last executing test programs: 6m50.605845909s ago: executing program 2 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000640)=""/137, 0x112, 0x89, 0x0, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1600000093fdffff000000000700000010d9", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB="861f3c"], 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xb0, &(0x7f00000002c0)=""/176, 0x41000, 0x9, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xc, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r3], &(0x7f00000008c0)=[{0x1, 0x1, 0x1, 0xb}], 0x10, 0x80}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x7fff, 0x80000001, 0xffff, 0x16002, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, @void, @value, @value=r4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r1}, 0xc) 6m50.367445684s ago: executing program 2 (id=1847): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x6, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61]}}, 0x0, 0x53}, 0x28) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x28, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e354016000180008e9279ed91d47825d7563c5ddbeceb16e7", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) write$cgroup_int(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002500)={r7, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m49.834410397s ago: executing program 2 (id=1851): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0x11, 0x5, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c0000000000000000000000080000001c"], 0x38}, 0x2000004) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext={0xc8e6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10f08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffe6d, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x10001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000940)=""/4124, 0x101c}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/89, 0x59}], 0x7}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r9, 0x7, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a80016002000044004", 0x39}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x801, 0xc8, 0x0, 0x1, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 6m49.287428391s ago: executing program 2 (id=1857): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0x9, [@union={0xb, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x5, 0x5, 0x1}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x59, 0x0, 0x3d, 0x4}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x5, [{0x10, 0x8, 0x80000001}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @datasec={0x8, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x80000001, 0x4}, {0x2, 0x5, 0x100}, {0x5, 0x81}, {0x4, 0x9, 0x8}], "ca"}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xc, 0x3}, {0x5}, {0x3}, {0xd, 0x2}]}, @union={0x9, 0x1, 0x0, 0x5, 0x0, 0x1000, [{0x6, 0x2, 0x5a85}]}]}, {0x0, [0x0, 0x0, 0x61, 0x5f, 0x173d458d0305546c, 0x30, 0x0]}}, &(0x7f0000000940)=""/54, 0xf9, 0x36, 0x0, 0x4, 0x10000}, 0x28) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x8d2142, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x2, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe978}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) (async, rerun: 64) r2 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x20000042, 0x0, 0x0, 0x0, 0x98, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x7fffffff, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x4, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0xa, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1}, 0x94) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 32) r9 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) (async) close(r9) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x13bb711e) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async, rerun: 64) close(r0) 6m48.567020569s ago: executing program 2 (id=1862): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b853886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x1, 0x1, 0x7, 0x6, 0x18, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x82, &(0x7f0000000340)=""/130, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x2, 0x12, 0x1}, {0x1, 0x1, 0x8}], 0x10, 0x6}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000840)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x28, 0x4, 0x8, 0xfffff038}, {0x6, 0x1, 0x2, 0x4}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) socket$kcm(0x28, 0x5, 0x0) 6m46.181975918s ago: executing program 2 (id=1872): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x119, 0x32, 0x0, 0x2a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe1589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8000900070002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810403600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000000dd814a4ea82ba35d7000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000000000fea201ec1225301b2bb3d06b47c37c09fc9df98d8a00a658dfa211a98dfbc0874bf685895998c0c01a24aee0f2d85c7f1452d2e430fab711f6856f3c82e3cd9550065768953d5cbd15db948544a740475751466932b4d656d41a2e644ef92e91891611c5dfb61d6e07b78dd0e28644fb0c9f25973e4bb874de5b17b0c2a6ed580ef71b0fdbf7b21ab1e2170adcfc", 0x169}], 0x1, 0x0, 0x0, 0x7400}, 0x28009) recvmsg$kcm(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a00)=[{0x0, 0x300}, {&(0x7f0000001600)=""/175, 0xaf}], 0x2}, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r2}, 0x4) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="aa638063206d2a32546c634d926d419e6ef0"], 0x5) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x0, 0x4}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffa3}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x5, 0x3, 0x800040, 0x42, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r8}, 0x38) 6m30.928388197s ago: executing program 32 (id=1872): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x119, 0x32, 0x0, 0x2a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe1589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb9040a1d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8000900070002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810403600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e00600000000000dd814a4ea82ba35d7000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000000000fea201ec1225301b2bb3d06b47c37c09fc9df98d8a00a658dfa211a98dfbc0874bf685895998c0c01a24aee0f2d85c7f1452d2e430fab711f6856f3c82e3cd9550065768953d5cbd15db948544a740475751466932b4d656d41a2e644ef92e91891611c5dfb61d6e07b78dd0e28644fb0c9f25973e4bb874de5b17b0c2a6ed580ef71b0fdbf7b21ab1e2170adcfc", 0x169}], 0x1, 0x0, 0x0, 0x7400}, 0x28009) recvmsg$kcm(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a00)=[{0x0, 0x300}, {&(0x7f0000001600)=""/175, 0xaf}], 0x2}, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r2}, 0x4) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="aa638063206d2a32546c634d926d419e6ef0"], 0x5) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x0, 0x4}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffa3}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x5, 0x3, 0x800040, 0x42, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r8}, 0x38) 5.258181609s ago: executing program 5 (id=3676): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x80000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.199750455s ago: executing program 5 (id=3681): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfe33) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) socketpair(0x26, 0x5, 0xc, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x80000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x4) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003867cd96000000000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8901, &(0x7f0000000080)) close(r3) 4.198050366s ago: executing program 3 (id=3682): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000900)={0x3, 0x80, 0x1, 0x7, 0x4, 0x9, 0x0, 0x2, 0x2800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff80000, 0x920}, 0x10040, 0x0, 0x7c6d, 0x8, 0x77ed, 0xb, 0x9, 0x0, 0x1ff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xf, 0x5}, {0x10, 0x3}]}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x3, 0x8}, {0xd, 0x3}, {0x5, 0xffffffd8}, {0xa, 0x40}, {0x10, 0x2}, {0xf, 0x9}, {0x7, 0x5}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x6, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/26, 0xbb, 0x1a, 0x0, 0x200, 0x10000}, 0x28) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) close(r5) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0xb}, 0x8825, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='r}!\x00') write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xffdd) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000500)='GPL\x00', 0x9, 0x8a, &(0x7f0000000540)=""/138, 0x40f00, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000680)=[{0x2, 0x1, 0x3, 0x3}, {0x0, 0x5, 0x3, 0x5}, {0x3, 0x5, 0x9, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x14, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000180)='syzkaller\x00', 0x592, 0x0, 0x0, 0x41100, 0x10, '\x00', r2, @fallback=0xc, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x6, &(0x7f0000000780)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0x2, 0x6}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x5, 0x0, 0x6}, {0x2, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xe, 0x7}, {0x2, 0x4, 0xd, 0x4}], 0x10, 0x4}, 0x94) 3.64096444s ago: executing program 5 (id=3686): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000013c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='%', 0x1}], 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x8, 0x5fa, 0xc, 0x3c, 0x102c0, 0xffffffffffffffff, 0xd36, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 3.60065963s ago: executing program 0 (id=3687): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x80000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.065807194s ago: executing program 5 (id=3688): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r1, 0x0, 0x40010030) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfdfff010}]}) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000780), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 2.862066099s ago: executing program 0 (id=3689): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r1, 0x0, 0x40010030) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfdfff010}]}) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000780), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 2.81346178s ago: executing program 1 (id=3691): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x30, 0x2e, 0x5f]}}, 0x0, 0x1e}, 0x28) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x80000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.589400236s ago: executing program 5 (id=3692): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000013c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='%', 0x1}], 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 2.589008466s ago: executing program 3 (id=3693): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000700), &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x8048) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 2.532837307s ago: executing program 4 (id=3694): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0xffffffffffffff14, 0x16, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000011c0), 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000001140)={'vlan0\x00', @random='\x00m\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2400c814) recvmsg(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x142) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000050000000500000000500000000000000"], &(0x7f0000000280)=""/178, 0x6d, 0xb2, 0x1, 0xf5}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01c10000000000f109d306000000000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r5}, 0x38) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd2\xa5\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.474911588s ago: executing program 0 (id=3695): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4004810) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x40000120) recvmsg$kcm(r1, 0x0, 0x40000002) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f00000004c0)=ANY=[], 0x38}, 0x8841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x478}, 0x2400c040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x2, [@datasec={0xf, 0x0, 0x0, 0xf, 0x2, [], "fd79"}, @const={0x5, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f0000000280)=""/57, 0x36, 0x39, 0x1, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xf, 0x7f, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f00000009c0)) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000000000)='\xc1\xe1\x1a)\x8e\xd2:\x05\xd1.~\x02\xe4N\b\x8b\xb5\x02BN\r\x99\xddG/v%A\xe9\\G\x1c9eBB \xd9M\xa54\t\x95\xa9B\xff\'\xa7\xd2\xa2\xa2}\xfa\xc6\f\xdcw0\x92\xc5\xeaa1t\xf18\x8ai>\xaf\xbc') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x8003, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='&/\xbf\x00') perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x5, 0x4, 0x0, 0x369, 0x20261, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0xb2686703267006f5}, 0x8000, 0x40, 0x0, 0x0, 0x90, 0x8, 0xe, 0x0, 0x9, 0x0, 0x5e}, 0xffffffffffffffff, 0x9, r3, 0x0) 2.458375278s ago: executing program 3 (id=3697): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfe33) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) socketpair(0x26, 0x5, 0xc, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x80000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x4) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003867cd96000000000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8901, &(0x7f0000000080)) close(r3) 2.448665859s ago: executing program 1 (id=3698): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) 2.120512427s ago: executing program 1 (id=3699): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r3, 0x0, 0x40010030) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) r6 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000002c0)={r1, r2}) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f0000000040), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfdfff010}]}) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x110e22fff6) write$cgroup_type(r9, &(0x7f0000000780), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 2.120232327s ago: executing program 4 (id=3700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000002780)=ANY=[@ANYBLOB="180000000200000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0700000000000000b702000000000000850000008600000018110000149f4d12022b321aa63ee3d20178739a2b894942f65ce78a81f6da64fc80553654e4e4cd1f98cdd8e3ad8ea0dbbb215b97fcda25eb2de54a6f295252d36be26c35683fe99264482d6f783d742411349f9039c6b06921d893486ff3c53a126cb2b1234d690c906018aa4355b4f58572529762ceaffdbdc45d0b1c1265c156b9debf125a3891a8f69b879575166f39365d5eb40529965fde096fc9c0fdb3aec93fbaac65dd83fed9669c823de518504e61b2d9cf2dbb50f1bc2b7eedde6a4b733bff053714c7d63b0f5e40919a4189639d7eb431375353482c5e8903df", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000680), 0x8, 0x61, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r5, 0xb, 0x1, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x18, 0x4, 0x1, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000004db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff7ffd611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) 1.685873618s ago: executing program 0 (id=3701): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x80000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x73) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.646157159s ago: executing program 4 (id=3702): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xd) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x4, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x80000, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.480068903s ago: executing program 1 (id=3703): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000900)={0x3, 0x80, 0x1, 0x7, 0x4, 0x9, 0x0, 0x2, 0x2800, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7fffffff80000, 0x920}, 0x10040, 0x0, 0x7c6d, 0x8, 0x77ed, 0xb, 0x9, 0x0, 0x1ff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xf, 0x5}, {0x10, 0x3}]}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x3, 0x8}, {0xd, 0x3}, {0x5, 0xffffffd8}, {0xa, 0x40}, {0x10, 0x2}, {0xf, 0x9}, {0x7, 0x5}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x6, 0x5}]}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/26, 0xbb, 0x1a, 0x0, 0x200, 0x10000}, 0x28) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) close(r5) r6 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0xb}, 0x8825, 0x0, 0xfffffffc, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='r}!\x00') write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xffdd) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r9, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000500)='GPL\x00', 0x9, 0x8a, &(0x7f0000000540)=""/138, 0x40f00, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000680)=[{0x2, 0x1, 0x3, 0x3}, {0x0, 0x5, 0x3, 0x5}, {0x3, 0x5, 0x9, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x14, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000180)='syzkaller\x00', 0x592, 0x0, 0x0, 0x41100, 0x10, '\x00', r2, @fallback=0xc, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r11, 0x6, &(0x7f0000000780)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f00000007c0)=[{0x2, 0x1, 0x2, 0x6}, {0x2, 0x3, 0xe, 0x6}, {0x1, 0x5, 0x0, 0x6}, {0x2, 0x4, 0x5, 0x2}, {0x3, 0x2, 0xe, 0x7}, {0x2, 0x4, 0xd, 0x4}], 0x10, 0x4}, 0x94) 1.479584443s ago: executing program 3 (id=3704): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) 1.355608396s ago: executing program 0 (id=3705): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4004810) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, 0x0, 0x40000120) recvmsg$kcm(r1, 0x0, 0x40000002) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f00000004c0)=ANY=[], 0x38}, 0x8841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x478}, 0x2400c040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x2, [@datasec={0xf, 0x0, 0x0, 0xf, 0x2, [], "fd79"}, @const={0x5, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f0000000280)=""/57, 0x36, 0x39, 0x1, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xf, 0x7f, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x23, 0x2, 0x1, &(0x7f00000009c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x8003, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='&/\xbf\x00') perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x0, 0x5, 0x4, 0x0, 0x369, 0x20261, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0xb2686703267006f5}, 0x8000, 0x40, 0x0, 0x0, 0x90, 0x8, 0xe, 0x0, 0x9, 0x0, 0x5e}, 0xffffffffffffffff, 0x9, r4, 0x0) 476.078058ms ago: executing program 3 (id=3706): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r1, 0x0, 0x40010030) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000004c0)) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x46, &(0x7f0000000040)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x303, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfdfff010}]}) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000780), 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 475.475408ms ago: executing program 5 (id=3707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000002780)=ANY=[@ANYBLOB="180000000200000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0700000000000000b702000000000000850000008600000018110000149f4d12022b321aa63ee3d20178739a2b894942f65ce78a81f6da64fc80553654e4e4cd1f98cdd8e3ad8ea0dbbb215b97fcda25eb2de54a6f295252d36be26c35683fe99264482d6f783d742411349f9039c6b06921d893486ff3c53a126cb2b1234d690c906018aa4355b4f58572529762ceaffdbdc45d0b1c1265c156b9debf125a3891a8f69b879575166f39365d5eb40529965fde096fc9c0fdb3aec93fbaac65dd83fed9669c823de518504e61b2d9cf2dbb50f1bc2b7eedde6a4b733bff053714c7d63b0f5e40919a4189639d7eb431375353482c5e8903df", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000680), 0x8, 0x61, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r5, 0xb, 0x1, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x18, 0x4, 0x1, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000004db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff7ffd611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r3, &(0x7f0000002700)={&(0x7f0000000000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/233, 0xe9}, {&(0x7f0000002500)=""/188, 0xbc}], 0x4, &(0x7f0000002600)=""/211, 0xd3}, 0x40010022) 428.526269ms ago: executing program 4 (id=3708): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000700), &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x8048) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 326.216352ms ago: executing program 0 (id=3709): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfe33) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) socketpair(0x26, 0x5, 0xc, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x80000000) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x4) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003867cd96000000000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8901, &(0x7f0000000080)) close(r3) 237.708574ms ago: executing program 1 (id=3710): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) 234.706304ms ago: executing program 4 (id=3711): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000013c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='%', 0x1}], 0x1}, 0x1) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000"], 0x0, 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x8, 0x5fa, 0xc, 0x3c, 0x102c0, 0xffffffffffffffff, 0xd36, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 30.381179ms ago: executing program 1 (id=3712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000002780)=ANY=[@ANYBLOB="180000000200000000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0700000000000000b702000000000000850000008600000018110000149f4d12022b321aa63ee3d20178739a2b894942f65ce78a81f6da64fc80553654e4e4cd1f98cdd8e3ad8ea0dbbb215b97fcda25eb2de54a6f295252d36be26c35683fe99264482d6f783d742411349f9039c6b06921d893486ff3c53a126cb2b1234d690c906018aa4355b4f58572529762ceaffdbdc45d0b1c1265c156b9debf125a3891a8f69b879575166f39365d5eb40529965fde096fc9c0fdb3aec93fbaac65dd83fed9669c823de518504e61b2d9cf2dbb50f1bc2b7eedde6a4b733bff053714c7d63b0f5e40919a4189639d7eb431375353482c5e8903df", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000680), 0x8, 0x61, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r5, 0xb, 0x1, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair(0x18, 0x4, 0x1, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000004db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff7ffd611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) 731.23µs ago: executing program 3 (id=3722): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0xfffffffffffffe02, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=3713): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa6b2}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfe33) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) socketpair(0x26, 0x5, 0xc, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x80000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xa, 0x0, 0x4) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000090000000800000000000000", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000003867cd96000000000000000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8901, &(0x7f0000000080)) close(r3) kernel console output (not intermixed with test programs): 0x3a0 [ 869.340835][T11476] ? alloc_skb_with_frags+0xa7/0x720 [ 869.346144][T11476] ? __alloc_skb+0xf4/0x750 [ 869.350656][T11476] ? alloc_skb_with_frags+0xa7/0x720 [ 869.355963][T11476] __alloc_skb+0x22c/0x750 [ 869.360396][T11476] alloc_skb_with_frags+0xa7/0x720 [ 869.365523][T11476] ? mark_lock+0x94/0x320 [ 869.369884][T11476] sock_alloc_send_pskb+0x87f/0x9a0 [ 869.375111][T11476] ? sock_kzfree_s+0x50/0x50 [ 869.379731][T11476] tun_get_user+0x8f7/0x3b60 [ 869.384352][T11476] ? tun_ring_recv+0xc90/0xc90 [ 869.389140][T11476] ? rcu_lock_release+0x5/0x20 [ 869.393921][T11476] ? __lock_acquire+0x7b50/0x7b50 [ 869.398974][T11476] tun_chr_write_iter+0x112/0x1e0 [ 869.404029][T11476] vfs_write+0x748/0xd70 [ 869.408296][T11476] ? file_end_write+0x250/0x250 [ 869.413184][T11476] ? __fget_files+0x402/0x470 [ 869.417909][T11476] ? __fdget_pos+0x1e2/0x370 [ 869.422526][T11476] ? ksys_write+0x70/0x260 [ 869.426971][T11476] ksys_write+0x153/0x260 [ 869.431316][T11476] ? __ia32_sys_read+0x80/0x80 [ 869.436105][T11476] ? lockdep_hardirqs_on+0x94/0x140 [ 869.441328][T11476] do_syscall_64+0x4c/0xa0 [ 869.445765][T11476] ? clear_bhb_loop+0x30/0x80 [ 869.450471][T11476] ? clear_bhb_loop+0x30/0x80 [ 869.455173][T11476] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 869.461082][T11476] RIP: 0033:0x7fda16b3e159 [ 869.465522][T11476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.485141][T11476] RSP: 002b:00007fda14d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.493577][T11476] RAX: ffffffffffffffda RBX: 00007fda16dc5fa0 RCX: 00007fda16b3e159 [ 869.501690][T11476] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 869.509675][T11476] RBP: 00007fda14d96090 R08: 0000000000000000 R09: 0000000000000000 [ 869.517663][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.525649][T11476] R13: 00007fda16dc6038 R14: 00007fda16dc5fa0 R15: 00007ffef69d2598 [ 869.533646][T11476] [ 870.023957][T11494] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 871.379733][T11527] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2056'. [ 871.855381][T11530] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2057'. [ 872.157882][T11543] netlink: 'syz.4.2061': attribute type 10 has an invalid length. [ 873.373962][T11566] netlink: 'syz.5.2067': attribute type 10 has an invalid length. [ 874.008699][T11566] team0: Device ipvlan1 failed to register rx_handler [ 875.139489][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.146474][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.671781][T11605] FAULT_INJECTION: forcing a failure. [ 876.671781][T11605] name failslab, interval 1, probability 0, space 0, times 0 [ 876.706834][T11605] CPU: 1 PID: 11605 Comm: syz.4.2076 Not tainted syzkaller #0 [ 876.714365][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.724501][T11605] Call Trace: [ 876.727813][T11605] [ 876.730824][T11605] dump_stack_lvl+0x188/0x250 [ 876.735548][T11605] ? show_regs_print_info+0x20/0x20 [ 876.740785][T11605] ? load_image+0x410/0x410 [ 876.745396][T11605] ? __might_sleep+0xf0/0xf0 [ 876.750022][T11605] ? __lock_acquire+0x7b50/0x7b50 [ 876.755085][T11605] should_fail+0x383/0x4b0 [ 876.759554][T11605] should_failslab+0x5/0x20 [ 876.764086][T11605] slab_pre_alloc_hook+0x51/0xc0 [ 876.769064][T11605] kmem_cache_alloc_trace+0x47/0x290 [ 876.774385][T11605] ? register_netdevice+0x500/0x1720 [ 876.779708][T11605] register_netdevice+0x500/0x1720 [ 876.784864][T11605] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 876.790529][T11605] ? netif_stacked_transfer_operstate+0x200/0x200 [ 876.796975][T11605] ? vscnprintf+0x80/0x80 [ 876.801378][T11605] ? radix_tree_lookup+0x263/0x280 [ 876.806529][T11605] ppp_dev_configure+0x81a/0xaa0 [ 876.811512][T11605] ppp_ioctl+0x8c2/0x1a70 [ 876.815884][T11605] ? ppp_poll+0x250/0x250 [ 876.820253][T11605] ? bpf_lsm_file_ioctl+0x5/0x10 [ 876.825225][T11605] ? security_file_ioctl+0x7c/0xa0 [ 876.830367][T11605] ? ppp_poll+0x250/0x250 [ 876.834745][T11605] __se_sys_ioctl+0xfa/0x170 [ 876.839377][T11605] do_syscall_64+0x4c/0xa0 [ 876.843822][T11605] ? clear_bhb_loop+0x30/0x80 [ 876.848522][T11605] ? clear_bhb_loop+0x30/0x80 [ 876.853274][T11605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 876.859201][T11605] RIP: 0033:0x7fd34c48f159 [ 876.863642][T11605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.883275][T11605] RSP: 002b:00007fd34a6a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.891751][T11605] RAX: ffffffffffffffda RBX: 00007fd34c717180 RCX: 00007fd34c48f159 [ 876.899763][T11605] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000b [ 876.907766][T11605] RBP: 00007fd34a6a5090 R08: 0000000000000000 R09: 0000000000000000 [ 876.915769][T11605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.923770][T11605] R13: 00007fd34c717218 R14: 00007fd34c717180 R15: 00007ffdf7551558 [ 876.931794][T11605] [ 877.549175][T11621] netlink: 'syz.4.2080': attribute type 25 has an invalid length. [ 877.631152][T11621] netlink: 'syz.4.2080': attribute type 9 has an invalid length. [ 877.726911][T11621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2080'. [ 877.801128][T11626] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.2082'. [ 877.844328][T11631] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 878.280704][T11642] netlink: 'syz.0.2086': attribute type 10 has an invalid length. [ 879.022160][T11642] device geneve1 entered promiscuous mode [ 879.028928][T11642] team0: Port device geneve1 added [ 879.770702][T11658] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 879.786992][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2090'. [ 880.901894][T11679] netlink: 'syz.5.2095': attribute type 25 has an invalid length. [ 880.971422][T11679] netlink: 'syz.5.2095': attribute type 9 has an invalid length. [ 881.094005][T11679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2095'. [ 881.679537][ T3057] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 881.847518][T11703] device sit0 left promiscuous mode [ 882.127933][T11705] device sit0 entered promiscuous mode [ 882.445695][T11713] netlink: 'syz.5.2102': attribute type 10 has an invalid length. [ 882.886699][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2102'. [ 882.895882][T11713] device team0 entered promiscuous mode [ 883.065517][ T6122] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.078868][T11713] device team_slave_0 entered promiscuous mode [ 883.085367][T11713] device team_slave_1 entered promiscuous mode [ 883.151801][T11713] bridge0: port 3(team0) entered blocking state [ 883.201943][T11713] bridge0: port 3(team0) entered disabled state [ 883.295249][T11713] bridge0: port 3(team0) entered blocking state [ 883.301750][T11713] bridge0: port 3(team0) entered forwarding state [ 884.834569][T11738] netlink: 'syz.5.2108': attribute type 10 has an invalid length. [ 885.103687][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.725514][T11738] device bridge_slave_1 left promiscuous mode [ 885.756901][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.893654][T11738] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 885.986742][T11747] netlink: 'syz.1.2111': attribute type 25 has an invalid length. [ 885.994756][T11747] netlink: 'syz.1.2111': attribute type 9 has an invalid length. [ 886.046770][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2111'. [ 886.999194][T11773] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 887.340819][T11773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2119'. [ 887.848157][T11783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2123'. [ 887.921629][T11782] netlink: 'syz.0.2121': attribute type 10 has an invalid length. [ 888.876399][T11798] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 889.189961][T11807] can: request_module (can-proto-0) failed. [ 890.009441][T11840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2137'. [ 890.178155][T11835] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 890.226835][T11835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2139'. [ 892.368049][T11867] netlink: 'syz.5.2141': attribute type 10 has an invalid length. [ 893.079083][T11867] device geneve1 entered promiscuous mode [ 893.210913][T11867] team0: Port device geneve1 added [ 893.449876][T11883] device sit0 entered promiscuous mode [ 893.733983][T11887] netlink: 'syz.3.2152': attribute type 10 has an invalid length. [ 894.610299][T11900] netlink: 'syz.5.2155': attribute type 10 has an invalid length. [ 894.666826][T11900] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2155'. [ 894.789234][T11908] netlink: 'syz.1.2156': attribute type 10 has an invalid length. [ 895.943951][T11933] pimreg1: tun_chr_ioctl cmd 35108 [ 896.069667][T11930] netlink: 'syz.3.2165': attribute type 11 has an invalid length. [ 899.620319][T11963] device sit0 entered promiscuous mode [ 899.884898][T11966] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 900.141838][T11975] netlink: 'syz.3.2174': attribute type 10 has an invalid length. [ 900.156996][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2174'. [ 901.035925][T11987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2176'. [ 905.241944][T12018] netlink: 'syz.5.2186': attribute type 10 has an invalid length. [ 905.602748][T12023] netlink: 'syz.4.2188': attribute type 10 has an invalid length. [ 905.651954][T12031] netlink: 'syz.5.2189': attribute type 10 has an invalid length. [ 905.709054][T12031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2189'. [ 905.760385][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2190'. [ 906.413346][T12047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2194'. [ 906.580330][T12049] netlink: 183836 bytes leftover after parsing attributes in process `syz.0.2196'. [ 906.631494][T12049] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 906.691912][T12049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 906.830920][T12057] netlink: 144300 bytes leftover after parsing attributes in process `syz.5.2197'. [ 906.877286][T12057] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2197'. [ 907.317873][T12060] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 907.810366][T12073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2204'. [ 908.116641][T12077] netlink: 'syz.4.2205': attribute type 10 has an invalid length. [ 908.124531][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2205'. [ 910.635343][T12096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2208'. [ 910.869297][T12109] netlink: 144300 bytes leftover after parsing attributes in process `syz.0.2211'. [ 910.891460][T12109] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2211'. [ 911.048040][T12112] netlink: 183836 bytes leftover after parsing attributes in process `syz.5.2213'. [ 911.064990][T12112] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 911.091794][T12112] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 911.180083][T12100] syz.4.2210 (12100) used greatest stack depth: 17408 bytes left [ 911.308965][T12115] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 912.043242][T12126] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.2219'. [ 912.179619][T12132] netlink: 'syz.5.2220': attribute type 10 has an invalid length. [ 912.240416][T12132] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2220'. [ 912.473251][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2223'. [ 914.549097][ T6112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.547669][T12148] netlink: 'syz.4.2227': attribute type 10 has an invalid length. [ 915.639940][T12154] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.2226'. [ 915.658117][T12154] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 915.678619][T12154] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 915.819190][T12161] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 919.121283][T12184] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 919.144422][T12184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2238'. [ 919.312333][T12188] netlink: 'syz.3.2241': attribute type 10 has an invalid length. [ 919.580118][T12201] netlink: 183836 bytes leftover after parsing attributes in process `syz.4.2243'. [ 919.610837][T12201] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 919.636217][T12201] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 919.838455][T12204] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 920.600126][T12217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2252'. [ 920.996886][T12229] netlink: 'syz.4.2257': attribute type 10 has an invalid length. [ 921.502497][T12226] netlink: 'syz.0.2256': attribute type 25 has an invalid length. [ 921.631559][T12226] netlink: 'syz.0.2256': attribute type 9 has an invalid length. [ 921.659637][T12226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2256'. [ 922.023077][T12233] netlink: 'syz.0.2258': attribute type 10 has an invalid length. [ 922.054020][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2258'. [ 924.449208][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2267'. [ 924.608446][T12262] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2269'. [ 924.801627][T12266] netlink: 'syz.5.2271': attribute type 10 has an invalid length. [ 924.821138][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2271'. [ 925.682528][T12279] netlink: 'syz.5.2274': attribute type 10 has an invalid length. [ 928.961700][T12297] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2282'. [ 928.993312][T12302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2280'. [ 929.076687][T12299] netlink: 'syz.4.2285': attribute type 10 has an invalid length. [ 929.107456][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2285'. [ 930.023915][T12321] netlink: 'syz.1.2289': attribute type 10 has an invalid length. [ 930.624175][T12340] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2296'. [ 933.250584][T12350] netlink: 'syz.5.2300': attribute type 10 has an invalid length. [ 933.277983][T12350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2300'. [ 936.493469][T12372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2302'. [ 937.113561][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.120010][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.541489][T12393] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2311'. [ 938.151621][T12408] netlink: 'syz.4.2316': attribute type 10 has an invalid length. [ 938.190534][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2316'. [ 939.031185][T12422] netlink: 'syz.0.2320': attribute type 10 has an invalid length. [ 941.994442][ T6087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.501234][ T6087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.704007][ T6087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.848935][T12452] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2331'. [ 942.933629][ T6087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.988843][T12461] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 943.008854][T12461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2334'. [ 943.155063][T12467] netlink: 'syz.5.2335': attribute type 10 has an invalid length. [ 945.474389][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 946.400183][ T6112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 947.153516][T12511] netlink: 'syz.3.2344': attribute type 25 has an invalid length. [ 947.186784][T12511] netlink: 'syz.3.2344': attribute type 9 has an invalid length. [ 947.229901][T12511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2344'. [ 947.459483][T12522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2345'. [ 947.770291][T12529] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 947.838549][T12532] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 947.918121][T12532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2348'. [ 951.978241][T12572] netlink: 'syz.0.2361': attribute type 10 has an invalid length. [ 952.097641][T12569] netlink: 'syz.3.2359': attribute type 25 has an invalid length. [ 952.110342][T12569] netlink: 'syz.3.2359': attribute type 9 has an invalid length. [ 952.120577][T12569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2359'. [ 952.330510][ T6087] device hsr_slave_0 left promiscuous mode [ 952.340012][ T6087] device hsr_slave_1 left promiscuous mode [ 952.370303][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.425938][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.462424][ T6087] bridge0: port 3(team0) entered disabled state [ 952.485871][ T6087] device bridge_slave_0 left promiscuous mode [ 952.497831][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.883777][ T6087] device geneve1 left promiscuous mode [ 952.905718][ T6087] team0 (unregistering): Port device geneve1 removed [ 953.010249][ T6087] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 953.029886][ T6087] device team_slave_1 left promiscuous mode [ 953.041396][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 953.075487][ T6087] device team_slave_0 left promiscuous mode [ 953.094524][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 953.124475][ T6087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.146155][ T6087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.169453][ T6087] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 953.310603][ T6087] bond0 (unregistering): Released all slaves [ 956.297014][T12584] netlink: 'syz.1.2363': attribute type 10 has an invalid length. [ 956.305068][T12584] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 956.322030][T12584] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 956.334854][T12584] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 956.348953][T12584] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 956.355872][T12587] netlink: 'syz.4.2364': attribute type 10 has an invalid length. [ 956.369028][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2364'. [ 956.390300][T12593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2366'. [ 956.781789][T12635] netlink: 172376 bytes leftover after parsing attributes in process `syz.0.2374'. [ 956.878606][T12638] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2372'. [ 957.738019][T12649] netlink: 'syz.4.2375': attribute type 10 has an invalid length. [ 958.844075][T12678] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 958.887280][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2382'. [ 959.167688][T12687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2385'. [ 959.687194][T12707] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2388'. [ 960.009974][T12710] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 960.649087][T12715] netlink: 'syz.0.2392': attribute type 25 has an invalid length. [ 960.686323][T12715] netlink: 'syz.0.2392': attribute type 9 has an invalid length. [ 960.723338][T12715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2392'. [ 961.098563][T12737] netlink: 'syz.4.2397': attribute type 10 has an invalid length. [ 961.136743][T12737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'. [ 961.377489][T12746] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2399'. [ 961.649969][T12762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2401'. [ 961.721739][T12757] netlink: 'syz.4.2402': attribute type 10 has an invalid length. [ 962.138723][T12771] netlink: 'syz.4.2405': attribute type 25 has an invalid length. [ 962.156488][T12776] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2406'. [ 962.200673][T12771] netlink: 'syz.4.2405': attribute type 9 has an invalid length. [ 962.244431][T12771] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2405'. [ 963.331713][T12809] netlink: 'syz.5.2412': attribute type 10 has an invalid length. [ 963.429513][T12809] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2412'. [ 963.534262][T12816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2414'. [ 963.750078][T12819] netlink: 'syz.1.2415': attribute type 10 has an invalid length. [ 963.983967][T12825] netlink: 'syz.5.2417': attribute type 25 has an invalid length. [ 964.034636][T12825] netlink: 'syz.5.2417': attribute type 9 has an invalid length. [ 964.073029][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2417'. [ 964.210897][T12836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2419'. [ 964.257345][T11351] Bluetooth: hci0: command 0x0406 tx timeout [ 965.093919][T12858] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2423'. [ 965.544460][T12873] netlink: 'syz.4.2427': attribute type 10 has an invalid length. [ 965.566291][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2427'. [ 968.508728][T12912] FAULT_INJECTION: forcing a failure. [ 968.508728][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 968.551264][T12908] netlink: 'syz.5.2429': attribute type 10 has an invalid length. [ 968.620676][T12912] CPU: 1 PID: 12912 Comm: syz.4.2430 Not tainted syzkaller #0 [ 968.628214][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.638301][T12912] Call Trace: [ 968.641623][T12912] [ 968.644580][T12912] dump_stack_lvl+0x188/0x250 [ 968.649309][T12912] ? show_regs_print_info+0x20/0x20 [ 968.654555][T12912] ? load_image+0x410/0x410 [ 968.659107][T12912] ? __might_sleep+0xf0/0xf0 [ 968.663739][T12912] ? __lock_acquire+0x7b50/0x7b50 [ 968.668815][T12912] should_fail+0x383/0x4b0 [ 968.673270][T12912] should_failslab+0x5/0x20 [ 968.677808][T12912] slab_pre_alloc_hook+0x51/0xc0 [ 968.682790][T12912] __kmalloc+0x6b/0x340 [ 968.686973][T12912] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 968.692729][T12912] tomoyo_realpath_from_path+0xed/0x5e0 [ 968.698314][T12912] tomoyo_path_number_perm+0x251/0x6b0 [ 968.703800][T12912] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 968.709318][T12912] security_file_ioctl+0x6c/0xa0 [ 968.714280][T12912] __se_sys_ioctl+0x48/0x170 [ 968.718896][T12912] do_syscall_64+0x4c/0xa0 [ 968.723332][T12912] ? clear_bhb_loop+0x30/0x80 [ 968.728028][T12912] ? clear_bhb_loop+0x30/0x80 [ 968.732727][T12912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 968.738638][T12912] RIP: 0033:0x7fd34c48f159 [ 968.743154][T12912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.762780][T12912] RSP: 002b:00007fd34a6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.771217][T12912] RAX: ffffffffffffffda RBX: 00007fd34c716fa0 RCX: 00007fd34c48f159 [ 968.779214][T12912] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 968.787204][T12912] RBP: 00007fd34a6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 968.795190][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.803177][T12912] R13: 00007fd34c717038 R14: 00007fd34c716fa0 R15: 00007ffdf7551558 [ 968.811178][T12912] [ 968.865015][T12913] netlink: 'syz.1.2432': attribute type 25 has an invalid length. [ 968.876764][T12913] netlink: 'syz.1.2432': attribute type 9 has an invalid length. [ 968.884643][T12913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2432'. [ 968.894679][T12922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2433'. [ 968.931054][T12912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 969.147744][T12933] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2438'. [ 969.390247][T12943] netlink: 'syz.0.2441': attribute type 10 has an invalid length. [ 969.471808][T12943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2441'. [ 970.029006][T12959] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 970.048061][T12959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'. [ 970.395384][T12966] netlink: 'syz.3.2446': attribute type 25 has an invalid length. [ 970.563798][T12966] netlink: 'syz.3.2446': attribute type 9 has an invalid length. [ 970.601192][T12966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2446'. [ 970.644531][T12954] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 970.729341][T12972] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 973.163412][T13003] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 973.292793][T13010] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2452'. [ 974.016904][T13029] netlink: 'syz.3.2459': attribute type 10 has an invalid length. [ 974.041254][T13029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2459'. [ 974.898195][T13055] netlink: 172376 bytes leftover after parsing attributes in process `syz.5.2466'. [ 975.063455][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2465'. [ 976.144713][T13073] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2468'. [ 976.925981][T13088] netlink: 'syz.0.2474': attribute type 10 has an invalid length. [ 976.954589][T13088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 977.396298][T13112] netlink: 'syz.0.2476': attribute type 25 has an invalid length. [ 977.446989][T13112] netlink: 'syz.0.2476': attribute type 9 has an invalid length. [ 977.517054][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2476'. [ 977.738029][ T6410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 978.103075][T13130] netlink: 'syz.5.2480': attribute type 10 has an invalid length. [ 978.165598][T13130] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2480'. [ 978.219728][T13130] device hsr0 entered promiscuous mode [ 978.245116][T13136] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2482'. [ 978.305776][T13130] bridge0: port 2(hsr0) entered blocking state [ 978.466947][T13130] bridge0: port 2(hsr0) entered disabled state [ 978.604103][T13130] bridge0: port 2(hsr0) entered blocking state [ 978.610533][T13130] bridge0: port 2(hsr0) entered forwarding state [ 978.758047][ T6122] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 979.041809][T13154] netlink: 'syz.4.2486': attribute type 10 has an invalid length. [ 979.136624][T13154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2486'. [ 980.170446][T13188] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2494'. [ 981.453343][T13209] netlink: 'syz.0.2499': attribute type 10 has an invalid length. [ 981.513287][T13209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2499'. [ 982.525953][T13248] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2507'. [ 983.351382][T13258] netlink: 'syz.1.2520': attribute type 10 has an invalid length. [ 983.396815][T13258] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 983.461202][T13258] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 983.504627][T13258] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 983.525272][T13258] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 983.764053][T13273] netlink: 'syz.1.2513': attribute type 10 has an invalid length. [ 984.007451][T13272] netlink: 'syz.5.2514': attribute type 10 has an invalid length. [ 984.037789][T13272] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2514'. [ 985.159572][T13316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2525'. [ 985.319162][T13321] netlink: 'syz.0.2525': attribute type 29 has an invalid length. [ 985.439825][T13330] netlink: 'syz.1.2528': attribute type 10 has an invalid length. [ 985.466077][T13330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2528'. [ 985.881132][T13345] FAULT_INJECTION: forcing a failure. [ 985.881132][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.018257][T13345] CPU: 0 PID: 13345 Comm: syz.0.2533 Not tainted syzkaller #0 [ 986.025800][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.035891][T13345] Call Trace: [ 986.039204][T13345] [ 986.042175][T13345] dump_stack_lvl+0x188/0x250 [ 986.046914][T13345] ? show_regs_print_info+0x20/0x20 [ 986.052163][T13345] ? load_image+0x410/0x410 [ 986.056718][T13345] ? __lock_acquire+0x7b50/0x7b50 [ 986.061802][T13345] should_fail+0x383/0x4b0 [ 986.066270][T13345] _copy_from_user+0x2e/0x170 [ 986.071069][T13345] iovec_from_user+0x142/0x370 [ 986.075907][T13345] __import_iovec+0x70/0x490 [ 986.080580][T13345] import_iovec+0x6f/0xa0 [ 986.084957][T13345] ___sys_sendmsg+0x1fd/0x2e0 [ 986.089692][T13345] ? __sys_sendmsg+0x290/0x290 [ 986.094535][T13345] ? trace_event_raw_event_lock+0x250/0x250 [ 986.100526][T13345] __se_sys_sendmsg+0x1b7/0x2a0 [ 986.105419][T13345] ? __x64_sys_sendmsg+0x80/0x80 [ 986.110409][T13345] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 986.116493][T13345] ? lockdep_hardirqs_on+0x94/0x140 [ 986.121751][T13345] do_syscall_64+0x4c/0xa0 [ 986.126214][T13345] ? clear_bhb_loop+0x30/0x80 [ 986.130928][T13345] ? clear_bhb_loop+0x30/0x80 [ 986.135649][T13345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 986.141587][T13345] RIP: 0033:0x7f9706ffb159 [ 986.146053][T13345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.165707][T13345] RSP: 002b:00007f9705253028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 986.174177][T13345] RAX: ffffffffffffffda RBX: 00007f9707282fa0 RCX: 00007f9706ffb159 [ 986.182187][T13345] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 986.190195][T13345] RBP: 00007f9705253090 R08: 0000000000000000 R09: 0000000000000000 [ 986.198215][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.206229][T13345] R13: 00007f9707283038 R14: 00007f9707282fa0 R15: 00007ffe1b15ad28 [ 986.214282][T13345] [ 986.279424][T13353] netlink: 'syz.5.2534': attribute type 1 has an invalid length. [ 986.300268][T13353] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2534'. [ 986.336707][T13353] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2534'. [ 986.840571][T13364] netlink: 'syz.0.2536': attribute type 3 has an invalid length. [ 987.046713][T13364] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2536'. [ 987.754535][T13387] netlink: 'syz.0.2544': attribute type 8 has an invalid length. [ 987.838516][T13387] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2544'. [ 988.118520][T13395] netlink: 'syz.4.2545': attribute type 10 has an invalid length. [ 988.162731][T13400] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2546'. [ 989.992491][T13467] netlink: 'syz.0.2563': attribute type 10 has an invalid length. [ 990.090964][T13473] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2566'. [ 991.653189][T13510] netlink: 'syz.3.2578': attribute type 10 has an invalid length. [ 991.786731][ T3057] wlan1: Trigger new scan to find an IBSS to join [ 991.856206][T13519] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2582'. [ 992.043799][ T155] tipc: Subscription rejected, illegal request [ 992.079992][T13526] netlink: 'syz.0.2583': attribute type 21 has an invalid length. [ 992.126996][T13526] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2583'. [ 992.250260][T13528] netlink: 'syz.1.2585': attribute type 13 has an invalid length. [ 992.343434][T13526] netlink: 'syz.0.2583': attribute type 21 has an invalid length. [ 992.548339][T13526] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2583'. [ 993.763678][T13561] netlink: 'syz.1.2592': attribute type 10 has an invalid length. [ 993.941692][T13567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2594'. [ 994.143087][T13577] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2595'. [ 996.738227][ T6122] wlan1: Trigger new scan to find an IBSS to join [ 996.774036][T13609] netlink: 'syz.1.2606': attribute type 10 has an invalid length. [ 998.019286][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.025699][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.078714][T13214] wlan1: Creating new IBSS network, BSSID a2:9f:69:a7:4b:aa [ 999.825408][T13657] netlink: 'syz.5.2619': attribute type 10 has an invalid length. [ 1004.140451][T13708] netlink: 'syz.5.2636': attribute type 10 has an invalid length. [ 1004.692748][T13730] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1006.334490][T13748] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1008.593893][T13760] netlink: 'syz.1.2649': attribute type 10 has an invalid length. [ 1008.677288][T13760] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1008.780208][T13760] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1008.828768][T13760] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1008.882203][T13760] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1008.947932][T13767] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2651'. [ 1009.802158][T13781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2655'. [ 1009.948368][T13785] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2657'. [ 1011.359525][T13806] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2664'. [ 1013.235082][T13815] netlink: 'syz.1.2665': attribute type 10 has an invalid length. [ 1013.257337][T13815] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1013.299109][T13819] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.310312][T13815] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1013.344132][T13825] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2668'. [ 1013.354982][T13815] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1013.381172][T13815] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1013.394181][T13819] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.443577][T13819] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.457370][T13820] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.509042][T13820] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.558357][T13819] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.615296][T13820] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.649504][T13834] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2671'. [ 1013.664632][T13820] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1013.736443][T13820] netlink: 'syz.5.2666': attribute type 29 has an invalid length. [ 1014.762827][T13859] netlink: 208644 bytes leftover after parsing attributes in process `syz.0.2679'. [ 1014.855517][T13861] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2678'. [ 1014.970293][T13866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2680'. [ 1015.872955][T13871] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2683'. [ 1017.717613][T13865] bridge0: port 4(hsr0) entered disabled state [ 1017.748017][T13865] bridge0: port 4(hsr0) entered disabled state [ 1017.852427][T13865] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1017.867280][T13865] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1017.894399][T13865] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1017.923974][T13865] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1018.207534][T13876] device syzkaller0 entered promiscuous mode [ 1018.261093][T13888] device syzkaller0 left promiscuous mode [ 1019.340405][T13905] validate_nla: 63 callbacks suppressed [ 1019.340426][T13905] netlink: 'syz.1.2694': attribute type 11 has an invalid length. [ 1019.566372][T13912] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 1019.606794][T13912] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2694'. [ 1019.710822][T13907] FAULT_INJECTION: forcing a failure. [ 1019.710822][T13907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.797143][T13907] CPU: 1 PID: 13907 Comm: syz.1.2694 Not tainted syzkaller #0 [ 1019.804710][T13907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.814838][T13907] Call Trace: [ 1019.818218][T13907] [ 1019.821209][T13907] dump_stack_lvl+0x188/0x250 [ 1019.825995][T13907] ? show_regs_print_info+0x20/0x20 [ 1019.831275][T13907] ? load_image+0x410/0x410 [ 1019.835875][T13907] ? __lock_acquire+0x7b50/0x7b50 [ 1019.840973][T13907] ? trace_call_bpf+0x515/0x5b0 [ 1019.845939][T13907] should_fail+0x383/0x4b0 [ 1019.850469][T13907] _copy_from_user+0x2e/0x170 [ 1019.855241][T13907] __copy_msghdr_from_user+0xc9/0x630 [ 1019.860697][T13907] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1019.866594][T13907] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1019.872064][T13907] ___sys_sendmsg+0x19a/0x2e0 [ 1019.876883][T13907] ? __sys_sendmsg+0x290/0x290 [ 1019.881977][T13907] __se_sys_sendmsg+0x1b7/0x2a0 [ 1019.886938][T13907] ? __x64_sys_sendmsg+0x80/0x80 [ 1019.891941][T13907] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1019.898082][T13907] ? lockdep_hardirqs_on+0x94/0x140 [ 1019.903387][T13907] do_syscall_64+0x4c/0xa0 [ 1019.907868][T13907] ? clear_bhb_loop+0x30/0x80 [ 1019.912620][T13907] ? clear_bhb_loop+0x30/0x80 [ 1019.917377][T13907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1019.923330][T13907] RIP: 0033:0x7fda16b3e159 [ 1019.927823][T13907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.947499][T13907] RSP: 002b:00007fda14d75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.956005][T13907] RAX: ffffffffffffffda RBX: 00007fda16dc6090 RCX: 00007fda16b3e159 [ 1019.964039][T13907] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000008 [ 1019.972084][T13907] RBP: 00007fda14d75090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.980118][T13907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.988155][T13907] R13: 00007fda16dc6128 R14: 00007fda16dc6090 R15: 00007ffef69d2598 [ 1019.996290][T13907] [ 1020.129487][T13917] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.2697'. [ 1022.319430][T13924] netlink: 'syz.5.2699': attribute type 10 has an invalid length. [ 1022.415596][T13924] bridge0: port 2(hsr0) entered disabled state [ 1022.497681][T13924] bridge0: port 2(hsr0) entered disabled state [ 1022.544409][T13924] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1022.575230][T13924] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1022.650605][T13924] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1022.676978][T13924] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1022.901134][T13944] netlink: 'syz.1.2705': attribute type 21 has an invalid length. [ 1022.921940][T13944] netlink: 'syz.1.2705': attribute type 2 has an invalid length. [ 1022.935583][T13944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2705'. [ 1023.001075][T13948] netlink: 'syz.1.2705': attribute type 11 has an invalid length. [ 1023.403324][T13957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2709'. [ 1023.553768][T13966] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1023.631460][T13966] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1023.723186][T13968] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1023.978206][T13982] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 1023.994059][T13982] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1024.007137][T13982] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1024.058687][T13982] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1024.072535][T13982] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1024.419411][T13998] FAULT_INJECTION: forcing a failure. [ 1024.419411][T13998] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.477887][T13998] CPU: 1 PID: 13998 Comm: syz.3.2723 Not tainted syzkaller #0 [ 1024.485430][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.495531][T13998] Call Trace: [ 1024.498846][T13998] [ 1024.501808][T13998] dump_stack_lvl+0x188/0x250 [ 1024.506535][T13998] ? show_regs_print_info+0x20/0x20 [ 1024.511777][T13998] ? load_image+0x410/0x410 [ 1024.516321][T13998] ? __might_sleep+0xf0/0xf0 [ 1024.520966][T13998] ? __lock_acquire+0x7b50/0x7b50 [ 1024.526049][T13998] should_fail+0x383/0x4b0 [ 1024.530513][T13998] should_failslab+0x5/0x20 [ 1024.535062][T13998] slab_pre_alloc_hook+0x51/0xc0 [ 1024.540066][T13998] __kmalloc+0x6b/0x340 [ 1024.544260][T13998] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 1024.550029][T13998] tomoyo_realpath_from_path+0xed/0x5e0 [ 1024.555628][T13998] tomoyo_path_number_perm+0x251/0x6b0 [ 1024.561131][T13998] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1024.566633][T13998] ? perf_trace_lock+0xe4/0x390 [ 1024.571595][T13998] security_file_ioctl+0x6c/0xa0 [ 1024.576576][T13998] __se_sys_ioctl+0x48/0x170 [ 1024.581219][T13998] do_syscall_64+0x4c/0xa0 [ 1024.585673][T13998] ? clear_bhb_loop+0x30/0x80 [ 1024.590389][T13998] ? clear_bhb_loop+0x30/0x80 [ 1024.595103][T13998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1024.601030][T13998] RIP: 0033:0x7f51db759159 [ 1024.605483][T13998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.625132][T13998] RSP: 002b:00007f51d99b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1024.633577][T13998] RAX: ffffffffffffffda RBX: 00007f51db9e0fa0 RCX: 00007f51db759159 [ 1024.641591][T13998] RDX: 0000200000000980 RSI: 0000000000008916 RDI: 0000000000000003 [ 1024.649593][T13998] RBP: 00007f51d99b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.657592][T13998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.665678][T13998] R13: 00007f51db9e1038 R14: 00007f51db9e0fa0 R15: 00007ffc9a425898 [ 1024.673686][T13998] [ 1024.687322][T13998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1024.818980][T14008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2725'. [ 1025.177015][T14021] netlink: 'syz.1.2730': attribute type 28 has an invalid length. [ 1025.210939][T14021] netlink: 'syz.1.2730': attribute type 29 has an invalid length. [ 1025.242402][T14021] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2730'. [ 1025.317000][T14032] netlink: 'syz.1.2730': attribute type 28 has an invalid length. [ 1025.381288][T14032] netlink: 'syz.1.2730': attribute type 29 has an invalid length. [ 1025.408682][T14035] netlink: 'syz.5.2732': attribute type 10 has an invalid length. [ 1025.493031][T14035] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1025.556846][T14035] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1025.640534][T14035] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1025.668584][T14032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2730'. [ 1025.756853][T14035] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1026.484594][T14058] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2740'. [ 1028.110723][ T6420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1029.238010][ T6420] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1029.947941][T14076] netlink: 'syz.0.2746': attribute type 10 has an invalid length. [ 1030.097077][T14076] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1030.271729][T14076] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1030.378224][T14076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1030.598484][T14076] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1030.870060][T14099] netlink: 'syz.0.2754': attribute type 10 has an invalid length. [ 1030.880856][T14098] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 1030.912442][T14097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2755'. [ 1031.114300][T14103] device wlan1 entered promiscuous mode [ 1031.228813][T14109] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2760'. [ 1035.262236][T14145] netlink: 'syz.1.2769': attribute type 10 has an invalid length. [ 1035.360499][T14150] netlink: 'syz.5.2770': attribute type 10 has an invalid length. [ 1035.494649][T14157] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1035.984021][T14172] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2775'. [ 1036.114006][T14172] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2775'. [ 1036.566242][T14186] netlink: 'syz.5.2782': attribute type 10 has an invalid length. [ 1039.084486][T14199] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2787'. [ 1039.791680][T14215] netlink: 'syz.1.2792': attribute type 16 has an invalid length. [ 1039.856591][T14215] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2792'. [ 1039.979666][T14214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2793'. [ 1040.049818][T14214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2793'. [ 1040.095822][T14219] netlink: 'syz.0.2795': attribute type 10 has an invalid length. [ 1040.147389][T14214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2793'. [ 1040.252577][T14230] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1040.275611][T14232] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 1040.527408][T14234] netlink: 'syz.5.2800': attribute type 10 has an invalid length. [ 1040.599945][T14234] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1040.745733][T14234] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1040.839099][T14234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1040.870949][T14234] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1043.439312][T14257] netlink: 'syz.0.2807': attribute type 16 has an invalid length. [ 1043.476993][T14257] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1043.523403][T14257] netlink: 'syz.0.2807': attribute type 10 has an invalid length. [ 1043.580834][T14257] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1043.595095][T14259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2808'. [ 1043.804711][T14264] netlink: 'syz.4.2809': attribute type 10 has an invalid length. [ 1043.878512][T14272] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2811'. [ 1044.150519][T14271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1044.224604][T14271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1044.259228][T14274] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1044.673529][T14296] netlink: 'syz.3.2821': attribute type 16 has an invalid length. [ 1044.683532][T14296] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1044.714139][T14296] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 1044.750414][T14296] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2821'. [ 1044.864877][T14300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2822'. [ 1044.988088][T14303] netlink: 'syz.5.2824': attribute type 10 has an invalid length. [ 1048.970259][T14342] __nla_validate_parse: 1 callbacks suppressed [ 1048.970277][T14342] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2837'. [ 1049.053682][T14344] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2838'. [ 1049.094176][T14347] netlink: 'syz.3.2839': attribute type 10 has an invalid length. [ 1049.218143][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1049.262539][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1049.294380][T14345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1049.700664][T14373] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.2850'. [ 1049.948852][T14382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2851'. [ 1050.272406][T14391] netlink: 'syz.3.2853': attribute type 10 has an invalid length. [ 1050.838459][T14412] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.2861'. [ 1051.532108][T14425] netlink: 'syz.0.2866': attribute type 10 has an invalid length. [ 1051.915005][T14441] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1052.158700][T14447] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.2875'. [ 1052.403415][T14456] FAULT_INJECTION: forcing a failure. [ 1052.403415][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.467091][T14456] CPU: 1 PID: 14456 Comm: syz.4.2879 Not tainted syzkaller #0 [ 1052.474619][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.484709][T14456] Call Trace: [ 1052.488014][T14456] [ 1052.490983][T14456] dump_stack_lvl+0x188/0x250 [ 1052.495698][T14456] ? show_regs_print_info+0x20/0x20 [ 1052.500933][T14456] ? load_image+0x410/0x410 [ 1052.505478][T14456] ? __lock_acquire+0x7b50/0x7b50 [ 1052.510532][T14456] ? bpf_test_run+0x78e/0x800 [ 1052.515234][T14456] should_fail+0x383/0x4b0 [ 1052.519704][T14456] _copy_to_user+0x2e/0x130 [ 1052.524247][T14456] bpf_test_finish+0x1e6/0x2f0 [ 1052.529051][T14456] ? convert_skb_to___skb+0x360/0x360 [ 1052.534475][T14456] ? convert_skb_to___skb+0x1ff/0x360 [ 1052.539877][T14456] bpf_prog_test_run_skb+0xbc0/0x1190 [ 1052.545325][T14456] ? cpu_online+0x60/0x60 [ 1052.549687][T14456] bpf_prog_test_run+0x31c/0x390 [ 1052.554661][T14456] __sys_bpf+0x5a5/0x6f0 [ 1052.558934][T14456] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 1052.565231][T14456] ? bpf_link_show_fdinfo+0x380/0x380 [ 1052.570634][T14456] ? rcu_nmi_exit+0x6f/0xf0 [ 1052.575198][T14456] __x64_sys_bpf+0x78/0x90 [ 1052.579650][T14456] do_syscall_64+0x4c/0xa0 [ 1052.584188][T14456] ? clear_bhb_loop+0x30/0x80 [ 1052.588897][T14456] ? clear_bhb_loop+0x30/0x80 [ 1052.593608][T14456] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1052.599535][T14456] RIP: 0033:0x7fd34c48f159 [ 1052.603980][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.623701][T14456] RSP: 002b:00007fd34a6e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.632242][T14456] RAX: ffffffffffffffda RBX: 00007fd34c716fa0 RCX: 00007fd34c48f159 [ 1052.640343][T14456] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1052.648356][T14456] RBP: 00007fd34a6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.656447][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.664574][T14456] R13: 00007fd34c717038 R14: 00007fd34c716fa0 R15: 00007ffdf7551558 [ 1052.672595][T14456] [ 1054.816934][ T4467] Bluetooth: hci2: command 0x0409 tx timeout [ 1056.057314][T14457] chnl_net:caif_netlink_parms(): no params data found [ 1056.084282][T14495] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1056.239166][T14494] netlink: 'syz.5.2891': attribute type 21 has an invalid length. [ 1056.282587][ T3057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.901519][ T4467] Bluetooth: hci2: command 0x041b tx timeout [ 1058.976929][ T4467] Bluetooth: hci2: command 0x040f tx timeout [ 1059.263625][ T3057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.459871][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.466382][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.554385][T14509] FAULT_INJECTION: forcing a failure. [ 1059.554385][T14509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.575209][T14509] CPU: 0 PID: 14509 Comm: syz.1.2894 Not tainted syzkaller #0 [ 1059.582821][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1059.592916][T14509] Call Trace: [ 1059.596227][T14509] [ 1059.599182][T14509] dump_stack_lvl+0x188/0x250 [ 1059.603901][T14509] ? show_regs_print_info+0x20/0x20 [ 1059.609132][T14509] ? load_image+0x410/0x410 [ 1059.613680][T14509] ? __lock_acquire+0x7b50/0x7b50 [ 1059.618740][T14509] should_fail+0x383/0x4b0 [ 1059.623192][T14509] _copy_to_user+0x2e/0x130 [ 1059.627747][T14509] simple_read_from_buffer+0xe3/0x150 [ 1059.633158][T14509] proc_fail_nth_read+0x1a6/0x220 [ 1059.638219][T14509] ? proc_fault_inject_write+0x310/0x310 [ 1059.643919][T14509] ? fsnotify_perm+0x254/0x560 [ 1059.648710][T14509] ? proc_fault_inject_write+0x310/0x310 [ 1059.654393][T14509] vfs_read+0x2ff/0xd50 [ 1059.658585][T14509] ? __lock_acquire+0x7b50/0x7b50 [ 1059.663657][T14509] ? kernel_read+0x1e0/0x1e0 [ 1059.668275][T14509] ? mutex_lock_nested+0x17/0x20 [ 1059.673225][T14509] ? __fdget_pos+0x2bf/0x370 [ 1059.677838][T14509] ? ksys_read+0x70/0x260 [ 1059.682188][T14509] ksys_read+0x153/0x260 [ 1059.686454][T14509] ? vfs_write+0xd70/0xd70 [ 1059.690889][T14509] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.696114][T14509] do_syscall_64+0x4c/0xa0 [ 1059.700542][T14509] ? clear_bhb_loop+0x30/0x80 [ 1059.705225][T14509] ? clear_bhb_loop+0x30/0x80 [ 1059.709913][T14509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1059.715816][T14509] RIP: 0033:0x7fda16afe98e [ 1059.720242][T14509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.740031][T14509] RSP: 002b:00007fda14d95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1059.748462][T14509] RAX: ffffffffffffffda RBX: 00007fda14d966c0 RCX: 00007fda16afe98e [ 1059.756473][T14509] RDX: 000000000000000f RSI: 00007fda14d960a0 RDI: 0000000000000005 [ 1059.764470][T14509] RBP: 00007fda14d96090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.772475][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.780481][T14509] R13: 00007fda16dc6038 R14: 00007fda16dc5fa0 R15: 00007ffef69d2598 [ 1059.788479][T14509] [ 1059.805514][ T3057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.007802][ T3057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.037783][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.046108][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.126116][T14457] device bridge_slave_0 entered promiscuous mode [ 1060.145198][T14517] netlink: 'syz.3.2896': attribute type 10 has an invalid length. [ 1060.183758][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.202801][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.225448][T14457] device bridge_slave_1 entered promiscuous mode [ 1060.332945][T14457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.343399][T14531] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1060.385445][T14457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.728157][T14457] team0: Port device team_slave_0 added [ 1060.759091][T14457] team0: Port device team_slave_1 added [ 1060.980722][T13214] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1061.056868][ T4457] Bluetooth: hci2: command 0x0419 tx timeout [ 1061.307494][T14457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.314518][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.527214][T14457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.568945][T14457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.609396][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.643557][T14457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.910551][T14457] device hsr_slave_0 entered promiscuous mode [ 1061.937228][T14457] device hsr_slave_1 entered promiscuous mode [ 1061.990588][T14457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1062.030459][T14457] Cannot create hsr debugfs directory [ 1062.147756][T14587] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.2915'. [ 1065.006405][T14570] netlink: 'syz.4.2911': attribute type 10 has an invalid length. [ 1065.383220][T14591] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1065.427642][T14591] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1065.479958][T14591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1065.664942][T14610] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.2922'. [ 1065.947335][T14616] netlink: 'syz.5.2923': attribute type 10 has an invalid length. [ 1066.556067][T14638] device wlan1 left promiscuous mode [ 1066.663520][T14640] device wlan1 entered promiscuous mode [ 1067.110534][ T3057] device hsr_slave_0 left promiscuous mode [ 1067.120014][ T3057] device hsr_slave_1 left promiscuous mode [ 1067.134174][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.159843][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.174887][ T3057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.186213][ T3057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.201850][ T3057] bridge0: port 3(team0) entered disabled state [ 1067.226371][ T3057] device bridge_slave_0 left promiscuous mode [ 1067.234079][ T3057] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.486799][ T3057] device geneve1 left promiscuous mode [ 1067.495677][ T3057] team0 (unregistering): Port device geneve1 removed [ 1067.535475][ T3057] device virt_wifi0 left promiscuous mode [ 1067.565293][ T3057] team0 (unregistering): Port device virt_wifi0 removed [ 1067.630288][ T3057] device team_slave_1 left promiscuous mode [ 1067.638529][ T3057] team0 (unregistering): Port device team_slave_1 removed [ 1067.652612][ T3057] device team_slave_0 left promiscuous mode [ 1067.661203][ T3057] team0 (unregistering): Port device team_slave_0 removed [ 1067.674792][ T3057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.695136][ T3057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.711684][ T3057] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1067.786129][ T3057] bond0 (unregistering): Released all slaves [ 1067.832089][T14666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2931'. [ 1068.858388][T14695] netlink: 'syz.4.2936': attribute type 10 has an invalid length. [ 1075.175457][T14457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1075.257569][T14457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1075.338299][T14807] netlink: 'syz.4.2948': attribute type 10 has an invalid length. [ 1075.374393][T14457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1075.442794][T14457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1076.866110][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2953'. [ 1077.050928][T14457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.117213][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.148094][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.187831][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.367633][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1077.396258][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.443348][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.450661][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.482900][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.492776][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.508744][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.515955][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.899058][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1077.909660][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1077.919787][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1077.948020][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1077.980258][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1077.997735][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1078.031499][T14868] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 1078.214831][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1078.230017][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1078.279820][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1078.327896][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1078.399505][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1078.436987][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.551960][T14457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1078.720474][T14886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1082.448653][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1082.457066][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.480504][T14457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.533173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.573269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.652420][T14910] netlink: 'syz.1.2972': attribute type 10 has an invalid length. [ 1082.684602][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.710551][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.789109][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.803873][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.818684][T14457] device veth0_vlan entered promiscuous mode [ 1082.917820][T14457] device veth1_vlan entered promiscuous mode [ 1082.985767][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1083.000486][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1083.845104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1083.854196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.866859][T14932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1083.984887][T14457] device veth0_macvtap entered promiscuous mode [ 1083.998404][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1084.043092][T14457] device veth1_macvtap entered promiscuous mode [ 1084.070592][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.081889][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.098690][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.114300][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.125130][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.136342][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.151886][T14457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.201803][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1084.211697][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1084.243044][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.258409][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.271198][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.281797][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.291777][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.302360][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.314150][T14457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.322210][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1084.333476][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1084.387222][T14457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.396418][T14457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.405641][T14457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.414712][T14457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.540021][T14955] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 1087.585810][T13214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.610266][T13214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.668015][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1087.715666][T13214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.724183][T13214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.732813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1092.310308][T15002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2998'. [ 1092.344926][ T6420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.468979][ T6420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.565477][ T6420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.016935][ T4448] Bluetooth: hci4: command 0x0409 tx timeout [ 1095.716756][T14995] chnl_net:caif_netlink_parms(): no params data found [ 1096.091702][ T6420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.108379][T11351] Bluetooth: hci4: command 0x041b tx timeout [ 1096.442834][T14995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.460448][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.620418][T14995] device bridge_slave_0 entered promiscuous mode [ 1096.803588][T14995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.826929][T14995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.835518][T14995] device bridge_slave_1 entered promiscuous mode [ 1097.054242][T14995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.165640][T14995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.186774][T11354] Bluetooth: hci4: command 0x040f tx timeout [ 1100.145667][T15063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3013'. [ 1100.326004][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 1100.611594][T14995] team0: Port device team_slave_0 added [ 1100.634148][T14995] team0: Port device team_slave_1 added [ 1100.768382][T15091] netlink: 'syz.3.3015': attribute type 10 has an invalid length. [ 1100.880163][T14995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.954187][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.987412][T14995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.203981][T14995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.235248][T14995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.330354][T14995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.629309][T15124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3024'. [ 1101.742295][T14995] device hsr_slave_0 entered promiscuous mode [ 1101.767627][T14995] device hsr_slave_1 entered promiscuous mode [ 1101.824176][T14995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.851692][T14995] Cannot create hsr debugfs directory [ 1101.962895][T15138] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3025'. [ 1103.013130][T15166] netlink: 'syz.1.3030': attribute type 10 has an invalid length. [ 1104.460501][T15192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1104.577505][ T6420] device hsr_slave_0 left promiscuous mode [ 1104.658779][ T6420] device hsr_slave_1 left promiscuous mode [ 1104.666449][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.681608][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.689999][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.697882][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.707228][ T6420] bridge0: port 3(team0) entered disabled state [ 1104.731881][ T6420] device bridge_slave_0 left promiscuous mode [ 1104.740953][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.793138][T15214] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3041'. [ 1107.838086][ T6420] device geneve1 left promiscuous mode [ 1107.886357][ T6420] team0 (unregistering): Port device geneve1 removed [ 1108.185982][ T6420] device team_slave_1 left promiscuous mode [ 1108.194209][ T6420] team0 (unregistering): Port device team_slave_1 removed [ 1108.212642][ T6420] device team_slave_0 left promiscuous mode [ 1108.220805][ T6420] team0 (unregistering): Port device team_slave_0 removed [ 1108.235962][ T6420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.258009][ T6420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.276761][ T6420] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1108.366377][ T6420] bond0 (unregistering): Released all slaves [ 1108.594324][T14995] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1108.643339][T14995] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1108.691576][T14995] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1108.755758][T14995] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1108.829705][T15236] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3048'. [ 1108.858959][T15239] netlink: 'syz.3.3046': attribute type 10 has an invalid length. [ 1110.095233][T14995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.232706][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1110.315578][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1110.389107][T14995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.404011][T15277] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1110.445840][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1110.489021][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1110.527154][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.534439][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.583621][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1110.616281][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1110.646236][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1110.682232][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.689464][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.729797][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1110.805671][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1110.895900][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1110.965742][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1111.034830][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1111.081045][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1111.113398][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1111.139495][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1111.166372][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1111.237000][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1111.258419][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1111.278881][T15294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1111.332468][T15304] netlink: 'syz.1.3061': attribute type 10 has an invalid length. [ 1112.653166][T14995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.695903][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1112.713724][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1113.023317][T15359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3072'. [ 1113.463340][T15369] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3073'. [ 1113.581203][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.602276][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1113.666991][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.685277][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.708185][T14995] device veth0_vlan entered promiscuous mode [ 1113.717659][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.735670][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.762631][T14995] device veth1_vlan entered promiscuous mode [ 1113.828823][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1113.841829][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1113.860333][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1113.894272][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1113.923087][T14995] device veth0_macvtap entered promiscuous mode [ 1113.950287][T14995] device veth1_macvtap entered promiscuous mode [ 1114.011102][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.052220][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.062255][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.121697][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.138044][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.172009][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.205794][T14995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.234643][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.254040][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.292368][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1114.342743][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1114.419779][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.440563][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.465139][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.496832][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.517339][T14995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.549129][T14995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.568115][T14995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.774249][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1114.785593][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.803559][T14995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.815189][T14995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.827427][T14995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.846342][T14995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.933414][T15399] netlink: 'syz.1.3077': attribute type 10 has an invalid length. [ 1116.024637][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.067374][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.208149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1116.457328][ T6087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.465242][ T6087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.474196][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1117.156971][T15430] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3085'. [ 1117.576392][ T6112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.605138][T15440] netlink: 'syz.4.3089': attribute type 10 has an invalid length. [ 1117.696362][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.759949][T15440] device bridge_slave_1 left promiscuous mode [ 1117.769773][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.795711][T15440] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1117.839270][ T6112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.963185][T15449] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3092'. [ 1118.026389][ T6112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.141781][T15433] chnl_net:caif_netlink_parms(): no params data found [ 1118.221391][ T6112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.377165][ T4467] Bluetooth: hci3: command 0x0409 tx timeout [ 1120.900721][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.907149][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.466852][T11337] Bluetooth: hci3: command 0x041b tx timeout [ 1121.533789][T15433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.556587][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.583650][T15433] device bridge_slave_0 entered promiscuous mode [ 1121.617999][T15433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.625397][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.641543][T15433] device bridge_slave_1 entered promiscuous mode [ 1123.536808][T11351] Bluetooth: hci3: command 0x040f tx timeout [ 1124.851400][T15433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.883756][T15433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.948989][T15498] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3102'. [ 1124.996359][T15433] team0: Port device team_slave_0 added [ 1125.008530][T15499] netlink: 'syz.5.3103': attribute type 10 has an invalid length. [ 1125.020498][T15433] team0: Port device team_slave_1 added [ 1125.057206][T15433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.076773][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.203967][T15433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.224397][T15501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1125.307378][T15433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.315988][T15433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.351168][T15433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.552088][T15433] device hsr_slave_0 entered promiscuous mode [ 1125.562539][T15433] device hsr_slave_1 entered promiscuous mode [ 1125.616857][T11337] Bluetooth: hci3: command 0x0419 tx timeout [ 1129.636373][ T6112] device wlan1 left promiscuous mode [ 1129.673751][ T6112] team0: Port device wlan1 removed [ 1129.767552][T15552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1129.882461][T15565] netlink: 'syz.0.3114': attribute type 10 has an invalid length. [ 1129.947130][T15565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.964153][T15565] device bridge_slave_1 left promiscuous mode [ 1129.976794][T15565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.997691][T15565] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1130.257277][ T6112] device hsr_slave_0 left promiscuous mode [ 1130.315230][ T6112] device hsr_slave_1 left promiscuous mode [ 1130.327308][ T6112] bridge0: port 3(team0) entered disabled state [ 1130.340692][ T6112] device bridge_slave_0 left promiscuous mode [ 1130.352424][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.751007][ T6112] device geneve1 left promiscuous mode [ 1130.763068][ T6112] team0 (unregistering): Port device geneve1 removed [ 1130.956081][ T6112] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1131.052578][ T6112] device team_slave_1 left promiscuous mode [ 1131.088896][ T6112] team0 (unregistering): Port device team_slave_1 removed [ 1131.113769][ T6112] device team_slave_0 left promiscuous mode [ 1131.130327][ T6112] team0 (unregistering): Port device team_slave_0 removed [ 1131.155982][ T6112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.238291][ T6112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.264816][ T6112] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1131.380302][ T6112] bond0 (unregistering): Released all slaves [ 1131.763136][T15611] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1132.201571][T15621] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3128'. [ 1132.299116][T15433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1136.005388][T15433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1136.030784][T15639] netlink: 'syz.4.3131': attribute type 10 has an invalid length. [ 1136.149063][T15433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1136.221799][T15433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1136.821557][T15433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.097996][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1137.129816][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1137.175976][T15433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.198937][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1137.218269][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1137.253443][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.260645][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.306079][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1137.336211][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1137.357402][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1137.387475][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.394735][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.455404][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1137.511345][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1137.547072][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1137.594923][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1137.644458][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1137.660576][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1137.714286][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1137.746185][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1137.781655][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1137.823075][T15433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.854818][T15433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1137.873937][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1137.898416][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.243917][T15694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3140'. [ 1138.323713][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1138.341082][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1138.382234][T15433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.441787][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1138.461333][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1138.534649][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1138.553913][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1138.586163][T15433] device veth0_vlan entered promiscuous mode [ 1138.617732][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1138.634920][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1138.663143][T15433] device veth1_vlan entered promiscuous mode [ 1138.736233][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1138.755353][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1138.785751][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1138.806170][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1138.841511][T15433] device veth0_macvtap entered promiscuous mode [ 1138.874293][T15433] device veth1_macvtap entered promiscuous mode [ 1138.921469][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.954295][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.976753][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.997787][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.026628][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.066492][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.096508][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.116519][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.138229][T15433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.150003][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1139.167354][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1139.186369][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1139.207424][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1139.234261][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.266495][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.276374][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.314976][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.343753][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.364836][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.385524][T15433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.408818][T15433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.444310][T15433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.464130][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1139.491739][T15410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1139.522285][T15433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.542674][T15433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.561889][T15433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.581028][T15433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.892925][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.907739][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.017195][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1140.049384][T15729] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3143'. [ 1140.278795][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.303713][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.938218][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1140.963314][T15739] netlink: 'syz.0.3145': attribute type 10 has an invalid length. [ 1141.129637][T15751] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.3149'. [ 1142.452048][T15765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3154'. [ 1142.693114][T15410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.742097][T15785] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1142.795686][T15410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.839410][T15762] chnl_net:caif_netlink_parms(): no params data found [ 1142.898374][T15410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.018419][T15410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.093615][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.104044][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.114856][T15762] device bridge_slave_0 entered promiscuous mode [ 1143.135832][T15790] netlink: 'syz.4.3162': attribute type 10 has an invalid length. [ 1143.149630][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.158250][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.168032][T15762] device bridge_slave_1 entered promiscuous mode [ 1143.510149][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.618563][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.778831][T15762] team0: Port device team_slave_0 added [ 1143.828252][T15762] team0: Port device team_slave_1 added [ 1143.887937][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.917894][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.004071][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.049667][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.067104][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.157531][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1144.176849][ T4472] Bluetooth: hci5: command 0x0409 tx timeout [ 1146.256714][ T4448] Bluetooth: hci5: command 0x041b tx timeout [ 1147.680271][T15762] device hsr_slave_0 entered promiscuous mode [ 1147.754084][T15762] device hsr_slave_1 entered promiscuous mode [ 1147.763255][T15762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1147.776939][T15762] Cannot create hsr debugfs directory [ 1147.928802][T15851] netlink: 'syz.3.3172': attribute type 10 has an invalid length. [ 1147.964592][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.015717][T15851] device bridge_slave_1 left promiscuous mode [ 1148.035197][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.047669][T15858] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1148.094707][T15851] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1148.346928][ T4448] Bluetooth: hci5: command 0x040f tx timeout [ 1150.426750][ T4448] Bluetooth: hci5: command 0x0419 tx timeout [ 1151.586806][T15885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3178'. [ 1152.842013][T15913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1152.923326][T15912] netlink: 'syz.3.3183': attribute type 10 has an invalid length. [ 1153.113048][T15918] netlink: 'syz.0.3185': attribute type 21 has an invalid length. [ 1153.190855][T15924] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3187'. [ 1153.396251][T15930] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.3189'. [ 1156.836672][T16009] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 1157.104496][T15762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1157.275294][T15762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1157.324642][T15762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1157.438455][T15762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1157.637726][T16019] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.3199'. [ 1157.737220][T16031] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3200'. [ 1159.476859][T16037] netlink: 'syz.0.3205': attribute type 10 has an invalid length. [ 1160.238960][T16048] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1160.990613][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.049402][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.058893][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.071705][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.114118][T15410] device hsr_slave_0 left promiscuous mode [ 1161.144590][T15410] device hsr_slave_1 left promiscuous mode [ 1161.173416][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.192122][T15410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.215492][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.225061][T15410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.254625][T15410] bridge0: port 3(team0) entered disabled state [ 1161.348736][T16074] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3213'. [ 1162.110472][T15410] device bridge_slave_0 left promiscuous mode [ 1162.136680][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.394801][T15410] device geneve1 left promiscuous mode [ 1162.439551][T15410] team0 (unregistering): Port device geneve1 removed [ 1162.489398][T15410] device virt_wifi0 left promiscuous mode [ 1162.496371][T15410] team0 (unregistering): Port device virt_wifi0 removed [ 1162.563117][T15410] device team_slave_1 left promiscuous mode [ 1162.576165][T15410] team0 (unregistering): Port device team_slave_1 removed [ 1162.593301][T15410] device team_slave_0 left promiscuous mode [ 1162.601207][T15410] team0 (unregistering): Port device team_slave_0 removed [ 1162.614676][T15410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.646200][T15410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.678701][T15410] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1162.756339][T15410] bond0 (unregistering): Released all slaves [ 1162.825949][T16067] netlink: 'syz.3.3211': attribute type 10 has an invalid length. [ 1162.836765][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1162.855974][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1162.875955][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.883121][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.896141][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1162.905723][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1162.914784][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.921972][ T6122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.932359][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1162.941871][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1162.956586][T16090] netlink: 'syz.5.3219': attribute type 10 has an invalid length. [ 1162.992264][ T6410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1163.905921][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1163.948461][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1163.968043][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1163.997538][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1164.008577][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1164.019444][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1164.034078][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1164.069338][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1164.107379][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1164.198469][T15762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1164.294923][T16111] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1165.576092][T16136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1165.721652][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.732951][ T6112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.763334][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.810683][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1165.827315][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.904645][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1165.920433][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1165.941388][T15762] device veth0_vlan entered promiscuous mode [ 1165.961465][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1165.978671][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1166.013139][T15762] device veth1_vlan entered promiscuous mode [ 1166.110431][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.130598][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1166.156410][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.188553][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.224860][T15762] device veth0_macvtap entered promiscuous mode [ 1166.242229][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1166.267780][T15762] device veth1_macvtap entered promiscuous mode [ 1166.312854][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.342707][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.368823][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.392861][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.414799][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.438662][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.463057][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.499465][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.532507][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.551576][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1166.573266][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1166.616088][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.646036][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.656297][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.703638][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.744132][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.771949][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.802067][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.812932][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.843435][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.927285][T15762] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.972537][T15762] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.006250][T15762] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.066266][T15762] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.116605][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.143664][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.583853][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.636856][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.730523][T16161] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 1167.748649][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1167.849436][ T6112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.864551][ T6112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.904826][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1168.368051][T16181] device wlan1 left promiscuous mode [ 1168.468079][T16185] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1168.664413][T16195] netlink: 'syz.5.3250': attribute type 10 has an invalid length. [ 1168.810115][T16201] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.3253'. [ 1169.011946][T16204] netlink: 'syz.3.3255': attribute type 10 has an invalid length. [ 1169.237013][T16222] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1170.754178][T16259] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1170.778150][T16260] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1171.841360][T16277] netlink: 'syz.5.3278': attribute type 10 has an invalid length. [ 1172.069318][T16284] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3281'. [ 1172.219429][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3282'. [ 1172.366201][T16297] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1172.392263][T16298] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3284'. [ 1173.190665][T16306] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 1173.210113][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3288'. [ 1173.234521][T16306] device team0 entered promiscuous mode [ 1173.240859][T16306] device team_slave_0 entered promiscuous mode [ 1173.319168][T16306] device team_slave_1 entered promiscuous mode [ 1173.397691][T16306] bridge0: port 2(team0) entered blocking state [ 1173.496806][T16306] bridge0: port 2(team0) entered disabled state [ 1173.762970][T16306] bridge0: port 2(team0) entered blocking state [ 1173.769457][T16306] bridge0: port 2(team0) entered forwarding state [ 1173.901200][T16321] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 1174.784233][T16331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1174.820128][T16342] device wlan1 entered promiscuous mode [ 1174.838761][T16344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1175.106141][T16352] device wlan1 entered promiscuous mode [ 1176.379489][T16369] device wlan1 left promiscuous mode [ 1176.406670][T16370] device wlan1 entered promiscuous mode [ 1176.665138][T16381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1176.683093][T16382] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1176.737670][T16379] netlink: 'syz.5.3309': attribute type 10 has an invalid length. [ 1177.064681][T16392] netlink: 'syz.5.3315': attribute type 10 has an invalid length. [ 1177.607352][T16413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1177.645199][T16408] device wlan1 entered promiscuous mode [ 1177.872518][T16429] netlink: 'syz.0.3323': attribute type 10 has an invalid length. [ 1177.959232][T16426] device wlan1 entered promiscuous mode [ 1178.360040][T16444] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3333'. [ 1178.440062][T16447] device wlan1 left promiscuous mode [ 1178.593988][T16451] device wlan1 entered promiscuous mode [ 1178.785392][T16454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3337'. [ 1178.914833][T16458] device wlan1 left promiscuous mode [ 1179.234528][T16462] netlink: 'syz.4.3342': attribute type 10 has an invalid length. [ 1179.297094][ T4472] Bluetooth: hci2: command 0x0406 tx timeout [ 1179.974621][T16474] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1180.004970][T16479] device wlan1 left promiscuous mode [ 1180.039925][T16485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3350'. [ 1180.241577][T16494] device wlan1 entered promiscuous mode [ 1180.306042][T16502] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1180.440876][T16504] netlink: 'syz.3.3358': attribute type 10 has an invalid length. [ 1180.571569][T16509] device wlan1 left promiscuous mode [ 1180.691673][T16514] netlink: 'syz.1.3361': attribute type 10 has an invalid length. [ 1180.775324][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.844728][T16514] device bridge_slave_1 left promiscuous mode [ 1180.887098][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.953387][T16514] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1182.339297][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.345694][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.388870][T16551] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3374'. [ 1182.636170][T16565] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1182.676227][T16566] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3377'. [ 1182.733180][T16563] netlink: 'syz.4.3378': attribute type 10 has an invalid length. [ 1182.751145][T16564] netlink: 'syz.1.3379': attribute type 10 has an invalid length. [ 1182.922805][T16574] device wlan1 entered promiscuous mode [ 1182.958559][T16575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3382'. [ 1183.469484][T16588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3388'. [ 1183.895546][T16596] netlink: 'syz.0.3392': attribute type 10 has an invalid length. [ 1184.875362][T16612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1185.051640][T16626] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1185.070391][T16627] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1185.280950][T16631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3403'. [ 1185.324473][T16633] device wlan1 entered promiscuous mode [ 1186.045620][T16647] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3420'. [ 1186.076086][T16641] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 1186.781085][T16662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1187.068771][T16667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1187.092158][T16674] device wlan1 left promiscuous mode [ 1187.362093][T16688] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3419'. [ 1187.456416][T16684] netlink: 'syz.1.3423': attribute type 10 has an invalid length. [ 1187.650442][T16694] netlink: 'syz.1.3425': attribute type 10 has an invalid length. [ 1187.662083][T16694] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3425'. [ 1187.671894][T16694] device team0 entered promiscuous mode [ 1187.678442][T16694] device team_slave_0 entered promiscuous mode [ 1187.690697][T16694] device team_slave_1 entered promiscuous mode [ 1187.702026][T16694] bridge0: port 2(team0) entered blocking state [ 1187.730343][T16694] bridge0: port 2(team0) entered disabled state [ 1187.765652][T16694] bridge0: port 2(team0) entered blocking state [ 1187.772222][T16694] bridge0: port 2(team0) entered forwarding state [ 1187.803228][T16701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1188.137024][T16708] netlink: 'syz.1.3428': attribute type 10 has an invalid length. [ 1188.155700][T16708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1188.705044][T16718] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1189.031009][T16731] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 1189.582540][T16733] netlink: 'syz.5.3434': attribute type 10 has an invalid length. [ 1189.816113][T16745] netlink: 'syz.4.3439': attribute type 10 has an invalid length. [ 1189.993830][T16759] device wlan1 entered promiscuous mode [ 1190.319426][T16764] __nla_validate_parse: 5 callbacks suppressed [ 1190.319446][T16764] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1191.894518][T16788] netlink: 'syz.1.3453': attribute type 10 has an invalid length. [ 1191.972301][T16788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1192.003681][T16791] netlink: 'syz.0.3452': attribute type 10 has an invalid length. [ 1192.090151][T16794] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3454'. [ 1192.228238][T16801] netlink: 'syz.1.3455': attribute type 10 has an invalid length. [ 1192.236928][T16801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3455'. [ 1192.280104][T16803] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3467'. [ 1192.505735][T16812] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3459'. [ 1193.249079][T16814] device wlan1 entered promiscuous mode [ 1193.373858][T16824] netlink: 'syz.3.3461': attribute type 10 has an invalid length. [ 1193.674096][T16832] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 1193.743581][T16832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1193.802461][T16832] device team0 entered promiscuous mode [ 1193.930034][T16832] device team_slave_0 entered promiscuous mode [ 1193.943247][T16832] device team_slave_1 entered promiscuous mode [ 1193.987062][T16832] bridge0: port 2(team0) entered blocking state [ 1194.011749][T16832] bridge0: port 2(team0) entered disabled state [ 1194.065969][T16832] bridge0: port 2(team0) entered blocking state [ 1194.072527][T16832] bridge0: port 2(team0) entered forwarding state [ 1194.294178][T16839] netlink: 'syz.1.3468': attribute type 10 has an invalid length. [ 1194.352159][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3470'. [ 1194.595910][T16852] netlink: 'syz.1.3473': attribute type 10 has an invalid length. [ 1194.655035][T16852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1195.733243][T16877] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1196.513790][T16876] device wlan1 left promiscuous mode [ 1196.732229][T16890] device wlan1 left promiscuous mode [ 1196.790819][T16892] device wlan1 entered promiscuous mode [ 1196.854740][T16893] netlink: 'syz.4.3484': attribute type 10 has an invalid length. [ 1196.876588][T16893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3484'. [ 1196.927677][T16900] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 1196.936328][T16900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1198.506030][T16920] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3491'. [ 1199.376401][T16936] netlink: 'syz.0.3494': attribute type 10 has an invalid length. [ 1200.126789][T16931] device wlan1 left promiscuous mode [ 1200.545359][T16966] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1201.366896][T16955] device wlan1 left promiscuous mode [ 1201.923840][T16988] netlink: 'syz.3.3514': attribute type 10 has an invalid length. [ 1203.152919][T17014] device wlan1 left promiscuous mode [ 1204.850409][T17052] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3535'. [ 1205.026180][T17059] netlink: 'syz.5.3536': attribute type 10 has an invalid length. [ 1206.334599][T17087] device wlan1 entered promiscuous mode [ 1208.494299][T17113] device wlan1 left promiscuous mode [ 1208.790665][T17133] device wlan1 entered promiscuous mode [ 1210.352966][T17154] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 1210.499393][T17153] netlink: 'syz.3.3572': attribute type 10 has an invalid length. [ 1211.263068][T17161] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 1211.273657][T17171] netlink: 'syz.4.3576': attribute type 10 has an invalid length. [ 1211.281932][T17171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3576'. [ 1211.615690][T17192] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3581'. [ 1212.984848][T17195] netlink: 'syz.5.3579': attribute type 10 has an invalid length. [ 1212.997949][T17204] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 1213.158776][T17208] device wlan1 entered promiscuous mode [ 1213.204027][T17210] netlink: 'syz.5.3586': attribute type 10 has an invalid length. [ 1213.221599][T17210] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3586'. [ 1213.346283][T17214] device wlan1 left promiscuous mode [ 1213.801014][T17231] netlink: 'syz.1.3594': attribute type 10 has an invalid length. [ 1213.809295][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3594'. [ 1213.911969][T17234] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1214.359208][T17243] device wlan1 left promiscuous mode [ 1214.416736][T17248] netlink: 'syz.1.3608': attribute type 10 has an invalid length. [ 1214.424634][T17248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3608'. [ 1214.575603][T17254] device wlan1 entered promiscuous mode [ 1215.146763][T11351] Bluetooth: hci4: command 0x0406 tx timeout [ 1215.522298][T17263] device wlan1 left promiscuous mode [ 1215.870330][T17271] netlink: 'syz.0.3601': attribute type 10 has an invalid length. [ 1216.048555][T17274] netlink: 'syz.1.3605': attribute type 10 has an invalid length. [ 1216.085303][T17282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1216.232942][T17285] device wlan1 left promiscuous mode [ 1216.312904][T17289] device wlan1 entered promiscuous mode [ 1216.384496][T17291] device wlan1 entered promiscuous mode [ 1216.552327][T17298] device wlan1 entered promiscuous mode [ 1217.241781][T17306] netlink: 'syz.4.3618': attribute type 10 has an invalid length. [ 1217.317384][T17305] device wlan1 left promiscuous mode [ 1217.543815][T17314] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3622'. [ 1217.735350][T17323] netlink: 'syz.4.3623': attribute type 10 has an invalid length. [ 1218.463293][T17336] netlink: 'syz.0.3628': attribute type 10 has an invalid length. [ 1218.501928][T17336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3628'. [ 1218.556777][T17336] device team0 entered promiscuous mode [ 1218.562800][T17336] device team_slave_0 entered promiscuous mode [ 1218.589995][T17336] device team_slave_1 entered promiscuous mode [ 1218.620096][T17336] bridge0: port 2(team0) entered blocking state [ 1218.663814][T17336] bridge0: port 2(team0) entered disabled state [ 1218.709411][T17336] bridge0: port 2(team0) entered blocking state [ 1218.715802][T17336] bridge0: port 2(team0) entered forwarding state [ 1218.797915][T17341] device wlan1 entered promiscuous mode [ 1219.431798][T17348] device wlan1 left promiscuous mode [ 1219.494794][T17350] device wlan1 entered promiscuous mode [ 1219.514031][T17351] device wlan1 left promiscuous mode [ 1219.520102][T17359] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3634'. [ 1219.551249][T17353] device wlan1 entered promiscuous mode [ 1219.636035][T17366] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1220.435183][T17378] netlink: 'syz.0.3640': attribute type 10 has an invalid length. [ 1220.528262][T17388] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1220.747397][T17393] netlink: 'syz.0.3645': attribute type 10 has an invalid length. [ 1220.755985][T17393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3645'. [ 1221.587775][T17403] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1221.636911][T17400] netlink: 'syz.4.3647': attribute type 10 has an invalid length. [ 1223.919947][T17431] netlink: 'syz.4.3654': attribute type 10 has an invalid length. [ 1224.511441][T17450] netlink: 'syz.5.3661': attribute type 10 has an invalid length. [ 1224.727510][T17456] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3662'. [ 1224.951064][T17470] netlink: 'syz.5.3668': attribute type 10 has an invalid length. [ 1225.035940][T17468] netlink: 'syz.4.3667': attribute type 10 has an invalid length. [ 1226.237562][T17484] netlink: 'syz.4.3673': attribute type 10 has an invalid length. [ 1226.422782][T17492] netlink: 'syz.5.3676': attribute type 10 has an invalid length. [ 1227.347788][T17510] netlink: 'syz.5.3681': attribute type 10 has an invalid length. [ 1227.369689][T17510] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3681'. [ 1227.531665][T17513] netlink: 'syz.1.3684': attribute type 10 has an invalid length. [ 1228.295394][T17525] device wlan1 left promiscuous mode [ 1228.309381][T17530] netlink: 'syz.1.3696': attribute type 10 has an invalid length. [ 1228.328227][T17533] netlink: 'syz.0.3687': attribute type 10 has an invalid length. [ 1228.798118][T17543] netlink: 'syz.1.3691': attribute type 10 has an invalid length. [ 1229.076947][T17552] netlink: 'syz.3.3697': attribute type 10 has an invalid length. [ 1229.171934][T17552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1229.975946][T17567] netlink: 'syz.0.3701': attribute type 10 has an invalid length. [ 1230.166189][T17569] netlink: 'syz.4.3702': attribute type 10 has an invalid length. [ 1231.078997][T17583] device wlan1 entered promiscuous mode [ 1231.241100][T17594] netlink: 'syz.0.3709': attribute type 10 has an invalid length. [ 1231.293719][T17594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3709'. [ 1231.706311][T17605] ------------[ cut here ]------------ [ 1231.712112][T17605] WARNING: CPU: 1 PID: 17605 at kernel/events/core.c:6698 perf_pending_task+0x353/0x480 [ 1231.722032][T17605] Modules linked in: [ 1231.726047][T17605] CPU: 1 PID: 17605 Comm: syz.4.3713 Not tainted syzkaller #0 [ 1231.733597][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1231.743742][T17605] RIP: 0010:perf_pending_task+0x353/0x480 [ 1231.749569][T17605] Code: e8 d2 46 de ff 84 db 75 10 e8 69 44 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 44 de ff e8 dc b1 65 ff eb e9 e8 4d 44 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1231.769345][T17605] RSP: 0018:ffffc90002eff9c0 EFLAGS: 00010293 [ 1231.775461][T17605] RAX: ffffffff819acb53 RBX: ffff88801d4575b8 RCX: ffff888023ae3b80 [ 1231.783973][T17605] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1231.792061][T17605] RBP: ffff88801d457388 R08: ffff888023ae4593 R09: 1ffff1100475c8b2 [ 1231.800132][T17605] R10: dffffc0000000000 R11: ffffed100475c8b3 R12: ffff888023ae3b80 [ 1231.808278][T17605] R13: ffff88801d500158 R14: 0000000000000000 R15: 1ffff11003a8ae71 [ 1231.816294][T17605] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1231.825410][T17605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.832129][T17605] CR2: 00007f6aa7f6dff8 CR3: 0000000019dbc000 CR4: 00000000003506e0 [ 1231.840214][T17605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1231.848267][T17605] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1231.856356][T17605] Call Trace: [ 1231.859749][T17605] [ 1231.862729][T17605] task_work_run+0x125/0x1a0 [ 1231.867523][T17605] do_exit+0x635/0x2110 [ 1231.871776][T17605] ? put_task_struct+0x80/0x80 [ 1231.876691][T17605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1231.882723][T17605] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1231.888160][T17605] do_group_exit+0x12c/0x2f0 [ 1231.892795][T17605] ? lockdep_hardirqs_on+0x94/0x140 [ 1231.898082][T17605] get_signal+0x7eb/0x12e0 [ 1231.902572][T17605] arch_do_signal_or_restart+0xe6/0x12a0 [ 1231.908393][T17605] ? create_io_thread+0x180/0x180 [ 1231.913547][T17605] ? get_sigframe_size+0x10/0x10 [ 1231.918663][T17605] ? exit_to_user_mode_loop+0x3b/0x130 [ 1231.924258][T17605] exit_to_user_mode_loop+0x9e/0x130 [ 1231.929643][T17605] exit_to_user_mode_prepare+0xee/0x180 [ 1231.935228][T17605] syscall_exit_to_user_mode+0x16/0x40 [ 1231.940939][T17605] do_syscall_64+0x58/0xa0 [ 1231.945404][T17605] ? clear_bhb_loop+0x30/0x80 [ 1231.950209][T17605] ? clear_bhb_loop+0x30/0x80 [ 1231.954930][T17605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1231.960923][T17605] RIP: 0033:0x7f6aaa17b159 [ 1231.965370][T17605] Code: Unable to access opcode bytes at RIP 0x7f6aaa17b12f. [ 1231.972827][T17605] RSP: 002b:00007f6aa8390fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1231.981348][T17605] RAX: 000000000000019f RBX: 00007f6aaa403180 RCX: 00007f6aaa17b159 [ 1231.989654][T17605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 1231.997699][T17605] RBP: 00007f6aaa212024 R08: 0000000000000000 R09: 0000000000000000 [ 1232.005704][T17605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1232.013798][T17605] R13: 00007f6aaa403218 R14: 00007f6aaa403180 R15: 00007ffe6a352198 [ 1232.021955][T17605] [ 1232.025053][T17605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1232.032361][T17605] CPU: 1 PID: 17605 Comm: syz.4.3713 Not tainted syzkaller #0 [ 1232.039849][T17605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1232.049939][T17605] Call Trace: [ 1232.053248][T17605] [ 1232.056208][T17605] dump_stack_lvl+0x188/0x250 [ 1232.060931][T17605] ? show_regs_print_info+0x20/0x20 [ 1232.066172][T17605] ? load_image+0x410/0x410 [ 1232.070731][T17605] panic+0x2f8/0x850 [ 1232.074667][T17605] ? bpf_jit_dump+0xd0/0xd0 [ 1232.079220][T17605] ? perf_pending_task+0x353/0x480 [ 1232.084363][T17605] __warn+0x248/0x2b0 [ 1232.088396][T17605] ? perf_pending_task+0x353/0x480 [ 1232.093549][T17605] report_bug+0x1b9/0x2e0 [ 1232.097925][T17605] handle_bug+0x3a/0x70 [ 1232.102150][T17605] exc_invalid_op+0x16/0x40 [ 1232.106681][T17605] asm_exc_invalid_op+0x16/0x20 [ 1232.111580][T17605] RIP: 0010:perf_pending_task+0x353/0x480 [ 1232.117336][T17605] Code: e8 d2 46 de ff 84 db 75 10 e8 69 44 de ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 44 de ff e8 dc b1 65 ff eb e9 e8 4d 44 de ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1232.136979][T17605] RSP: 0018:ffffc90002eff9c0 EFLAGS: 00010293 [ 1232.143123][T17605] RAX: ffffffff819acb53 RBX: ffff88801d4575b8 RCX: ffff888023ae3b80 [ 1232.151134][T17605] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1232.159141][T17605] RBP: ffff88801d457388 R08: ffff888023ae4593 R09: 1ffff1100475c8b2 [ 1232.167147][T17605] R10: dffffc0000000000 R11: ffffed100475c8b3 R12: ffff888023ae3b80 [ 1232.175159][T17605] R13: ffff88801d500158 R14: 0000000000000000 R15: 1ffff11003a8ae71 [ 1232.183171][T17605] ? perf_pending_task+0x353/0x480 [ 1232.188337][T17605] task_work_run+0x125/0x1a0 [ 1232.192969][T17605] do_exit+0x635/0x2110 [ 1232.197170][T17605] ? put_task_struct+0x80/0x80 [ 1232.201969][T17605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1232.208001][T17605] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1232.213064][T17605] do_group_exit+0x12c/0x2f0 [ 1232.217686][T17605] ? lockdep_hardirqs_on+0x94/0x140 [ 1232.222943][T17605] get_signal+0x7eb/0x12e0 [ 1232.227410][T17605] arch_do_signal_or_restart+0xe6/0x12a0 [ 1232.233088][T17605] ? create_io_thread+0x180/0x180 [ 1232.238160][T17605] ? get_sigframe_size+0x10/0x10 [ 1232.243163][T17605] ? exit_to_user_mode_loop+0x3b/0x130 [ 1232.248659][T17605] exit_to_user_mode_loop+0x9e/0x130 [ 1232.253976][T17605] exit_to_user_mode_prepare+0xee/0x180 [ 1232.259555][T17605] syscall_exit_to_user_mode+0x16/0x40 [ 1232.265051][T17605] do_syscall_64+0x58/0xa0 [ 1232.269495][T17605] ? clear_bhb_loop+0x30/0x80 [ 1232.274202][T17605] ? clear_bhb_loop+0x30/0x80 [ 1232.278914][T17605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1232.284842][T17605] RIP: 0033:0x7f6aaa17b159 [ 1232.289280][T17605] Code: Unable to access opcode bytes at RIP 0x7f6aaa17b12f. [ 1232.296662][T17605] RSP: 002b:00007f6aa8390fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1232.305107][T17605] RAX: 000000000000019f RBX: 00007f6aaa403180 RCX: 00007f6aaa17b159 [ 1232.313107][T17605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400 [ 1232.321110][T17605] RBP: 00007f6aaa212024 R08: 0000000000000000 R09: 0000000000000000 [ 1232.329110][T17605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1232.337110][T17605] R13: 00007f6aaa403218 R14: 00007f6aaa403180 R15: 00007ffe6a352198 [ 1232.345127][T17605] [ 1232.348477][T17605] Kernel Offset: disabled [ 1232.352831][T17605] Rebooting in 86400 seconds..