last executing test programs: 19m45.116294542s ago: executing program 3 (id=527): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f0000000600)=""/209}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 19m41.832411737s ago: executing program 3 (id=537): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x1, 0x7}, 0x2205, 0x7, 0x51, 0x0, 0x0, 0x4, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r8, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r8) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000010500)={'virt_wifi0\x00', @random="a66765403b1b"}) 19m41.405046521s ago: executing program 3 (id=541): socket$kcm(0x2, 0x0, 0x106) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5ce3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x5, 0x7, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @tail_call], &(0x7f0000000500)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0x6, 0x4, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001700)=[r0, r0], &(0x7f0000001740)=[{0x5, 0x5, 0x5, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000007000000050000000700000087170008", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100000000000000020000000900"/28], 0x50) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x16}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00\x00'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) syz_clone(0x10000, &(0x7f0000001840)="29620fd698bb91e35b6346772ccb68556284ff9b017a3e3335112d9529efe54090d6e0ce7314649e3c9abb69de3228e7de46bffd2bfb695ceef335dd3aeb03438a4ea598c6c9391fac70c4a476120dde7f91ddaf7c7279a8b425e1045b8ae74b34960d384fa6a49f2708352504981d5ef8f41023b8531ce953c2133e997141bc8afd23fdc32c82a15501fba62126aade99f6378b07bd154f", 0x98, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)="7c43e8a53cb89d3d26677229c9ac0c9f81eb4643d1f9bdcb06c6ac74c5f14f65a4bbdc4a01914623c213d697966c3ea58dd89da49f9d515aaef6042b78ae") (async) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1, 0x0, 0x0, 0x17}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) (async) close(0x3) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r8) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff7) (async) ioctl$TUNGETVNETLE(r8, 0x40047451, &(0x7f0000000040)) close(r8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) 19m38.361034939s ago: executing program 3 (id=565): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x12}, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xb}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1, 0x0, 0x1108}, 0x800) recvmsg$unix(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) write$cgroup_int(r3, &(0x7f0000000780), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1ff) 19m38.025035879s ago: executing program 3 (id=567): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8540, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x4}, 0xc800, 0x0, 0xfffffffc, 0x4, 0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x1}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x60}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000dc0)="d07940969362025c11fcfa88be6e60fca6922f909738d6cbc6ccf74bd0ef867245bb5458635f", 0x26}], 0x2, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) 19m37.38330029s ago: executing program 3 (id=573): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x25000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a104000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)="e75a85c947a9119d168974941faed75881c0c5c11a70989fd78a1a7e8156a6d86c2d0e7095ff8d0bc135881edaf2f638990d7a3a2d84927992b98e33b9d67c6d4b5d104378", &(0x7f00000003c0)="2a2bdb70083fa016fe061ab20ba03a3d3ad77ca4f5a4bbee64fe71a3332419708fab76742c854b3f045d8c59c309f3e5f8df96fd053ded4d58f63982c5470d86c69b6fb245dd61b2bc0b6aea1706e7c05972d8343c128931c41ad2277afb498ff57b7d78070083a02c36ccd4ff87a2454bd02ac7a67d3038f86750ece3fdabb6fcff85d39899f7f8dd87e549f36f8d8f9c4f167cc4c5f5700dfd04b55b3dc614dba96ba84ec05de11e8da6291f85b0faa0d33866a508080000001257cd2a5767b38f705ba58450cac6c1e9836aeaf6d43aed62e2e10e076446781625c241b8c9a5ed1dbe2e63d93431a7a0ad34cda32c48da4e0980e7", 0x8001000, r2}, 0x7a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x2}, {0x3d}]}) 19m21.542919596s ago: executing program 32 (id=573): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x25000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a104000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)="e75a85c947a9119d168974941faed75881c0c5c11a70989fd78a1a7e8156a6d86c2d0e7095ff8d0bc135881edaf2f638990d7a3a2d84927992b98e33b9d67c6d4b5d104378", &(0x7f00000003c0)="2a2bdb70083fa016fe061ab20ba03a3d3ad77ca4f5a4bbee64fe71a3332419708fab76742c854b3f045d8c59c309f3e5f8df96fd053ded4d58f63982c5470d86c69b6fb245dd61b2bc0b6aea1706e7c05972d8343c128931c41ad2277afb498ff57b7d78070083a02c36ccd4ff87a2454bd02ac7a67d3038f86750ece3fdabb6fcff85d39899f7f8dd87e549f36f8d8f9c4f167cc4c5f5700dfd04b55b3dc614dba96ba84ec05de11e8da6291f85b0faa0d33866a508080000001257cd2a5767b38f705ba58450cac6c1e9836aeaf6d43aed62e2e10e076446781625c241b8c9a5ed1dbe2e63d93431a7a0ad34cda32c48da4e0980e7", 0x8001000, r2}, 0x7a) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x2}, {0x3d}]}) 8.902684665s ago: executing program 4 (id=7096): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="d79d8db2a04883178aa1b06d802947f2358627f13c318335718abf7dd8c8cfc56f41ba60fbacc3cfe0a2738f68f21ca38bede07b3f998897145b57555bdd56233ec1678bfedeb135388f2c93642f6e93c323435758092f7b342739244dda3a900e14e7607ed9ab4f7dd16b3b61a4091b3ec23cb72ea58257d68b6c52b6b679ca9e5ee826b1e81f6dabb2a50d9ecd2087d31f6d526c8baf0b262f2dbfd7b6ce199067", 0xa2}, {&(0x7f0000000b40)="97cc671a70a5e3620937158f218d49d8668ec3e2ef34d971bf9782e572362f89c26dc18f417f25d84842bdfd683366cc45c59c85c2be2b85ecce7ced43407df08ed124fb08abae720d4b08c660b68d386c0f8b82ac2aff92f5a49f38f4c951046c94ed0d7b9885e2382a61c6b765b6cae6d5e929c1bfbb1c45dd3dec9178009cf21ad4", 0x83}, {&(0x7f0000000440)="a52ce1bbb7ce761b30a96efb144f46580d6a1b9f663f9d1d2e9e1ca241333ac28208fe2b7c22ae84448e14a70f4a6f34c72e2ea8f080588eaeda88ed72bff8b1d36c6a4c23f58843f429e8d5808f253e22c34e6512b3c0a61cd1a7af726cd140b5e29eca2e42426610017ddb621636feb324727d8352f30de03cf66cb8291534c4d292abdf14a7c3877db0c429", 0x8d}, {&(0x7f0000000500)="9f050a3b4f82c50dd1119b90cde685c71f780a326555c4101afd1a17e3ace88abfc701edf0de4090871048f6debf5fcf4c439a8ba1e5d4fbd33f1f2d8f7b5944e4d4becd4dd513b053e3d08a739c3c78f624efc0914a6ee3d98a056163aca4c83e19a614df2fb9bd4d6d3b4d9df24d08e0e9fa1b531a363b11a1d29c7740e77ad06a7aafe2a301580cc7c756b99966016f77c638f4", 0x95}], 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000006200e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="59204d97b5057422b2f9256a2831098269893dcd6b54db146b2ef091ed80a44f6d6498e19610bb6675afa48e5a553a0a3572f992358fe42c13932f50f578be600fed6646ab3c07e2bb1a20d14cb07ff2c7f2953795318173ab00fb1cac8df9318437d229b7618f6155a5dfa701be499753fd5d2421d578742671f70e7771c6cf59777a2b355c8ee5d6fdf124a61f8451d700cddd7362101b119affd21403942e6cbe767e0871bb", @ANYRESOCT=0x0, @ANYRES64=r1], &(0x7f0000000c00)='GPL\x00', 0x1000, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0xb, 0x4}, {0x0, 0x0, 0x0, 0x1}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000b00)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x8}, 0x0, 0xfffbfffffffffffe, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000b00)}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x8}, 0x0, 0xfffbfffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4d31, 0x2788, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x9, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x10, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='/\a', 0x2}], 0x1}, 0x0) (async) sendmsg$inet(r7, &(0x7f00000024c0)={&(0x7f00000000c0)={0x2, 0x10, @private=0xa014101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)='/\a', 0x2}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7c, &(0x7f0000000000), 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000917e21130000000045000000000000000000000000000039"], &(0x7f0000003ff6)='GPL\x00', 0x80, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 8.498223728s ago: executing program 0 (id=7100): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x20, &(0x7f0000000380)={&(0x7f00000000c0)=""/106, 0x6a, 0x0, &(0x7f0000000340)=""/3, 0x3}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0xf6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x10080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x7b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000870000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3e0002"], 0x9a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0), 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xaa}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe6, 0xfffffffffffffffd}, 0x4, 0x400000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8983, &(0x7f0000000080)) r11 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x92, 0x3, 0x7, 0x0, 0x80000001, 0xf3380, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x204, 0x1, @perf_bp={0x0}, 0x102000, 0x1, 0x9, 0x9, 0x3, 0x9, 0x9, 0x0, 0x7e, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r11, 0x2402, 0x5) 8.43561423s ago: executing program 4 (id=7101): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 7.663497234s ago: executing program 2 (id=7103): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x18a0, 0x0, 0x0, 0x2, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x10a900, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0xb, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x2, 0x10, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001280), &(0x7f0000002040), 0x10, 0x8}, 0x94) sendmsg$inet(r1, 0x0, 0x300440f1) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="6a370000000000001f71a76d2688", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f0000001340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="000000952ba3000000000000000000", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f065581bff88fbffff4000632f77fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) sendmsg(0xffffffffffffffff, 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000001d00)={'wlan1\x00', @random='\x00\x00\b\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 6.096652005s ago: executing program 5 (id=7105): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xba}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 5.828106204s ago: executing program 2 (id=7116): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xc77, 0x8000000000000003}, 0x11428d, 0x80089, 0x0, 0x5, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="60dd19c29e1b1b87b377a9f6966dce00bb2451cfb8f24e643dd751cf3fa42db57649063d7f019799c7790214a16400556f76a101a9a05464dcb48f69bfe7724e6beca6b396238431d1b05874068941e3bdccadfcf44417d4f56f2892ed7e768b11dfc7d6076608477d3401bf470527e4d572b5c73c8b2352d2ce4992a1f7c27b9317fbb2208143651a60c2974ae021056cc0d0b4e3711ab8a76959986a5a1bbec2cc99314c71e52949edd043edbea920894740bd4ab87ac9b3a464844153f709cea2f4fbb8b80f4d784c26a74d2bcc5be165148f1753f79e1debd4786b5f4d37ce85255573cc8e7b8bef5ae1cf6a516f111c18c86de70b", 0xf7}, {&(0x7f0000000680)="88defc533735c5bb8b1a181fc5308ceb2aa4beab08fd05a8d2a0ead7978cf9663a60c5a29497b04d47fe3fb17c8bb11b3062202fd3af2f33c9409ce2281347a9edda069a8a3f73c672c07bafc1f66ca018a9fd9de4c5f8f3c536", 0x5a}, {&(0x7f0000000700)="20d4543e3c01305736a8b966e4c92ba9f319824db1ff2b5a53e395fbd43ca4377cf2faccb08b0a0d59137dfc51e5c95258ea145fbb6b9bf4a8427682f96ea44351851c1e5f", 0x45}, {&(0x7f0000000840)="653150a837362a24aa9b988c6c88a118e8f391cfb1a8bf2997639b7884", 0x1d}, {&(0x7f0000000880)="18499f45fb832a4f098a672a9ddd44576d2629d13893133d84c44a08117b018a47a2d9ace8c89d1b31d670b57f8811f911f292ddd33438aab534e5a888a886158e16f3efcb9ba1757370b5e6038f0e2ce4a0a9d921be6f92bf46c3ecc03ccde029f260c0baad65cbacaa53282021695c2f3f4b3476321c4c9db8612dd9f91e26d4d536eb718d81e5746f04f9f2bd636f43a5343085f5c13f7d07baea49", 0x9d}, {&(0x7f0000000a00)="45a312b66352f8aff8977e4ad5aad031125bf9891ed7188fe7ca6b528d562de0d19cead27bd5d43dfff6f50e6e158b607ccfb57ea6f1392e2f0d7a7d1ea3deea5f95e929191df2d61501de9024e94d6eda32df4c9c7c4efe1919c42b79eaff2d2ac8bb67d717b006a6cc655abf89c8fd738bfe678186a67d22d8d4f9cb95a0c0ea8421dbf1b9d67957e587e153f29c06f708738d8f", 0x95}], 0x6, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2b8c7938fe74f8e03d502d35e9c6ff09e8040ff80a7eef220d897f9af2bf51102e25aa11e0808fe86c6d8d0d6991bf9e11fb2277e2e136d4da782da57be32df29423bdcb69bcb477b5ab91d21269843ab6dbe3ad88a9e0dfe93cc0da4913f718f2a8d24ec7c4b569512257837a2215e2080c9c9a57fc9681943b6a779ffd3c3cdf1b2aa7cc271dcd58c987dfb853"], 0xf8, 0x4}, 0x40850) setsockopt$sock_attach_bpf(r7, 0x29, 0x3, 0x0, 0x35) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[], 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) socketpair(0x1d, 0x2, 0x3ff, &(0x7f0000000b00)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 5.827690013s ago: executing program 5 (id=7107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000707ff060d8000000000000000000000000000000000000c156f468a15b99c907dfc88384a5d8f245c136e875"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041", @ANYRES32], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8915, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\\\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x4, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB='2\x00'/12, @ANYRES32=r10, @ANYBLOB="e7192443076cc3e2d17c461acb43021e588157ad1c56ab4e3339f90f82355ecd9f245bec291a1a43bb7697ad9a639f6fa37102c260690edab0a8380e1234c93d00d7929dee4ffad6f07ecc83d57a862d", @ANYRES64=r8], 0x20) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r11, r1, 0x33, 0x6024, 0x0, @void, @void, @value=r12, @void, r8}, 0x20) 5.749998686s ago: executing program 4 (id=7108): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="c4", 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') r2 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c08b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x43, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) 5.717031267s ago: executing program 0 (id=7109): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x32, 0x1, 0xf}]}}}], 0x18}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000140)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r5}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5761, 0x0) recvmsg$kcm(r3, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x20}) 4.705293419s ago: executing program 0 (id=7110): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x72, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.594355935s ago: executing program 5 (id=7111): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010004008500000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xc050ef3a185c381) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x1, 0x0, 0xfffffffa, 0x2}, {0x200002, 0x3}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x20) (async) r5 = socket$kcm(0xa, 0x2, 0x11) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x400000, 0x9, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x31) (async) sendmsg$sock(r5, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000", 0x2b}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 3.586259075s ago: executing program 1 (id=7112): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="c4", 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') r2 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c08b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x43, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) 3.585619025s ago: executing program 4 (id=7113): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x4, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 3.474672829s ago: executing program 2 (id=7114): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000d0000000000000080000000cb4e005f919fa22dad805ac935e43e29051278fa62267a3568d5725420c0c608957fc4f45f7028675c8a4e9b1d9722f58ced0d12f07b914aaf697d3a5ac004956ba3b54c9f7b8f124cdd79a285d37959f05280416424f758b14301703f8e8ca47e6ea0248c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x19, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa26}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='1-', @ANYRESOCT, @ANYBLOB='E'], 0x31) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@typedef={0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000000c0)=""/209, 0x3a, 0xd1, 0x1}, 0x28) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r6, 0x29, 0x22, &(0x7f0000000100)=r7, 0x120) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000001b80)="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", 0x617}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0xc2, 0x72, &(0x7f0000000080)="762dac64260f8c8ba8b4ecd26fe43e034879d345e65aebb1fb77771b2e5913b14ed6806964dd07c31f3ff23149f17828e2e2215ca02fffe78fb60584bee1a306b38d7761d5e3e06653f6f20bb32d61501620bd1f399b2da86cd3bbd23e81ea8f496efe864e34d6048b57b00401af48ea0236c4f8aacec2abe296d8addf78a4d2a4f13708d5b7f922cc3973be2f44931c9b586d8aab48a1ce297d2580513ef89668917386dcd71e1dbed9d74862845b18dc4e490cd6bf45aff438976cba9199974af2", &(0x7f0000000180)=""/114, 0x1000, 0x0, 0xbb, 0xe8, &(0x7f0000000340)="66216013855b21fcc721182491839da2dc3ae1236d7692c6a902acad468531e9e94e40e33af0e1966f84c26ce2f2440297a0473b85d13b1aff07d494a81aed2ba4b247957d3b2add257b6842a2097c1c65b791a12d08c097a6621427fa6f878508f0170df65a4ec59a44ab32d7a4ae72fa6bf421a32b2843c8f992cdedfc9cf715261281edf70d8c9b50985de6f34a91ff9b8d1545ef9756bfcbb72c43a7da80ace0091f5ddfc9e44b9a33722d658e95dfd00f591b3091b81376a7", &(0x7f0000000400)="91de8b9c8eb1a31781bf273f75cabf26bf70b0e7d7608a5831c8bb93a1b70f1a3207d8868e66bfdd1a7705f2fe657c8a12d6025ea6aa0b7eddcfad7b732f9929e000d468b84aab8a6b012b1e3d84d12bac72f04c11e3f4dceb400a264627fb9ef04733368876730b840f9fe514b6034a98e5c58f1400995d4681e9b8ed8d7ccdca4b5a3d42d219be1c6180e7eeb1823967f9a0a4aee872bf28be1e04085be9af574a47665447d8d95d4b6bf142b2b4b72b970abf463d3cd26c599609eff3c95597012be46195e07395eddd762afe4440fce2ba8c54bfe6130699184304853055d788954715615b2c", 0x3, 0x0, 0xf}, 0x50) 3.329392334s ago: executing program 0 (id=7115): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe, 0x7ff}]}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x40047438, 0x5333578052521f3b) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 3.295502894s ago: executing program 5 (id=7117): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r1, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.235723776s ago: executing program 1 (id=7118): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xba}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 3.022646373s ago: executing program 1 (id=7119): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="c4", 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') r2 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c08b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x43, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) 1.235711791s ago: executing program 5 (id=7120): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc6004000b000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b0000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 1.234945561s ago: executing program 0 (id=7121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x10e, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619}, 0x38) 1.158129153s ago: executing program 2 (id=7122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff7) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 1.156429994s ago: executing program 1 (id=7123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000707ff060d8000000000000000000000000000000000000c156f468a15b99c907dfc88384a5d8f245c136e875"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000940)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041", @ANYRES32], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x1d, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xffffffff}, {}, {}, {0x6}]}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r6 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8915, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\\\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x4, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB='2\x00'/12, @ANYRES32=r10, @ANYBLOB="e7192443076cc3e2d17c461acb43021e588157ad1c56ab4e3339f90f82355ecd9f245bec291a1a43bb7697ad9a639f6fa37102c260690edab0a8380e1234c93d00d7929dee4ffad6f07ecc83d57a862d", @ANYRES64=r8], 0x20) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r11, r1, 0x33, 0x6024, 0x0, @void, @void, @value=r12, @void, r8}, 0x20) 1.073845016s ago: executing program 4 (id=7124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="c4", 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') r2 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c08b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x43, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) 630.00153ms ago: executing program 4 (id=7125): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe, 0x7ff}]}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) close(0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047438, 0x5333578052521f3b) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 527.921743ms ago: executing program 2 (id=7126): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x61, 0x30, 0x3, 0x0, 0x30]}}, &(0x7f0000000240)=""/43, 0x50, 0x2b, 0x1, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xfa6, 0xe4, 0xb, 0x406, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x81, 0xfffffffe, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xd}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe8b4, 0x0, 0x0, 0x0, 0xffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x9, 0x2, 0xb, 0x2, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x90, &(0x7f0000000100)=""/144, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x38, r0, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xc, 0x3, 0x5}, 0x10, r1, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r2, r3, r4], 0x0, 0x10, 0x3a}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='\x00', 0x0, 0x10, r2}, 0x18) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x4010, r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa70}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @ldst={0x2, 0x0, 0x7, 0x1, 0x8, 0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x6a}, @jmp={0x5, 0x0, 0xa, 0x3, 0x5, 0x6, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x0, 0xa, 0x8, 0xfffffffffffffff0}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0xad, &(0x7f00000006c0)=""/173, 0x41100, 0x52, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xf, 0x1, 0x80000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r6, r7, r2, r3, r4], &(0x7f0000000940)=[{0x0, 0x1, 0xc, 0x9}, {0x5, 0x1, 0xd, 0x6}, {0x0, 0x1, 0x9, 0x4}], 0x10, 0x2}, 0x94) recvmsg(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000a40)=""/192, 0xc0}, {&(0x7f0000000b00)=""/160, 0xa0}, {&(0x7f0000000bc0)=""/127, 0x7f}, {&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/102, 0x66}, {&(0x7f0000000d80)=""/84, 0x54}, {&(0x7f0000000e00)=""/247, 0xf7}, {&(0x7f0000000f00)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/60, 0x3c}, {&(0x7f0000001000)=""/228, 0xe4}], 0xa, &(0x7f00000011c0)=""/198, 0xc6}, 0x3) recvmsg$kcm(r2, &(0x7f0000001600)={&(0x7f0000001300)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f0000001380)=""/133, 0x85}, {&(0x7f0000001440)=""/229, 0xe5}], 0x2, &(0x7f0000001580)=""/93, 0x5d}, 0x40000100) r8 = perf_event_open(&(0x7f0000001680)={0x1, 0x80, 0x86, 0x3, 0x85, 0x0, 0x0, 0x74da, 0x2c, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000001640), 0x1}, 0x200, 0xff, 0x86e, 0x2, 0x80000001, 0x6, 0x7, 0x0, 0x9c3, 0x0, 0x7}, 0x0, 0x5, r2, 0x0) r9 = openat$cgroup_ro(r2, &(0x7f0000001700)='cgroup.events\x00', 0x0, 0x0) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001740)={r9}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r6, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%pK \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r10, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0x9843, 0x6, 0xe, 0x48400, r11, 0x0, '\x00', r12, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x1, @value=r0}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)={0x1b, 0x0, 0x0, 0x2, 0x0, r13, 0x3, '\x00', r12, r10, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x18, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001ac0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', r12, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001b00)=[r13, r11, r2, r4, r4, r9, r2], &(0x7f0000001b40)=[{0x3, 0x3, 0x3}, {0x2, 0x2, 0xa, 0x1}, {0x5, 0x3, 0x6, 0x2}, {0x1, 0x5, 0xf}, {0x3, 0x4, 0x4, 0x2}, {0x0, 0x5, 0xf, 0x9}, {0x2, 0x4, 0x5, 0x4}], 0x10, 0x800}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001c80)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x3}}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="39ff261c40195b27e40ed3240bba6f57e51afbe82d7ce130816f6a87941b8c60be11", 0x22}, {&(0x7f0000001d00)="55d948731d11bfc24f6b3c9a04828ac0722f39b495c72c857e573ca9224760e01061403bc8b7feaecda87a083ff57c2f5de87245", 0x34}, {&(0x7f0000001d40)="ed48c48f160485ff34b0ebd51318e41f96255d4222cff2e05a628ce2c95e49ae22d4c78ea302ed36cf12fee61c5b9081389397ee993697449438727110bd94412246af67faa19f1dc39739dff6d19ce2e65b438bfd00fd31ac08b8be1894937e5030a9f833dcf4b9f7a7f6e7e4e03fdff5fa3051a316807293d5ef8682fe7e607f33da4535aa99d9bfdf7f006f2e152b1c45407a25f8c50578d4933408e27330411e16cb8449292083518b1b9383ca95150433e8b36f3df22de40efe", 0xbc}], 0x3, &(0x7f0000001e40)="21126f3926f7ed526eb04e95a48fbc35fde5f5f5a2ffeee142261f1a", 0x1c, 0x20008000}, 0x40000800) recvmsg(r2, &(0x7f0000003280)={&(0x7f0000001ec0)=@generic, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001f40)=""/110, 0x6e}, {&(0x7f0000001fc0)=""/104, 0x68}, {&(0x7f0000002040)=""/63, 0x3f}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/153, 0x99}, {&(0x7f0000003140)=""/73, 0x49}], 0x6, &(0x7f0000003240)=""/5, 0x5}, 0x41) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000032c0)={r5}) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003540)={&(0x7f0000003300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfb, 0xfb, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x7fff, 0x7}}, @union={0x4, 0x7, 0x0, 0x5, 0x1, 0x855, [{0x2, 0x5, 0x5}, {0x9, 0x1, 0x8}, {0xe, 0x4, 0xfffffffc}, {0x6, 0x2, 0x4}, {0x8, 0x0, 0x7f}, {0x3, 0x1, 0x5}, {0x5, 0x2, 0x2}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @datasec={0xf, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x8}, {0x2, 0x9, 0x200}, {0x3, 0x8001, 0x4}, {0x5, 0x7, 0x4}], "8ba4c6"}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x8}, {0x3, 0x5}]}, @fwd={0xf}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x41, 0x2e, 0x0, 0x61, 0x0, 0x30]}}, &(0x7f0000003440)=""/232, 0x11c, 0xe8, 0x1, 0x3}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000037c0)={{r4, 0xffffffffffffffff}, &(0x7f0000003740), &(0x7f0000003780)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000038c0)={0x9, 0xd, &(0x7f0000003580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000003600)='GPL\x00', 0x9, 0x6d, &(0x7f0000003640)=""/109, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x8, &(0x7f00000036c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000003700)={0x3, 0xa, 0x0, 0x4}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000003800)=[r16], &(0x7f0000003840)=[{0x2, 0x1, 0x0, 0x2}, {0x1, 0x1, 0xa, 0x4}, {0x3, 0x5, 0x1, 0x6}, {0x5, 0x3, 0xb, 0x5bf87925bbaf3ae}, {0x5, 0x5, 0x9, 0x1}], 0x10, 0x10001}, 0x94) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c40)={0x11, 0x23, &(0x7f0000003980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @generic={0xe, 0xb, 0x5, 0x8, 0x580}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @call={0x85, 0x0, 0x0, 0x7e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffff4, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ac0)='GPL\x00', 0x9, 0x10, &(0x7f0000003b00)=""/16, 0x41100, 0x0, '\x00', r12, 0x0, r15, 0x8, &(0x7f0000003b40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003b80)={0x1, 0xa, 0x1ff, 0x10}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003bc0)=[r13, 0xffffffffffffffff, r8], &(0x7f0000003c00)=[{0x0, 0x1d, 0x4, 0xc}], 0x10, 0xff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003d00)={r2, r17, 0x4, r9}, 0x10) recvmsg$kcm(r9, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003d40)=""/237, 0xed}, {&(0x7f0000003e40)=""/240, 0xf0}, {&(0x7f0000003f40)=""/127, 0x7f}, {&(0x7f0000003fc0)=""/255, 0xff}, {&(0x7f00000040c0)}, {&(0x7f0000004100)=""/140, 0x8c}, {&(0x7f00000041c0)=""/178, 0xb2}, {&(0x7f0000004280)=""/143, 0x8f}, {&(0x7f0000004340)=""/129, 0x81}, {&(0x7f0000004400)=""/222, 0xde}], 0xa, &(0x7f00000045c0)=""/202, 0xca}, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004780)={r9, 0x58, &(0x7f0000004700)}, 0x10) openat$cgroup_type(r10, &(0x7f00000047c0), 0x2, 0x0) 381.382268ms ago: executing program 2 (id=7127): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89ee, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f91124fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 336.751019ms ago: executing program 5 (id=7128): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="c4", 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') r2 = socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c08b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x43, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r4}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000", 0x7}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) 204.427394ms ago: executing program 1 (id=7129): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xba}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0xa, 0x6, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240), &(0x7f0000000000)=""/1, 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 133.305026ms ago: executing program 0 (id=7130): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8000000000000001) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r5}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x5}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=7131): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x100, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000200)="3e1f8b0b666a32349780cca83e9e0880", 0x10}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) kernel console output (not intermixed with test programs): 0 [ 1044.372622][T21572] ksys_write+0x14c/0x250 [ 1044.377017][T21572] ? __ia32_sys_read+0x80/0x80 [ 1044.381849][T21572] ? lockdep_hardirqs_on+0x94/0x140 [ 1044.387107][T21572] do_syscall_64+0x4c/0xa0 [ 1044.391571][T21572] ? clear_bhb_loop+0x60/0xb0 [ 1044.396321][T21572] ? clear_bhb_loop+0x60/0xb0 [ 1044.401066][T21572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.407030][T21572] RIP: 0033:0x7f8042f9ce59 [ 1044.411500][T21572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.431176][T21572] RSP: 002b:00007f8043e26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1044.440030][T21572] RAX: ffffffffffffffda RBX: 00007f8043215fa0 RCX: 00007f8042f9ce59 [ 1044.448100][T21572] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000008 [ 1044.456149][T21572] RBP: 00007f8043e26090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.464191][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.472227][T21572] R13: 00007f8043216038 R14: 00007f8043215fa0 R15: 00007ffd005b2308 [ 1044.480282][T21572] [ 1044.599382][T21575] netlink: 'syz.0.5605': attribute type 3 has an invalid length. [ 1044.617831][T21575] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5605'. [ 1044.623342][T21581] netlink: 'syz.4.5607': attribute type 20 has an invalid length. [ 1044.649042][T21582] netlink: 'syz.0.5605': attribute type 2 has an invalid length. [ 1044.727266][T21585] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1044.778400][T21585] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1044.836364][T21581] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.5607'. [ 1045.378120][T21607] netlink: 'syz.1.5615': attribute type 49 has an invalid length. [ 1045.750678][T21619] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1045.787945][T21616] netlink: 'syz.2.5622': attribute type 3 has an invalid length. [ 1045.796239][T21619] openvswitch: netlink: Flow actions attr not present in new flow. [ 1045.841486][T21622] netlink: 'syz.2.5622': attribute type 2 has an invalid length. [ 1045.843360][T21616] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1045.998994][T21624] mac80211_hwsim hwsim27 ªªªªªª: renamed from wlan0 [ 1046.165133][T21629] netlink: 'syz.5.5625': attribute type 20 has an invalid length. [ 1046.275203][T21635] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1046.330415][T21637] FAULT_INJECTION: forcing a failure. [ 1046.330415][T21637] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.366995][T21635] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1046.379194][T21637] CPU: 0 PID: 21637 Comm: syz.0.5627 Not tainted syzkaller #0 [ 1046.386772][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1046.396900][T21637] Call Trace: [ 1046.400238][T21637] [ 1046.403249][T21637] dump_stack_lvl+0x188/0x24e [ 1046.408014][T21637] ? show_regs_print_info+0x12/0x12 [ 1046.413287][T21637] ? load_image+0x400/0x400 [ 1046.417875][T21637] ? verify_lock_unused+0x140/0x140 [ 1046.423163][T21637] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 1046.428894][T21637] should_fail_ex+0x399/0x4d0 [ 1046.433755][T21637] should_failslab+0x5/0x20 [ 1046.438318][T21637] slab_pre_alloc_hook+0x59/0x310 [ 1046.443437][T21637] kmem_cache_alloc+0x56/0x2f0 [ 1046.448299][T21637] ? skb_clone+0x1e7/0x370 [ 1046.452843][T21637] skb_clone+0x1e7/0x370 [ 1046.457364][T21637] __netlink_deliver_tap+0x3ed/0x800 [ 1046.463213][T21637] ? netlink_deliver_tap+0x2e/0x1b0 [ 1046.468612][T21637] netlink_deliver_tap+0x19c/0x1b0 [ 1046.473888][T21637] netlink_unicast+0x728/0x8d0 [ 1046.478904][T21637] netlink_sendmsg+0x8ad/0xbd0 [ 1046.483954][T21637] ? netlink_getsockopt+0x550/0x550 [ 1046.489238][T21637] ? aa_sock_msg_perm+0x94/0x150 [ 1046.490384][T21629] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.5625'. [ 1046.494229][T21637] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1046.494262][T21637] ? security_socket_sendmsg+0x7c/0xa0 [ 1046.494298][T21637] ? netlink_getsockopt+0x550/0x550 [ 1046.494329][T21637] ____sys_sendmsg+0x5be/0x970 [ 1046.494395][T21637] ? __sys_sendmsg_sock+0x30/0x30 [ 1046.494420][T21637] ? __import_iovec+0x315/0x500 [ 1046.494486][T21637] ? import_iovec+0x6f/0xa0 [ 1046.494532][T21637] ___sys_sendmsg+0x2a2/0x360 [ 1046.494592][T21637] ? __sys_sendmsg+0x290/0x290 [ 1046.494841][T21637] ? __lock_acquire+0x7d10/0x7d10 [ 1046.554006][T21637] __se_sys_sendmsg+0x1bb/0x2a0 [ 1046.559044][T21637] ? ct_nmi_exit+0x145/0x1c0 [ 1046.563725][T21637] ? __x64_sys_sendmsg+0x80/0x80 [ 1046.568802][T21637] ? lockdep_hardirqs_on+0x94/0x140 [ 1046.574131][T21637] do_syscall_64+0x4c/0xa0 [ 1046.578714][T21637] ? clear_bhb_loop+0x60/0xb0 [ 1046.583494][T21637] ? clear_bhb_loop+0x60/0xb0 [ 1046.588356][T21637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1046.594618][T21637] RIP: 0033:0x7f302379ce59 [ 1046.599157][T21637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.618868][T21637] RSP: 002b:00007f30219f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.627376][T21637] RAX: ffffffffffffffda RBX: 00007f3023a15fa0 RCX: 00007f302379ce59 [ 1046.635602][T21637] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000003 [ 1046.644093][T21637] RBP: 00007f30219f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.652250][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.660425][T21637] R13: 00007f3023a16038 R14: 00007f3023a15fa0 R15: 00007ffdd5dcd3b8 [ 1046.668613][T21637] [ 1046.731055][T21637] netlink: 'syz.0.5627': attribute type 4 has an invalid length. [ 1046.740536][T21637] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5627'. [ 1046.880244][T21637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1047.647164][T21669] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1047.754695][T21666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1047.900773][T21168] Bluetooth: hci4: adv larger than maximum supported [ 1047.900874][T21168] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1048.056228][T21681] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1048.079315][T21681] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1048.117385][T21675] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5642'. [ 1048.593595][T21703] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1048.802696][T21707] validate_nla: 7 callbacks suppressed [ 1048.802716][T21707] netlink: 'syz.1.5655': attribute type 2 has an invalid length. [ 1050.023126][T21727] netlink: 'syz.0.5662': attribute type 49 has an invalid length. [ 1050.124488][T21731] netlink: 'syz.5.5664': attribute type 49 has an invalid length. [ 1050.167594][T21733] netlink: 'syz.2.5665': attribute type 10 has an invalid length. [ 1050.214575][T21733] bridge0: port 3(veth0_vlan) entered blocking state [ 1050.270059][T21733] bridge0: port 3(veth0_vlan) entered disabled state [ 1050.353477][T21733] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1050.374136][T21738] netlink: 'syz.0.5666': attribute type 20 has an invalid length. [ 1050.579318][T21744] netlink: 'syz.5.5669': attribute type 20 has an invalid length. [ 1050.769878][T21749] netlink: 'syz.2.5671': attribute type 3 has an invalid length. [ 1050.782994][T21749] netlink: 'syz.2.5671': attribute type 2 has an invalid length. [ 1051.073307][T21756] netlink: 'syz.0.5684': attribute type 3 has an invalid length. [ 1051.100794][T21756] netlink: 'syz.0.5684': attribute type 2 has an invalid length. [ 1051.639951][T21779] __nla_validate_parse: 8 callbacks suppressed [ 1051.640015][T21779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5682'. [ 1051.684098][T21779] bridge0: port 3(veth0_vlan) entered blocking state [ 1051.704865][T21779] bridge0: port 3(veth0_vlan) entered disabled state [ 1051.741079][T21779] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1052.352555][T21810] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5692'. [ 1052.363340][T21801] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5690'. [ 1052.423358][T21810] openvswitch: netlink: Message has 6 unknown bytes. [ 1052.825590][T21819] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5700'. [ 1052.881447][T21819] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1053.058133][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1053.283100][T21825] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1053.509233][T21843] device sit0 entered promiscuous mode [ 1053.829502][T21850] validate_nla: 10 callbacks suppressed [ 1053.829522][T21850] netlink: 'syz.5.5708': attribute type 29 has an invalid length. [ 1053.890591][T21848] netlink: 'syz.5.5708': attribute type 29 has an invalid length. [ 1053.907264][T21848] netlink: 'syz.5.5708': attribute type 29 has an invalid length. [ 1054.026305][T21853] netlink: 'syz.1.5709': attribute type 3 has an invalid length. [ 1054.069771][T21853] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5709'. [ 1054.090767][T21855] netlink: 'syz.1.5709': attribute type 2 has an invalid length. [ 1054.164786][T21865] netlink: 'syz.5.5712': attribute type 49 has an invalid length. [ 1054.427243][T21870] netlink: 'syz.4.5715': attribute type 10 has an invalid length. [ 1054.449196][T21870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1054.487423][T21870] bridge0: port 3(veth0_vlan) entered blocking state [ 1054.500692][T21870] bridge0: port 3(veth0_vlan) entered disabled state [ 1054.534254][T21870] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1054.554942][T21871] netlink: 'syz.5.5726': attribute type 49 has an invalid length. [ 1055.463366][T21896] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5720'. [ 1055.513540][T21896] openvswitch: netlink: Message has 6 unknown bytes. [ 1056.246099][T21903] netlink: 'syz.1.5723': attribute type 29 has an invalid length. [ 1056.375286][T21903] netlink: 'syz.1.5723': attribute type 29 has an invalid length. [ 1057.414640][T21919] device sit0 entered promiscuous mode [ 1058.431472][T21931] delete_channel: no stack [ 1059.751410][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.758027][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.822785][T21966] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1060.949194][T21966] openvswitch: netlink: Message has 6 unknown bytes. [ 1061.148024][T21967] validate_nla: 2 callbacks suppressed [ 1061.148094][T21967] netlink: 'syz.2.5748': attribute type 49 has an invalid length. [ 1062.183665][T21977] netlink: 'syz.0.5760': attribute type 49 has an invalid length. [ 1063.097693][T21991] device sit0 entered promiscuous mode [ 1063.670468][T21983] netlink: 'syz.1.5763': attribute type 3 has an invalid length. [ 1063.731878][T21983] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5763'. [ 1063.743359][T21988] netlink: 'syz.1.5763': attribute type 2 has an invalid length. [ 1065.222799][T22010] netlink: 'syz.0.5769': attribute type 3 has an invalid length. [ 1065.279210][T22010] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1065.375392][T22014] netlink: 'syz.0.5769': attribute type 2 has an invalid length. [ 1066.951924][T22039] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5764'. [ 1067.079477][T22039] openvswitch: netlink: Message has 6 unknown bytes. [ 1067.411154][T22038] netlink: 'syz.1.5767': attribute type 29 has an invalid length. [ 1067.538202][T22038] netlink: 'syz.1.5767': attribute type 29 has an invalid length. [ 1067.624325][T22041] netlink: 'syz.1.5767': attribute type 29 has an invalid length. [ 1067.649828][T22042] netlink: 'syz.1.5767': attribute type 29 has an invalid length. [ 1069.829107][T22065] netlink: 'syz.0.5777': attribute type 3 has an invalid length. [ 1069.832153][T22072] device sit0 entered promiscuous mode [ 1069.862287][T22065] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1070.383032][T22069] netlink: 'syz.0.5777': attribute type 2 has an invalid length. [ 1073.470211][T22092] netlink: 'syz.2.5782': attribute type 21 has an invalid length. [ 1073.526616][T22094] netlink: 'syz.0.5783': attribute type 49 has an invalid length. [ 1075.256238][T22114] netlink: 'syz.0.5790': attribute type 3 has an invalid length. [ 1075.274915][T22114] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1075.340815][T22114] netlink: 'syz.0.5790': attribute type 2 has an invalid length. [ 1075.887298][T22134] netlink: 'syz.5.5796': attribute type 49 has an invalid length. [ 1076.671772][T22157] netlink: 'syz.5.5804': attribute type 3 has an invalid length. [ 1076.709545][T22157] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5804'. [ 1076.753907][T22160] netlink: 'syz.5.5804': attribute type 2 has an invalid length. [ 1077.080259][T22171] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5809'. [ 1077.555018][T22184] netlink: 'syz.1.5813': attribute type 49 has an invalid length. [ 1078.254779][T22198] netlink: 'syz.2.5818': attribute type 3 has an invalid length. [ 1078.301005][T22198] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1078.320983][T22202] netlink: 'syz.2.5818': attribute type 2 has an invalid length. [ 1078.353130][T22208] FAULT_INJECTION: forcing a failure. [ 1078.353130][T22208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.397758][T22208] CPU: 0 PID: 22208 Comm: syz.1.5821 Not tainted syzkaller #0 [ 1078.405341][T22208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1078.415449][T22208] Call Trace: [ 1078.418812][T22208] [ 1078.421780][T22208] dump_stack_lvl+0x188/0x24e [ 1078.426517][T22208] ? show_regs_print_info+0x12/0x12 [ 1078.431792][T22208] ? load_image+0x400/0x400 [ 1078.436358][T22208] ? __lock_acquire+0x7d10/0x7d10 [ 1078.441439][T22208] ? __virt_addr_valid+0x188/0x540 [ 1078.446613][T22208] should_fail_ex+0x399/0x4d0 [ 1078.451348][T22208] _copy_from_user+0x2c/0x170 [ 1078.456213][T22208] bpf_test_init+0xde/0x140 [ 1078.460779][T22208] bpf_prog_test_run_xdp+0x484/0xf10 [ 1078.466237][T22208] ? dev_put+0x80/0x80 [ 1078.470400][T22208] ? dev_put+0x80/0x80 [ 1078.474530][T22208] bpf_prog_test_run+0x31e/0x390 [ 1078.479982][T22208] __sys_bpf+0x62b/0x780 [ 1078.484287][T22208] ? bpf_link_show_fdinfo+0x380/0x380 [ 1078.489731][T22208] ? lock_chain_count+0x20/0x20 [ 1078.494642][T22208] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1078.500782][T22208] __x64_sys_bpf+0x78/0x90 [ 1078.505614][T22208] do_syscall_64+0x4c/0xa0 [ 1078.510077][T22208] ? clear_bhb_loop+0x60/0xb0 [ 1078.514814][T22208] ? clear_bhb_loop+0x60/0xb0 [ 1078.519555][T22208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.525510][T22208] RIP: 0033:0x7f7080b9ce59 [ 1078.529970][T22208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.549639][T22208] RSP: 002b:00007f70819a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1078.558154][T22208] RAX: ffffffffffffffda RBX: 00007f7080e15fa0 RCX: 00007f7080b9ce59 [ 1078.566271][T22208] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1078.574391][T22208] RBP: 00007f70819a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.582401][T22208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.590423][T22208] R13: 00007f7080e16038 R14: 00007f7080e15fa0 R15: 00007ffdb96c2c98 [ 1078.598546][T22208] [ 1078.806925][T22217] netlink: 'syz.2.5826': attribute type 49 has an invalid length. [ 1078.835834][T22221] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5827'. [ 1078.855784][T22221] netlink: zone id is out of range [ 1078.865949][T22221] netlink: zone id is out of range [ 1078.881203][T22221] netlink: get zone limit has 8 unknown bytes [ 1079.261182][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1079.824650][T22246] netlink: 'syz.5.5836': attribute type 3 has an invalid length. [ 1079.841248][T22246] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5836'. [ 1079.870862][T22253] netlink: 'syz.5.5836': attribute type 2 has an invalid length. [ 1080.341197][T22262] netlink: 'syz.1.5841': attribute type 49 has an invalid length. [ 1081.124315][T22287] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1081.142695][T22287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1081.328637][T22291] netlink: 'syz.5.5853': attribute type 3 has an invalid length. [ 1081.368495][T22291] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5853'. [ 1081.457888][T22304] netlink: 'syz.1.5857': attribute type 49 has an invalid length. [ 1081.485194][T22296] netlink: 'syz.5.5853': attribute type 2 has an invalid length. [ 1082.592741][T22342] netlink: 'syz.2.5871': attribute type 3 has an invalid length. [ 1082.607027][T22342] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1085.693292][T22338] netlink: 'syz.4.5869': attribute type 49 has an invalid length. [ 1085.748021][T22347] netlink: 'syz.2.5871': attribute type 2 has an invalid length. [ 1086.302611][T22370] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1086.341210][T22370] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1086.400922][T22373] netlink: 'syz.0.5879': attribute type 2 has an invalid length. [ 1086.408767][T22373] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5879'. [ 1086.999208][T13455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1087.010227][T13455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1087.022433][T13455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1087.022738][T22385] netlink: 'syz.1.5883': attribute type 29 has an invalid length. [ 1087.046683][T13455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1087.057369][T13455] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1087.067960][T22385] netlink: 'syz.1.5883': attribute type 29 has an invalid length. [ 1087.077150][T13455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1087.092948][T22385] netlink: 'syz.1.5883': attribute type 29 has an invalid length. [ 1087.404504][T22387] netlink: 'syz.4.5884': attribute type 3 has an invalid length. [ 1087.440756][T22387] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5884'. [ 1087.565419][T22394] netlink: 'syz.0.5885': attribute type 49 has an invalid length. [ 1087.669877][ T4460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.712068][T22381] chnl_net:caif_netlink_parms(): no params data found [ 1088.010950][ T4460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.315002][ T4460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.380367][T22381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.388069][T22381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.400447][T22381] device bridge_slave_0 entered promiscuous mode [ 1088.504536][T22381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.517195][T22381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.539532][T22381] device bridge_slave_1 entered promiscuous mode [ 1088.667713][ T4460] team0: Port device netdevsim0 removed [ 1088.690624][ T4460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.849625][T22381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.900628][T22381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.016079][T22381] team0: Port device team_slave_0 added [ 1089.037921][T22381] team0: Port device team_slave_1 added [ 1089.068401][T22436] netlink: 'syz.1.5897': attribute type 49 has an invalid length. [ 1089.123329][T22381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.132550][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.183785][T22440] netlink: 'syz.5.5898': attribute type 3 has an invalid length. [ 1089.209221][T22440] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5898'. [ 1089.262266][T22381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.425442][T22381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.437412][T21168] Bluetooth: hci5: command 0x0409 tx timeout [ 1089.443683][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.567498][T22381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.931687][T22381] device hsr_slave_0 entered promiscuous mode [ 1089.939208][T22381] device hsr_slave_1 entered promiscuous mode [ 1089.949120][T22381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.956844][T22381] Cannot create hsr debugfs directory [ 1089.976187][ T4460] tipc: Left network mode [ 1090.689594][T22381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1090.699524][T22381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1090.714907][T22381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1090.752299][T22381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1090.872173][T22381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.887618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.899843][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.931428][T22381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.952721][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1090.964098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1090.974979][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.982336][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.998085][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1091.021395][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1091.034733][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1091.043929][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.051225][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.093296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1091.104423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1091.114999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1091.125999][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1091.136954][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1091.202104][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1091.213502][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1091.226102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1091.240411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1091.282508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1091.294232][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1091.358426][T22381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1091.423768][ T4460] device hsr_slave_0 left promiscuous mode [ 1091.439558][ T4460] device hsr_slave_1 left promiscuous mode [ 1091.450305][ T4460] device bridge_slave_1 left promiscuous mode [ 1091.456633][ T4460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.480292][ T4460] device bridge_slave_0 left promiscuous mode [ 1091.486649][ T4460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.510376][T13455] Bluetooth: hci5: command 0x041b tx timeout [ 1091.553014][ T4460] device veth1_macvtap left promiscuous mode [ 1091.559493][ T4460] device veth0_macvtap left promiscuous mode [ 1091.565675][ T4460] device veth1_vlan left promiscuous mode [ 1092.162300][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 1092.206814][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 1092.253342][ T4460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.303165][ T4460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.614878][ T4460] bond0 (unregistering): Released all slaves [ 1092.819770][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1092.827345][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1092.853996][T22381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.886114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1092.895595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1092.916077][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1092.925631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1092.935779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1092.944174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1092.963643][T22381] device veth0_vlan entered promiscuous mode [ 1092.986813][T22381] device veth1_vlan entered promiscuous mode [ 1093.008384][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1093.017480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1093.026064][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1093.036202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1093.048359][T22381] device veth0_macvtap entered promiscuous mode [ 1093.069204][T22381] device veth1_macvtap entered promiscuous mode [ 1093.091655][T22381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.103348][T22381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.111444][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1093.121248][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1093.129929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1093.139087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1093.147897][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1093.157409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1093.171367][T22381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.180499][T22381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.190853][T22381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.200607][T22381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.278459][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.291426][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.302435][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1093.326526][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.335590][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.343758][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1093.589708][T13455] Bluetooth: hci5: command 0x040f tx timeout [ 1094.845199][T22522] validate_nla: 1 callbacks suppressed [ 1094.845241][T22522] netlink: 'syz.2.5909': attribute type 49 has an invalid length. [ 1095.005476][T22524] netlink: 'syz.4.5910': attribute type 3 has an invalid length. [ 1095.023290][T22525] netlink: 'syz.4.5910': attribute type 2 has an invalid length. [ 1095.041950][T22524] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5910'. [ 1095.671723][T13455] Bluetooth: hci5: command 0x0419 tx timeout [ 1096.236206][T22559] netlink: 'syz.5.5929': attribute type 49 has an invalid length. [ 1096.517366][T22563] netlink: 'syz.4.5930': attribute type 3 has an invalid length. [ 1096.547116][T22563] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1096.624261][T22565] netlink: 'syz.4.5930': attribute type 2 has an invalid length. [ 1097.046233][T21168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1097.056321][T21168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1097.065395][T21168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1097.073911][T21168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1097.082449][T21168] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1097.093778][T21168] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1097.730412][T22597] netlink: 'syz.4.5942': attribute type 49 has an invalid length. [ 1097.843037][T22599] netlink: 'syz.2.5943': attribute type 3 has an invalid length. [ 1097.869284][T22599] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1097.911035][T22601] netlink: 'syz.2.5943': attribute type 2 has an invalid length. [ 1097.971029][T22573] chnl_net:caif_netlink_parms(): no params data found [ 1098.035735][T22605] netlink: 'syz.1.5944': attribute type 1 has an invalid length. [ 1098.049740][T22605] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5944'. [ 1098.228207][T22573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.273996][T22573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.312855][T22573] device bridge_slave_0 entered promiscuous mode [ 1098.332709][T22573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.340947][T22573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.349341][T22573] device bridge_slave_1 entered promiscuous mode [ 1099.109505][T21168] Bluetooth: hci0: command 0x0409 tx timeout [ 1099.127345][T22573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.282203][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.318748][T22573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1099.477897][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.537304][T22573] team0: Port device team_slave_0 added [ 1099.547613][T22573] team0: Port device team_slave_1 added [ 1099.613072][T22573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.631905][T22573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.659818][T22573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.698918][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.720100][T22635] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5955'. [ 1099.739864][T22573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.746892][T22573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.787429][T22573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.869639][T22638] validate_nla: 3 callbacks suppressed [ 1099.869659][T22638] netlink: 'syz.1.5955': attribute type 2 has an invalid length. [ 1099.931843][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.051357][T22573] device hsr_slave_0 entered promiscuous mode [ 1100.074248][T22573] device hsr_slave_1 entered promiscuous mode [ 1100.284608][T22656] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1100.346518][ T46] device 0 left promiscuous mode [ 1100.568524][T22664] netlink: 'syz.5.5963': attribute type 29 has an invalid length. [ 1100.590882][T22664] netlink: 'syz.5.5963': attribute type 29 has an invalid length. [ 1100.621019][T22667] netlink: 'syz.5.5963': attribute type 29 has an invalid length. [ 1101.201511][T21168] Bluetooth: hci0: command 0x041b tx timeout [ 1101.372285][T22671] netlink: 'syz.5.5966': attribute type 49 has an invalid length. [ 1101.698489][T22683] netlink: 'syz.4.5967': attribute type 39 has an invalid length. [ 1101.754956][T22685] netlink: 'syz.2.5968': attribute type 3 has an invalid length. [ 1101.794932][T22685] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1101.807994][T22691] netlink: 'syz.1.5970': attribute type 29 has an invalid length. [ 1101.944973][T22692] netlink: 'syz.2.5968': attribute type 2 has an invalid length. [ 1101.953940][T22691] netlink: 'syz.1.5970': attribute type 29 has an invalid length. [ 1102.512272][T22573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1102.640145][T22573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1102.656958][T22573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1102.792386][T22573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1103.180743][T22573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.218348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.235315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.261315][T22573] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.269022][T21168] Bluetooth: hci0: command 0x040f tx timeout [ 1103.317867][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.352843][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.388210][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.395454][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.435096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.497259][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.512345][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.535634][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.542949][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.606691][T22742] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1103.623657][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.642849][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.768421][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.797894][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.823909][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.867880][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.888759][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.921973][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1103.953657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.008168][T22573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.059606][T22573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.068322][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.098654][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.419395][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1104.435983][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5988'. [ 1104.662217][ T46] device hsr_slave_0 left promiscuous mode [ 1104.675187][ T46] device hsr_slave_1 left promiscuous mode [ 1104.754977][ T46] device veth1_macvtap left promiscuous mode [ 1104.769210][ T46] device veth0_macvtap left promiscuous mode [ 1104.785858][ T46] device veth1_vlan left promiscuous mode [ 1104.795784][ T46] device veth0_vlan left promiscuous mode [ 1105.233137][ T46] device macvlan1 left promiscuous mode [ 1105.242949][ T46] team0 (unregistering): Port device macvlan1 removed [ 1105.350998][T21168] Bluetooth: hci0: command 0x0419 tx timeout [ 1105.621832][ T46] device team_slave_1 left promiscuous mode [ 1105.629084][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1105.675592][ T46] device team_slave_0 left promiscuous mode [ 1105.684058][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1105.735201][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.783380][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.143001][ T46] bond0 (unregistering): Released all slaves [ 1106.191036][T22773] validate_nla: 14 callbacks suppressed [ 1106.191059][T22773] netlink: 'syz.2.5992': attribute type 49 has an invalid length. [ 1106.239182][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1106.246815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1106.287447][T22573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1106.402226][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1106.432093][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.518550][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1106.529551][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.550233][T22573] device veth0_vlan entered promiscuous mode [ 1106.563138][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.575396][T22786] netlink: 'syz.5.5997': attribute type 3 has an invalid length. [ 1106.577327][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.594536][T22786] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5997'. [ 1106.608685][T22573] device veth1_vlan entered promiscuous mode [ 1106.749753][T22791] netlink: 'syz.5.5997': attribute type 2 has an invalid length. [ 1106.827431][T22573] device veth0_macvtap entered promiscuous mode [ 1106.850320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1106.866903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1106.895964][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1106.908554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1106.944247][T22800] netlink: 'syz.2.6000': attribute type 39 has an invalid length. [ 1106.962524][T22802] netlink: 'syz.1.6001': attribute type 49 has an invalid length. [ 1106.975895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1106.996127][T22573] device veth1_macvtap entered promiscuous mode [ 1107.043204][T22573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.067428][T22573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.080653][T22573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.088726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.110282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1107.129728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1107.152433][T22573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.183914][T22573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.214889][T22573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.227971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1107.237671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1107.252462][T22573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.262713][T22573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.273072][T22573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.282045][T22573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.497049][ T4460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.527226][ T4460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.601857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1107.631474][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.633770][T22809] netlink: 'syz.5.6012': attribute type 49 has an invalid length. [ 1107.667024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.704890][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1107.793377][T22805] netlink: 'syz.1.6011': attribute type 3 has an invalid length. [ 1107.813947][T22811] netlink: 'syz.1.6011': attribute type 2 has an invalid length. [ 1107.860952][T22805] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6011'. [ 1108.040844][T22817] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6015'. [ 1108.241466][T22822] netlink: 'syz.0.6004': attribute type 39 has an invalid length. [ 1108.491621][T22829] netlink: 'syz.4.6008': attribute type 49 has an invalid length. [ 1108.802057][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6010'. [ 1108.825084][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6010'. [ 1110.295834][T22850] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6021'. [ 1110.370726][T22851] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1110.445334][T22862] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6020'. [ 1111.144883][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1111.181115][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1111.627045][T22897] validate_nla: 8 callbacks suppressed [ 1111.627069][T22897] netlink: 'syz.0.6036': attribute type 2 has an invalid length. [ 1111.784771][T22893] netlink: 'syz.0.6036': attribute type 3 has an invalid length. [ 1111.853054][T22893] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1113.018319][T22923] netlink: 'syz.1.6044': attribute type 49 has an invalid length. [ 1113.077677][T22927] __nla_validate_parse: 4 callbacks suppressed [ 1113.077703][T22927] netlink: 87536 bytes leftover after parsing attributes in process `syz.4.6045'. [ 1113.272251][T22933] netlink: 15007 bytes leftover after parsing attributes in process `syz.4.6045'. [ 1113.410495][T22932] netlink: 'syz.2.6046': attribute type 29 has an invalid length. [ 1113.473264][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1113.505812][T22932] netlink: 'syz.2.6046': attribute type 29 has an invalid length. [ 1113.519644][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1113.747239][T22942] netlink: 'syz.4.6050': attribute type 25 has an invalid length. [ 1113.795618][T22942] netlink: 'syz.4.6050': attribute type 25 has an invalid length. [ 1113.823821][T22942] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6050'. [ 1113.975348][T22945] netlink: 'syz.2.6049': attribute type 3 has an invalid length. [ 1113.992688][T22945] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6049'. [ 1114.055650][T22948] netlink: 'syz.2.6049': attribute type 2 has an invalid length. [ 1117.844957][T22968] netlink: 'syz.1.6058': attribute type 49 has an invalid length. [ 1118.166946][T22979] netlink: 'syz.5.6062': attribute type 3 has an invalid length. [ 1118.193054][T22980] netlink: 'syz.4.6061': attribute type 29 has an invalid length. [ 1118.205284][T22983] netlink: 'syz.5.6062': attribute type 2 has an invalid length. [ 1118.213813][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1118.224533][T22979] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6062'. [ 1118.246311][T22980] netlink: 'syz.4.6061': attribute type 29 has an invalid length. [ 1118.259786][T22980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1119.603152][T23009] netlink: 'syz.0.6072': attribute type 49 has an invalid length. [ 1119.994596][T13455] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1120.007684][T13455] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1120.018153][T13455] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1120.034214][T13455] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1120.042288][T13455] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1120.122235][T13455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1121.198708][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.205264][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.314635][T23015] FAULT_INJECTION: forcing a failure. [ 1122.314635][T23015] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.343658][T23015] CPU: 1 PID: 23015 Comm: syz.2.6074 Not tainted syzkaller #0 [ 1122.351214][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1122.361298][T23015] Call Trace: [ 1122.364639][T23015] [ 1122.367594][T23015] dump_stack_lvl+0x188/0x24e [ 1122.372301][T23015] ? show_regs_print_info+0x12/0x12 [ 1122.377524][T23015] ? load_image+0x400/0x400 [ 1122.382058][T23015] ? __might_sleep+0xd0/0xd0 [ 1122.387461][T23015] ? __lock_acquire+0x7d10/0x7d10 [ 1122.392526][T23015] should_fail_ex+0x399/0x4d0 [ 1122.397322][T23015] should_failslab+0x5/0x20 [ 1122.401855][T23015] slab_pre_alloc_hook+0x59/0x310 [ 1122.407340][T23015] ? bpf_prog_test_run_skb+0x241/0x1890 [ 1122.412923][T23015] __kmem_cache_alloc_node+0x4f/0x260 [ 1122.418323][T23015] ? bpf_prog_test_run_skb+0x241/0x1890 [ 1122.423899][T23015] __kmalloc+0xa0/0x240 [ 1122.428099][T23015] bpf_prog_test_run_skb+0x241/0x1890 [ 1122.433505][T23015] ? __fget_files+0x28/0x4b0 [ 1122.438127][T23015] ? __fget_files+0x28/0x4b0 [ 1122.442751][T23015] ? __fget_files+0x43d/0x4b0 [ 1122.447466][T23015] ? cpu_online+0xa0/0xa0 [ 1122.451819][T23015] bpf_prog_test_run+0x31e/0x390 [ 1122.456794][T23015] __sys_bpf+0x62b/0x780 [ 1122.461073][T23015] ? bpf_link_show_fdinfo+0x380/0x380 [ 1122.466493][T23015] ? lock_chain_count+0x20/0x20 [ 1122.471383][T23015] __x64_sys_bpf+0x78/0x90 [ 1122.475836][T23015] do_syscall_64+0x4c/0xa0 [ 1122.480275][T23015] ? clear_bhb_loop+0x60/0xb0 [ 1122.484984][T23015] ? clear_bhb_loop+0x60/0xb0 [ 1122.489692][T23015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1122.495618][T23015] RIP: 0033:0x7f94ccf9ce59 [ 1122.500057][T23015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.519781][T23015] RSP: 002b:00007f94cde64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1122.528216][T23015] RAX: ffffffffffffffda RBX: 00007f94cd215fa0 RCX: 00007f94ccf9ce59 [ 1122.536207][T23015] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1122.544206][T23015] RBP: 00007f94cde64090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.552200][T23015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.560190][T23015] R13: 00007f94cd216038 R14: 00007f94cd215fa0 R15: 00007ffe0df4baa8 [ 1122.568343][T23015] [ 1122.914605][T23026] netlink: 'syz.4.6078': attribute type 3 has an invalid length. [ 1122.955910][T23026] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6078'. [ 1123.057722][T23029] netlink: 'syz.4.6078': attribute type 2 has an invalid length. [ 1123.085605][T23012] chnl_net:caif_netlink_parms(): no params data found [ 1123.256940][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.543080][T23012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.579012][T23012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.587817][T23012] device bridge_slave_0 entered promiscuous mode [ 1123.773569][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.801561][T23012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.817502][T23012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.830258][T23012] device bridge_slave_1 entered promiscuous mode [ 1123.906048][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.954924][T23012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.976388][T23012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.031173][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.063058][T23012] team0: Port device team_slave_0 added [ 1124.096649][T23012] team0: Port device team_slave_1 added [ 1124.122354][T23012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.129583][T23012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.158470][T21168] Bluetooth: hci4: command 0x0409 tx timeout [ 1124.166491][T23012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.184841][T23012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.193161][T23012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.219471][T23012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.271841][T23012] device hsr_slave_0 entered promiscuous mode [ 1124.286385][T23012] device hsr_slave_1 entered promiscuous mode [ 1124.310518][T23012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.318411][T23012] Cannot create hsr debugfs directory [ 1124.596590][ T41] tipc: Left network mode [ 1126.228977][T21168] Bluetooth: hci4: command 0x041b tx timeout [ 1127.717715][T23073] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6091'. [ 1127.980237][T23092] netlink: 'syz.0.6092': attribute type 3 has an invalid length. [ 1128.003120][T23092] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6092'. [ 1128.308978][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 1129.065344][T23095] netlink: 'syz.0.6092': attribute type 2 has an invalid length. [ 1129.445127][T23012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1130.153147][T23012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1130.224098][T23012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1130.301324][T23012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1130.392545][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 1130.906535][T23012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.969001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1130.996826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1131.017933][T23012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.054404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1131.080586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1131.107360][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.114674][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.177424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1131.205889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1131.246416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1131.292551][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.299885][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1131.328059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1131.365366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1131.416766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1131.471380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1131.528961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1131.561151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1131.593828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1131.616527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1131.637700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1131.674765][T23012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1131.717368][T23012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1131.752034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1131.766580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.987729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.996525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1133.053203][T23012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.134122][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1133.163947][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1133.242359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1133.259926][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.309514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1133.334990][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.383825][T23012] device veth0_vlan entered promiscuous mode [ 1133.498935][T23012] device veth1_vlan entered promiscuous mode [ 1133.578244][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1133.601356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1133.660799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1133.685725][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1133.844140][T23012] device veth0_macvtap entered promiscuous mode [ 1133.907765][T23012] device veth1_macvtap entered promiscuous mode [ 1134.059884][T23173] netlink: 'syz.5.6105': attribute type 10 has an invalid length. [ 1134.080625][T23173] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6105'. [ 1134.111477][T23173] device ipvlan1 entered promiscuous mode [ 1134.205831][T23173] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1134.247308][T23174] netlink: 'syz.0.6108': attribute type 3 has an invalid length. [ 1134.260173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1134.268507][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1134.293097][T23174] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6108'. [ 1134.306254][T23012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.331387][T23012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.375686][T23012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.399614][T23012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.441035][T23012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.451718][T23177] netlink: 'syz.0.6108': attribute type 2 has an invalid length. [ 1134.483277][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1134.502980][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1134.572054][T23012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.598600][T23012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.621734][T23012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.652602][T23012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.683794][T23012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.920013][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1134.939490][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.047656][T23012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.069608][T23012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.096685][T23012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.118503][T23012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.488039][T23232] netlink: 'syz.5.6123': attribute type 3 has an invalid length. [ 1137.530929][T23232] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6123'. [ 1140.190052][T23234] netlink: 'syz.5.6123': attribute type 2 has an invalid length. [ 1140.257061][ T41] device hsr_slave_0 left promiscuous mode [ 1140.277077][ T41] device hsr_slave_1 left promiscuous mode [ 1140.284287][ T41] device bridge_slave_1 left promiscuous mode [ 1140.299326][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.345380][ T41] device bridge_slave_0 left promiscuous mode [ 1140.396563][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.454534][ T41] device veth1_macvtap left promiscuous mode [ 1140.461124][ T41] device veth0_macvtap left promiscuous mode [ 1140.469296][ T41] device veth1_vlan left promiscuous mode [ 1142.614475][ T41] team0 (unregistering): Port device macvlan1 removed [ 1143.065859][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1144.539530][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1144.594387][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.974733][ T41] team0 (unregistering): Port device bridge0 removed [ 1145.021846][ T41] bond0 (unregistering): Released all slaves [ 1145.136413][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.144600][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.161428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1145.199415][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.227755][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.259982][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1145.642632][T23284] netlink: 'syz.2.6136': attribute type 3 has an invalid length. [ 1145.653778][T23284] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6136'. [ 1145.920731][T23291] netlink: 'syz.2.6136': attribute type 2 has an invalid length. [ 1147.471767][T21168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1147.483448][T21168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1147.493699][T21168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1147.502106][T21168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1147.513506][T21168] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1147.521835][T21168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1148.015793][T23336] netlink: 'syz.2.6146': attribute type 10 has an invalid length. [ 1148.072790][T23336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6146'. [ 1148.176850][T23336] device ipvlan1 entered promiscuous mode [ 1148.186451][T23336] bridge0: port 3(ipvlan1) entered blocking state [ 1148.195447][T23336] bridge0: port 3(ipvlan1) entered disabled state [ 1148.227843][T23336] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1148.463155][T23343] netlink: 'syz.5.6151': attribute type 3 has an invalid length. [ 1148.476281][T23343] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6151'. [ 1148.490649][T23343] netlink: 'syz.5.6151': attribute type 2 has an invalid length. [ 1148.640035][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.881143][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.898188][T23325] chnl_net:caif_netlink_parms(): no params data found [ 1149.083560][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.168127][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.191369][T23325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.198683][T23325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.208284][T23325] device bridge_slave_0 entered promiscuous mode [ 1149.229528][T23325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.236796][T23325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.251902][T23325] device bridge_slave_1 entered promiscuous mode [ 1149.281589][T23325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.294815][T23325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.325949][T23325] team0: Port device team_slave_0 added [ 1149.335615][T23325] team0: Port device team_slave_1 added [ 1149.386686][T23325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.395975][T23325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.427544][T23325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.464151][T23325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.471385][T23325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.498060][T23325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.550568][T23325] device hsr_slave_0 entered promiscuous mode [ 1149.575736][T23325] device hsr_slave_1 entered promiscuous mode [ 1149.584734][T23325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.593575][T23325] Cannot create hsr debugfs directory [ 1149.599385][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1149.612947][ T11] tipc: Left network mode [ 1150.620558][T23392] netlink: 'syz.0.6164': attribute type 3 has an invalid length. [ 1150.655734][T23392] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1150.783204][T23396] netlink: 'syz.0.6164': attribute type 2 has an invalid length. [ 1151.299464][T23409] netlink: 'syz.1.6166': attribute type 10 has an invalid length. [ 1151.326128][T23409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6166'. [ 1151.357003][T23409] device ipvlan1 entered promiscuous mode [ 1151.378083][T23409] bridge0: port 3(ipvlan1) entered blocking state [ 1151.401729][T23409] bridge0: port 3(ipvlan1) entered disabled state [ 1151.415627][T23409] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1151.668909][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1152.400420][ T11] device gretap0 left promiscuous mode [ 1152.408933][ T11] : port 1(gretap0) entered disabled state [ 1152.807155][T23325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1152.832405][T23325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1152.874385][T23449] netlink: 'syz.0.6178': attribute type 3 has an invalid length. [ 1152.891282][T23325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1152.925725][T23449] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1152.928129][T23453] netlink: 'syz.0.6178': attribute type 2 has an invalid length. [ 1152.973742][T23325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1153.750323][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1154.511789][T23325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.545753][ T11] device hsr_slave_0 left promiscuous mode [ 1154.553308][ T11] device hsr_slave_1 left promiscuous mode [ 1154.568328][ T11] device bridge_slave_1 left promiscuous mode [ 1154.596747][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.615813][ T11] device bridge_slave_0 left promiscuous mode [ 1154.639204][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.724669][ T11] device veth1_macvtap left promiscuous mode [ 1154.751191][ T11] device veth0_macvtap left promiscuous mode [ 1154.777944][ T11] device veth1_vlan left promiscuous mode [ 1155.577033][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1155.647985][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1155.706899][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.771849][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.839196][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1156.034507][T23520] netlink: 'syz.5.6193': attribute type 3 has an invalid length. [ 1156.046555][T23520] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6193'. [ 1156.191066][ T11] bond0 (unregistering): Released all slaves [ 1156.308372][T23325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.329213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1156.344300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1156.359989][T23522] netlink: 'syz.5.6193': attribute type 2 has an invalid length. [ 1156.394652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1156.404942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1156.418578][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.425825][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.447861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1156.486878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1156.509195][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.516397][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.599644][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1156.630936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1156.650841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1156.661883][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1156.676463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1156.686258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1156.708098][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1156.783441][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1156.808454][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1156.851093][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1156.931281][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1156.956530][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.967403][T23533] netlink: 'syz.2.6207': attribute type 3 has an invalid length. [ 1156.984620][T23533] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1157.006375][T23325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1157.119394][T23539] netlink: 'syz.2.6207': attribute type 2 has an invalid length. [ 1157.831817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1157.841941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1157.875558][T23325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.906546][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.917705][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.987701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1159.013832][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1159.041878][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1159.057461][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1159.080482][T23325] device veth0_vlan entered promiscuous mode [ 1159.457111][T23325] device veth1_vlan entered promiscuous mode [ 1159.566374][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1159.577134][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1159.585758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1159.595343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1159.607018][T23325] device veth0_macvtap entered promiscuous mode [ 1159.635244][T23325] device veth1_macvtap entered promiscuous mode [ 1159.663361][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.685691][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.696756][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.708446][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.718872][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.729969][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.742604][T23325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.752990][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1159.769914][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1159.788695][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.800300][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.816909][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.839928][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.879830][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.890524][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.904713][T23325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.916090][T23325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.933916][T23325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.953828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.966732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.995055][T23325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.010616][T23325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.041137][T23325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.068965][T23325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.067467][T17589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.086054][T17589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.113968][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1161.164946][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.208947][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.216734][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1162.846426][T23642] sctp: [Deprecated]: syz.1.6229 (pid 23642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1162.846426][T23642] Use struct sctp_sack_info instead [ 1163.770833][T23663] netlink: 'syz.5.6239': attribute type 2 has an invalid length. [ 1163.807852][T23663] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6239'. [ 1166.651674][T23723] device syzkaller0 entered promiscuous mode [ 1169.360940][T23764] device syzkaller0 entered promiscuous mode [ 1171.824008][T23805] device wlan1 entered promiscuous mode [ 1171.902087][T23805] netlink: 'syz.1.6288': attribute type 3 has an invalid length. [ 1171.931515][T23805] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1172.027116][T23809] netlink: 'syz.4.6289': attribute type 10 has an invalid length. [ 1172.138306][T23809] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.6289'. [ 1172.166706][T23814] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1173.241346][T23827] netlink: 'syz.2.6295': attribute type 21 has an invalid length. [ 1173.401804][T23832] netlink: 'syz.1.6296': attribute type 21 has an invalid length. [ 1176.456612][T23878] netlink: 'syz.1.6311': attribute type 10 has an invalid length. [ 1176.609567][T23879] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1176.845125][T23868] netlink: 'syz.4.6310': attribute type 10 has an invalid length. [ 1176.870890][T23868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6310'. [ 1176.904968][T23868] bridge0: port 3(veth0_vlan) entered blocking state [ 1176.944376][T23868] bridge0: port 3(veth0_vlan) entered disabled state [ 1177.030841][T23868] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1179.945587][T23925] netlink: 'syz.2.6329': attribute type 10 has an invalid length. [ 1179.957085][T23929] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.6329'. [ 1181.879222][T23950] netlink: 'syz.0.6338': attribute type 10 has an invalid length. [ 1181.925601][T23950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6338'. [ 1181.983049][T23971] FAULT_INJECTION: forcing a failure. [ 1181.983049][T23971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1181.996220][T23950] bridge0: port 3(veth0_vlan) entered blocking state [ 1181.996385][T23950] bridge0: port 3(veth0_vlan) entered disabled state [ 1182.010616][T23971] CPU: 1 PID: 23971 Comm: syz.1.6345 Not tainted syzkaller #0 [ 1182.016656][T23950] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1182.018201][T23971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1182.044251][T23971] Call Trace: [ 1182.047577][T23971] [ 1182.050553][T23971] dump_stack_lvl+0x188/0x24e [ 1182.055296][T23971] ? show_regs_print_info+0x12/0x12 [ 1182.060561][T23971] ? load_image+0x400/0x400 [ 1182.065129][T23971] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1182.071188][T23971] ? lock_chain_count+0x20/0x20 [ 1182.076108][T23971] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1182.081201][T23971] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1182.086822][T23971] should_fail_ex+0x399/0x4d0 [ 1182.091572][T23971] copy_page_from_iter_atomic+0x21e/0x1280 [ 1182.097444][T23971] ? pipe_zero+0x140/0x140 [ 1182.101912][T23971] ? PageHeadHuge+0x8f/0x1c0 [ 1182.106552][T23971] ? shmem_write_begin+0x1b4/0x3f0 [ 1182.111783][T23971] generic_perform_write+0x34f/0x5c0 [ 1182.117156][T23971] ? generic_file_direct_write+0x330/0x330 [ 1182.123033][T23971] ? __file_remove_privs+0x5f0/0x5f0 [ 1182.128379][T23971] ? rwsem_write_trylock+0x135/0x1c0 [ 1182.133725][T23971] ? clear_nonspinnable+0x60/0x60 [ 1182.138809][T23971] ? generic_write_checks_count+0x3d9/0x4c0 [ 1182.144769][T23971] __generic_file_write_iter+0x148/0x2a0 [ 1182.150485][T23971] generic_file_write_iter+0xab/0x2e0 [ 1182.156016][T23971] vfs_write+0x4b1/0xa30 [ 1182.160331][T23971] ? file_end_write+0x250/0x250 [ 1182.165254][T23971] ? __fget_files+0x43d/0x4b0 [ 1182.170006][T23971] ? __fdget_pos+0x2ae/0x360 [ 1182.174661][T23971] ? ksys_write+0x71/0x250 [ 1182.179151][T23971] ksys_write+0x14c/0x250 [ 1182.183554][T23971] ? __ia32_sys_read+0x80/0x80 [ 1182.188578][T23971] ? lockdep_hardirqs_on+0x94/0x140 [ 1182.193897][T23971] do_syscall_64+0x4c/0xa0 [ 1182.198369][T23971] ? clear_bhb_loop+0x60/0xb0 [ 1182.203117][T23971] ? clear_bhb_loop+0x60/0xb0 [ 1182.207867][T23971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1182.213830][T23971] RIP: 0033:0x7f996599ce59 [ 1182.218312][T23971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.237974][T23971] RSP: 002b:00007f99667e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1182.246457][T23971] RAX: ffffffffffffffda RBX: 00007f9965c15fa0 RCX: 00007f996599ce59 [ 1182.254534][T23971] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 000000000000000a [ 1182.262565][T23971] RBP: 00007f99667e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.270596][T23971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.278620][T23971] R13: 00007f9965c16038 R14: 00007f9965c15fa0 R15: 00007ffdc079e998 [ 1182.286663][T23971] [ 1182.649455][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.655907][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.945417][T23966] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6344'. [ 1182.959878][T23966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.246970][T23984] netlink: 'syz.5.6349': attribute type 10 has an invalid length. [ 1183.425559][T23984] netlink: 40227 bytes leftover after parsing attributes in process `syz.5.6349'. [ 1185.204612][T24019] netlink: 'syz.5.6360': attribute type 6 has an invalid length. [ 1186.361036][T24013] netlink: 'syz.1.6358': attribute type 10 has an invalid length. [ 1186.402755][T24013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6358'. [ 1186.584086][T24013] bridge0: port 3(veth0_vlan) entered blocking state [ 1186.625126][T24013] bridge0: port 3(veth0_vlan) entered disabled state [ 1186.686768][T24013] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1191.060840][T24095] netlink: 'syz.0.6386': attribute type 16 has an invalid length. [ 1191.084720][T24095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1192.720465][T24084] netlink: 'syz.5.6381': attribute type 10 has an invalid length. [ 1192.785429][T24084] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6381'. [ 1193.017285][T24084] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1203.854400][T24221] netlink: 'syz.0.6430': attribute type 1 has an invalid length. [ 1203.899768][T24221] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1204.148327][T24221] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1207.246323][T24270] netlink: 'syz.5.6446': attribute type 16 has an invalid length. [ 1207.257231][T24270] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6446'. [ 1207.337214][T24265] FAULT_INJECTION: forcing a failure. [ 1207.337214][T24265] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.384084][T24265] CPU: 0 PID: 24265 Comm: syz.0.6444 Not tainted syzkaller #0 [ 1207.391656][T24265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1207.401768][T24265] Call Trace: [ 1207.405095][T24265] [ 1207.408074][T24265] dump_stack_lvl+0x188/0x24e [ 1207.412805][T24265] ? show_regs_print_info+0x12/0x12 [ 1207.418059][T24265] ? load_image+0x400/0x400 [ 1207.422649][T24265] ? __might_sleep+0xd0/0xd0 [ 1207.427324][T24265] ? __lock_acquire+0x7d10/0x7d10 [ 1207.432436][T24265] should_fail_ex+0x399/0x4d0 [ 1207.437183][T24265] should_failslab+0x5/0x20 [ 1207.441761][T24265] slab_pre_alloc_hook+0x59/0x310 [ 1207.446873][T24265] kmem_cache_alloc_node+0x5a/0x320 [ 1207.452151][T24265] ? __dev_queue_xmit+0x26b/0x37c0 [ 1207.457331][T24265] ? __alloc_skb+0xfc/0x7e0 [ 1207.461904][T24265] __alloc_skb+0xfc/0x7e0 [ 1207.466327][T24265] netlink_ack+0x372/0x1170 [ 1207.470929][T24265] ? __inet_diag_dump+0x380/0x380 [ 1207.476120][T24265] ? __lock_acquire+0x7d10/0x7d10 [ 1207.481221][T24265] ? netlink_dump+0xd00/0xd00 [ 1207.485948][T24265] ? __inet_diag_dump+0x380/0x380 [ 1207.491042][T24265] ? sock_diag_rcv_msg+0x3f6/0x5f0 [ 1207.496295][T24265] netlink_rcv_skb+0x280/0x450 [ 1207.501111][T24265] ? sock_diag_bind+0xa0/0xa0 [ 1207.505846][T24265] ? netlink_ack+0x1170/0x1170 [ 1207.510690][T24265] ? netlink_deliver_tap+0x2e/0x1b0 [ 1207.515950][T24265] sock_diag_rcv+0x26/0x40 [ 1207.520422][T24265] netlink_unicast+0x74d/0x8d0 [ 1207.525302][T24265] netlink_sendmsg+0x8ad/0xbd0 [ 1207.530129][T24265] ? netlink_getsockopt+0x550/0x550 [ 1207.535458][T24265] ? aa_sock_msg_perm+0x94/0x150 [ 1207.540542][T24265] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1207.545873][T24265] ? security_socket_sendmsg+0x7c/0xa0 [ 1207.551391][T24265] ? netlink_getsockopt+0x550/0x550 [ 1207.556646][T24265] ____sys_sendmsg+0x5be/0x970 [ 1207.561468][T24265] ? __sys_sendmsg_sock+0x30/0x30 [ 1207.566726][T24265] ? __import_iovec+0x315/0x500 [ 1207.571777][T24265] ? import_iovec+0x6f/0xa0 [ 1207.576367][T24265] ___sys_sendmsg+0x2a2/0x360 [ 1207.581111][T24265] ? __sys_sendmsg+0x290/0x290 [ 1207.585944][T24265] ? __lock_acquire+0x7d10/0x7d10 [ 1207.591047][T24265] __se_sys_sendmsg+0x1bb/0x2a0 [ 1207.595945][T24265] ? __x64_sys_sendmsg+0x80/0x80 [ 1207.600941][T24265] ? lockdep_hardirqs_on+0x94/0x140 [ 1207.606188][T24265] do_syscall_64+0x4c/0xa0 [ 1207.610736][T24265] ? clear_bhb_loop+0x60/0xb0 [ 1207.615466][T24265] ? clear_bhb_loop+0x60/0xb0 [ 1207.620196][T24265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1207.626148][T24265] RIP: 0033:0x7f50c039ce59 [ 1207.630606][T24265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.650340][T24265] RSP: 002b:00007f50c1242028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.658849][T24265] RAX: ffffffffffffffda RBX: 00007f50c0615fa0 RCX: 00007f50c039ce59 [ 1207.666948][T24265] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1207.675045][T24265] RBP: 00007f50c1242090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.683058][T24265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1207.691071][T24265] R13: 00007f50c0616038 R14: 00007f50c0615fa0 R15: 00007ffc6f122328 [ 1207.699113][T24265] [ 1208.375498][T24284] netlink: 'syz.5.6451': attribute type 1 has an invalid length. [ 1208.425955][T24284] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6451'. [ 1208.708659][T24299] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6451'. [ 1210.309182][T21168] Bluetooth: hci5: command 0x0406 tx timeout [ 1214.344880][T24377] netlink: 'syz.1.6474': attribute type 1 has an invalid length. [ 1214.376360][T24377] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1214.550993][T24380] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1218.857057][T24421] netlink: 'syz.4.6493': attribute type 1 has an invalid length. [ 1218.883508][T24421] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1219.142144][T24434] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1220.555849][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 1221.582907][T24473] netlink: 'syz.2.6509': attribute type 1 has an invalid length. [ 1221.658453][T24473] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6509'. [ 1222.084268][T24480] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6509'. [ 1224.855083][T24493] netlink: 'syz.4.6514': attribute type 1 has an invalid length. [ 1224.899027][T24493] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6514'. [ 1225.748410][T24526] netlink: 'syz.0.6524': attribute type 1 has an invalid length. [ 1225.758539][T24526] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6524'. [ 1225.897858][T24530] netlink: 'syz.4.6526': attribute type 2 has an invalid length. [ 1225.996702][T24530] device 0 entered promiscuous mode [ 1227.408245][T24566] netlink: 'syz.4.6542': attribute type 1 has an invalid length. [ 1227.454562][T24566] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6542'. [ 1230.360267][T24613] netlink: 'syz.2.6555': attribute type 1 has an invalid length. [ 1230.368784][T24613] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6555'. [ 1233.451379][T24659] netlink: 'syz.0.6572': attribute type 1 has an invalid length. [ 1233.473668][T24659] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1234.084508][T24661] device syzkaller0 entered promiscuous mode [ 1234.492647][T24675] netlink: 'syz.2.6577': attribute type 10 has an invalid length. [ 1235.195109][T24675] device veth0_vlan left promiscuous mode [ 1235.220194][T24675] device veth0_vlan entered promiscuous mode [ 1235.261936][T24675] team0: Device veth0_vlan failed to register rx_handler [ 1235.916013][T24695] netlink: 'syz.4.6583': attribute type 1 has an invalid length. [ 1235.982199][T24695] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6583'. [ 1236.508500][T24714] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1236.552959][T24714] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1236.570738][T24716] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1236.591541][T24714] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1236.685839][T24716] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1236.816890][T24719] netlink: 'syz.5.6590': attribute type 27 has an invalid length. [ 1236.892292][T24719] netlink: 'syz.5.6590': attribute type 4 has an invalid length. [ 1236.981999][T24719] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6590'. [ 1238.274252][T24739] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6598'. [ 1238.695866][T24749] validate_nla: 1 callbacks suppressed [ 1238.695886][T24749] netlink: 'syz.0.6601': attribute type 39 has an invalid length. [ 1238.806159][T24749] netlink: 'syz.0.6601': attribute type 19 has an invalid length. [ 1240.288359][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1240.297869][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1240.307470][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1240.317332][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1240.337669][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1240.345346][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1240.595827][T24786] netlink: 'syz.0.6614': attribute type 1 has an invalid length. [ 1240.617322][T24786] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1240.720492][T24793] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1241.107063][T24797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6617'. [ 1241.206152][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.393233][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.419998][T24805] netlink: 'syz.4.6619': attribute type 11 has an invalid length. [ 1241.436033][T24805] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6619'. [ 1242.389666][T21168] Bluetooth: hci2: command 0x0409 tx timeout [ 1244.075179][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.094252][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.468870][T21168] Bluetooth: hci2: command 0x041b tx timeout [ 1244.580023][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1244.607302][ T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.811213][ T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.888625][T24780] chnl_net:caif_netlink_parms(): no params data found [ 1245.245939][T24839] device syzkaller0 entered promiscuous mode [ 1245.861751][T24780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.873150][T24780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.882113][T24780] device bridge_slave_0 entered promiscuous mode [ 1245.891246][T24853] netlink: 'syz.0.6631': attribute type 2 has an invalid length. [ 1245.918705][T24854] netlink: 'syz.0.6631': attribute type 10 has an invalid length. [ 1245.937904][T24854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.149005][T21168] Bluetooth: hci4: command 0x0406 tx timeout [ 1246.209361][T24854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.238708][T24854] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1246.284162][T24780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.298960][T24780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.316756][T24780] device bridge_slave_1 entered promiscuous mode [ 1246.398663][ T75] tipc: Left network mode [ 1246.444015][T24780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.477210][T24780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.548945][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1246.620314][T24869] netlink: 'syz.0.6635': attribute type 11 has an invalid length. [ 1246.629830][T24869] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6635'. [ 1246.670541][T24872] netlink: 'syz.4.6634': attribute type 1 has an invalid length. [ 1246.786046][T24872] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1246.843316][T24874] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6634'. [ 1248.639458][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1249.561119][T24868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1249.853164][T24780] team0: Port device team_slave_0 added [ 1250.003910][T24780] team0: Port device team_slave_1 added [ 1250.404730][T24780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.423654][T24780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.538906][T24780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.734390][T24780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.754003][T24780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.838963][T24780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.099932][T24780] device hsr_slave_0 entered promiscuous mode [ 1252.189199][T24780] device hsr_slave_1 entered promiscuous mode [ 1252.225378][T24780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.276853][T24780] Cannot create hsr debugfs directory [ 1252.283208][T24928] netlink: 'syz.0.6648': attribute type 1 has an invalid length. [ 1252.339127][T24928] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1252.364457][T24934] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1252.428116][T24930] netlink: 'syz.2.6649': attribute type 11 has an invalid length. [ 1252.469157][T24930] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1255.437061][T24929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.697480][T24957] netlink: 'syz.1.6660': attribute type 1 has an invalid length. [ 1255.724457][T24957] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6660'. [ 1255.974836][T24957] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6660'. [ 1256.778316][T24970] netlink: 'syz.0.6652': attribute type 1 has an invalid length. [ 1256.869258][T24970] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1256.875829][T24978] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1257.858631][T24995] netlink: 'syz.0.6667': attribute type 1 has an invalid length. [ 1257.879088][T24995] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6667'. [ 1258.137362][T25002] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6667'. [ 1258.961192][T25014] netlink: 'syz.1.6663': attribute type 11 has an invalid length. [ 1258.980178][T25014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6663'. [ 1261.924119][T25013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.844227][T25033] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 1262.859198][T25033] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1262.905609][T25035] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1265.129579][ T75] device veth1_macvtap left promiscuous mode [ 1265.147063][ T75] device veth0_macvtap left promiscuous mode [ 1265.166172][ T75] device veth1_vlan left promiscuous mode [ 1265.687253][ T75] device hsr_slave_0 left promiscuous mode [ 1265.696097][ T75] team0 (unregistering): Port device hsr_slave_0 removed [ 1265.725452][ T75] device veth0_to_hsr left promiscuous mode [ 1265.732544][ T75] team0 (unregistering): Port device veth0_to_hsr removed [ 1265.847541][ T75] device team_slave_1 left promiscuous mode [ 1265.855673][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1265.904901][ T75] device team_slave_0 left promiscuous mode [ 1265.913176][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1265.961724][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.012247][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.374611][ T75] bond0 (unregistering): Released all slaves [ 1266.478607][T24780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1266.535923][T24780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1266.603599][T24780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1266.652576][T24780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1266.703346][T25044] netlink: 'syz.2.6670': attribute type 1 has an invalid length. [ 1266.732701][T25044] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6670'. [ 1267.043723][T25044] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6670'. [ 1267.709268][T24780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.793599][T24780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.822539][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1267.841734][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1267.921081][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.951027][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.974612][T25062] netlink: 'syz.1.6673': attribute type 1 has an invalid length. [ 1267.974972][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.982903][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.011162][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1268.029080][T25062] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6673'. [ 1268.040136][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1268.062296][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.069531][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.120764][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1268.139660][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1268.191183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1268.223730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1268.246870][T25062] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6673'. [ 1268.256472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1268.267430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1268.291905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1268.312337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1268.342250][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1268.362099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1268.378356][T24780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1268.407460][T24780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1268.421357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1268.443224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1269.022441][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1269.037667][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1269.053826][T24780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.505864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1269.520392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1269.563669][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1269.579918][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1269.595929][T24780] device veth0_vlan entered promiscuous mode [ 1269.605838][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1269.621975][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1269.639352][T24780] device veth1_vlan entered promiscuous mode [ 1269.691683][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1269.704802][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1269.715382][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1269.728702][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1269.747238][T24780] device veth0_macvtap entered promiscuous mode [ 1269.771326][T24780] device veth1_macvtap entered promiscuous mode [ 1269.797653][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.814017][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.824311][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.835614][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.847138][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.857910][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.874187][T24780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.883364][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1269.896757][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1269.905578][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1269.920505][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1269.937226][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.948568][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.964721][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.976076][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.986479][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.003210][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.014514][T24780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1270.030640][T24780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.043831][T24780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.054031][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1270.064816][T24409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1270.078080][T24780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.095578][T24780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.105172][T24780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.119874][T24780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.237569][T24409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.259395][T24409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.272038][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1270.297539][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.305625][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.317786][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1270.474317][T25109] netlink: 'syz.4.6689': attribute type 1 has an invalid length. [ 1270.499692][T25109] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6689'. [ 1270.522664][T25115] netlink: 'syz.2.6688': attribute type 1 has an invalid length. [ 1270.590406][T25115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6688'. [ 1270.706875][T25120] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6689'. [ 1271.749107][T21168] Bluetooth: hci1: command 0x0406 tx timeout [ 1272.290363][T25129] netlink: 'syz.5.6676': attribute type 11 has an invalid length. [ 1272.319598][T25129] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6676'. [ 1275.272656][T25128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1275.477867][T25174] netlink: 'syz.1.6681': attribute type 1 has an invalid length. [ 1275.524183][T25174] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1275.787139][T25174] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1278.139464][T25199] netlink: 'syz.1.6695': attribute type 1 has an invalid length. [ 1278.163648][T25199] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6695'. [ 1279.011040][T25203] netlink: 'syz.5.6696': attribute type 1 has an invalid length. [ 1279.037085][T25203] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6696'. [ 1279.191690][T25203] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6696'. [ 1281.445088][T25241] netlink: 'syz.4.6710': attribute type 1 has an invalid length. [ 1281.453648][T25241] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6710'. [ 1282.009968][T25248] netlink: 'syz.0.6712': attribute type 1 has an invalid length. [ 1282.047610][T25248] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1282.243830][T25251] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1284.049319][T25280] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 1284.068542][T25280] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6727'. [ 1284.799848][T25294] netlink: 'syz.2.6731': attribute type 1 has an invalid length. [ 1284.818549][T25294] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6731'. [ 1286.170584][T25314] netlink: 'syz.1.6740': attribute type 1 has an invalid length. [ 1286.179297][T25314] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1287.203623][T25331] netlink: 'syz.2.6744': attribute type 1 has an invalid length. [ 1287.218969][T25331] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6744'. [ 1287.545393][T25341] netlink: 'syz.4.6747': attribute type 1 has an invalid length. [ 1287.615831][T25341] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6747'. [ 1288.831920][T25353] netlink: 'syz.5.6754': attribute type 1 has an invalid length. [ 1288.852471][T25353] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6754'. [ 1291.484635][T25377] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 1291.514101][T25377] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1292.017227][T25386] netlink: 'syz.2.6766': attribute type 1 has an invalid length. [ 1292.040307][T25386] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6766'. [ 1294.850274][T25404] netlink: 'syz.0.6771': attribute type 1 has an invalid length. [ 1294.866115][T25404] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1295.031488][T25411] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1296.694705][T25419] netlink: 'syz.1.6778': attribute type 1 has an invalid length. [ 1296.731010][T25419] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6778'. [ 1296.965955][T25424] netlink: 'syz.4.6779': attribute type 1 has an invalid length. [ 1296.996573][T25424] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6779'. [ 1297.013987][T25428] netlink: 'syz.1.6782': attribute type 1 has an invalid length. [ 1297.035936][T25428] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1297.943564][T25442] netlink: 'syz.2.6785': attribute type 11 has an invalid length. [ 1297.954094][T25442] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6785'. [ 1298.649486][T25458] netlink: 'syz.0.6790': attribute type 1 has an invalid length. [ 1298.681762][T25458] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1298.716915][T25441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.115271][T25462] netlink: 'syz.2.6792': attribute type 1 has an invalid length. [ 1299.144813][T25462] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6792'. [ 1299.272656][T25465] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6792'. [ 1299.815734][T25467] netlink: 'syz.4.6793': attribute type 1 has an invalid length. [ 1299.839308][T25467] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1300.023797][T25473] netlink: 'syz.1.6805': attribute type 1 has an invalid length. [ 1300.045565][T25473] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6805'. [ 1300.506687][T25479] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6805'. [ 1304.797870][T25538] netlink: 'syz.5.6816': attribute type 1 has an invalid length. [ 1304.823311][T25538] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6816'. [ 1304.946240][T25538] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6816'. [ 1305.362447][T25542] netlink: 'syz.2.6817': attribute type 1 has an invalid length. [ 1305.390769][T25542] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6817'. [ 1305.452956][T25546] netlink: 'syz.4.6818': attribute type 1 has an invalid length. [ 1305.477314][T25546] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1305.560499][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.566892][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.662153][T25552] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1305.903197][T25557] netlink: 'syz.1.6821': attribute type 1 has an invalid length. [ 1305.914040][T25557] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6821'. [ 1308.514695][T25585] netlink: 'syz.5.6831': attribute type 1 has an invalid length. [ 1308.540264][T25585] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6831'. [ 1308.708284][T25585] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6831'. [ 1308.848162][T25596] netlink: 'syz.0.6836': attribute type 1 has an invalid length. [ 1308.867923][T25596] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1308.947353][T25599] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6836'. [ 1311.536140][T25635] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 1311.586533][T25635] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1311.748644][T25641] netlink: 'syz.4.6850': attribute type 1 has an invalid length. [ 1311.757302][T25641] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1311.800562][T25642] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6849'. [ 1311.870991][T25645] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6850'. [ 1314.229638][T25686] netlink: 'syz.2.6866': attribute type 1 has an invalid length. [ 1314.238366][T25686] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6866'. [ 1314.306447][T25688] netlink: 'syz.0.6867': attribute type 1 has an invalid length. [ 1314.332689][T25688] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1318.866622][T25725] netlink: 'syz.2.6881': attribute type 1 has an invalid length. [ 1318.926653][T25725] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1319.090848][T25731] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1319.688392][T25736] netlink: 'syz.4.6884': attribute type 1 has an invalid length. [ 1319.761847][T25736] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6884'. [ 1321.347306][T25752] netlink: 'syz.0.6888': attribute type 1 has an invalid length. [ 1321.397432][T25752] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1321.537666][T25759] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1322.434471][T25768] netlink: 'syz.4.6892': attribute type 1 has an invalid length. [ 1322.479016][T25768] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1322.739475][T25778] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6892'. [ 1323.986560][T25793] netlink: 'syz.1.6901': attribute type 1 has an invalid length. [ 1324.011781][T25793] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1324.148598][T25801] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6901'. [ 1324.645979][T25805] netlink: 'syz.0.6904': attribute type 1 has an invalid length. [ 1324.670654][T25805] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1326.467475][T25835] netlink: 'syz.5.6914': attribute type 1 has an invalid length. [ 1326.517438][T25835] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6914'. [ 1326.541562][T25837] netlink: 'syz.4.6913': attribute type 1 has an invalid length. [ 1326.572531][T25837] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1326.653107][T25843] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1326.804652][T25847] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6914'. [ 1327.620730][T25856] netlink: 'syz.5.6919': attribute type 1 has an invalid length. [ 1327.696373][T25856] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6919'. [ 1327.757314][T25861] netlink: 'syz.0.6921': attribute type 1 has an invalid length. [ 1327.766391][T25861] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6921'. [ 1327.783164][T25859] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6919'. [ 1330.486720][T25888] netlink: 'syz.1.6931': attribute type 1 has an invalid length. [ 1330.554367][T25888] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6931'. [ 1330.555715][T25894] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6931'. [ 1332.901344][T25905] netlink: 'syz.2.6932': attribute type 1 has an invalid length. [ 1332.914261][T25905] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1333.026625][T25909] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1333.281148][T25913] netlink: 'syz.5.6938': attribute type 1 has an invalid length. [ 1333.331936][T25913] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6938'. [ 1333.339243][T25915] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.6938'. [ 1333.488829][T25917] netlink: 'syz.4.6939': attribute type 1 has an invalid length. [ 1333.497298][T25917] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6939'. [ 1337.308394][T25941] netlink: 'syz.2.6948': attribute type 21 has an invalid length. [ 1337.355254][T25941] netlink: 'syz.2.6948': attribute type 1 has an invalid length. [ 1337.724973][T25958] netlink: 'syz.1.6956': attribute type 1 has an invalid length. [ 1337.757163][T25958] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1337.848301][T25963] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1338.677965][T25972] FAULT_INJECTION: forcing a failure. [ 1338.677965][T25972] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.729018][T25972] CPU: 0 PID: 25972 Comm: syz.2.6959 Not tainted syzkaller #0 [ 1338.736587][T25972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1338.747027][T25972] Call Trace: [ 1338.750358][T25972] [ 1338.753328][T25972] dump_stack_lvl+0x188/0x24e [ 1338.758114][T25972] ? show_regs_print_info+0x12/0x12 [ 1338.763462][T25972] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.768719][T25972] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1338.774974][T25972] should_fail_ex+0x399/0x4d0 [ 1338.779738][T25972] should_failslab+0x5/0x20 [ 1338.784304][T25972] slab_pre_alloc_hook+0x59/0x310 [ 1338.789394][T25972] ? apparmor_sk_alloc_security+0x74/0x100 [ 1338.795255][T25972] __kmem_cache_alloc_node+0x4f/0x260 [ 1338.800676][T25972] ? apparmor_sk_alloc_security+0x74/0x100 [ 1338.806520][T25972] kmalloc_trace+0x26/0xe0 [ 1338.810988][T25972] apparmor_sk_alloc_security+0x74/0x100 [ 1338.816655][T25972] security_sk_alloc+0x6a/0xa0 [ 1338.821451][T25972] sk_prot_alloc+0x101/0x210 [ 1338.826083][T25972] ? sk_alloc+0x20/0x340 [ 1338.830362][T25972] sk_alloc+0x36/0x340 [ 1338.834461][T25972] ? bpf_ctx_init+0x163/0x1a0 [ 1338.839173][T25972] ? bpf_prog_test_run_skb+0x275/0x1890 [ 1338.845024][T25972] bpf_prog_test_run_skb+0x371/0x1890 [ 1338.850435][T25972] ? __fget_files+0x28/0x4b0 [ 1338.855080][T25972] ? cpu_online+0xa0/0xa0 [ 1338.859445][T25972] bpf_prog_test_run+0x31e/0x390 [ 1338.864421][T25972] __sys_bpf+0x62b/0x780 [ 1338.868701][T25972] ? bpf_link_show_fdinfo+0x380/0x380 [ 1338.874301][T25972] ? lock_chain_count+0x20/0x20 [ 1338.879187][T25972] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1338.885303][T25972] __x64_sys_bpf+0x78/0x90 [ 1338.889758][T25972] do_syscall_64+0x4c/0xa0 [ 1338.894206][T25972] ? clear_bhb_loop+0x60/0xb0 [ 1338.898919][T25972] ? clear_bhb_loop+0x60/0xb0 [ 1338.903639][T25972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.909571][T25972] RIP: 0033:0x7f94ccf9ce59 [ 1338.914015][T25972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.933674][T25972] RSP: 002b:00007f94cde43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1338.942119][T25972] RAX: ffffffffffffffda RBX: 00007f94cd216090 RCX: 00007f94ccf9ce59 [ 1338.950116][T25972] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1338.958112][T25972] RBP: 00007f94cde43090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.966198][T25972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.974196][T25972] R13: 00007f94cd216128 R14: 00007f94cd216090 R15: 00007ffe0df4baa8 [ 1338.982213][T25972] [ 1339.375952][T25986] netlink: 'syz.1.6962': attribute type 1 has an invalid length. [ 1339.414350][T25986] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6962'. [ 1341.904442][T26015] netlink: 'syz.4.6973': attribute type 1 has an invalid length. [ 1341.946748][T26015] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1342.005532][T26015] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6973'. [ 1342.952558][T26031] netlink: 'syz.1.6976': attribute type 1 has an invalid length. [ 1342.979054][T26031] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6976'. [ 1344.489703][T26052] netlink: 'syz.4.6983': attribute type 1 has an invalid length. [ 1344.497885][T26052] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6983'. [ 1344.630399][T26056] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6983'. [ 1349.090825][T26101] netlink: 'syz.5.6996': attribute type 1 has an invalid length. [ 1349.135638][T26101] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6996'. [ 1352.415125][T26120] netlink: 'syz.2.7002': attribute type 1 has an invalid length. [ 1352.501006][T26119] netlink: 'syz.0.7004': attribute type 1 has an invalid length. [ 1352.515461][T26120] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7002'. [ 1352.552527][T26119] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1352.665764][T26124] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7002'. [ 1352.735607][T26125] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7004'. [ 1359.353684][T26157] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7013'. [ 1359.684020][T26167] netlink: 'syz.0.7016': attribute type 1 has an invalid length. [ 1359.699991][T26167] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1359.935224][T26169] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7016'. [ 1360.427182][T26172] netlink: 'syz.1.7019': attribute type 29 has an invalid length. [ 1360.599565][T26172] netlink: 'syz.1.7019': attribute type 29 has an invalid length. [ 1360.655475][T26178] netlink: 'syz.1.7019': attribute type 29 has an invalid length. [ 1361.061176][T26183] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1361.076677][T26181] netlink: 'syz.1.7019': attribute type 29 has an invalid length. [ 1363.909512][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1364.673032][T26205] netlink: 'syz.1.7030': attribute type 1 has an invalid length. [ 1364.725446][T26205] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7030'. [ 1365.011641][T26214] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7030'. [ 1365.594444][T26216] netlink: 'syz.5.7031': attribute type 29 has an invalid length. [ 1365.607903][T26222] netlink: 'syz.0.7032': attribute type 4 has an invalid length. [ 1365.630307][T26222] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1365.727157][T26222] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1365.758623][T26224] delete_channel: no stack [ 1365.787323][T26216] netlink: 'syz.5.7031': attribute type 29 has an invalid length. [ 1365.937194][T26223] netlink: 'syz.5.7031': attribute type 29 has an invalid length. [ 1365.964475][T26228] netlink: 'syz.5.7031': attribute type 29 has an invalid length. [ 1366.954212][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.960745][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.094558][T26261] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 1368.160934][T26261] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7045'. [ 1368.258341][T26265] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7045'. [ 1370.302753][T26284] netlink: 'syz.4.7051': attribute type 29 has an invalid length. [ 1370.349904][T26284] netlink: 'syz.4.7051': attribute type 29 has an invalid length. [ 1370.411495][T26291] netlink: 'syz.4.7051': attribute type 29 has an invalid length. [ 1370.502879][T26284] netlink: 'syz.4.7051': attribute type 29 has an invalid length. [ 1372.270232][T26310] netlink: 'syz.5.7061': attribute type 39 has an invalid length. [ 1373.312432][T26310] device veth0_macvtap left promiscuous mode [ 1375.090740][T26346] netlink: 'syz.0.7071': attribute type 29 has an invalid length. [ 1375.166903][T26346] netlink: 'syz.0.7071': attribute type 29 has an invalid length. [ 1375.232351][T26350] netlink: 'syz.0.7071': attribute type 29 has an invalid length. [ 1375.267077][T26354] netlink: 'syz.2.7075': attribute type 29 has an invalid length. [ 1375.280471][T26352] netlink: 'syz.0.7071': attribute type 29 has an invalid length. [ 1375.299842][T26354] netlink: 'syz.2.7075': attribute type 29 has an invalid length. [ 1375.310392][T26354] netlink: 'syz.2.7075': attribute type 29 has an invalid length. [ 1375.319174][T26354] netlink: 'syz.2.7075': attribute type 29 has an invalid length. [ 1375.342375][T26354] netlink: 'syz.2.7075': attribute type 29 has an invalid length. [ 1376.295936][T26382] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1376.434601][T26385] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1377.156680][T26383] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1377.168988][T26383] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7085'. [ 1378.030861][T26410] validate_nla: 2 callbacks suppressed [ 1378.030928][T26410] netlink: 'syz.1.7093': attribute type 10 has an invalid length. [ 1378.151490][T26410] device hsr0 entered promiscuous mode [ 1378.207576][T26410] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1378.293416][T26414] tipc: Started in network mode [ 1378.298645][T26414] tipc: Node identity 9215a268, cluster identity 4711 [ 1378.346231][T26414] tipc: Node number set to 2450891368 [ 1378.698535][T26412] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7093'. [ 1379.429832][T26441] netlink: 'syz.4.7101': attribute type 1 has an invalid length. [ 1379.462893][T26441] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1379.650994][T26446] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1379.816095][T21168] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 1384.255485][T26488] netlink: 'syz.4.7113': attribute type 1 has an invalid length. [ 1384.275375][T26488] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7113'. [ 1384.406270][T26492] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.7113'. [ 1386.580362][T26508] netlink: 'syz.5.7120': attribute type 1 has an invalid length. [ 1386.624859][T26508] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7120'. [ 1386.674051][T26514] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.7120'. [ 1387.315002][T26535] netlink: 'syz.2.7127': attribute type 17 has an invalid length. [ 1387.437934][T26535] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.7127'. [ 1492.958766][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1492.965835][ C1] rcu: 0-...!: (1 GPs behind) idle=7d84/1/0x4000000000000000 softirq=101915/101918 fqs=0 [ 1492.977557][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26529/1:b..l [ 1492.985726][ C1] (detected by 1, t=10506 jiffies, g=138357, q=47 ncpus=2) [ 1492.993136][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1492.998620][ C0] NMI backtrace for cpu 0 [ 1492.998637][ C0] CPU: 0 PID: 4373 Comm: kworker/0:7 Not tainted syzkaller #0 [ 1492.998656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1492.998670][ C0] Workqueue: events drain_vmap_area_work [ 1492.998706][ C0] RIP: 0010:native_apic_msr_eoi_write+0xb/0x10 [ 1492.998826][ C0] Code: 8b 06 bf f0 03 00 00 89 de 5b 41 5e 41 5f ff e0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b9 0b 08 00 00 31 c0 31 d2 0f 30 0f 1f 40 00 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 1492.998843][ C0] RSP: 0018:ffffc90000007fd0 EFLAGS: 00000046 [ 1492.998859][ C0] RAX: 0000000000000000 RBX: ffffffff8c658b30 RCX: 000000000000080b [ 1492.998873][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 1492.998885][ C0] RBP: 0000000000000000 R08: ffffffff8fa14008 R09: ffffffff8fa14018 [ 1492.998899][ C0] R10: ffffffff8fa14010 R11: ffffffff8fa14003 R12: 0000000000000000 [ 1492.998912][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1492.998925][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1492.998941][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1492.998955][ C0] CR2: 00007f99667456b8 CR3: 000000004bd16000 CR4: 00000000003506f0 [ 1492.998972][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1492.998985][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1492.998997][ C0] Call Trace: [ 1492.999006][ C0] [ 1492.999012][ C0] __sysvec_irq_work+0x53/0x350 [ 1492.999068][ C0] sysvec_irq_work+0x98/0xc0 [ 1492.999092][ C0] [ 1492.999098][ C0] [ 1492.999290][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1492.999338][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1492.999437][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 82 30 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1492.999452][ C0] RSP: 0018:ffffc90004727800 EFLAGS: 00000206 [ 1492.999469][ C0] RAX: 0fb20e44cd3ee800 RBX: 1ffff920008e4f08 RCX: 0fb20e44cd3ee800 [ 1492.999483][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 1492.999497][ C0] RBP: ffffc900047278e8 R08: ffffffff90aff247 R09: 1ffffffff215fe48 [ 1492.999510][ C0] R10: dffffc0000000000 R11: fffffbfff215fe49 R12: 0000000000000246 [ 1492.999523][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 1492.999550][ C0] ? kasan_release_vmalloc+0x93/0xb0 [ 1492.999571][ C0] ? __purge_vmap_area_lazy+0xf7e/0x1920 [ 1492.999594][ C0] ? free_vmap_area_rb_augment_cb_rotate+0x160/0x170 [ 1492.999618][ C0] ? worker_thread+0xaa2/0x1270 [ 1492.999664][ C0] ? kthread+0x29d/0x330 [ 1492.999709][ C0] ? ret_from_fork+0x1f/0x30 [ 1492.999770][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1492.999788][ C0] ? page_ext_get+0x1e/0x2a0 [ 1492.999851][ C0] ? page_ext_get+0x1de/0x2a0 [ 1492.999878][ C0] __rcu_read_unlock+0x78/0xd0 [ 1492.999897][ C0] page_ext_put+0x91/0xb0 [ 1492.999920][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 1492.999952][ C0] free_unref_page+0x2e/0x3f0 [ 1492.999980][ C0] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 1493.000000][ C0] __apply_to_page_range+0x989/0xd10 [ 1493.000033][ C0] ? kasan_release_vmalloc+0xb0/0xb0 [ 1493.000056][ C0] kasan_release_vmalloc+0x93/0xb0 [ 1493.000073][ C0] __purge_vmap_area_lazy+0xf7e/0x1920 [ 1493.000109][ C0] ? purge_fragmented_blocks_allcpus+0x970/0x970 [ 1493.000132][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1493.000156][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1493.000178][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1493.000202][ C0] ? process_one_work+0x7b0/0x1160 [ 1493.000221][ C0] drain_vmap_area_work+0x3c/0xd0 [ 1493.000255][ C0] ? process_one_work+0x7b0/0x1160 [ 1493.000274][ C0] process_one_work+0x8a2/0x1160 [ 1493.000306][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1493.000326][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 1493.000351][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1493.000373][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1493.000396][ C0] ? kthread_data+0x4b/0xc0 [ 1493.000425][ C0] worker_thread+0xaa2/0x1270 [ 1493.000460][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1493.000501][ C0] kthread+0x29d/0x330 [ 1493.000515][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1493.000535][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1493.000552][ C0] ret_from_fork+0x1f/0x30 [ 1493.000586][ C0] [ 1493.000632][ C1] task:syz.4.7125 state:R running task stack:25712 pid:26529 ppid:23325 flags:0x00004000 [ 1493.451466][ C1] Call Trace: [ 1493.454822][ C1] [ 1493.457966][ C1] __schedule+0x11d1/0x40e0 [ 1493.462579][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 1493.467289][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1493.473352][ C1] ? __sched_text_start+0x8/0x8 [ 1493.478285][ C1] ? lock_chain_count+0x20/0x20 [ 1493.483609][ C1] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1493.489956][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 1493.495523][ C1] preempt_schedule_irq+0xbb/0x160 [ 1493.500743][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 1493.506732][ C1] ? rcu_is_watching+0x11/0xa0 [ 1493.511644][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1493.517640][ C1] irqentry_exit+0x63/0x70 [ 1493.522214][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1493.528305][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x196/0x1d0 [ 1493.535475][ C1] Code: 00 4d 85 e4 75 16 e8 d9 c4 0f 00 eb 15 e8 d2 c4 0f 00 e8 8d 9f bc 08 4d 85 e4 74 ea e8 c3 c4 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1493.556150][ C1] RSP: 0018:ffffc9000ef278c0 EFLAGS: 00000246 [ 1493.562525][ C1] RAX: ffffffff8172b6dd RBX: 0000000000000000 RCX: 0000000000080000 [ 1493.570739][ C1] RDX: ffffc90012927000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1493.579151][ C1] RBP: ffffc9000ef27970 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1493.587386][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000200 [ 1493.595552][ C1] R13: dffffc0000000000 R14: 1ffff92001de4f18 R15: dffffc0000000000 [ 1493.603609][ C1] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1493.610380][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1493.615745][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1493.621177][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1493.626452][ C1] ? __local_bh_enable_ip+0x136/0x1c0 [ 1493.631972][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1493.636874][ C1] ktime_get_coarse_ts64+0x19/0xf0 [ 1493.642131][ C1] bpf_ktime_get_coarse_ns+0x85/0x100 [ 1493.647881][ C1] ? bpf_ktime_get_boot_ns+0x10/0x10 [ 1493.653356][ C1] ? kasan_check_range+0x13/0x290 [ 1493.658566][ C1] bpf_prog_45b414baf143fabe+0x42/0x46 [ 1493.664310][ C1] bpf_test_run+0x2b6/0x830 [ 1493.669382][ C1] ? dst_hold+0xb0/0xb0 [ 1493.673678][ C1] ? eth_get_headlen+0x200/0x200 [ 1493.679083][ C1] ? convert___skb_to_skb+0x3d/0x580 [ 1493.684458][ C1] bpf_prog_test_run_skb+0xd88/0x1890 [ 1493.690211][ C1] ? cpu_online+0xa0/0xa0 [ 1493.694737][ C1] bpf_prog_test_run+0x31e/0x390 [ 1493.700126][ C1] __sys_bpf+0x62b/0x780 [ 1493.705313][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1493.710805][ C1] ? lock_chain_count+0x20/0x20 [ 1493.715775][ C1] __x64_sys_bpf+0x78/0x90 [ 1493.720468][ C1] do_syscall_64+0x4c/0xa0 [ 1493.724959][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1493.729942][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1493.734740][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1493.741734][ C1] RIP: 0033:0x7f312839ce59 [ 1493.746242][ C1] RSP: 002b:00007f31292a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1493.755351][ C1] RAX: ffffffffffffffda RBX: 00007f3128615fa0 RCX: 00007f312839ce59 [ 1493.763455][ C1] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1493.771592][ C1] RBP: 00007f3128432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1493.779736][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.787877][ C1] R13: 00007f3128616038 R14: 00007f3128615fa0 R15: 00007ffff2941758 [ 1493.796662][ C1] [ 1493.799774][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g138357 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1493.811294][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1493.823246][ C1] rcu: RCU grace-period kthread stack dump: [ 1493.829629][ C1] task:rcu_preempt state:R running task stack:27504 pid:16 ppid:2 flags:0x00004000 [ 1493.840599][ C1] Call Trace: [ 1493.843925][ C1] [ 1493.846917][ C1] __schedule+0x11d1/0x40e0 [ 1493.851513][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1493.857579][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1493.864181][ C1] ? __sched_text_start+0x8/0x8 [ 1493.869355][ C1] ? __mod_timer+0x91e/0xd00 [ 1493.874915][ C1] schedule+0xb9/0x180 [ 1493.879190][ C1] schedule_timeout+0x184/0x2d0 [ 1493.884296][ C1] ? console_conditional_schedule+0x40/0x40 [ 1493.890353][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1493.898004][ C1] ? update_process_times+0x1b0/0x1b0 [ 1493.904125][ C1] ? prepare_to_swait_event+0x335/0x350 [ 1493.911443][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 1493.917581][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1493.922679][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1493.928920][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 1493.933769][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1493.938948][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1493.944385][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1493.949639][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1493.955008][ C1] rcu_gp_kthread+0x99/0x3b0 [ 1493.960364][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1493.965580][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1493.971573][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1493.976699][ C1] kthread+0x29d/0x330 [ 1493.981174][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1493.986415][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1493.991079][ C1] ret_from_fork+0x1f/0x30 [ 1493.995579][ C1] [ 1493.998805][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1494.005185][ C1] CPU: 1 PID: 22381 Comm: syz-executor Not tainted syzkaller #0 [ 1494.012862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.022953][ C1] RIP: 0010:kvm_wait+0x159/0x1b0 [ 1494.027944][ C1] Code: 89 df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4b 0f b6 1f e8 47 42 50 00 44 38 e3 75 10 66 90 0f 00 2d 39 d7 50 09 fb f4 16 ff ff ff fb e9 10 ff ff ff e8 17 b3 f6 08 89 f9 80 e1 07 38 [ 1494.048132][ C1] RSP: 0018:ffffc900032372a0 EFLAGS: 00000246 [ 1494.054251][ C1] RAX: 02047f09127c9300 RBX: 0000000000000003 RCX: 02047f09127c9300 [ 1494.062270][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 1494.070375][ C1] RBP: ffffc90003237350 R08: ffffffff90aff24f R09: 1ffffffff215fe49 [ 1494.078393][ C1] R10: dffffc0000000000 R11: fffffbfff215fe4a R12: 0000000000000003 [ 1494.086436][ C1] R13: ffff8880b8f3b954 R14: dffffc0000000000 R15: 1ffff92000646e54 [ 1494.094713][ C1] FS: 0000555588725500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1494.103682][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1494.110397][ C1] CR2: 00007f94cd1e8158 CR3: 000000002e947000 CR4: 00000000003506e0 [ 1494.118507][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1494.126518][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1494.134533][ C1] Call Trace: [ 1494.137861][ C1] [ 1494.140843][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1494.146033][ C1] __pv_queued_spin_lock_slowpath+0x616/0x9c0 [ 1494.152200][ C1] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 1494.158749][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 1494.164305][ C1] do_raw_spin_lock+0x265/0x2f0 [ 1494.169220][ C1] ? __rwlock_init+0x140/0x140 [ 1494.174033][ C1] ? rcu_is_watching+0x11/0xa0 [ 1494.178857][ C1] ? kmem_cache_alloc_node+0x17b/0x320 [ 1494.184378][ C1] ? alloc_vmap_area+0x18e/0x18c0 [ 1494.189458][ C1] alloc_vmap_area+0x251/0x18c0 [ 1494.194384][ C1] ? vm_map_ram+0xab0/0xab0 [ 1494.198944][ C1] ? rcu_is_watching+0x11/0xa0 [ 1494.203772][ C1] __get_vm_area_node+0x158/0x330 [ 1494.208868][ C1] __vmalloc_node_range+0x357/0x13b0 [ 1494.214203][ C1] ? alloc_counters+0xcb/0x740 [ 1494.219129][ C1] ? __mutex_trylock_common+0x155/0x260 [ 1494.224731][ C1] ? mark_lock+0x94/0x320 [ 1494.229121][ C1] ? free_vm_area+0x50/0x50 [ 1494.233684][ C1] ? trace_contention_end+0x5f/0x170 [ 1494.239018][ C1] ? __mutex_lock+0x1ab/0xaf0 [ 1494.243750][ C1] ? alloc_counters+0xcb/0x740 [ 1494.248561][ C1] vzalloc+0x75/0x80 [ 1494.252506][ C1] ? alloc_counters+0xcb/0x740 [ 1494.257317][ C1] alloc_counters+0xcb/0x740 [ 1494.261953][ C1] ? mutex_lock_nested+0x10/0x10 [ 1494.266969][ C1] ? net_generic+0x1e/0x240 [ 1494.271633][ C1] ? compat_copy_entries_to_user+0x400/0x400 [ 1494.277792][ C1] do_arpt_get_ctl+0xa5d/0x1080 [ 1494.282700][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 1494.288666][ C1] ? do_arpt_set_ctl+0x1030/0x1030 [ 1494.293987][ C1] ? nf_getsockopt+0x21b/0x280 [ 1494.299805][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1494.304934][ C1] ? trace_contention_end+0x5f/0x170 [ 1494.310816][ C1] ? __mutex_lock+0x1ab/0xaf0 [ 1494.315555][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1494.321350][ C1] ? mutex_unlock+0x10/0x10 [ 1494.325912][ C1] ? __might_fault+0xa6/0x120 [ 1494.330685][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1494.335806][ C1] nf_getsockopt+0x25e/0x280 [ 1494.340510][ C1] ip_getsockopt+0x19b/0x230 [ 1494.345163][ C1] ? ct_irq_exit_irqson+0xd0/0x170 [ 1494.350348][ C1] ? ip_get_mcast_msfilter+0x3e0/0x3e0 [ 1494.355980][ C1] ? aa_sock_opt_perm+0x74/0x100 [ 1494.361055][ C1] ? sock_common_getsockopt+0x29/0xa0 [ 1494.367206][ C1] ? sock_recv_errqueue+0x580/0x580 [ 1494.372486][ C1] __sys_getsockopt+0x1b0/0x230 [ 1494.377475][ C1] __x64_sys_getsockopt+0xb1/0xc0 [ 1494.382549][ C1] do_syscall_64+0x4c/0xa0 [ 1494.387008][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1494.391748][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1494.396482][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.402456][ C1] RIP: 0033:0x7f94ccf9e62a [ 1494.406917][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1494.427065][ C1] RSP: 002b:00007ffe0df4b748 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 1494.436024][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f94ccf9e62a [ 1494.444227][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 1494.452246][ C1] RBP: 00007ffe0df4b7b0 R08: 00007ffe0df4b75c R09: 0000000000000000 [ 1494.462438][ C1] R10: 00007ffe0df4b7b0 R11: 0000000000000212 R12: 00007ffe0df4b75c [ 1494.470906][ C1] R13: 00007f94cd0337bd R14: 0000000000152bb4 R15: 00007ffe0df4bea0 [ 1494.479800][ C1]