finish_output+0x627/0x790 [ 321.018203][ C1] __rcu_read_unlock+0x78/0xd0 [ 321.018219][ C1] ndisc_send_skb+0xd3b/0x1410 [ 321.018245][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 321.018262][ C1] ? rcu_lock_release+0x20/0x20 [ 321.018292][ C1] ? ndisc_send_rs+0x524/0x700 [ 321.018313][ C1] addrconf_rs_timer+0x367/0x640 [ 321.018332][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 321.018353][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 321.018369][ C1] call_timer_fn+0x17b/0x540 [ 321.018386][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 321.018402][ C1] ? __run_timers+0x810/0x810 [ 321.018422][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.018437][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 321.018451][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 321.018467][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 321.018484][ C1] __run_timers+0x56c/0x810 [ 321.018499][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 321.018524][ C1] ? detach_timer+0x2b0/0x2b0 [ 321.018539][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.018560][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 321.018575][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 321.018590][ C1] ? handle_softirqs+0x19f/0x830 [ 321.018606][ C1] run_timer_softirq+0x63/0xf0 [ 321.018623][ C1] handle_softirqs+0x336/0x830 [ 321.018640][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 321.018657][ C1] ? do_softirq+0x210/0x210 [ 321.018670][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 321.018688][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 321.018705][ C1] __irq_exit_rcu+0x13b/0x230 [ 321.018719][ C1] ? irq_exit_rcu+0x20/0x20 [ 321.018740][ C1] irq_exit_rcu+0x5/0x20 [ 321.018752][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 321.018769][ C1] [ 321.018773][ C1] [ 321.018778][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 321.018795][ C1] RIP: 0010:finish_lock_switch+0x12f/0x290 [ 321.018809][ C1] Code: 83 c7 18 be ff ff ff ff e8 8e da 6c 08 85 c0 74 46 4d 85 ff 75 62 0f 1f 44 00 00 48 89 df e8 78 4a 76 08 e8 93 e3 2a 00 fb 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 48 89 df e8 2f 0e fe ff 43 80 3c 2c [ 321.018821][ C1] RSP: 0018:ffffc900043df7b8 EFLAGS: 00000282 [ 321.018833][ C1] RAX: 32ed1f83af41f400 RBX: ffff88804b059dc0 RCX: 32ed1f83af41f400 [ 321.018843][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a48c0 [ 321.018854][ C1] RBP: 1ffff11017227613 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 321.018864][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff110172275c1 [ 321.018875][ C1] R13: dffffc0000000000 R14: ffff8880b913ae08 R15: 0000000000000000 [ 321.018900][ C1] finish_task_switch+0x12f/0x650 [ 321.018922][ C1] __schedule+0x11cb/0x4350 [ 321.018941][ C1] ? rcu_nmi_exit+0x6f/0xf0 [ 321.018959][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.018978][ C1] ? lock_chain_count+0x20/0x20 [ 321.018999][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 321.019014][ C1] ? release_firmware_map_entry+0x190/0x190 [ 321.019032][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 321.019047][ C1] ? _raw_spin_unlock+0x40/0x40 [ 321.019066][ C1] schedule+0x11b/0x1e0 [ 321.019082][ C1] futex_wait_queue_me+0x22b/0x440 [ 321.019104][ C1] futex_wait+0x256/0x680 [ 321.019118][ C1] ? verify_lock_unused+0x140/0x140 [ 321.019140][ C1] ? do_futex+0x12b0/0x12b0 [ 321.019156][ C1] ? __remove_hrtimer+0x3a0/0x3a0 [ 321.019184][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 321.019203][ C1] do_futex+0xdc2/0x12b0 [ 321.019222][ C1] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 321.019237][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 321.019252][ C1] ? ktime_get+0x7b/0x270 [ 321.019264][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 321.019279][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 321.019301][ C1] ? futex_exit_release+0x1c0/0x1c0 [ 321.019315][ C1] ? get_timespec64+0x116/0x1b0 [ 321.019329][ C1] ? timespec64_add_safe+0x1f0/0x1f0 [ 321.019347][ C1] ? ktime_get+0x247/0x270 [ 321.019361][ C1] __se_sys_futex+0x389/0x420 [ 321.019382][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 321.019402][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 321.019419][ C1] do_syscall_64+0x4c/0xa0 [ 321.019432][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.019446][ C1] ? clear_bhb_loop+0x30/0x80 [ 321.019462][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 321.019477][ C1] RIP: 0033:0x7fb366d3f159 [ 321.019492][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.019503][ C1] RSP: 002b:00007ffdc0b23118 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 321.019517][ C1] RAX: ffffffffffffffda RBX: 0000000000034804 RCX: 00007fb366d3f159 [ 321.019527][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb366fc709c [ 321.019536][ C1] RBP: 0000000000000032 R08: 0002397d2df4033c R09: 0000000000000000 [ 321.019545][ C1] R10: 00007ffdc0b23220 R11: 0000000000000246 R12: 00007ffdc0b23240 [ 321.019555][ C1] R13: 00007fb366fc709c R14: 0000000000034836 R15: 00007ffdc0b23220 [ 321.019576][ C1] [ 323.257250][ T8967] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-... } 10817 jiffies s: 21089 root: 0x2/. [ 323.272578][ T8967] rcu: blocking rcu_node structures (internal RCU debug): [ 323.280172][ T8967] Task dump for CPU 1: [ 323.284298][ T8967] task:syz.1.1245 state:R running task stack:26352 pid: 9773 ppid: 6996 flags:0x0000400c [ 323.295127][ T8967] Call Trace: [ 323.298414][ T8967] [ 323.301356][ T8967] ? __schedule+0x11cb/0x4350 [ 323.306311][ T8967] ? rcu_nmi_exit+0x6f/0xf0 [ 323.310834][ T8967] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.316895][ T8967] ? lock_chain_count+0x20/0x20 [ 323.321955][ T8967] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 323.327905][ T8967] ? release_firmware_map_entry+0x190/0x190 [ 323.334059][ T8967] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 323.339966][ T8967] ? _raw_spin_unlock+0x40/0x40 [ 323.344884][ T8967] ? schedule+0x11b/0x1e0 [ 323.349231][ T8967] ? futex_wait_queue_me+0x22b/0x440 [ 323.355115][ T8967] ? futex_wait+0x256/0x680 [ 323.359623][ T8967] ? verify_lock_unused+0x140/0x140 [ 323.364935][ T8967] ? do_futex+0x12b0/0x12b0 [ 323.369663][ T8967] ? __remove_hrtimer+0x3a0/0x3a0 [ 323.374786][ T8967] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.380792][ T8967] ? do_futex+0xdc2/0x12b0 [ 323.385261][ T8967] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 323.391507][ T8967] ? lockdep_hardirqs_on+0x94/0x140 [ 323.397202][ T8967] ? ktime_get+0x7b/0x270 [ 323.401557][ T8967] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 323.407995][ T8967] ? ktime_get_real_ts64+0x440/0x440 [ 323.413334][ T8967] ? futex_exit_release+0x1c0/0x1c0 [ 323.418596][ T8967] ? get_timespec64+0x116/0x1b0 [ 323.423473][ T8967] ? timespec64_add_safe+0x1f0/0x1f0 [ 323.428908][ T8967] ? ktime_get+0x247/0x270 [ 323.433556][ T8967] ? __se_sys_futex+0x389/0x420 [ 323.438509][ T8967] ? __x64_sys_futex+0xf0/0xf0 [ 323.443297][ T8967] ? __x64_sys_futex+0x1d/0xf0 [ 323.448104][ T8967] ? do_syscall_64+0x4c/0xa0 [ 323.452701][ T8967] ? clear_bhb_loop+0x30/0x80 [ 323.457576][ T8967] ? clear_bhb_loop+0x30/0x80 [ 323.462446][ T8967] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.468671][ T8967]