last executing test programs: 18.889678808s ago: executing program 3 (id=3788): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f0000000880)=""/267, 0x10b}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f00000010c0)=""/260, 0x104}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0xf}, 0x0) 18.639320012s ago: executing program 3 (id=3792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0x300}], 0x1}, 0x0) 18.322424924s ago: executing program 3 (id=3795): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000004200)=ANY=[@ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x3}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x2a, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a3f", 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f00000027c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26}, 0x20) r4 = socket$kcm(0x23, 0x5, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000"], 0xfe33) recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/203, 0xcb}, 0x12140) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r10, &(0x7f00000004c0)={&(0x7f0000000240)=@l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5bc, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="220d2419326a8ccb5c83846717ae6f0c4cfd04b2ba9641b0ca899ba976d9961890611a8387f8fbde3adb75471fe47a73", 0x30}, {&(0x7f0000000300)="1887eae9abfea9de0bff39fae94c17f33715de2577b75dbc3e6a739cffba2264304f75308861deb61fffeca74b1ea5f972b5f23ba366c67bcc798632d93dc898d2d809a20d261495ba66fe44ffb0528a0dead47b41aa15e445b2c4b9ac72d31d4adbb4705022b509452feec6d8960e35a12500d870abc8d7418b093da8e1301003a45be1fd5502a99839a3ab3177b2242d0881476629af3d9b144a70a8d735a914920723b838b636d955024ac5d8376e92c676e325c355fe3bcef7b915d072fcd90f09d88b51783965fb998207ae4d700816357e76084ae7af089b156091d468d7e08474f2cba1d64db555ac7e43e867309c9e", 0xf3}], 0x2, &(0x7f0000000440)=[{0x28, 0x10, 0x5ab, "b620632c8ce442966a0000000000000000"}, {0x30, 0x102, 0x6, "8cc1fab6cd7bca451a7d4715e02fa718a5bad947759506f90e"}], 0x58}, 0x801) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0xfffffffffffffffa}, 0x1024a, 0x0, 0xc2be, 0x0, 0x200000, 0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$tipc(r11, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="8539a9e5581d824957fbb02a425060b15bb2c6520a65004453c84e3efe0f369b6a2beae3b3dfd6b516106dfce6caeafd796e3196be24517c58425abdc5df00d452f1290f5fe7138430d9a586ac129d7052f3068ede1c18394497ff76a6efc23f93684a7bd0eaf4e5372910a82cfe6fbaa27c235107d22f99237372be5b8a64441c8d460781e08b344c504d10a0e70255c15f96ff577132c5e91f9c268bf6a29f1bd478a54ea6ea6fa3d6f70c64fc2ac48169cb16bb59813abb", 0xb9}, {&(0x7f0000000140)="5159100098cbf25be2ac1521f917c9050f6111a03abc62b4dcb07c7694738efa04f37988fbb4046d727067103a60b95ba5c768165b6515011138969a70e186150df79386af2ae7406647ca6abef3eef2033d5be1262b4c7bfaeab92a0c3994b7", 0x60}], 0x2, 0x0, 0x0, 0x40}, 0x14048) 18.241707108s ago: executing program 2 (id=3797): socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000600)}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x3}, 0x112ca1, 0x0, 0x800, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x8, 0x0, 0xfffffffd, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r2, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_ro(r2, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000540)=""/147, 0x41100, 0x4a, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000001780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x0, 0x9, 0x3a0, 0xffffb3e1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x10, &(0x7f0000000d00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="090000000000000000001100000004004e000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000040000000300"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0809000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r7, &(0x7f0000000240)="f4577b79db1b32b4b89df99b11bf08773c7c44bf8006c333485c63783fc5bb1506f536474e631afe664ab9e8dc1b876717315f8b43f6228be09b5f3f7bcaf13787fc0e87eada51774b27f8d0117946a10ddbc61aa24b1bb28333178d97cb89aa769dff5beff00a2a1ee7d9c24eeaee79f628841bd64b0575239d9f2197861c947e91b87e228690c3548d64fe8d4db64ab48e8762d392ad889cf4b6557b62eb60135eba1c456459a9888da3440e490a3d5c90ec1f0ad992f4443a73", &(0x7f0000000300)=""/195}, 0x20) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x4030582a, &(0x7f0000000040)=0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 17.229629771s ago: executing program 2 (id=3800): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0x3) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) 17.062967421s ago: executing program 3 (id=3802): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f0000000880)=""/267, 0x10b}, {&(0x7f0000000240)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f00000010c0)=""/260, 0x104}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/42, 0x2a}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000000)=""/62, 0x3e}, {0x0}, {&(0x7f0000000e80)=""/232, 0xe8}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x10}, 0x0) 15.340121823s ago: executing program 3 (id=3808): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x8f38, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 14.360592722s ago: executing program 0 (id=3809): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) socket$kcm(0x29, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 14.101305294s ago: executing program 1 (id=3810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1}, 0x0) (fail_nth: 7) 12.827363639s ago: executing program 3 (id=3812): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0x3) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) 12.826750139s ago: executing program 1 (id=3813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000001c00000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.56109993s ago: executing program 0 (id=3814): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 12.545252907s ago: executing program 4 (id=3815): socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe47a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, 0xc0000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x1ff}, 0x2, 0x5, 0x4f, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="080000000400000004000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000067d29767db1e3d83007c5ef4000000a045176dd475786a122a4c45d12eb16096e558b1f0b906218a97c749174cd8cc857089f5b7d30ae2"], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000084c3aa61d1da9aa0a93604000000040000000000000000"], 0x50) socketpair(0x28, 0x5, 0x10, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) setsockopt$sock_attach_bpf(r2, 0x1, 0x27, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2b, 0x7, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r1, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 11.672063615s ago: executing program 1 (id=3816): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a07000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x4201}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x9a000000, 0xabf, 0x20c0, r0, 0x7e1, '\x00', r3, r1, 0x2, 0x0, 0x0, 0xf}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x9, &(0x7f0000000640)=@framed={{}, [@generic={0xe, 0x8, 0x8, 0xfffd, 0x1c0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 10.846823613s ago: executing program 0 (id=3817): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'rose0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, &(0x7f0000000cc0)=""/245, 0x26, 0xf5, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r1 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04", 0x5a, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071") r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000840)='ns/mnt\x00') r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x82200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0xad, 0x9, 0x2, 0x0, 0x9d, 0x800, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x8820, 0x40000, 0x3, 0x7, 0x0, 0x10000, 0xa}, r1, 0x9, r3, 0x9) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000640)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="612025067f2a34b2a42a"], 0xa) 10.530425295s ago: executing program 4 (id=3818): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000800400040008000000ec1a7df10968e6010000008000000096945020d6ea8ee3d0fac20273fb31c75e00d9e4a72950cbe4cb1e84"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0xa5, 0x6, 0x6, 0x0, 0x400, 0x8004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x800, 0x2, 0x8, 0x4, 0x2, 0xe, 0xff0b, 0x0, 0xf}, r0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x1000000}]}}, 0x0, 0x3e}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10e002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000101) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r3 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000140), 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000800000000000000000850000008700000018110000", @ANYBLOB="6d78bfd6eed0f9603fffadba62b0b110eb4db75cf680e3b4b60cec6fa78693e2b858ed39448947b2857bebf77f42e9178acea9b1a65dd7e2f2b6107523cdcba9c1dd99757d006b344ba3dd5b581f42494dcef2614832246ddb333e6cc29d7acbd2d9c630cfa8db2fe4add872c570255fbe4b074c03217fe7bb86c7ae24fa6edd95b8cf78f54ba0260d026b6e6f98", @ANYBLOB="0000000000000000b702000000000000850000e1215b99b50086000000958597f50773509f7f17b1ab3464a39e271d0cd8f9d2ea9ec342a8a4d1c790814d93c475ae31d6d0a121a2ac06fd6f4341d30a0c7438da3d374606c9ee46e88370e9030f1a745dbb6d1578b2db096f2b86203f88b2fad8ce24c56c"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="6f4bd400abe4d75a144a8e000000", 0x0, 0x7a81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.093046754s ago: executing program 1 (id=3819): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000800400040008000000ec1a7df10968e6010000008000000096945020d6ea8ee3d0fac20273fb31c75e00d9e4a72950cbe4cb1e84"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0xa5, 0x6, 0x6, 0x0, 0x400, 0x8004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x800, 0x2, 0x8, 0x4, 0x2, 0xe, 0xff0b, 0x0, 0xf}, r0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x1000000}]}}, 0x0, 0x3e}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10e002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000101) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) r3 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000140), 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000800000000000000000850000008700000018110000", @ANYBLOB="6d78bfd6eed0f9603fffadba62b0b110eb4db75cf680e3b4b60cec6fa78693e2b858ed39448947b2857bebf77f42e9178acea9b1a65dd7e2f2b6107523cdcba9c1dd99757d006b344ba3dd5b581f42494dcef2614832246ddb333e6cc29d7acbd2d9c630cfa8db2fe4add872c570255fbe4b074c03217fe7bb86c7ae24fa6edd95b8cf78f54ba0260d026b6e6f98", @ANYBLOB="0000000000000000b702000000000000850000e1215b99b50086000000958597f50773509f7f17b1ab3464a39e271d0cd8f9d2ea9ec342a8a4d1c790814d93c475ae31d6d0a121a2ac06fd6f4341d30a0c7438da3d374606c9ee46e88370e9030f1a745dbb6d1578b2db096f2b86203f88b2fad8ce24c56c"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="6f4bd400abe4d75a144a8e000000", 0x0, 0x7a81, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.971079147s ago: executing program 2 (id=3820): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 8.349381692s ago: executing program 0 (id=3821): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x0, 0x66, &(0x7f00000008c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000400), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x32fd, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000b80)={0x217c5808}, 0x8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000280)=@ax25={{0x3, @bcast, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)="e25e8b330aeb2a4f28455b995e01f81e48e69da8cb90e4a7394036a7645d54461f2d95048862dee1c5adb736c63f463967eb2b6825397790f9835d4ebf25016020842dc26b82cd5889aba8592da59375705d6a17730e0820ba2d2e70f3bba9ce9bce4497c6704fdf9045230ca093d1d94ed6262e6b66327d03", 0x79}], 0x1, &(0x7f0000000500)=[{0x50, 0x84, 0x4, "0917077c85dfbee5dc00448ed59d59899efa1137f73787f3ba49b7ef7cb7a38974d888c1cb1bb8ed85f2f068161ada5844d20f6e7e08cf40330578f25a0b"}, {0x30, 0x29, 0x4, "dc4d6f46e8bc28ea70f74c91a52326629117db819aa42cad9e70"}, {0xf8, 0x13a, 0x3, "f77fcd0b15c03d204241d415f5aca3a8f47bd017064fa358e01b952cf042a7d97cceb4bb140530299e035367b9515190a80f6fc21385425814fcb7621adcc80da3ea0682b07c0551771dfdb689ca68a026ccbe1260b242bdc4f75b103c327299da50513490c505eef23ef479a94a3913272acddddddd37eb1c12161e06efd0353ad8d98b5636403b8731fbda469ebcfb91b60ff1e83d8c160b6da062d8d94363bc5166fd194dc45b5718f97e4288e9357124072bab9ad6a57e861efa30b545b87e5413ee5f0fbb4cee60caee47a3495c4a45ecefc6a803192e85aceaa068f722f2a73fec99"}, {0x30, 0x114, 0x5, "0dcb319c734cfaea8eaa6fdc5ff6b561431c3a10185058d5d719f8c6"}, {0xe0, 0x109, 0x7, "08066a91b31f2c3f141ee96cf7ebc5d438b1cfa55e9650be32473478fce408443950c63243d0b16b64403cd33b0900db3e8eb55bb595901baaf57cdc6ad3c9db0ed9f2ffcce47698e8559cab12f70d3ba60ddc1bc5ef7a5823d01a656b34f86dd1fcac5350933b98d6e03d9b8909aea38a956eb15c584f86f11a395b734f6a84da948efbad325bfbcbcc7f671383677b93e5e543b00016d236435ad6ca5a87b8477c344e13c1c71a11cd81fce273e7bbf0bee2461258f74906db7324e48791f172cf5aa72fadbf2f9a31c2"}, {0xc0, 0x108, 0x7f, "2f2e3e947c7b453afdd041359fe4bbc5bc398fd3b155a575fc0dc5054797f5cf4f5ecb7b1d747ee327bed6dda6592ccb41d0dfe563cb8d50e5d434372cae8639088d8465d12920d635cb844374c984f9e1d60dc9cf1c2892a6b5337884280e36b0350b7e9de6cdbb185be0fca36190dc83f090ecfbaa76e88a182f1b34d3e2d9233b9149177c29fd5cdffeedf7b1f1dfbc00fd4ce9192748fd9dfb9bb0a7b74c8cea67884d0b4c1d33e6e3a96a"}], 0x348}, 0x24000081) close(r1) 8.136548903s ago: executing program 4 (id=3822): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092, 0x41000}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x2130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8], 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.366261491s ago: executing program 1 (id=3823): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23003f) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @mcast1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, &(0x7f0000000100), 0x120) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socketpair(0x11, 0x2, 0x2, &(0x7f0000000940)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000980)={r7, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r9 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="9fe9010018000004000000000c0000000c000000060000000500000000000085812b0e0200612e615f00d7e353c89035d275b5bd585fc6158638586b09f3c1e550a792fe11e4e4ede467fa3a7dcea138c9c29ea578bcd15397eaba999be15ac2eb9b3b21f1e8d815fa140754d0c6ee6b58dadd8cbe9faa82d056835e27cefd84b0ea86e7208e0ff52e552f1572d96c9cf6890c8f086c367a876c8054b01c0c91edee"], &(0x7f0000000300)=""/242, 0x2a, 0xf2, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0xe, 0x0, &(0x7f0000000280)="000000789dcd2e7a0c54883d6071", 0x0, 0x4bc7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x7, &(0x7f0000000c40)=ANY=[@ANYRESOCT=r3, @ANYRES8=r10, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x19, &(0x7f00000002c0)=""/25, 0x41000, 0xa, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xb, 0xffff0001, 0x34000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r2, r2, r9, r2], 0x0, 0x10, 0xa66}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, 0x0, 0x4040044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 5.365604481s ago: executing program 2 (id=3824): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000707400ef00000000c100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000004000000040000000300000000000000", @ANYRES32=r0, @ANYBLOB="0000001ba36539bfd30000000000000000000000954f74c3000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88140, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x20040000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0xe853f05e236430e5, 0x87) (async) r4 = socket$kcm(0xa, 0xe853f05e236430e5, 0x87) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xb8b, @loopback={0xfec0ffffffffffff}, 0xfffffffb}, 0x80, 0x0}, 0x8010) (async) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0xb8b, @loopback={0xfec0ffffffffffff}, 0xfffffffb}, 0x80, 0x0}, 0x8010) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000780)={'ip6gre0\x00', 0x2000}) 5.364985921s ago: executing program 4 (id=3825): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000990500000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000021ffec00"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x0, &(0x7f0000000480), 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000500)='\xf5M\x11\xdb\xaa\x05\xf1F+>\x12\xb1oNR\xefee\xcd\x1dN\xda\x90P\xe6%\xa7P\xce\xa4\"\x9c4@3\x0e\x8f\xeb5\x95z\xe2\xd9\xc7\fT\xb8s;\xccw}\x1b\xe8d\v2s\xc3l\x83\x8e\xb6\xa7\x87x\xefM\xf3\x91\xa5\xebbKYUMiw}\'7\xceC\xe6\xaf\xbc,\xcc\x17\x80Z\xb8Hxx\xcb\xb1\xab#\xf0\x8e\x04\xda\x0e\n\xe6\xd9\x8fD\xb2\xa6\xc3\xffXuM\x80\xd7!\xc9\x1e\x02\x19\xbe\x8f\xe7\xbc%E\xca\xbc\xf5\x16mj\xbbN\xca\xd4X\xc3\xe4=\x92z\xe5\x16\xdb\\h8\xfdH\xfbj\x91\xb8\x14(x&K\x83\xd5\x8eX{\x14\xb8\xaaz\xde\x8b\x97\x9c\xc3\xe3\x1dV\x14\x00RI7y4C)\xf4QMZe\xd6\xbc\x92lU\"x\xed\x9a\xd2iGK\x03\x11\x0eDL\xfdK\x81\x13\xd1\xd3\x9c\x1f\x89\xa5\xf7\xc4\x89\xf6Z*\b\xa0\x97\xcf\f\xf2}\xc4\x96\x0ft\xad\xbc\xffJ\x04\v\f\xba\xc9\xeb\x9d1\xc9=\xee0T\x87~\xe3\x97\x84') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f540df0099bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee610be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3e12933410b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485f6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd729fda6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x4, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32=r0, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.231102496s ago: executing program 0 (id=3826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000001c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000020000008500000005000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.811185404s ago: executing program 0 (id=3827): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800a, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x10c002, 0xac5d, 0x10000200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0xee) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000400000001800000000000", @ANYBLOB], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.512651849s ago: executing program 4 (id=3828): socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x4840) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x2, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000040)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000001040), 0x4) socket$kcm(0x15, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0x43, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x30, 0x5f, 0x5f, 0x5f, 0x61, 0x0, 0x30, 0x30]}}, 0x0, 0x3a, 0x0, 0x0, 0x10001}, 0x28) 3.434657134s ago: executing program 2 (id=3829): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="7d20206aa2dda0c1a500026218ed7c459159dae6e14d5c4dd3f4b4d1e0714b6a046c114ec2903e892d3ce3f674a7bf398ab3e124e3fa7aa59713fbd0fc7752406dbe4f94107092e69f8da6e3ab7cf4f9f005456cc4ba43dd4dd7c0eba51681bbf154b3691e9bdb70", 0x68}, {&(0x7f0000000180)="66ceabc87c9de2f15819744544a68678ae6a0bc9ca3a4457b218a5cf44d8ce72b4e2fc75e3c764df261fd8e1c620d82ba3964e6c657d6ac8dbbef1ec06b89cafcbd9a8d36234934fa2773fed20ea3dbe48919b4859838af3ff269d6684aeebaf267314f0c1c075c0cd6dfd0d3aed", 0x6e}, {&(0x7f0000000240)="b306928ff0333c0e18d606c2f0d2790dd7929748c09bf1d23cb2b6fc70914ce99cdbc84d0839ebab5862477af67ee71899108ee899346405b9ca5fef8239f5e705a45539", 0x44}, {&(0x7f00000002c0)="0af5e78939b8799e419b4ccd405d276130f33635c62b212638f26dd37a68f92865db72c3d1128b897bcdb9a41444a5c39474346807342d768d37d31c03dd5d3c180915e19f8a8a262f918af73602b9e902e2301b462095411ff026c846de45a5106c896172f66817f966bb0003092efa44ee75619776691ca23a163111c094ee37349bb1fd11f9cc01d6d3d816ced7f97bdc1bc8", 0x94}], 0x4}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)=0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002400)={0xffffffffffffffff, 0x20, &(0x7f0000001280)={&(0x7f0000002340)=""/172, 0xac, 0x0, &(0x7f0000001240)=""/27, 0x1b}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @tail_call], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xa5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x2, &(0x7f00000009c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], &(0x7f0000000a00)='syzkaller\x00', 0x60e, 0xb0, &(0x7f0000000a40)=""/176, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000b00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x8, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r0], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x8, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="00193281b9fb3fc419300cbe143043e10000000000000056000000000001009514000000010000000000ee0061", @ANYRESOCT=r1, @ANYBLOB="31be6df3673223d6c3ab5d8225db2615aa0d82a9eeaebef3ddd6018477a3e601524aee8027eceaaf32cef9f9660d18d6ef90cb9f1ac4aab48d1f863e2b9093974105bcc292daac3aaf"], &(0x7f0000000840)='GPL\x00', 0x2, 0x95, &(0x7f0000000c80)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x49}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES8=0x0], &(0x7f0000000900)=""/179, 0x5a, 0xb3, 0x1, 0x2}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00190000000000000000000000000000000000006e00000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) r6 = socket$kcm(0x1e, 0x2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb00001400a39020", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0xe80) r9 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) close(0x3) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x7a, 0xfa, 0x1}, 0x80, 0xffffffffffffffff}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000380)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/182, 0xb6}], 0x4, &(0x7f00000007c0)=""/38, 0x26}, 0x1) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080), 0x0, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @generic={0x89, 0x11, "6a3a3af952675e8a1ce60b44de8d56"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x58}, 0xff00) 1.510226449s ago: executing program 1 (id=3830): socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(0x3) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x16}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) 507.529494ms ago: executing program 2 (id=3831): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000700)=""/130, 0x82}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f00000008c0)=""/201, 0xc9}], 0x4, &(0x7f00000005c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty, 0x1}}, 0x80, 0x0}, 0xfc00) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x3, 0x3, 0x80, 0x400, 0xffffffffffffffff, 0x7847110, '\x00', 0x0, r1, 0x3, 0x5, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 0s ago: executing program 4 (id=3832): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000060000007f00000001"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ffffffffffd}, 0x2000, 0x8, 0x7, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x7, 0x106) (async) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7fffffff, 0x2}, 0x1000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="620a1b99ffffffff7110b3001e00200085950000000600"/32], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(r3, 0x0, 0xffdd) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001a0081024e81f782db4cb904021d0800fe0055a1150015000200142603600e12080009007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) kernel console output (not intermixed with test programs): [ 783.584932][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.612829][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.649964][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.687513][T14764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.695779][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 783.710723][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 783.729422][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 783.739457][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 783.766849][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.796193][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.813404][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.826789][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.839857][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.856639][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.884840][T14764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.920235][T14539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 783.930432][T14539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 783.955812][T14764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.985106][T14764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.020413][T14764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.029752][T14764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.462637][T14962] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 784.626113][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.649974][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.786726][T14962] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 784.844616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 784.942120][T14963] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 784.959885][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.984643][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.115860][ T53] device wlan1 left promiscuous mode [ 785.139389][ T53] team0: Port device wlan1 removed [ 785.182938][T14974] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3169'. [ 785.348097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 785.357502][T14971] netlink: 'syz.1.3168': attribute type 5 has an invalid length. [ 785.397184][T14974] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3169'. [ 785.409094][T14977] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3169'. [ 786.064189][T14998] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3173'. [ 786.094554][T14998] bridge_slave_1: default FDB implementation only supports local addresses [ 786.601996][T15014] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3176'. [ 786.721705][T15019] netlink: 'syz.4.3179': attribute type 29 has an invalid length. [ 786.790728][T12282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.801334][T12282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.809582][T12282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.832006][T12282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.842598][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 786.848852][T15019] netlink: 'syz.4.3179': attribute type 29 has an invalid length. [ 786.881325][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.901719][T15021] netlink: 'syz.4.3179': attribute type 29 has an invalid length. [ 787.486864][T15034] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3181'. [ 787.729386][T15031] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 787.753649][T15031] syzkaller0: linktype set to 769 [ 787.825618][T15037] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 787.846488][T15034] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3181'. [ 787.989158][ T53] device hsr_slave_0 left promiscuous mode [ 787.998938][ T53] device hsr_slave_1 left promiscuous mode [ 788.015661][ T53] device veth1_macvtap left promiscuous mode [ 788.023875][ T53] device veth0_macvtap left promiscuous mode [ 788.179001][ T53] device geneve1 left promiscuous mode [ 788.187712][ T53] team0 (unregistering): Port device geneve1 removed [ 788.385162][T15046] netlink: 'syz.4.3184': attribute type 29 has an invalid length. [ 788.586354][ T53] device team_slave_1 left promiscuous mode [ 788.594597][ T53] team0 (unregistering): Port device team_slave_1 removed [ 788.643262][ T53] device team_slave_0 left promiscuous mode [ 788.652665][ T53] team0 (unregistering): Port device team_slave_0 removed [ 788.709498][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.762550][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.931498][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 789.076308][ T53] bond0 (unregistering): Released all slaves [ 789.114419][T15039] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 789.136998][T15038] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3181'. [ 789.178839][T15043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.186156][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 789.193694][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 789.200994][T15043] IPv6: NLM_F_CREATE should be set when creating new route [ 789.218303][T15046] netlink: 'syz.4.3184': attribute type 29 has an invalid length. [ 789.229448][T15053] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3184'. [ 789.665600][T15070] netlink: 'syz.0.3189': attribute type 39 has an invalid length. [ 789.838837][T15074] netlink: 'syz.4.3191': attribute type 29 has an invalid length. [ 789.935745][T15074] netlink: 'syz.4.3191': attribute type 29 has an invalid length. [ 789.953772][ T4283] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 789.961346][ T4283] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 789.962822][T15080] netlink: 'syz.4.3191': attribute type 29 has an invalid length. [ 790.010042][T15020] chnl_net:caif_netlink_parms(): no params data found [ 790.205383][T15092] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3194'. [ 790.229046][T15092] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3194'. [ 790.326644][T15095] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3194'. [ 790.372108][T15020] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.380485][T15020] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.428998][T15020] device bridge_slave_0 entered promiscuous mode [ 790.596796][T15096] device syzkaller0 entered promiscuous mode [ 790.649340][T15020] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.662454][T15020] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.711644][T15020] device bridge_slave_1 entered promiscuous mode [ 790.958150][T15115] netlink: 'syz.0.3196': attribute type 29 has an invalid length. [ 791.001193][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 793.091211][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 793.117123][T15111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 793.124746][T15115] netlink: 'syz.0.3196': attribute type 29 has an invalid length. [ 793.143734][T15020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.184218][T15020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.355766][T15020] team0: Port device team_slave_0 added [ 793.394582][T15020] team0: Port device team_slave_1 added [ 793.486133][T15020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.514302][T15020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.601770][T15020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.629255][T15130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'. [ 793.686263][T15020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.712073][T15020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.846546][T15020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.942394][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 793.984980][T15148] netlink: 'syz.0.3205': attribute type 29 has an invalid length. [ 794.021292][T15148] netlink: 'syz.0.3205': attribute type 29 has an invalid length. [ 794.094576][T15150] netlink: 'syz.2.3206': attribute type 39 has an invalid length. [ 794.131334][T15148] netlink: 'syz.0.3205': attribute type 29 has an invalid length. [ 794.158764][T15020] device hsr_slave_0 entered promiscuous mode [ 794.186970][T15020] device hsr_slave_1 entered promiscuous mode [ 794.213415][T15020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.256232][T15020] Cannot create hsr debugfs directory [ 794.347584][T15158] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3207'. [ 794.435024][T15158] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3207'. [ 794.451970][T15162] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3207'. [ 794.520584][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.664795][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.676928][T15167] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3219'. [ 794.861377][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.898406][T15170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 794.927250][T15167] validate_nla: 1 callbacks suppressed [ 794.927274][T15167] netlink: 'syz.2.3219': attribute type 27 has an invalid length. [ 794.963480][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.161603][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 795.514849][T15190] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3215'. [ 795.589364][T15191] netlink: 'syz.2.3213': attribute type 23 has an invalid length. [ 795.830250][ T4283] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 795.837879][ T4283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 796.027896][T15205] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3220'. [ 796.134666][T15210] FAULT_INJECTION: forcing a failure. [ 796.134666][T15210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.176101][T15210] CPU: 1 PID: 15210 Comm: syz.3.3223 Not tainted syzkaller #0 [ 796.183682][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 796.193851][T15210] Call Trace: [ 796.197167][T15210] [ 796.200139][T15210] dump_stack_lvl+0x188/0x24e [ 796.204871][T15210] ? show_regs_print_info+0x12/0x12 [ 796.210111][T15210] ? load_image+0x400/0x400 [ 796.214647][T15210] ? __lock_acquire+0x7d10/0x7d10 [ 796.219696][T15210] should_fail_ex+0x399/0x4d0 [ 796.224392][T15210] _copy_from_user+0x2c/0x170 [ 796.229088][T15210] iovec_from_user+0x143/0x360 [ 796.233868][T15210] __import_iovec+0x6d/0x500 [ 796.238478][T15210] import_iovec+0x6f/0xa0 [ 796.242826][T15210] ___sys_sendmsg+0x252/0x360 [ 796.247555][T15210] ? __sys_sendmsg+0x290/0x290 [ 796.252358][T15210] ? __lock_acquire+0x7d10/0x7d10 [ 796.257503][T15210] __se_sys_sendmsg+0x1bb/0x2a0 [ 796.262374][T15210] ? __x64_sys_sendmsg+0x80/0x80 [ 796.267432][T15210] ? lockdep_hardirqs_on+0x94/0x140 [ 796.272736][T15210] do_syscall_64+0x4c/0xa0 [ 796.277186][T15210] ? clear_bhb_loop+0x60/0xb0 [ 796.281966][T15210] ? clear_bhb_loop+0x60/0xb0 [ 796.286674][T15210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.292619][T15210] RIP: 0033:0x7f5acef9c799 [ 796.297093][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.317076][T15210] RSP: 002b:00007f5acfe55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.325590][T15210] RAX: ffffffffffffffda RBX: 00007f5acf215fa0 RCX: 00007f5acef9c799 [ 796.333659][T15210] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 796.341740][T15210] RBP: 00007f5acfe55090 R08: 0000000000000000 R09: 0000000000000000 [ 796.349718][T15210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.357730][T15210] R13: 00007f5acf216038 R14: 00007f5acf215fa0 R15: 00007ffe2aca8418 [ 796.365984][T15210] [ 796.400885][T15205] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3220'. [ 796.495595][T15206] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3220'. [ 796.690264][T15221] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3224'. [ 796.928945][T15227] netlink: 'syz.3.3224': attribute type 27 has an invalid length. [ 797.176975][T15020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 797.199781][T15020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 797.219614][T15020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 797.306718][T15244] FAULT_INJECTION: forcing a failure. [ 797.306718][T15244] name failslab, interval 1, probability 0, space 0, times 0 [ 797.355976][T15244] CPU: 1 PID: 15244 Comm: syz.3.3231 Not tainted syzkaller #0 [ 797.363518][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 797.373601][T15244] Call Trace: [ 797.376903][T15244] [ 797.379951][T15244] dump_stack_lvl+0x188/0x24e [ 797.385089][T15244] ? sctp_sendmsg+0x15b0/0x2940 [ 797.390023][T15244] ? ___sys_sendmsg+0x2a2/0x360 [ 797.394905][T15244] ? show_regs_print_info+0x12/0x12 [ 797.400473][T15244] ? load_image+0x400/0x400 [ 797.405078][T15244] should_fail_ex+0x399/0x4d0 [ 797.409789][T15244] should_failslab+0x5/0x20 [ 797.414331][T15244] slab_pre_alloc_hook+0x59/0x310 [ 797.419424][T15244] ? sctp_add_bind_addr+0x89/0x350 [ 797.424640][T15244] __kmem_cache_alloc_node+0x4f/0x260 [ 797.430066][T15244] ? sctp_add_bind_addr+0x89/0x350 [ 797.435230][T15244] kmalloc_trace+0x26/0xe0 [ 797.439787][T15244] sctp_add_bind_addr+0x89/0x350 [ 797.444785][T15244] sctp_copy_local_addr_list+0x311/0x4e0 [ 797.450454][T15244] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 797.456470][T15244] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 797.462613][T15244] ? sctp_v4_is_any+0x31/0x50 [ 797.467520][T15244] ? sctp_copy_one_addr+0x93/0x660 [ 797.472699][T15244] sctp_bind_addr_copy+0xaf/0x3c0 [ 797.477788][T15244] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 797.484263][T15244] sctp_connect_new_asoc+0x2f5/0x6a0 [ 797.489607][T15244] ? __sctp_connect+0xd80/0xd80 [ 797.494597][T15244] ? __local_bh_enable_ip+0x136/0x1c0 [ 797.500022][T15244] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 797.505648][T15244] ? security_sctp_bind_connect+0x85/0xb0 [ 797.511428][T15244] sctp_sendmsg+0x15b0/0x2940 [ 797.516183][T15244] ? aa_sk_perm+0x781/0x950 [ 797.520752][T15244] ? sctp_getsockopt+0x8a0/0x8a0 [ 797.525753][T15244] ? __might_fault+0xa6/0x120 [ 797.530649][T15244] ? aa_af_perm+0x340/0x340 [ 797.535286][T15244] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 797.541776][T15244] ? inet_sendmsg+0xe5/0x2f0 [ 797.546684][T15244] ? inet_send_prepare+0x260/0x260 [ 797.551862][T15244] ____sys_sendmsg+0x5be/0x970 [ 797.556658][T15244] ? __sys_sendmsg_sock+0x30/0x30 [ 797.561795][T15244] ? __import_iovec+0x315/0x500 [ 797.566764][T15244] ? import_iovec+0x6f/0xa0 [ 797.571459][T15244] ___sys_sendmsg+0x2a2/0x360 [ 797.576269][T15244] ? __sys_sendmsg+0x290/0x290 [ 797.581167][T15244] ? trace_call_bpf+0xbf/0x6b0 [ 797.586324][T15244] __se_sys_sendmsg+0x1bb/0x2a0 [ 797.591287][T15244] ? __x64_sys_sendmsg+0x80/0x80 [ 797.596416][T15244] ? lockdep_hardirqs_on+0x94/0x140 [ 797.601647][T15244] do_syscall_64+0x4c/0xa0 [ 797.606116][T15244] ? clear_bhb_loop+0x60/0xb0 [ 797.610834][T15244] ? clear_bhb_loop+0x60/0xb0 [ 797.615612][T15244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.621619][T15244] RIP: 0033:0x7f5acef9c799 [ 797.626161][T15244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.646331][T15244] RSP: 002b:00007f5acfe55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.654941][T15244] RAX: ffffffffffffffda RBX: 00007f5acf215fa0 RCX: 00007f5acef9c799 [ 797.663034][T15244] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 797.671050][T15244] RBP: 00007f5acfe55090 R08: 0000000000000000 R09: 0000000000000000 [ 797.679028][T15244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.687013][T15244] R13: 00007f5acf216038 R14: 00007f5acf215fa0 R15: 00007ffe2aca8418 [ 797.695089][T15244] [ 797.704218][T15020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 797.986427][T15020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.055996][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 798.073882][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.129674][T15020] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.186538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.211850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.242260][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.249469][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.303137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 798.319061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.378991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.415448][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.422738][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.443268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.482286][T15261] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3238'. [ 798.530309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.546074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.574454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.597630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.697418][T15267] netlink: 'syz.3.3240': attribute type 39 has an invalid length. [ 798.768773][T15272] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3241'. [ 798.890776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.916635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.968915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.995839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.009883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 799.029875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.047575][T15272] netlink: 'syz.2.3241': attribute type 27 has an invalid length. [ 799.063317][T15020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.482161][T15291] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 799.504682][T15290] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3243'. [ 799.521302][T15291] syzkaller0: linktype set to 769 [ 799.547840][T15281] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 799.566193][T15281] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 800.162028][T15296] netlink: 'syz.4.3245': attribute type 10 has an invalid length. [ 800.171678][T15296] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3245'. [ 800.786970][T15325] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3254'. [ 800.852703][T15318] netlink: 'syz.2.3253': attribute type 39 has an invalid length. [ 800.889879][ T53] device hsr_slave_0 left promiscuous mode [ 800.911781][ T53] device hsr_slave_1 left promiscuous mode [ 800.920218][ T53] bridge0: port 1(dummy0) entered disabled state [ 800.975463][ T53] device bridge_slave_1 left promiscuous mode [ 800.991289][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.034704][ T53] device veth1_macvtap left promiscuous mode [ 801.040909][ T53] device veth0_macvtap left promiscuous mode [ 801.053705][ T53] device veth1_vlan left promiscuous mode [ 802.138580][T15341] FAULT_INJECTION: forcing a failure. [ 802.138580][T15341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.162241][T15341] CPU: 1 PID: 15341 Comm: syz.2.3257 Not tainted syzkaller #0 [ 802.169871][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.180113][T15341] Call Trace: [ 802.183403][T15341] [ 802.186366][T15341] dump_stack_lvl+0x188/0x24e [ 802.191141][T15341] ? show_regs_print_info+0x12/0x12 [ 802.196383][T15341] ? load_image+0x400/0x400 [ 802.201101][T15341] ? __lock_acquire+0x7d10/0x7d10 [ 802.206131][T15341] ? lockdep_hardirqs_on+0x94/0x140 [ 802.211332][T15341] should_fail_ex+0x399/0x4d0 [ 802.216136][T15341] _copy_from_user+0x2c/0x170 [ 802.220903][T15341] __sys_bpf+0x2ea/0x780 [ 802.225199][T15341] ? bpf_link_show_fdinfo+0x380/0x380 [ 802.230665][T15341] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 802.236858][T15341] __x64_sys_bpf+0x78/0x90 [ 802.241298][T15341] do_syscall_64+0x4c/0xa0 [ 802.245931][T15341] ? clear_bhb_loop+0x60/0xb0 [ 802.250624][T15341] ? clear_bhb_loop+0x60/0xb0 [ 802.255391][T15341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 802.261289][T15341] RIP: 0033:0x7fcff579c799 [ 802.265710][T15341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.285624][T15341] RSP: 002b:00007fcff39f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.294133][T15341] RAX: ffffffffffffffda RBX: 00007fcff5a15fa0 RCX: 00007fcff579c799 [ 802.302106][T15341] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 802.310165][T15341] RBP: 00007fcff39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 802.318139][T15341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.326131][T15341] R13: 00007fcff5a16038 R14: 00007fcff5a15fa0 R15: 00007ffd00458888 [ 802.334111][T15341] [ 802.446110][T15343] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3258'. [ 802.744568][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.795995][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.005803][ T53] bond0 (unregistering): Released all slaves [ 803.120004][T15325] netlink: 'syz.3.3254': attribute type 27 has an invalid length. [ 803.136304][T15332] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 803.147317][T15332] syzkaller0: linktype set to 769 [ 803.156017][T15333] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 803.171191][T15336] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 803.206591][T15343] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3258'. [ 803.223322][T15344] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3258'. [ 803.280344][T14539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.313891][T14539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.326399][T15020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.448845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 803.458088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.514524][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 803.530290][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 803.592110][T15020] device veth0_vlan entered promiscuous mode [ 803.619481][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 803.642114][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.692249][T15020] device veth1_vlan entered promiscuous mode [ 803.716382][T15353] netlink: 'syz.4.3263': attribute type 5 has an invalid length. [ 803.842295][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.853689][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.876636][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.887015][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.900252][T15020] device veth0_macvtap entered promiscuous mode [ 803.920545][T15020] device veth1_macvtap entered promiscuous mode [ 803.932054][ T4283] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 803.939542][ T4283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 803.973675][T15359] netlink: 'syz.2.3265': attribute type 39 has an invalid length. [ 804.047783][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.059906][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.070575][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.081595][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.118765][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.150710][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.189965][T15020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.269846][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.287175][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.299577][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.318385][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.650517][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.675898][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.721995][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.750374][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.780526][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.810738][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.825948][T15020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.828909][T15379] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3271'. [ 804.837527][T15020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.858864][T15020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.879221][T15379] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3271'. [ 804.909298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.920487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 804.956495][T15377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 804.983668][T15020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.025493][T15020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.035603][T15020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.046852][T15382] netlink: 'syz.3.3273': attribute type 29 has an invalid length. [ 805.067634][T15020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.091555][T15380] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3271'. [ 805.122448][T15382] netlink: 'syz.3.3273': attribute type 29 has an invalid length. [ 805.159411][T15385] netlink: 'syz.3.3273': attribute type 29 has an invalid length. [ 805.177714][T15387] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 805.239822][T15387] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 805.300338][T15390] netlink: 'syz.2.3274': attribute type 29 has an invalid length. [ 805.366505][ T4273] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 805.374445][ T4273] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 805.415394][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.465715][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.519596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 805.531748][T15396] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3285'. [ 805.584033][T15392] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 805.605504][T15392] syzkaller0: linktype set to 769 [ 805.630021][T15396] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3285'. [ 805.640070][T15398] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3285'. [ 805.675898][T15400] netlink: 'syz.2.3278': attribute type 5 has an invalid length. [ 805.696162][T15397] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 805.702962][T15402] netlink: 'syz.4.3279': attribute type 39 has an invalid length. [ 805.742510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.750680][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.762476][T15392] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 805.825491][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 806.630331][T15413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 806.637707][T15413] IPv6: NLM_F_CREATE should be set when creating new route [ 806.645372][T15413] IPv6: NLM_F_CREATE should be set when creating new route [ 806.652728][T15413] IPv6: NLM_F_CREATE should be set when creating new route [ 806.748732][T15420] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3283'. [ 807.519100][T15431] netlink: 'syz.4.3289': attribute type 29 has an invalid length. [ 807.570876][T15431] netlink: 'syz.4.3289': attribute type 29 has an invalid length. [ 807.589375][T15437] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3292'. [ 807.608887][ T4283] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 807.618687][T15438] netlink: 'syz.4.3289': attribute type 29 has an invalid length. [ 807.633523][T15437] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3292'. [ 807.675105][T15436] netlink: 'syz.3.3291': attribute type 39 has an invalid length. [ 807.717960][T15441] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3292'. [ 807.942054][T15446] netlink: 'syz.2.3304': attribute type 39 has an invalid length. [ 809.187203][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.193638][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.377242][T15454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 810.590195][T15465] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 810.681463][T15465] syzkaller0: linktype set to 769 [ 810.813428][T15472] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 811.087945][T15465] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 813.059789][T15485] validate_nla: 1 callbacks suppressed [ 813.059808][T15485] netlink: 'syz.2.3305': attribute type 29 has an invalid length. [ 813.104607][T15485] netlink: 'syz.2.3305': attribute type 29 has an invalid length. [ 813.146517][T15489] netlink: 'syz.2.3305': attribute type 29 has an invalid length. [ 813.268716][T15486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.368264][ T4283] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 813.376002][ T4283] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 813.386675][T15491] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 813.480247][T15497] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 813.617731][T15502] FAULT_INJECTION: forcing a failure. [ 813.617731][T15502] name failslab, interval 1, probability 0, space 0, times 0 [ 813.657075][T15497] syzkaller0: linktype set to 769 [ 813.691132][T15502] CPU: 1 PID: 15502 Comm: syz.2.3309 Not tainted syzkaller #0 [ 813.698764][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.708904][T15502] Call Trace: [ 813.712232][T15502] [ 813.715349][T15502] dump_stack_lvl+0x188/0x24e [ 813.720056][T15502] ? show_regs_print_info+0x12/0x12 [ 813.725366][T15502] ? load_image+0x400/0x400 [ 813.729890][T15502] ? __might_sleep+0xd0/0xd0 [ 813.734606][T15502] ? __lock_acquire+0x7d10/0x7d10 [ 813.739697][T15502] should_fail_ex+0x399/0x4d0 [ 813.744421][T15502] should_failslab+0x5/0x20 [ 813.748954][T15502] slab_pre_alloc_hook+0x59/0x310 [ 813.754001][T15502] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 813.759825][T15502] __kmem_cache_alloc_node+0x4f/0x260 [ 813.765225][T15502] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 813.770963][T15502] __kmalloc+0xa0/0x240 [ 813.775138][T15502] tomoyo_realpath_from_path+0xdf/0x5d0 [ 813.780703][T15502] ? tomoyo_path_number_perm+0x205/0x650 [ 813.786350][T15502] tomoyo_path_number_perm+0x22f/0x650 [ 813.791916][T15502] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 813.797417][T15502] ? ksys_write+0x1c0/0x250 [ 813.802015][T15502] ? common_file_perm+0x171/0x1c0 [ 813.807089][T15502] ? __fget_files+0x28/0x4b0 [ 813.811805][T15502] ? __fget_files+0x28/0x4b0 [ 813.816421][T15502] security_file_ioctl+0x6c/0xa0 [ 813.821474][T15502] __se_sys_ioctl+0x48/0x170 [ 813.826079][T15502] do_syscall_64+0x4c/0xa0 [ 813.830508][T15502] ? clear_bhb_loop+0x60/0xb0 [ 813.835202][T15502] ? clear_bhb_loop+0x60/0xb0 [ 813.839977][T15502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.845928][T15502] RIP: 0033:0x7fcff579c799 [ 813.850365][T15502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.870071][T15502] RSP: 002b:00007fcff39f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.878503][T15502] RAX: ffffffffffffffda RBX: 00007fcff5a15fa0 RCX: 00007fcff579c799 [ 813.886484][T15502] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 813.894557][T15502] RBP: 00007fcff39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 813.902540][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.910520][T15502] R13: 00007fcff5a16038 R14: 00007fcff5a15fa0 R15: 00007ffd00458888 [ 813.918603][T15502] [ 813.971002][T15499] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 814.055282][T15502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.097045][T15507] netlink: 'syz.0.3310': attribute type 39 has an invalid length. [ 815.109039][T15513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 815.397500][T15532] netlink: 'syz.3.3319': attribute type 29 has an invalid length. [ 815.417760][ T4273] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 815.425811][ T4273] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 815.473521][T15532] netlink: 'syz.3.3319': attribute type 29 has an invalid length. [ 815.482190][T15536] netlink: 'syz.3.3319': attribute type 29 has an invalid length. [ 815.542342][T15534] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 815.548566][T15534] syzkaller0: linktype set to 769 [ 815.853076][T15541] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 816.016276][T15545] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 816.069393][T15550] FAULT_INJECTION: forcing a failure. [ 816.069393][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 816.171881][T15550] CPU: 1 PID: 15550 Comm: syz.0.3323 Not tainted syzkaller #0 [ 816.179440][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.189536][T15550] Call Trace: [ 816.192858][T15550] [ 816.195822][T15550] dump_stack_lvl+0x188/0x24e [ 816.196085][T15544] netlink: 'syz.2.3321': attribute type 10 has an invalid length. [ 816.200620][T15550] ? show_regs_print_info+0x12/0x12 [ 816.200653][T15550] ? load_image+0x400/0x400 [ 816.200679][T15550] ? __might_sleep+0xd0/0xd0 [ 816.222912][T15550] ? __lock_acquire+0x7d10/0x7d10 [ 816.227992][T15550] should_fail_ex+0x399/0x4d0 [ 816.232719][T15550] should_failslab+0x5/0x20 [ 816.237441][T15550] slab_pre_alloc_hook+0x59/0x310 [ 816.242675][T15550] ? apparmor_sk_alloc_security+0x74/0x100 [ 816.248714][T15550] __kmem_cache_alloc_node+0x4f/0x260 [ 816.254157][T15550] ? apparmor_sk_alloc_security+0x74/0x100 [ 816.260362][T15550] kmalloc_trace+0x26/0xe0 [ 816.264841][T15550] apparmor_sk_alloc_security+0x74/0x100 [ 816.270531][T15550] security_sk_alloc+0x6a/0xa0 [ 816.275341][T15550] sk_prot_alloc+0x101/0x210 [ 816.279393][T15544] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3321'. [ 816.279946][T15550] ? sk_alloc+0x20/0x340 [ 816.293332][T15550] sk_alloc+0x36/0x340 [ 816.297512][T15550] bpf_prog_test_run_skb+0x35e/0x12a0 [ 816.302902][T15550] ? __fget_files+0x43d/0x4b0 [ 816.307606][T15550] ? cpu_online+0xa0/0xa0 [ 816.311952][T15550] bpf_prog_test_run+0x31e/0x390 [ 816.317039][T15550] __sys_bpf+0x62b/0x780 [ 816.321388][T15550] ? bpf_link_show_fdinfo+0x380/0x380 [ 816.326961][T15550] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 816.333141][T15550] __x64_sys_bpf+0x78/0x90 [ 816.337571][T15550] do_syscall_64+0x4c/0xa0 [ 816.342005][T15550] ? clear_bhb_loop+0x60/0xb0 [ 816.346698][T15550] ? clear_bhb_loop+0x60/0xb0 [ 816.351491][T15550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.357442][T15550] RIP: 0033:0x7fb4b919c799 [ 816.361890][T15550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.381872][T15550] RSP: 002b:00007fb4ba0f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 816.390408][T15550] RAX: ffffffffffffffda RBX: 00007fb4b9415fa0 RCX: 00007fb4b919c799 [ 816.398395][T15550] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 816.406383][T15550] RBP: 00007fb4ba0f8090 R08: 0000000000000000 R09: 0000000000000000 [ 816.414368][T15550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.422449][T15550] R13: 00007fb4b9416038 R14: 00007fb4b9415fa0 R15: 00007ffc87979608 [ 816.430461][T15550] [ 818.101745][T15569] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3328'. [ 818.181233][T15569] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3328'. [ 818.191717][T15570] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3328'. [ 818.925539][T15581] netlink: 'syz.4.3333': attribute type 29 has an invalid length. [ 818.946626][T15580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 818.956088][T15581] netlink: 'syz.4.3333': attribute type 29 has an invalid length. [ 818.984272][T15584] netlink: 'syz.4.3333': attribute type 29 has an invalid length. [ 819.320372][T15589] netlink: 'syz.4.3336': attribute type 29 has an invalid length. [ 819.357883][T15589] netlink: 'syz.4.3336': attribute type 29 has an invalid length. [ 819.418343][T15588] netlink: 'syz.4.3336': attribute type 29 has an invalid length. [ 819.737700][T15592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3337'. [ 820.765198][T15603] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 820.851203][T15603] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 820.898691][T15605] netlink: 'syz.2.3350': attribute type 5 has an invalid length. [ 820.995963][T15606] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 821.419196][T15609] netlink: 'syz.0.3341': attribute type 10 has an invalid length. [ 821.487979][T15609] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3341'. [ 823.035706][T15636] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.3349'. [ 823.101644][T15636] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3349'. [ 823.431515][T15648] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3355'. [ 824.497267][T15640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.505261][T15644] netlink: 'syz.1.3353': attribute type 21 has an invalid length. [ 824.513758][T15646] netlink: 'syz.4.3354': attribute type 5 has an invalid length. [ 824.522099][T15648] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3355'. [ 824.726258][T15657] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3366'. [ 824.767595][T15657] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3366'. [ 824.817486][T15660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.838924][T15657] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3366'. [ 826.608012][T15696] netlink: 'syz.0.3367': attribute type 5 has an invalid length. [ 827.296146][T15699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 827.830067][T15706] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 827.856711][T15706] syzkaller0: linktype set to 769 [ 827.972408][T15710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.167295][T15709] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 828.200749][T15706] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 829.507264][T15733] netlink: 'syz.2.3379': attribute type 10 has an invalid length. [ 829.652566][T15741] FAULT_INJECTION: forcing a failure. [ 829.652566][T15741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.702255][T15733] team0 (unregistering): Port device team_slave_0 removed [ 829.712464][T15741] CPU: 0 PID: 15741 Comm: syz.3.3382 Not tainted syzkaller #0 [ 829.720084][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.730170][T15741] Call Trace: [ 829.733495][T15741] [ 829.736439][T15741] dump_stack_lvl+0x188/0x24e [ 829.741329][T15741] ? show_regs_print_info+0x12/0x12 [ 829.746646][T15741] ? load_image+0x400/0x400 [ 829.751185][T15741] ? __lock_acquire+0x7d10/0x7d10 [ 829.756247][T15741] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 829.761939][T15741] should_fail_ex+0x399/0x4d0 [ 829.766641][T15741] _copy_from_user+0x2c/0x170 [ 829.771347][T15741] inet6_ioctl+0x1ac/0x280 [ 829.776045][T15741] ? __kmem_cache_free+0xb6/0x1f0 [ 829.781186][T15741] ? inet6_getname+0x640/0x640 [ 829.785969][T15741] ? tomoyo_path_number_perm+0x205/0x650 [ 829.791666][T15741] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 829.797197][T15741] sock_do_ioctl+0xfb/0x320 [ 829.801854][T15741] ? sock_show_fdinfo+0xb0/0xb0 [ 829.806858][T15741] sock_ioctl+0x4d2/0x710 [ 829.811530][T15741] ? sock_poll+0x410/0x410 [ 829.816165][T15741] ? bpf_lsm_file_ioctl+0x5/0x10 [ 829.821127][T15741] ? security_file_ioctl+0x7c/0xa0 [ 829.826271][T15741] ? sock_poll+0x410/0x410 [ 829.830971][T15741] __se_sys_ioctl+0xfa/0x170 [ 829.835677][T15741] do_syscall_64+0x4c/0xa0 [ 829.840245][T15741] ? clear_bhb_loop+0x60/0xb0 [ 829.844942][T15741] ? clear_bhb_loop+0x60/0xb0 [ 829.849738][T15741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.855655][T15741] RIP: 0033:0x7f5acef9c799 [ 829.860180][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.879892][T15741] RSP: 002b:00007f5acfe55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.888335][T15741] RAX: ffffffffffffffda RBX: 00007f5acf215fa0 RCX: 00007f5acef9c799 [ 829.896378][T15741] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 829.904367][T15741] RBP: 00007f5acfe55090 R08: 0000000000000000 R09: 0000000000000000 [ 829.912353][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.920428][T15741] R13: 00007f5acf216038 R14: 00007f5acf215fa0 R15: 00007ffe2aca8418 [ 829.928445][T15741] [ 829.952235][T15733] team0 (unregistering): Port device team_slave_1 removed [ 830.108983][T15743] netlink: 'syz.0.3383': attribute type 5 has an invalid length. [ 830.393149][T15746] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3387'. [ 830.500615][T15750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 831.206542][T15772] netlink: 'syz.0.3391': attribute type 29 has an invalid length. [ 831.950396][T15772] netlink: 'syz.0.3391': attribute type 29 has an invalid length. [ 832.128377][T15778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3392'. [ 832.434801][T15778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3392'. [ 832.475334][T15779] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3392'. [ 832.720734][T15787] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.3395'. [ 833.447213][T15798] netlink: 'syz.3.3398': attribute type 29 has an invalid length. [ 833.705307][T15791] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 833.902163][T15791] syzkaller0: linktype set to 769 [ 833.983493][T15792] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 833.989778][T15795] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 834.000316][T15798] netlink: 'syz.3.3398': attribute type 29 has an invalid length. [ 834.031071][T15799] netlink: 'syz.0.3399': attribute type 5 has an invalid length. [ 834.099345][T15801] netlink: 'syz.3.3398': attribute type 29 has an invalid length. [ 834.518082][T15811] netlink: 'syz.3.3402': attribute type 29 has an invalid length. [ 834.561736][T15811] netlink: 'syz.3.3402': attribute type 29 has an invalid length. [ 834.699398][T15815] netlink: 'syz.3.3402': attribute type 29 has an invalid length. [ 835.057240][T15825] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3406'. [ 835.131055][T15825] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3406'. [ 835.171265][T15829] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3406'. [ 835.367242][T15828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.506192][T15838] netlink: 'syz.4.3410': attribute type 39 has an invalid length. [ 836.976493][T15848] netlink: 'syz.4.3412': attribute type 29 has an invalid length. [ 837.017549][T15848] netlink: 'syz.4.3412': attribute type 29 has an invalid length. [ 837.036923][T15855] netlink: 'syz.2.3415': attribute type 29 has an invalid length. [ 837.045443][T15854] netlink: 'syz.4.3412': attribute type 29 has an invalid length. [ 837.061028][T15855] netlink: 'syz.2.3415': attribute type 29 has an invalid length. [ 837.162200][T15858] netlink: 'syz.2.3415': attribute type 29 has an invalid length. [ 837.418976][T15861] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 837.898381][T15861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3413'. [ 838.837542][T15882] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3421'. [ 840.652444][T15892] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3425'. [ 841.057670][T15882] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3421'. [ 841.185031][T15902] netlink: 'syz.1.3427': attribute type 29 has an invalid length. [ 841.724367][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 842.331513][T15895] netlink: 'syz.2.3425': attribute type 27 has an invalid length. [ 842.349735][T15902] netlink: 'syz.1.3427': attribute type 29 has an invalid length. [ 842.386137][T15905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.432616][T15909] netlink: 'syz.3.3429': attribute type 29 has an invalid length. [ 842.441927][T15909] netlink: 'syz.3.3429': attribute type 29 has an invalid length. [ 842.471734][T15909] netlink: 'syz.3.3429': attribute type 29 has an invalid length. [ 842.673306][T15914] netlink: 'syz.1.3430': attribute type 39 has an invalid length. [ 843.192946][T15924] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 843.221576][T15924] syzkaller0: linktype set to 778 [ 843.877760][T15930] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3438'. [ 843.943054][T15930] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3438'. [ 844.040119][T15932] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3438'. [ 844.166529][T15938] netlink: 'syz.2.3441': attribute type 29 has an invalid length. [ 844.204744][T15938] netlink: 'syz.2.3441': attribute type 29 has an invalid length. [ 844.241732][T15940] netlink: 'syz.2.3441': attribute type 29 has an invalid length. [ 845.121167][ T4283] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 845.129149][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 845.142411][ T4283] CPU: 0 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 845.150041][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.160158][ T4283] Workqueue: hci5 hci_rx_work [ 845.164979][ T4283] Call Trace: [ 845.168377][ T4283] [ 845.171431][ T4283] dump_stack_lvl+0x188/0x24e [ 845.176163][ T4283] ? show_regs_print_info+0x12/0x12 [ 845.181416][ T4283] ? load_image+0x400/0x400 [ 845.186067][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 845.191242][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 845.196064][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 845.201329][ T4283] kobject_add_internal+0x61c/0xcc0 [ 845.206597][ T4283] kobject_add+0x160/0x230 [ 845.211068][ T4283] ? kobject_init+0x1d0/0x1d0 [ 845.215796][ T4283] ? klist_children_get+0x50/0x50 [ 845.220880][ T4283] ? get_device_parent+0x121/0x3f0 [ 845.226130][ T4283] device_add+0x483/0xfb0 [ 845.230509][ T4283] ? kmem_cache_free+0xf7/0x290 [ 845.235419][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 845.240413][ T4283] le_conn_complete_evt+0x105f/0x1670 [ 845.245841][ T4283] ? le_conn_complete_evt+0xe6/0x1670 [ 845.251267][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 845.257641][ T4283] ? bt_info+0x180/0x180 [ 845.261935][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 845.267711][ T4283] ? skb_pull_data+0xf7/0x200 [ 845.272449][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 845.278050][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 845.284180][ T4283] hci_event_packet+0x7b6/0x1280 [ 845.289183][ T4283] ? bis_list+0x280/0x280 [ 845.293561][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 845.299504][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 845.304733][ T4283] ? spurious_interrupt+0x80/0xd0 [ 845.309974][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 845.315226][ T4283] hci_rx_work+0x3eb/0xd40 [ 845.319688][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 845.324679][ T4283] ? process_one_work+0x7b0/0x1160 [ 845.329837][ T4283] process_one_work+0x8a2/0x1160 [ 845.334932][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 845.340713][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 845.345782][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 845.351390][ T4283] ? kthread_data+0x4b/0xc0 [ 845.355956][ T4283] worker_thread+0xaa2/0x1270 [ 845.360718][ T4283] kthread+0x29d/0x330 [ 845.364833][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 845.369900][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 845.374546][ T4283] ret_from_fork+0x1f/0x30 [ 845.379115][ T4283] [ 845.384044][ T4283] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 845.397421][ T4283] Bluetooth: hci5: failed to register connection device [ 845.814766][T15976] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3452'. [ 846.086210][T15989] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3467'. [ 846.101361][T15989] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3467'. [ 846.150364][T15992] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3467'. [ 846.600742][T16001] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 846.683578][T16001] syzkaller0: linktype set to 769 [ 846.763166][T15998] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 846.786974][T16006] validate_nla: 5 callbacks suppressed [ 846.786994][T16006] netlink: 'syz.2.3463': attribute type 39 has an invalid length. [ 846.804336][T16001] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 846.841222][T16008] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 846.862693][T16008] syzkaller0: linktype set to 769 [ 846.868373][T15998] netlink: 'syz.4.3461': attribute type 10 has an invalid length. [ 846.885327][T15998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3461'. [ 846.914221][T16002] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 847.181471][T16002] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 847.238255][T16000] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 847.283769][T16000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3462'. [ 847.491412][ T4283] Bluetooth: hci5: command 0x2016 tx timeout [ 847.613563][T16000] bridge0: port 3(veth0_vlan) entered blocking state [ 847.638570][T16000] bridge0: port 3(veth0_vlan) entered disabled state [ 847.839681][T16000] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 847.912157][T16016] netlink: 'syz.2.3466': attribute type 5 has an invalid length. [ 848.082351][T16020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.290442][T16029] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3474'. [ 848.497680][T16032] netlink: 'syz.2.3472': attribute type 27 has an invalid length. [ 848.772323][T16049] netlink: 'syz.0.3477': attribute type 39 has an invalid length. [ 849.567191][T16059] netlink: 'syz.2.3483': attribute type 5 has an invalid length. [ 849.867641][T16068] __nla_validate_parse: 3 callbacks suppressed [ 849.867664][T16068] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3486'. [ 849.891469][T16068] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3486'. [ 849.944885][T16071] netlink: 'syz.3.3487': attribute type 29 has an invalid length. [ 849.961512][T16069] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3486'. [ 850.061613][T16065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.093130][T16071] netlink: 'syz.3.3487': attribute type 29 has an invalid length. [ 850.108185][T16073] netlink: 'syz.3.3487': attribute type 29 has an invalid length. [ 851.922883][T16109] validate_nla: 1 callbacks suppressed [ 851.922904][T16109] netlink: 'syz.3.3500': attribute type 29 has an invalid length. [ 852.047189][T16112] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 852.055438][T16112] syzkaller0: linktype set to 769 [ 852.071167][T16106] netlink: 'syz.4.3498': attribute type 17 has an invalid length. [ 852.091928][T16106] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3498'. [ 852.112537][T16106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.181244][T16109] netlink: 'syz.3.3500': attribute type 29 has an invalid length. [ 852.213559][T16111] netlink: 'syz.3.3500': attribute type 29 has an invalid length. [ 852.245644][T16113] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 852.322302][T16102] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 852.371884][T16108] netlink: 'syz.0.3499': attribute type 10 has an invalid length. [ 852.484228][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3499'. [ 852.551464][T16115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.900410][T16124] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 855.103839][T16124] syzkaller0: linktype set to 769 [ 855.207489][T16128] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 855.402638][T16131] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 855.483146][T16125] delete_channel: no stack [ 855.903535][T16121] netlink: 'syz.3.3503': attribute type 10 has an invalid length. [ 855.971733][T16121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3503'. [ 856.148913][T16121] bridge0: port 3(veth0_vlan) entered blocking state [ 856.261726][T16121] bridge0: port 3(veth0_vlan) entered disabled state [ 856.280687][T16121] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 857.145193][T16135] netlink: 'syz.0.3505': attribute type 1 has an invalid length. [ 857.170441][T16135] netlink: 'syz.0.3505': attribute type 4 has an invalid length. [ 857.243492][T16135] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3505'. [ 858.465368][T16138] netlink: 'syz.1.3506': attribute type 39 has an invalid length. [ 860.102186][T16153] netlink: 'syz.1.3513': attribute type 29 has an invalid length. [ 860.110427][T16153] netlink: 'syz.1.3513': attribute type 29 has an invalid length. [ 860.210322][T16159] netlink: 'syz.1.3513': attribute type 29 has an invalid length. [ 860.242736][T16157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 860.639760][T16166] netlink: 'syz.1.3517': attribute type 29 has an invalid length. [ 861.226633][T16177] netlink: 'syz.3.3528': attribute type 29 has an invalid length. [ 862.124413][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 862.361085][T16163] netlink: 'syz.2.3515': attribute type 10 has an invalid length. [ 862.377093][T16163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3515'. [ 862.386966][T16167] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 862.393210][T16167] syzkaller0: linktype set to 769 [ 862.398686][T16166] netlink: 'syz.1.3517': attribute type 29 has an invalid length. [ 862.411153][T16170] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 862.636928][T16171] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 862.647423][T16177] netlink: 'syz.3.3528': attribute type 29 has an invalid length. [ 862.939209][T16181] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 862.946887][T16181] syzkaller0: linktype set to 769 [ 862.952665][T16173] netlink: 'syz.0.3516': attribute type 10 has an invalid length. [ 862.961535][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3516'. [ 862.971701][T16182] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 863.005217][T16183] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 863.033208][T16185] netlink: 'syz.4.3518': attribute type 10 has an invalid length. [ 863.069484][T16185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3518'. [ 863.129576][T16190] netlink: 'syz.1.3520': attribute type 39 has an invalid length. [ 864.219776][T16209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.229397][T16209] IPv6: NLM_F_CREATE should be set when creating new route [ 864.239560][T16209] IPv6: NLM_F_CREATE should be set when creating new route [ 864.249150][T16209] IPv6: NLM_F_CREATE should be set when creating new route [ 864.307776][T16215] netlink: 'syz.1.3530': attribute type 29 has an invalid length. [ 864.386079][T16215] netlink: 'syz.1.3530': attribute type 29 has an invalid length. [ 864.449370][T16216] netlink: 'syz.1.3530': attribute type 29 has an invalid length. [ 864.648960][T16219] netlink: 'syz.2.3531': attribute type 2 has an invalid length. [ 865.158643][T16229] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 865.197957][T16229] syzkaller0: linktype set to 769 [ 865.247013][T16234] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 865.531091][T16227] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 865.684522][T16224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3533'. [ 865.715299][T16224] bridge0: port 3(veth0_vlan) entered blocking state [ 865.784566][T16224] bridge0: port 3(veth0_vlan) entered disabled state [ 866.036430][T16224] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 866.240319][T16251] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 866.247244][T16251] syzkaller0: linktype set to 769 [ 866.269899][T16245] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 866.298508][T16245] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 866.538859][T16250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3539'. [ 867.422633][T16271] validate_nla: 8 callbacks suppressed [ 867.422655][T16271] netlink: 'syz.0.3548': attribute type 29 has an invalid length. [ 867.648624][T16271] netlink: 'syz.0.3548': attribute type 29 has an invalid length. [ 867.663662][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.671863][T16273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.682273][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.691486][T16273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.892548][T16276] netlink: 'syz.0.3548': attribute type 29 has an invalid length. [ 868.524490][T16295] netlink: 'syz.3.3556': attribute type 29 has an invalid length. [ 870.285831][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.293914][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.842704][T16289] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 870.851155][T16289] syzkaller0: linktype set to 769 [ 870.856578][T16290] netlink: 'syz.4.3555': attribute type 5 has an invalid length. [ 870.880995][T16292] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 870.901932][T16296] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 870.908294][T16295] netlink: 'syz.3.3556': attribute type 29 has an invalid length. [ 870.963390][T16298] netlink: 'syz.1.3553': attribute type 10 has an invalid length. [ 870.982939][T16298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3553'. [ 870.993239][T16298] bridge0: port 3(veth0_vlan) entered blocking state [ 871.000090][T16298] bridge0: port 3(veth0_vlan) entered disabled state [ 871.024011][T16298] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 871.106688][T16305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.151196][T16310] netlink: 'syz.2.3559': attribute type 5 has an invalid length. [ 871.487814][T16321] netlink: 'syz.2.3564': attribute type 29 has an invalid length. [ 871.537647][T16321] netlink: 'syz.2.3564': attribute type 29 has an invalid length. [ 871.721309][T16325] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 871.843936][T16329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3566'. [ 871.880024][T16325] syzkaller0: linktype set to 769 [ 871.975333][T16330] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 871.982108][T16329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3566'. [ 872.036380][T16332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3566'. [ 872.112021][T16334] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 872.182052][T16330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3563'. [ 872.301963][T16330] bridge0: port 3(veth0_vlan) entered blocking state [ 872.308886][T16330] bridge0: port 3(veth0_vlan) entered disabled state [ 872.612976][T16330] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 872.902427][T16339] validate_nla: 2 callbacks suppressed [ 872.902452][T16339] netlink: 'syz.0.3569': attribute type 5 has an invalid length. [ 874.075329][T16354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 874.273469][T16357] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 874.303637][T16361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3576'. [ 874.327271][T16353] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 874.351154][T16353] syzkaller0: linktype set to 769 [ 874.465633][T16357] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 874.483834][T16361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3576'. [ 874.547725][T16359] netlink: 'syz.1.3574': attribute type 2 has an invalid length. [ 874.558384][T16357] netlink: 'syz.4.3573': attribute type 10 has an invalid length. [ 874.578603][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3577'. [ 874.578944][T16357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3573'. [ 874.618727][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3576'. [ 874.670835][T16367] netlink: 'syz.3.3575': attribute type 5 has an invalid length. [ 874.743222][T16371] FAULT_INJECTION: forcing a failure. [ 874.743222][T16371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.801066][T16371] CPU: 0 PID: 16371 Comm: syz.0.3577 Not tainted syzkaller #0 [ 874.808603][T16371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 874.818857][T16371] Call Trace: [ 874.822184][T16371] [ 874.825181][T16371] dump_stack_lvl+0x188/0x24e [ 874.827509][T16374] netlink: 'syz.2.3578': attribute type 29 has an invalid length. [ 874.829892][T16371] ? show_regs_print_info+0x12/0x12 [ 874.843375][T16371] ? load_image+0x400/0x400 [ 874.847895][T16371] ? __might_fault+0xa6/0x120 [ 874.852695][T16371] should_fail_ex+0x399/0x4d0 [ 874.857428][T16371] copyout+0x1b/0x120 [ 874.861507][T16371] _copy_to_iter+0x48b/0x1040 [ 874.866331][T16371] ? iov_iter_init+0x1f0/0x1f0 [ 874.871322][T16371] ? __virt_addr_valid+0x188/0x540 [ 874.876489][T16371] ? __virt_addr_valid+0x465/0x540 [ 874.881743][T16371] ? __phys_addr_symbol+0x2b/0x70 [ 874.886819][T16371] ? __check_object_size+0x500/0xa40 [ 874.892247][T16371] __skb_datagram_iter+0xde/0x740 [ 874.897418][T16371] ? skb_copy_datagram_iter+0x290/0x290 [ 874.903019][T16371] skb_copy_datagram_iter+0xd7/0x290 [ 874.908362][T16371] netlink_recvmsg+0x2d0/0xe00 [ 874.913184][T16371] ? netlink_sendmsg+0xbd0/0xbd0 [ 874.918172][T16371] ? aa_af_perm+0x340/0x340 [ 874.922691][T16371] ? __might_fault+0xa6/0x120 [ 874.927382][T16371] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 874.932679][T16371] ? security_socket_recvmsg+0x85/0xb0 [ 874.938158][T16371] ? netlink_sendmsg+0xbd0/0xbd0 [ 874.943111][T16371] ____sys_recvmsg+0x2cb/0x5e0 [ 874.947901][T16371] ? __sys_recvmsg_sock+0x40/0x40 [ 874.952951][T16371] ? import_iovec+0x6f/0xa0 [ 874.957468][T16371] ___sys_recvmsg+0x212/0x590 [ 874.962169][T16371] ? __sys_recvmsg+0x290/0x290 [ 874.967035][T16371] ? common_file_perm+0x171/0x1c0 [ 874.972080][T16371] ? __fget_files+0x43d/0x4b0 [ 874.976789][T16371] __x64_sys_recvmsg+0x205/0x2e0 [ 874.981842][T16371] ? ___sys_recvmsg+0x590/0x590 [ 874.986739][T16371] ? lockdep_hardirqs_on+0x94/0x140 [ 874.991959][T16371] do_syscall_64+0x4c/0xa0 [ 874.996475][T16371] ? clear_bhb_loop+0x60/0xb0 [ 875.001170][T16371] ? clear_bhb_loop+0x60/0xb0 [ 875.005948][T16371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.011855][T16371] RIP: 0033:0x7fb4b919c799 [ 875.016285][T16371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.036077][T16371] RSP: 002b:00007fb4ba0d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 875.044500][T16371] RAX: ffffffffffffffda RBX: 00007fb4b9416090 RCX: 00007fb4b919c799 [ 875.052657][T16371] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000003 [ 875.060771][T16371] RBP: 00007fb4ba0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 875.068865][T16371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.076854][T16371] R13: 00007fb4b9416128 R14: 00007fb4b9416090 R15: 00007ffc87979608 [ 875.084934][T16371] [ 876.352926][T16374] netlink: 'syz.2.3578': attribute type 29 has an invalid length. [ 876.397070][T16371] __nla_validate_parse: 2 callbacks suppressed [ 876.397090][T16371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3577'. [ 876.533039][T16384] netlink: 'syz.3.3582': attribute type 5 has an invalid length. [ 876.774410][T16391] netlink: 'syz.0.3593': attribute type 29 has an invalid length. [ 876.806772][T16391] netlink: 'syz.0.3593': attribute type 29 has an invalid length. [ 876.833936][T16387] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3583'. [ 876.862466][T16391] netlink: 'syz.0.3593': attribute type 29 has an invalid length. [ 877.674736][T16401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 877.892582][T16405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 878.173734][T16411] validate_nla: 3 callbacks suppressed [ 878.173757][T16411] netlink: 'syz.1.3589': attribute type 39 has an invalid length. [ 878.493788][T16422] netlink: 'syz.1.3596': attribute type 5 has an invalid length. [ 878.731436][T16427] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3598'. [ 878.740681][T16427] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3598'. [ 878.766164][T16433] FAULT_INJECTION: forcing a failure. [ 878.766164][T16433] name failslab, interval 1, probability 0, space 0, times 0 [ 878.778948][T16433] CPU: 0 PID: 16433 Comm: syz.1.3600 Not tainted syzkaller #0 [ 878.786516][T16433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.796708][T16433] Call Trace: [ 878.796954][T16434] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3598'. [ 878.800179][T16433] [ 878.812449][T16433] dump_stack_lvl+0x188/0x24e [ 878.817607][T16433] ? verify_lock_unused+0x140/0x140 [ 878.822839][T16433] ? show_regs_print_info+0x12/0x12 [ 878.828159][T16433] ? load_image+0x400/0x400 [ 878.832808][T16433] should_fail_ex+0x399/0x4d0 [ 878.837545][T16433] should_failslab+0x5/0x20 [ 878.842069][T16433] slab_pre_alloc_hook+0x59/0x310 [ 878.847197][T16433] kmem_cache_alloc+0x56/0x2f0 [ 878.852067][T16433] ? __nf_conntrack_alloc+0x99/0x380 [ 878.857444][T16433] __nf_conntrack_alloc+0x99/0x380 [ 878.862588][T16433] init_conntrack+0x25b/0x11a0 [ 878.867456][T16433] ? early_drop+0x870/0x870 [ 878.872147][T16433] ? nf_conntrack_find_get+0x670/0x670 [ 878.877718][T16433] ? __siphash_unaligned+0x25b/0x3a0 [ 878.883031][T16433] nf_conntrack_in+0xd3e/0x17b0 [ 878.887929][T16433] ? nf_ct_pernet+0x270/0x270 [ 878.892726][T16433] ? ip6t_alloc_initial_table+0x640/0x640 [ 878.898497][T16433] ? ipv6_defrag+0x2d2/0x3a0 [ 878.903277][T16433] ? ipv4_confirm+0x380/0x380 [ 878.908160][T16433] nf_hook_slow+0xb9/0x200 [ 878.912596][T16433] NF_HOOK+0x219/0x3b0 [ 878.916678][T16433] ? sk_setup_caps+0xaa0/0xaa0 [ 878.921546][T16433] ? net_zcopy_put_abort+0x90/0x90 [ 878.926785][T16433] ? NF_HOOK+0x9b/0x3b0 [ 878.930987][T16433] ? ip6_rcv_core+0x1750/0x1750 [ 878.935872][T16433] ? net_zcopy_put_abort+0x90/0x90 [ 878.941014][T16433] ? ip6_rcv_finish_core+0x420/0x420 [ 878.946419][T16433] __netif_receive_skb+0xcc/0x290 [ 878.951481][T16433] ? netif_receive_skb+0x11e/0x830 [ 878.956609][T16433] netif_receive_skb+0x1d4/0x830 [ 878.961651][T16433] ? enqueue_to_backlog+0xd30/0xd30 [ 878.966868][T16433] ? sock_alloc_send_pskb+0x89d/0x9a0 [ 878.972258][T16433] ? tun_rx_batched+0x182/0x790 [ 878.977389][T16433] tun_rx_batched+0x1db/0x790 [ 878.982097][T16433] ? pskb_may_pull+0xf0/0xf0 [ 878.986702][T16433] ? __local_bh_enable_ip+0x136/0x1c0 [ 878.992085][T16433] ? lockdep_hardirqs_on+0x94/0x140 [ 878.997291][T16433] ? read_lock_is_recursive+0x10/0x10 [ 879.002685][T16433] ? __local_bh_enable_ip+0x136/0x1c0 [ 879.008065][T16433] ? _local_bh_enable+0xa0/0xa0 [ 879.012935][T16433] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 879.019027][T16433] tun_get_user+0x286f/0x3c70 [ 879.023898][T16433] ? tun_get_user+0x249b/0x3c70 [ 879.028783][T16433] ? rcu_read_unlock+0xa0/0xa0 [ 879.033576][T16433] ? tun_get+0x1c/0x2e0 [ 879.037759][T16433] ? __lock_acquire+0x7d10/0x7d10 [ 879.042812][T16433] ? tun_get+0x1c/0x2e0 [ 879.046989][T16433] tun_chr_write_iter+0x112/0x1f0 [ 879.052034][T16433] vfs_write+0x4b1/0xa30 [ 879.056298][T16433] ? file_end_write+0x250/0x250 [ 879.061169][T16433] ? __fget_files+0x43d/0x4b0 [ 879.065868][T16433] ? __fdget_pos+0x1d4/0x360 [ 879.070477][T16433] ? ksys_write+0x71/0x250 [ 879.074925][T16433] ksys_write+0x14c/0x250 [ 879.079276][T16433] ? __ia32_sys_read+0x80/0x80 [ 879.084059][T16433] ? lockdep_hardirqs_on+0x94/0x140 [ 879.089269][T16433] do_syscall_64+0x4c/0xa0 [ 879.093704][T16433] ? clear_bhb_loop+0x60/0xb0 [ 879.098475][T16433] ? clear_bhb_loop+0x60/0xb0 [ 879.103255][T16433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.109259][T16433] RIP: 0033:0x7f8fb819c799 [ 879.113686][T16433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.133588][T16433] RSP: 002b:00007f8fb9020028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.142117][T16433] RAX: ffffffffffffffda RBX: 00007f8fb8415fa0 RCX: 00007f8fb819c799 [ 879.150097][T16433] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 879.158077][T16433] RBP: 00007f8fb9020090 R08: 0000000000000000 R09: 0000000000000000 [ 879.166060][T16433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.174125][T16433] R13: 00007f8fb8416038 R14: 00007f8fb8415fa0 R15: 00007ffcbd4dd958 [ 879.182118][T16433] [ 879.225189][T16435] netlink: 'syz.3.3597': attribute type 3 has an invalid length. [ 879.256136][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3597'. [ 879.448589][T16445] netlink: 'syz.4.3601': attribute type 2 has an invalid length. [ 879.785889][T16452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 879.847623][T16456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 880.121263][T16459] netlink: 'syz.1.3606': attribute type 39 has an invalid length. [ 880.175707][ T4273] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 880.184033][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 880.195249][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 880.203047][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.213298][ T4273] Workqueue: hci0 hci_rx_work [ 880.218032][ T4273] Call Trace: [ 880.221514][ T4273] [ 880.224590][ T4273] dump_stack_lvl+0x188/0x24e [ 880.229319][ T4273] ? show_regs_print_info+0x12/0x12 [ 880.234646][ T4273] ? load_image+0x400/0x400 [ 880.239228][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 880.244387][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 880.249291][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 880.254626][ T4273] kobject_add_internal+0x61c/0xcc0 [ 880.260137][ T4273] kobject_add+0x160/0x230 [ 880.264598][ T4273] ? kobject_init+0x1d0/0x1d0 [ 880.269339][ T4273] ? klist_children_get+0x50/0x50 [ 880.274495][ T4273] ? get_device_parent+0x121/0x3f0 [ 880.279659][ T4273] device_add+0x483/0xfb0 [ 880.284118][ T4273] ? kmem_cache_free+0xf7/0x290 [ 880.289113][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 880.294190][ T4273] le_conn_complete_evt+0x105f/0x1670 [ 880.299618][ T4273] ? le_conn_complete_evt+0xe6/0x1670 [ 880.305081][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 880.311373][ T4273] ? bt_info+0x180/0x180 [ 880.315742][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 880.321421][ T4273] ? skb_pull_data+0xf7/0x200 [ 880.326154][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 880.331757][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 880.337868][ T4273] hci_event_packet+0x7b6/0x1280 [ 880.342870][ T4273] ? bis_list+0x280/0x280 [ 880.347323][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 880.353294][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 880.358447][ T4273] ? spurious_interrupt+0x80/0xd0 [ 880.363523][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 880.368955][ T4273] hci_rx_work+0x3eb/0xd40 [ 880.373431][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 880.378349][ T4273] ? process_one_work+0x7b0/0x1160 [ 880.383583][ T4273] process_one_work+0x8a2/0x1160 [ 880.388611][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 880.394361][ T4273] ? _raw_spin_lock_irq+0x86/0xf0 [ 880.399431][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 880.404487][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 880.410070][ T4273] ? kthread_data+0x4b/0xc0 [ 880.414628][ T4273] worker_thread+0xaa2/0x1270 [ 880.419506][ T4273] kthread+0x29d/0x330 [ 880.423602][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 880.428668][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 880.433295][ T4273] ret_from_fork+0x1f/0x30 [ 880.437798][ T4273] [ 880.455627][ T4273] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 880.468921][ T4273] Bluetooth: hci0: failed to register connection device [ 880.763338][T16472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3609'. [ 880.802495][T16472] device batadv_slave_1 entered promiscuous mode [ 880.803439][T16475] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3612'. [ 880.919138][T16475] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3612'. [ 880.951455][T16476] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3612'. [ 881.396187][T16492] FAULT_INJECTION: forcing a failure. [ 881.396187][T16492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.461165][T16492] CPU: 0 PID: 16492 Comm: syz.3.3619 Not tainted syzkaller #0 [ 881.468720][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.478831][T16492] Call Trace: [ 881.482143][T16492] [ 881.485225][T16492] dump_stack_lvl+0x188/0x24e [ 881.489946][T16492] ? show_regs_print_info+0x12/0x12 [ 881.495165][T16492] ? load_image+0x400/0x400 [ 881.499718][T16492] ? __lock_acquire+0x7d10/0x7d10 [ 881.504803][T16492] should_fail_ex+0x399/0x4d0 [ 881.509713][T16492] _copy_from_user+0x2c/0x170 [ 881.514449][T16492] __sys_bpf+0x2ea/0x780 [ 881.518831][T16492] ? bpf_link_show_fdinfo+0x380/0x380 [ 881.524257][T16492] ? lock_chain_count+0x20/0x20 [ 881.529311][T16492] __x64_sys_bpf+0x78/0x90 [ 881.533757][T16492] do_syscall_64+0x4c/0xa0 [ 881.538289][T16492] ? clear_bhb_loop+0x60/0xb0 [ 881.542988][T16492] ? clear_bhb_loop+0x60/0xb0 [ 881.547768][T16492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.553677][T16492] RIP: 0033:0x7f5acef9c799 [ 881.558099][T16492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.577981][T16492] RSP: 002b:00007f5acfe55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.586414][T16492] RAX: ffffffffffffffda RBX: 00007f5acf215fa0 RCX: 00007f5acef9c799 [ 881.594415][T16492] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 881.602659][T16492] RBP: 00007f5acfe55090 R08: 0000000000000000 R09: 0000000000000000 [ 881.610640][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.618933][T16492] R13: 00007f5acf216038 R14: 00007f5acf215fa0 R15: 00007ffe2aca8418 [ 881.626936][T16492] [ 881.662186][T16497] netlink: 'syz.4.3621': attribute type 39 has an invalid length. [ 881.674406][T16498] netlink: 'syz.2.3622': attribute type 29 has an invalid length. [ 881.691861][T16498] netlink: 'syz.2.3622': attribute type 29 has an invalid length. [ 881.728158][T16498] netlink: 'syz.2.3622': attribute type 29 has an invalid length. [ 881.757747][T16500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 881.969714][T16510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3626'. [ 881.990123][T16510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3626'. [ 882.015131][T16510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3626'. [ 882.036716][ T4283] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 882.045043][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 882.054772][ T4283] CPU: 0 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 882.062373][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 882.072475][ T4283] Workqueue: hci5 hci_rx_work [ 882.077220][ T4283] Call Trace: [ 882.080545][ T4283] [ 882.083539][ T4283] dump_stack_lvl+0x188/0x24e [ 882.088275][ T4283] ? show_regs_print_info+0x12/0x12 [ 882.093533][ T4283] ? load_image+0x400/0x400 [ 882.098207][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 882.103522][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 882.108253][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 882.113555][ T4283] kobject_add_internal+0x61c/0xcc0 [ 882.118808][ T4283] kobject_add+0x160/0x230 [ 882.123523][ T4283] ? kobject_init+0x1d0/0x1d0 [ 882.128263][ T4283] ? klist_children_get+0x50/0x50 [ 882.133334][ T4283] ? get_device_parent+0x121/0x3f0 [ 882.138587][ T4283] device_add+0x483/0xfb0 [ 882.143146][ T4283] ? kmem_cache_free+0xf7/0x290 [ 882.148042][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 882.153028][ T4283] le_conn_complete_evt+0x105f/0x1670 [ 882.158431][ T4283] ? le_conn_complete_evt+0xe6/0x1670 [ 882.163852][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 882.170204][ T4283] ? bt_info+0x180/0x180 [ 882.174468][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 882.180123][ T4283] ? skb_pull_data+0xf7/0x200 [ 882.184834][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 882.190402][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 882.196515][ T4283] hci_event_packet+0x7b6/0x1280 [ 882.201510][ T4283] ? bis_list+0x280/0x280 [ 882.205852][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 882.211945][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 882.217072][ T4283] ? spurious_interrupt+0x80/0xd0 [ 882.222114][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 882.227329][ T4283] hci_rx_work+0x3eb/0xd40 [ 882.231781][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 882.236653][ T4283] ? process_one_work+0x7b0/0x1160 [ 882.241864][ T4283] process_one_work+0x8a2/0x1160 [ 882.246838][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 882.252687][ T4283] ? _raw_spin_lock_irq+0x86/0xf0 [ 882.257766][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 882.263242][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 882.268834][ T4283] ? kthread_data+0x4b/0xc0 [ 882.273395][ T4283] worker_thread+0xaa2/0x1270 [ 882.278137][ T4283] kthread+0x29d/0x330 [ 882.282234][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 882.287383][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 882.291988][ T4283] ret_from_fork+0x1f/0x30 [ 882.296789][ T4283] [ 882.300549][ T4283] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 882.313831][ T4283] Bluetooth: hci5: failed to register connection device [ 882.521719][ T4283] Bluetooth: hci0: command 0x2016 tx timeout [ 882.568569][T16518] netlink: 'syz.4.3628': attribute type 29 has an invalid length. [ 882.616208][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 883.039935][T16521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3629'. [ 883.184745][T16521] bridge0: port 3(veth0_vlan) entered blocking state [ 883.233697][T16521] bridge0: port 3(veth0_vlan) entered disabled state [ 883.414215][T16521] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 883.770489][T16537] validate_nla: 3 callbacks suppressed [ 883.770508][T16537] netlink: 'syz.0.3633': attribute type 4 has an invalid length. [ 883.821094][T16537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3633'. [ 883.855947][T16539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3635'. [ 883.865664][T16537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 883.939137][T16547] netlink: 'syz.3.3637': attribute type 29 has an invalid length. [ 884.126818][T16550] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3638'. [ 884.175462][T16534] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 884.189726][T16539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3635'. [ 884.205866][T16544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3635'. [ 884.219282][T16547] netlink: 'syz.3.3637': attribute type 29 has an invalid length. [ 884.227988][T16552] netlink: 'syz.1.3639': attribute type 39 has an invalid length. [ 884.238028][T16550] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3638'. [ 884.248623][T16548] netlink: 'syz.3.3637': attribute type 29 has an invalid length. [ 884.361593][ T4273] Bluetooth: hci5: command 0x2016 tx timeout [ 884.416664][T16559] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 884.425852][T16559] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 884.461800][ T4283] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 884.463052][T16559] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 884.469564][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 884.488284][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 884.495921][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.506034][ T4283] Workqueue: hci0 hci_rx_work [ 884.510763][ T4283] Call Trace: [ 884.514079][ T4283] [ 884.517041][ T4283] dump_stack_lvl+0x188/0x24e [ 884.521770][ T4283] ? show_regs_print_info+0x12/0x12 [ 884.527014][ T4283] ? load_image+0x400/0x400 [ 884.531588][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 884.536744][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 884.541544][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 884.546888][ T4283] kobject_add_internal+0x61c/0xcc0 [ 884.552319][ T4283] kobject_add+0x160/0x230 [ 884.556783][ T4283] ? kobject_init+0x1d0/0x1d0 [ 884.561510][ T4283] ? klist_children_get+0x50/0x50 [ 884.566567][ T4283] ? get_device_parent+0x121/0x3f0 [ 884.571728][ T4283] device_add+0x483/0xfb0 [ 884.576091][ T4283] ? kmem_cache_free+0xf7/0x290 [ 884.581000][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 884.585985][ T4283] le_conn_complete_evt+0x105f/0x1670 [ 884.591551][ T4283] ? le_conn_complete_evt+0xe6/0x1670 [ 884.596986][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 884.603450][ T4283] ? bt_info+0x180/0x180 [ 884.607731][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 884.613502][ T4283] ? skb_pull_data+0xf7/0x200 [ 884.618232][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 884.623928][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 884.630242][ T4283] hci_event_packet+0x7b6/0x1280 [ 884.635351][ T4283] ? bis_list+0x280/0x280 [ 884.639916][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 884.646067][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 884.651496][ T4283] ? spurious_interrupt+0x80/0xd0 [ 884.656576][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 884.661824][ T4283] hci_rx_work+0x3eb/0xd40 [ 884.666279][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 884.671197][ T4283] ? process_one_work+0x7b0/0x1160 [ 884.676431][ T4283] process_one_work+0x8a2/0x1160 [ 884.681456][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 884.687208][ T4283] ? _raw_spin_lock_irq+0x86/0xf0 [ 884.692400][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 884.697622][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 884.703212][ T4283] ? kthread_data+0x4b/0xc0 [ 884.707815][ T4283] worker_thread+0xaa2/0x1270 [ 884.712619][ T4283] kthread+0x29d/0x330 [ 884.716714][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 884.721968][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 884.726643][ T4283] ret_from_fork+0x1f/0x30 [ 884.731159][ T4283] [ 884.746501][ T4283] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 884.759987][ T4283] Bluetooth: hci0: failed to register connection device [ 884.928022][T16562] FAULT_INJECTION: forcing a failure. [ 884.928022][T16562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.941340][T16562] CPU: 1 PID: 16562 Comm: syz.4.3645 Not tainted syzkaller #0 [ 884.948854][T16562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.959095][T16562] Call Trace: [ 884.962419][T16562] [ 884.965398][T16562] dump_stack_lvl+0x188/0x24e [ 884.970153][T16562] ? show_regs_print_info+0x12/0x12 [ 884.975391][T16562] ? load_image+0x400/0x400 [ 884.980201][T16562] ? __lock_acquire+0x7d10/0x7d10 [ 884.985275][T16562] ? snprintf+0xe5/0x140 [ 884.989574][T16562] should_fail_ex+0x399/0x4d0 [ 884.994397][T16562] _copy_to_user+0x2c/0x130 [ 884.998942][T16562] simple_read_from_buffer+0xe3/0x150 [ 885.004449][T16562] proc_fail_nth_read+0x1a6/0x220 [ 885.009494][T16562] ? proc_fault_inject_write+0x310/0x310 [ 885.015149][T16562] ? fsnotify_perm+0x248/0x550 [ 885.019935][T16562] ? proc_fault_inject_write+0x310/0x310 [ 885.025677][T16562] vfs_read+0x2de/0xa00 [ 885.029910][T16562] ? kernel_read+0x1e0/0x1e0 [ 885.034523][T16562] ? __fget_files+0x28/0x4b0 [ 885.039138][T16562] ? __fget_files+0x28/0x4b0 [ 885.043835][T16562] ? __fget_files+0x43d/0x4b0 [ 885.048547][T16562] ? __fdget_pos+0x2ae/0x360 [ 885.053172][T16562] ? ksys_read+0x71/0x250 [ 885.057524][T16562] ksys_read+0x14c/0x250 [ 885.061800][T16562] ? vfs_write+0xa30/0xa30 [ 885.066369][T16562] ? lockdep_hardirqs_on+0x94/0x140 [ 885.071599][T16562] do_syscall_64+0x4c/0xa0 [ 885.076032][T16562] ? clear_bhb_loop+0x60/0xb0 [ 885.080812][T16562] ? clear_bhb_loop+0x60/0xb0 [ 885.085516][T16562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.091690][T16562] RIP: 0033:0x7fd4a895cfce [ 885.096120][T16562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 885.115834][T16562] RSP: 002b:00007fd4a98e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 885.124269][T16562] RAX: ffffffffffffffda RBX: 00007fd4a98e56c0 RCX: 00007fd4a895cfce [ 885.132434][T16562] RDX: 000000000000000f RSI: 00007fd4a98e50a0 RDI: 0000000000000004 [ 885.140419][T16562] RBP: 00007fd4a98e5090 R08: 0000000000000000 R09: 0000000000000000 [ 885.148400][T16562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.156733][T16562] R13: 00007fd4a8c16038 R14: 00007fd4a8c15fa0 R15: 00007ffdee339cc8 [ 885.164744][T16562] [ 885.933847][T16589] netlink: 'syz.2.3653': attribute type 39 has an invalid length. [ 886.052262][T16592] FAULT_INJECTION: forcing a failure. [ 886.052262][T16592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 886.108939][T16592] CPU: 0 PID: 16592 Comm: syz.0.3654 Not tainted syzkaller #0 [ 886.116652][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 886.126833][T16592] Call Trace: [ 886.130148][T16592] [ 886.133183][T16592] dump_stack_lvl+0x188/0x24e [ 886.138090][T16592] ? show_regs_print_info+0x12/0x12 [ 886.143412][T16592] ? load_image+0x400/0x400 [ 886.147949][T16592] ? __lock_acquire+0x7d10/0x7d10 [ 886.153182][T16592] ? slab_post_alloc_hook+0x4b/0x480 [ 886.158596][T16592] should_fail_ex+0x399/0x4d0 [ 886.163304][T16592] prepare_alloc_pages+0x1e2/0x5f0 [ 886.168548][T16592] __alloc_pages+0x130/0x4f0 [ 886.173180][T16592] ? zone_statistics+0x170/0x170 [ 886.178275][T16592] __get_free_pages+0x8/0x30 [ 886.182925][T16592] kasan_populate_vmalloc_pte+0x31/0xf0 [ 886.188685][T16592] ? __apply_to_page_range+0x977/0xd10 [ 886.194192][T16592] __apply_to_page_range+0x989/0xd10 [ 886.199617][T16592] ? kasan_populate_vmalloc+0x70/0x70 [ 886.205024][T16592] alloc_vmap_area+0x178f/0x18c0 [ 886.210106][T16592] ? vm_map_ram+0xab0/0xab0 [ 886.214740][T16592] ? rcu_is_watching+0x11/0xa0 [ 886.219545][T16592] __get_vm_area_node+0x158/0x330 [ 886.224611][T16592] ? mod_objcg_state+0x50d/0x8a0 [ 886.229585][T16592] __vmalloc_node_range+0x357/0x13b0 [ 886.234912][T16592] ? copy_process+0x5fa/0x4030 [ 886.239734][T16592] ? free_vm_area+0x50/0x50 [ 886.244269][T16592] ? rcu_is_watching+0x11/0xa0 [ 886.249125][T16592] dup_task_struct+0x3d3/0x6b0 [ 886.254008][T16592] ? copy_process+0x5fa/0x4030 [ 886.258915][T16592] copy_process+0x5fa/0x4030 [ 886.263575][T16592] ? __lock_acquire+0x7d10/0x7d10 [ 886.268668][T16592] ? idle_dummy+0x10/0x10 [ 886.273050][T16592] kernel_clone+0x24b/0x900 [ 886.277583][T16592] ? ksys_write+0x1c0/0x250 [ 886.282122][T16592] ? create_io_thread+0x170/0x170 [ 886.287197][T16592] __x64_sys_clone+0x1a7/0x220 [ 886.291989][T16592] ? __fget_files+0x43d/0x4b0 [ 886.296704][T16592] ? __ia32_sys_vfork+0x140/0x140 [ 886.302377][T16592] ? lock_chain_count+0x20/0x20 [ 886.307298][T16592] ? lockdep_hardirqs_on+0x94/0x140 [ 886.312619][T16592] do_syscall_64+0x4c/0xa0 [ 886.317062][T16592] ? clear_bhb_loop+0x60/0xb0 [ 886.321766][T16592] ? clear_bhb_loop+0x60/0xb0 [ 886.326911][T16592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.332917][T16592] RIP: 0033:0x7fb4b919c799 [ 886.337475][T16592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.357460][T16592] RSP: 002b:00007fb4ba0d6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 886.365917][T16592] RAX: ffffffffffffffda RBX: 00007fb4b9416090 RCX: 00007fb4b919c799 [ 886.373942][T16592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 886.382053][T16592] RBP: 00007fb4ba0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 886.390193][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.398545][T16592] R13: 00007fb4b9416128 R14: 00007fb4b9416090 R15: 00007ffc87979608 [ 886.406602][T16592] [ 886.456091][T16587] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 886.511254][T16597] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 886.726013][T16587] bridge0: port 3(veth0_vlan) entered blocking state [ 886.831457][T16587] bridge0: port 3(veth0_vlan) entered disabled state [ 886.841440][ T4283] Bluetooth: hci0: command 0x2016 tx timeout [ 886.932810][T16587] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 887.197788][T16605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.782135][T16592] syz.0.3654: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 887.798306][T16592] CPU: 1 PID: 16592 Comm: syz.0.3654 Not tainted syzkaller #0 [ 887.805873][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.816129][T16592] Call Trace: [ 887.819424][T16592] [ 887.822368][T16592] dump_stack_lvl+0x188/0x24e [ 887.827085][T16592] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 887.833519][T16592] ? show_regs_print_info+0x12/0x12 [ 887.839102][T16592] ? load_image+0x400/0x400 [ 887.843622][T16592] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 887.850048][T16592] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 887.856561][T16592] warn_alloc+0x242/0x330 [ 887.860996][T16592] ? slab_free_freelist_hook+0x131/0x1a0 [ 887.866913][T16592] ? zone_watermark_ok_safe+0x270/0x270 [ 887.872491][T16592] ? __get_vm_area_node+0x16d/0x330 [ 887.877718][T16592] ? __get_vm_area_node+0x16d/0x330 [ 887.882939][T16592] ? mod_objcg_state+0x50d/0x8a0 [ 887.887896][T16592] __vmalloc_node_range+0x37c/0x13b0 [ 887.893222][T16592] ? free_vm_area+0x50/0x50 [ 887.897736][T16592] ? rcu_is_watching+0x11/0xa0 [ 887.902553][T16592] dup_task_struct+0x3d3/0x6b0 [ 887.907379][T16592] ? copy_process+0x5fa/0x4030 [ 887.912182][T16592] copy_process+0x5fa/0x4030 [ 887.916818][T16592] ? __lock_acquire+0x7d10/0x7d10 [ 887.921912][T16592] ? idle_dummy+0x10/0x10 [ 887.926376][T16592] kernel_clone+0x24b/0x900 [ 887.930912][T16592] ? ksys_write+0x1c0/0x250 [ 887.935448][T16592] ? create_io_thread+0x170/0x170 [ 887.940555][T16592] __x64_sys_clone+0x1a7/0x220 [ 887.945349][T16592] ? __fget_files+0x43d/0x4b0 [ 887.950045][T16592] ? __ia32_sys_vfork+0x140/0x140 [ 887.955195][T16592] ? lock_chain_count+0x20/0x20 [ 887.960067][T16592] ? lockdep_hardirqs_on+0x94/0x140 [ 887.965279][T16592] do_syscall_64+0x4c/0xa0 [ 887.969895][T16592] ? clear_bhb_loop+0x60/0xb0 [ 887.974584][T16592] ? clear_bhb_loop+0x60/0xb0 [ 887.979283][T16592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.985286][T16592] RIP: 0033:0x7fb4b919c799 [ 887.989718][T16592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.009769][T16592] RSP: 002b:00007fb4ba0d6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 888.018195][T16592] RAX: ffffffffffffffda RBX: 00007fb4b9416090 RCX: 00007fb4b919c799 [ 888.026176][T16592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 888.034152][T16592] RBP: 00007fb4ba0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 888.042128][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.050199][T16592] R13: 00007fb4b9416128 R14: 00007fb4b9416090 R15: 00007ffc87979608 [ 888.058198][T16592] [ 888.131534][T16592] Mem-Info: [ 888.134825][T16592] active_anon:8120 inactive_anon:0 isolated_anon:0 [ 888.134825][T16592] active_file:21729 inactive_file:40262 isolated_file:0 [ 888.134825][T16592] unevictable:768 dirty:181 writeback:0 [ 888.134825][T16592] slab_reclaimable:21150 slab_unreclaimable:93442 [ 888.134825][T16592] mapped:29946 shmem:1361 pagetables:685 [ 888.134825][T16592] sec_pagetables:0 bounce:0 [ 888.134825][T16592] kernel_misc_reclaimable:0 [ 888.134825][T16592] free:1319396 free_pcp:10471 free_cma:0 [ 888.241059][T16592] Node 0 active_anon:32080kB inactive_anon:0kB active_file:86916kB inactive_file:160848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119684kB dirty:724kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9940kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no [ 888.365823][T16592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 888.411224][T16592] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 888.439412][T16592] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 888.445535][T16592] Node 0 DMA32 free:1372364kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:32380kB inactive_anon:0kB active_file:86916kB inactive_file:160848kB unevictable:1536kB writepending:724kB present:3129332kB managed:2592976kB mlocked:0kB bounce:0kB free_pcp:18608kB local_pcp:12356kB free_cma:0kB [ 888.601638][T16592] lowmem_reserve[]: 0 0 1 1 1 [ 888.606489][T16592] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 888.773370][T16592] lowmem_reserve[]: 0 0 0 0 0 [ 888.778303][T16592] Node 1 Normal free:3889712kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:23720kB local_pcp:10660kB free_cma:0kB [ 888.959302][T16592] lowmem_reserve[]: 0 0 0 0 0 [ 888.987464][T16592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 889.081596][T16592] Node 0 DMA32: 879*4kB (UM) 1692*8kB (UME) 1209*16kB (UME) 796*32kB (UME) 365*64kB (UME) 263*128kB (UME) 89*256kB (UM) 40*512kB (UM) 11*1024kB (UM) 2*2048kB (UM) 290*4096kB (UME) = 1365356kB [ 889.184970][T16592] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 889.240995][T16592] Node 1 Normal: 256*4kB (UE) 54*8kB (UE) 32*16kB (UME) 30*32kB (UME) 19*64kB (UME) 8*128kB (UME) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889712kB [ 889.279353][T16592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.310948][T16592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 889.334597][T16631] __nla_validate_parse: 5 callbacks suppressed [ 889.334618][T16631] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3664'. [ 889.341013][T16592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.374670][T16633] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3665'. [ 889.385047][T16635] validate_nla: 4 callbacks suppressed [ 889.385065][T16635] netlink: 'syz.2.3666': attribute type 29 has an invalid length. [ 889.405602][T16592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 889.436607][T16592] 63352 total pagecache pages [ 889.446709][T16592] 0 pages in swap cache [ 889.451390][T16592] Free swap = 124996kB [ 889.456033][T16592] Total swap = 124996kB [ 889.460316][T16592] 2097051 pages RAM [ 889.480933][T16592] 0 pages HighMem/MovableOnly [ 889.485778][T16592] 415206 pages reserved [ 889.500977][T16592] 0 pages cma reserved [ 889.993817][T16645] netlink: 'syz.1.3669': attribute type 29 has an invalid length. [ 892.080817][T16631] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3664'. [ 892.094605][T16635] netlink: 'syz.2.3666': attribute type 29 has an invalid length. [ 892.103080][T16641] netlink: 'syz.0.3668': attribute type 39 has an invalid length. [ 892.131291][T16645] netlink: 'syz.1.3669': attribute type 29 has an invalid length. [ 892.216841][T16648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.376412][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 893.534577][T16677] netlink: 'syz.1.3679': attribute type 5 has an invalid length. [ 893.549341][T16679] netlink: 'syz.0.3681': attribute type 29 has an invalid length. [ 893.575542][T16679] netlink: 'syz.0.3681': attribute type 29 has an invalid length. [ 893.631612][T16680] netlink: 'syz.0.3681': attribute type 29 has an invalid length. [ 893.976361][T16690] netlink: 'syz.1.3683': attribute type 29 has an invalid length. [ 894.104295][T16694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 894.350162][ T4273] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 894.359408][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 894.370780][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 894.378568][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.388650][ T4273] Workqueue: hci4 hci_rx_work [ 894.393449][ T4273] Call Trace: [ 894.396742][ T4273] [ 894.399688][ T4273] dump_stack_lvl+0x188/0x24e [ 894.404403][ T4273] ? show_regs_print_info+0x12/0x12 [ 894.409708][ T4273] ? load_image+0x400/0x400 [ 894.414327][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 894.419457][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 894.424338][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 894.429645][ T4273] kobject_add_internal+0x61c/0xcc0 [ 894.434903][ T4273] kobject_add+0x160/0x230 [ 894.439343][ T4273] ? kobject_init+0x1d0/0x1d0 [ 894.444041][ T4273] ? klist_children_get+0x50/0x50 [ 894.449081][ T4273] ? get_device_parent+0x121/0x3f0 [ 894.454215][ T4273] device_add+0x483/0xfb0 [ 894.458565][ T4273] ? kmem_cache_free+0xf7/0x290 [ 894.463436][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 894.468420][ T4273] le_conn_complete_evt+0x105f/0x1670 [ 894.473898][ T4273] ? le_conn_complete_evt+0xe6/0x1670 [ 894.479553][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 894.485898][ T4273] ? bt_info+0x180/0x180 [ 894.490246][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 894.495903][ T4273] ? skb_pull_data+0xf7/0x200 [ 894.500632][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 894.506673][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 894.512769][ T4273] hci_event_packet+0x7b6/0x1280 [ 894.517734][ T4273] ? bis_list+0x280/0x280 [ 894.522101][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 894.528013][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 894.533146][ T4273] ? spurious_interrupt+0x80/0xd0 [ 894.538222][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 894.543454][ T4273] hci_rx_work+0x3eb/0xd40 [ 894.547896][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 894.552860][ T4273] ? process_one_work+0x7b0/0x1160 [ 894.558000][ T4273] process_one_work+0x8a2/0x1160 [ 894.563074][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 894.568836][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 894.573886][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 894.579531][ T4273] ? kthread_data+0x4b/0xc0 [ 894.584148][ T4273] worker_thread+0xaa2/0x1270 [ 894.588870][ T4273] kthread+0x29d/0x330 [ 894.592949][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 894.598023][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 894.602654][ T4273] ret_from_fork+0x1f/0x30 [ 894.607210][ T4273] [ 894.615927][ T4273] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 894.630473][ T4273] Bluetooth: hci4: failed to register connection device [ 894.638311][ T4273] Bluetooth: hci4: command 0x2016 tx timeout [ 895.118925][T16716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 895.125837][T16716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 895.246542][T16709] validate_nla: 2 callbacks suppressed [ 895.246585][T16709] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 895.281315][T16709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3688'. [ 895.682651][T16728] netlink: 'syz.3.3694': attribute type 29 has an invalid length. [ 895.720570][T16728] netlink: 'syz.3.3694': attribute type 29 has an invalid length. [ 895.909118][T16731] netlink: 'syz.3.3694': attribute type 29 has an invalid length. [ 895.927133][T16726] netlink: 'syz.1.3695': attribute type 5 has an invalid length. [ 896.682068][ T4283] Bluetooth: hci4: command 0x2016 tx timeout [ 896.791917][T16745] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3698'. [ 896.821449][T16744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 896.971835][T16745] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3698'. [ 896.991241][T16749] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3698'. [ 897.125554][ T4273] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 897.133699][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 897.143364][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 897.151057][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.161152][ T4273] Workqueue: hci5 hci_rx_work [ 897.165865][ T4273] Call Trace: [ 897.169161][ T4273] [ 897.172105][ T4273] dump_stack_lvl+0x188/0x24e [ 897.176826][ T4273] ? show_regs_print_info+0x12/0x12 [ 897.182048][ T4273] ? load_image+0x400/0x400 [ 897.186583][ T4273] sysfs_create_dir_ns+0x26a/0x290 [ 897.191715][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 897.196500][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 897.201736][ T4273] kobject_add_internal+0x61c/0xcc0 [ 897.206963][ T4273] kobject_add+0x160/0x230 [ 897.211409][ T4273] ? kobject_init+0x1d0/0x1d0 [ 897.216108][ T4273] ? klist_children_get+0x50/0x50 [ 897.221322][ T4273] ? get_device_parent+0x121/0x3f0 [ 897.226630][ T4273] device_add+0x483/0xfb0 [ 897.231162][ T4273] ? kmem_cache_free+0xf7/0x290 [ 897.236039][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 897.241000][ T4273] le_conn_complete_evt+0x105f/0x1670 [ 897.246394][ T4273] ? le_conn_complete_evt+0xe6/0x1670 [ 897.251789][ T4273] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 897.258046][ T4273] ? bt_info+0x180/0x180 [ 897.262315][ T4273] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 897.267975][ T4273] ? skb_pull_data+0xf7/0x200 [ 897.272691][ T4273] hci_le_conn_complete_evt+0x183/0x440 [ 897.278698][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 897.284795][ T4273] hci_event_packet+0x7b6/0x1280 [ 897.289764][ T4273] ? bis_list+0x280/0x280 [ 897.294109][ T4273] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 897.300103][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 897.305235][ T4273] ? spurious_interrupt+0x80/0xd0 [ 897.310463][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 897.315859][ T4273] hci_rx_work+0x3eb/0xd40 [ 897.320291][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 897.325162][ T4273] ? process_one_work+0x7b0/0x1160 [ 897.330289][ T4273] process_one_work+0x8a2/0x1160 [ 897.335421][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 897.341074][ T4273] ? _raw_spin_lock_irq+0xb7/0xf0 [ 897.346206][ T4273] ? _raw_spin_lock_irqsave+0x100/0x100 [ 897.351772][ T4273] ? kthread_data+0x4b/0xc0 [ 897.356520][ T4273] worker_thread+0xaa2/0x1270 [ 897.361277][ T4273] kthread+0x29d/0x330 [ 897.365371][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 897.370416][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 897.375024][ T4273] ret_from_fork+0x1f/0x30 [ 897.379477][ T4273] [ 897.383896][ T4273] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 897.397331][ T4273] Bluetooth: hci5: failed to register connection device [ 897.431511][T16755] netlink: 'syz.0.3704': attribute type 39 has an invalid length. [ 897.961056][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 898.261353][T16771] netlink: 'syz.0.3710': attribute type 5 has an invalid length. [ 898.301511][T16772] netlink: 'syz.1.3708': attribute type 10 has an invalid length. [ 898.322389][T16772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3708'. [ 898.368366][T16772] bridge0: port 3(veth0_vlan) entered blocking state [ 898.401146][T16772] bridge0: port 3(veth0_vlan) entered disabled state [ 898.430144][T16772] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 899.336428][T16794] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3716'. [ 899.387600][T16794] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3716'. [ 899.411565][T16794] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3716'. [ 899.481236][ T4273] Bluetooth: hci5: command 0x2016 tx timeout [ 899.568166][T16797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 899.721774][T16800] netlink: 'syz.0.3718': attribute type 39 has an invalid length. [ 899.845820][ T4283] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 899.854346][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 899.864360][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 899.872072][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.882451][ T4283] Workqueue: hci4 hci_rx_work [ 899.887217][ T4283] Call Trace: [ 899.890549][ T4283] [ 899.893541][ T4283] dump_stack_lvl+0x188/0x24e [ 899.898533][ T4283] ? show_regs_print_info+0x12/0x12 [ 899.903814][ T4283] ? load_image+0x400/0x400 [ 899.908445][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 899.913647][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 899.918406][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 899.923667][ T4283] kobject_add_internal+0x61c/0xcc0 [ 899.928935][ T4283] kobject_add+0x160/0x230 [ 899.933408][ T4283] ? kobject_init+0x1d0/0x1d0 [ 899.938306][ T4283] ? klist_children_get+0x50/0x50 [ 899.943369][ T4283] ? get_device_parent+0x121/0x3f0 [ 899.948537][ T4283] device_add+0x483/0xfb0 [ 899.952909][ T4283] ? kmem_cache_free+0xf7/0x290 [ 899.957909][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 899.962896][ T4283] le_conn_complete_evt+0x105f/0x1670 [ 899.968440][ T4283] ? le_conn_complete_evt+0xe6/0x1670 [ 899.973871][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 899.980155][ T4283] ? bt_info+0x180/0x180 [ 899.984445][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 899.990128][ T4283] ? skb_pull_data+0xf7/0x200 [ 899.994868][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 900.000577][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 900.006690][ T4283] hci_event_packet+0x7b6/0x1280 [ 900.011698][ T4283] ? bis_list+0x280/0x280 [ 900.016064][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 900.022093][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 900.027260][ T4283] ? spurious_interrupt+0x80/0xd0 [ 900.032506][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 900.037788][ T4283] hci_rx_work+0x3eb/0xd40 [ 900.042248][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 900.047163][ T4283] ? process_one_work+0x7b0/0x1160 [ 900.052314][ T4283] process_one_work+0x8a2/0x1160 [ 900.057336][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 900.063024][ T4283] ? _raw_spin_lock_irq+0x86/0xf0 [ 900.068191][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 900.073262][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 900.079020][ T4283] ? kthread_data+0x4b/0xc0 [ 900.083685][ T4283] worker_thread+0xaa2/0x1270 [ 900.088667][ T4283] kthread+0x29d/0x330 [ 900.093203][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 900.098260][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 900.102891][ T4283] ret_from_fork+0x1f/0x30 [ 900.107389][ T4283] [ 900.113385][ T4283] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 900.131030][ T4283] Bluetooth: hci4: failed to register connection device [ 900.301436][T16805] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 900.321116][T16805] syzkaller0: linktype set to 769 [ 900.496675][T16806] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 900.687326][T16807] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 900.920534][T16805] netlink: 'syz.3.3717': attribute type 10 has an invalid length. [ 901.376339][T16805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3717'. [ 901.685224][T16805] bridge0: port 3(veth0_vlan) entered blocking state [ 901.706523][T16805] bridge0: port 3(veth0_vlan) entered disabled state [ 901.826681][T16805] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 902.201186][ T4283] Bluetooth: hci4: command 0x2016 tx timeout [ 905.864326][T16846] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 905.878041][T16846] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 905.892339][T16846] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 905.918105][T16847] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3729'. [ 906.074183][T16847] netlink: 'syz.1.3729': attribute type 27 has an invalid length. [ 907.273003][T16865] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 907.279003][T16865] syzkaller0: linktype set to 769 [ 907.501266][T16868] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 907.580641][T16870] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 907.993722][T16864] netlink: 'syz.1.3736': attribute type 10 has an invalid length. [ 908.120070][T16864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3736'. [ 908.241564][T16864] bridge0: port 3(veth0_vlan) entered blocking state [ 908.318420][T16864] bridge0: port 3(veth0_vlan) entered disabled state [ 908.861382][T16864] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 908.947971][T16887] netlink: 'syz.4.3742': attribute type 29 has an invalid length. [ 909.002862][T16887] netlink: 'syz.4.3742': attribute type 29 has an invalid length. [ 909.021665][T16890] netlink: 'syz.4.3742': attribute type 29 has an invalid length. [ 909.581314][T16896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.590003][T16896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.639252][T16901] netlink: 'syz.3.3755': attribute type 29 has an invalid length. [ 911.081393][T16896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.089071][T16896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.215695][T16914] FAULT_INJECTION: forcing a failure. [ 911.215695][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 911.239335][T16914] CPU: 0 PID: 16914 Comm: syz.0.3748 Not tainted syzkaller #0 [ 911.246970][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.257212][T16914] Call Trace: [ 911.260628][T16914] [ 911.263609][T16914] dump_stack_lvl+0x188/0x24e [ 911.268367][T16914] ? trace_event_raw_event_lock+0x250/0x250 [ 911.274345][T16914] ? show_regs_print_info+0x12/0x12 [ 911.279614][T16914] ? load_image+0x400/0x400 [ 911.284184][T16914] ? kasan_set_track+0x60/0x70 [ 911.289119][T16914] should_fail_ex+0x399/0x4d0 [ 911.293863][T16914] should_failslab+0x5/0x20 [ 911.298605][T16914] slab_pre_alloc_hook+0x59/0x310 [ 911.304323][T16914] ? __lock_acquire+0x7d10/0x7d10 [ 911.309892][T16914] kmem_cache_alloc+0x56/0x2f0 [ 911.315236][T16914] ? dst_alloc+0x101/0x160 [ 911.319822][T16914] dst_alloc+0x101/0x160 [ 911.324136][T16914] ip_route_output_key_hash_rcu+0x14a4/0x23f0 [ 911.330299][T16914] ? ip_route_output_key_hash+0x139/0x330 [ 911.336090][T16914] ip_route_output_key_hash+0x1ef/0x330 [ 911.341701][T16914] ? kfree+0x30/0x190 [ 911.345733][T16914] ? ip_route_input_rcu+0x3160/0x3160 [ 911.351311][T16914] ? ip_cmsg_send+0x9a5/0xa50 [ 911.356033][T16914] ip_route_output_flow+0x26/0x150 [ 911.361257][T16914] ? security_sk_classify_flow+0x77/0x90 [ 911.366932][T16914] udp_sendmsg+0x1626/0x23b0 [ 911.371564][T16914] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 911.376526][T16914] ? udp_cmsg_send+0x350/0x350 [ 911.381578][T16914] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 911.387587][T16914] ? lock_chain_count+0x20/0x20 [ 911.392484][T16914] ? __local_bh_enable_ip+0x136/0x1c0 [ 911.397876][T16914] ? _local_bh_enable+0xa0/0xa0 [ 911.402748][T16914] ? do_raw_spin_unlock+0x11d/0x230 [ 911.407964][T16914] ? inet_sendmsg+0x147/0x2f0 [ 911.412938][T16914] ? inet_sendmsg+0x147/0x2f0 [ 911.417821][T16914] ? inet_send_prepare+0x260/0x260 [ 911.423059][T16914] ____sys_sendmsg+0x5be/0x970 [ 911.427867][T16914] ? __sys_sendmsg_sock+0x30/0x30 [ 911.432917][T16914] ? __import_iovec+0x315/0x500 [ 911.437805][T16914] ? import_iovec+0x6f/0xa0 [ 911.442426][T16914] ___sys_sendmsg+0x2a2/0x360 [ 911.447142][T16914] ? __sys_sendmsg+0x290/0x290 [ 911.451968][T16914] ? __lock_acquire+0x7d10/0x7d10 [ 911.457264][T16914] __se_sys_sendmsg+0x1bb/0x2a0 [ 911.462331][T16914] ? __x64_sys_sendmsg+0x80/0x80 [ 911.467503][T16914] ? lockdep_hardirqs_on+0x94/0x140 [ 911.472991][T16914] do_syscall_64+0x4c/0xa0 [ 911.477427][T16914] ? clear_bhb_loop+0x60/0xb0 [ 911.482297][T16914] ? clear_bhb_loop+0x60/0xb0 [ 911.487012][T16914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.493099][T16914] RIP: 0033:0x7fb4b919c799 [ 911.497537][T16914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.517769][T16914] RSP: 002b:00007fb4ba0f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.526208][T16914] RAX: ffffffffffffffda RBX: 00007fb4b9415fa0 RCX: 00007fb4b919c799 [ 911.534202][T16914] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000f [ 911.542188][T16914] RBP: 00007fb4ba0f8090 R08: 0000000000000000 R09: 0000000000000000 [ 911.550262][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.558341][T16914] R13: 00007fb4b9416038 R14: 00007fb4b9415fa0 R15: 00007ffc87979608 [ 911.566372][T16914] [ 911.625691][T16901] netlink: 'syz.3.3755': attribute type 29 has an invalid length. [ 911.785855][T16919] netlink: 'syz.1.3750': attribute type 29 has an invalid length. [ 911.818932][T16921] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3751'. [ 911.840746][T16919] netlink: 'syz.1.3750': attribute type 29 has an invalid length. [ 911.886999][T16921] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3751'. [ 911.959373][T16925] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3751'. [ 912.284471][T16932] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 912.322677][T16932] syzkaller0: linktype set to 769 [ 912.359061][T16932] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 912.432748][T16935] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 912.837011][T16935] netlink: 'syz.4.3754': attribute type 10 has an invalid length. [ 913.041971][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3754'. [ 913.296832][T16945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.651129][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 915.805254][T16974] netlink: 'syz.0.3766': attribute type 29 has an invalid length. [ 916.686188][T16954] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3758'. [ 916.741056][T16974] netlink: 'syz.0.3766': attribute type 29 has an invalid length. [ 917.017895][T16983] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 917.048011][T16983] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3770'. [ 917.096730][T16986] netlink: 'syz.0.3779': attribute type 29 has an invalid length. [ 917.125282][T16986] netlink: 'syz.0.3779': attribute type 29 has an invalid length. [ 917.496286][T16989] netlink: 'syz.4.3771': attribute type 39 has an invalid length. [ 917.598137][T16997] netlink: 'syz.2.3775': attribute type 29 has an invalid length. [ 917.600595][T16992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.649604][T16997] netlink: 'syz.2.3775': attribute type 29 has an invalid length. [ 917.703984][T16998] netlink: 'syz.2.3775': attribute type 29 has an invalid length. [ 918.061444][T17003] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.069169][T17003] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.084350][T17010] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 919.099624][T17015] netlink: 'syz.0.3780': attribute type 4 has an invalid length. [ 919.111904][T17010] syzkaller1: group set to 778 [ 919.143833][T17015] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3780'. [ 920.035402][T17034] netlink: 'syz.3.3785': attribute type 29 has an invalid length. [ 920.325330][T17042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.545406][T17051] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3792'. [ 920.980515][T17063] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3795'. [ 921.013495][T17063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 921.751750][T17069] validate_nla: 10 callbacks suppressed [ 921.751776][T17069] netlink: 'syz.1.3799': attribute type 29 has an invalid length. [ 921.799996][T17069] netlink: 'syz.1.3799': attribute type 29 has an invalid length. [ 921.852899][T17071] netlink: 'syz.1.3799': attribute type 29 has an invalid length. [ 922.684537][T17078] netlink: 'syz.1.3803': attribute type 39 has an invalid length. [ 922.837782][T17081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.256901][T17089] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.264881][T17089] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.745234][T17091] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3806'. [ 925.565801][T17103] netlink: 'syz.1.3810': attribute type 21 has an invalid length. [ 925.673144][T17103] netlink: 'syz.1.3810': attribute type 1 has an invalid length. [ 925.736343][T17103] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3810'. [ 926.987167][T17118] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 927.020255][T17118] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 927.323288][T17120] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 928.200218][T17127] netlink: 'syz.1.3816': attribute type 39 has an invalid length. [ 931.940453][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.946957][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.323093][T17153] netlink: 'syz.1.3823': attribute type 1 has an invalid length. [ 936.663923][T17171] netlink: 'syz.4.3828': attribute type 5 has an invalid length. [ 940.562389][T17181] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3831'. [ 966.921555][T14101] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2627 jiffies s: 55669 root: 0x2/. [ 966.965101][T14101] rcu: blocking rcu_node structures (internal RCU debug): [ 966.996296][T14101] Sending NMI from CPU 0 to CPUs 1: [ 967.001983][ C1] NMI backtrace for cpu 1 [ 967.001997][ C1] CPU: 1 PID: 17167 Comm: syz.0.3827 Not tainted syzkaller #0 [ 967.002015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.002024][ C1] RIP: 0010:perf_trace_buf_alloc+0x205/0x300 [ 967.002050][ C1] Code: 00 4c 89 f1 48 c1 e9 03 42 0f b6 0c 29 84 c9 0f 85 b0 00 00 00 48 c7 03 00 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e8 35 e7 f7 ff c6 05 c0 e1 80 0c 01 48 c7 c7 c0 53 91 8a 89 de [ 967.002065][ C1] RSP: 0000:ffffc900001e0078 EFLAGS: 00000086 [ 967.002079][ C1] RAX: 0000000000000000 RBX: ffffffff8c9f9600 RCX: ffff888046220000 [ 967.002091][ C1] RDX: 0000000000000100 RSI: 00000000ffffffff RDI: 0000000000000000 [ 967.002101][ C1] RBP: ffffc900001e0170 R08: ffffffff8e1fd76f R09: 1ffffffff1c3faed [ 967.002112][ C1] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: dffffc0000000000 [ 967.002130][ C1] R13: 1ffff9200003c018 R14: 000000000000002c R15: ffffffff8c9f9580 [ 967.002142][ C1] FS: 00007fb4ba0d76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 967.002156][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 967.002168][ C1] CR2: 0000000000000000 CR3: 000000007f4a7000 CR4: 00000000003506e0 [ 967.002183][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 967.002193][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 967.002204][ C1] Call Trace: [ 967.002210][ C1] [ 967.002215][ C1] perf_trace_lock+0x197/0x390 [ 967.002250][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 967.002266][ C1] ? perf_trace_buf_alloc+0x12c/0x300 [ 967.002292][ C1] ? perf_trace_lock+0x197/0x390 [ 967.002323][ C1] lock_release+0x8ad/0x920 [ 967.002350][ C1] ? __virt_addr_valid+0x188/0x540 [ 967.002379][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 967.002416][ C1] ? __virt_addr_valid+0x188/0x540 [ 967.002438][ C1] ? __virt_addr_valid+0x188/0x540 [ 967.002459][ C1] __virt_addr_valid+0x435/0x540 [ 967.002485][ C1] kasan_addr_to_slab+0x9/0xc0 [ 967.002506][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 967.002524][ C1] irq_work_queue_on+0x10f/0x260 [ 967.002553][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 967.002584][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 967.002607][ C1] ? __perf_cgroup_move+0x150/0x150 [ 967.002668][ C1] __rcu_read_unlock+0x78/0xd0 [ 967.002698][ C1] perf_event_output_forward+0x271/0x2f0 [ 967.002722][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 967.002743][ C1] ? perf_get_page_size+0x430/0x430 [ 967.002775][ C1] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 967.002806][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 967.002835][ C1] __perf_event_overflow+0x448/0x610 [ 967.002871][ C1] perf_tp_event+0x38c/0xc00 [ 967.002905][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 967.002983][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 967.003035][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 967.003048][ C1] ? sched_clock_cpu+0x6e/0x260 [ 967.003072][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 967.003106][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 967.003131][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 967.003153][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 967.003178][ C1] ? __irq_exit_rcu+0x147/0x230 [ 967.003194][ C1] ? irq_exit_rcu+0x20/0x20 [ 967.003219][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 967.003237][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 967.003264][ C1] trace_hardirqs_on+0x24/0x40 [ 967.003280][ C1] asm_sysvec_irq_work+0x16/0x20 [ 967.003296][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 967.003312][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 967.003324][ C1] RSP: 0000:ffffc900001e0ac0 EFLAGS: 00000206 [ 967.003336][ C1] RAX: fac29c3f53108a00 RBX: 1ffff9200003c160 RCX: fac29c3f53108a00 [ 967.003348][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 967.003359][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 967.003370][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 967.003380][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 967.003424][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 967.003452][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 967.003495][ C1] __rcu_read_unlock+0x78/0xd0 [ 967.003509][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 967.003534][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 967.003549][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 967.003577][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 967.003606][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 967.003640][ C1] ? hw_scan_work+0xf50/0xf50 [ 967.003686][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 967.003704][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 967.003741][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 967.003767][ C1] handle_softirqs+0x2a1/0x930 [ 967.003799][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 967.003825][ C1] ? do_softirq+0x210/0x210 [ 967.003851][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 967.003874][ C1] __irq_exit_rcu+0x13b/0x230 [ 967.003890][ C1] ? irq_exit_rcu+0x20/0x20 [ 967.003930][ C1] irq_exit_rcu+0x5/0x20 [ 967.003942][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 967.003960][ C1] [ 967.003964][ C1] [ 967.003972][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 967.003989][ C1] RIP: 0010:preempt_schedule_irq+0xb6/0x160 [ 967.004009][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 7f bf 01 00 00 00 e8 f5 42 23 f7 e8 b0 35 53 f7 fb bf 01 00 00 00 75 b9 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 967.004021][ C1] RSP: 0000:ffffc900045975c0 EFLAGS: 00000282 [ 967.004033][ C1] RAX: fac29c3f53108a00 RBX: 0000000000000000 RCX: fac29c3f53108a00 [ 967.004044][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 967.004054][ C1] RBP: ffffc90004597660 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 967.004065][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000000 [ 967.004076][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920008b2eb8 [ 967.004120][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 967.004145][ C1] ? rcu_is_watching+0x11/0xa0 [ 967.004174][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 967.004199][ C1] irqentry_exit+0x63/0x70 [ 967.004213][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 967.004230][ C1] RIP: 0010:lock_release+0x5ab/0x920 [ 967.004249][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 967.004260][ C1] RSP: 0000:ffffc90004597720 EFLAGS: 00000206 [ 967.004272][ C1] RAX: 0000000000000001 RBX: a9dfbae5d5eb4802 RCX: fac29c3f53108a00 [ 967.004282][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0f60 [ 967.004292][ C1] RBP: ffffc90004597830 R08: ffffffff8e1fd76f R09: 1ffffffff1c3faed [ 967.004302][ C1] R10: dffffc0000000000 R11: fffffbfff1c3faee R12: ffff888046220b08 [ 967.004313][ C1] R13: dffffc0000000000 R14: ffff888046220ad0 R15: 1ffff920008b2ef0 [ 967.004360][ C1] ? bpf_prog_load+0x7c9/0x1560 [ 967.004380][ C1] ? page_ext_put+0x98/0xb0 [ 967.004408][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 967.004430][ C1] ? page_ext_get+0x1de/0x2a0 [ 967.004471][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 967.004505][ C1] free_unref_page+0x2e/0x3f0 [ 967.004536][ C1] __unfreeze_partials+0x1a5/0x200 [ 967.004568][ C1] put_cpu_partial+0x17c/0x250 [ 967.004585][ C1] ? put_cpu_partial+0x6e/0x250 [ 967.004612][ C1] qlist_free_all+0x76/0xe0 [ 967.004637][ C1] kasan_quarantine_reduce+0x144/0x160 [ 967.004659][ C1] __kasan_slab_alloc+0x1e/0x80 [ 967.004689][ C1] slab_post_alloc_hook+0x4b/0x480 [ 967.004706][ C1] ? slab_pre_alloc_hook+0x2e7/0x310 [ 967.004723][ C1] ? free_vm_area+0x50/0x50 [ 967.004741][ C1] ? bpf_prog_alloc_no_stats+0xb2/0x3a0 [ 967.004766][ C1] __kmem_cache_alloc_node+0x140/0x260 [ 967.004791][ C1] ? bpf_prog_alloc_no_stats+0xb2/0x3a0 [ 967.004814][ C1] kmalloc_trace+0x26/0xe0 [ 967.004841][ C1] bpf_prog_alloc_no_stats+0xb2/0x3a0 [ 967.004872][ C1] bpf_prog_alloc+0x1c/0x1b0 [ 967.004900][ C1] bpf_prog_load+0x7c9/0x1560 [ 967.004945][ C1] ? map_freeze+0x390/0x390 [ 967.004967][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 967.004986][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 967.005031][ C1] ? copy_user_enhanced_fast_string+0xc/0x40 [ 967.005055][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 967.005070][ C1] ? security_bpf+0x7a/0xa0 [ 967.005093][ C1] __sys_bpf+0x5b8/0x780 [ 967.005120][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 967.005167][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 967.005211][ C1] __x64_sys_bpf+0x78/0x90 [ 967.005235][ C1] do_syscall_64+0x4c/0xa0 [ 967.005252][ C1] ? clear_bhb_loop+0x60/0xb0 [ 967.005269][ C1] ? clear_bhb_loop+0x60/0xb0 [ 967.005291][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.005308][ C1] RIP: 0033:0x7fb4b919c799 [ 967.005323][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.005335][ C1] RSP: 002b:00007fb4ba0d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.005350][ C1] RAX: ffffffffffffffda RBX: 00007fb4b9416090 RCX: 00007fb4b919c799 [ 967.005361][ C1] RDX: 00000000000000ee RSI: 00002000000001c0 RDI: 0000000000000005 [ 967.005371][ C1] RBP: 00007fb4b9232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 967.005381][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.005390][ C1] R13: 00007fb4b9416128 R14: 00007fb4b9416090 R15: 00007ffc87979608 [ 967.005432][ C1]