last executing test programs: 7.964141739s ago: executing program 1 (id=13497): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x5) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xff8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41101, 0xc, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0x3}, 0x10000, 0x2, 0x7, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.218758025s ago: executing program 4 (id=13503): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f0000000500)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000600)=""/67, 0x8001, 0x0, 0xd2, 0x0, &(0x7f0000000c80)="972e07be505fb07e7a1c76bc968aa93a5c3fb0f22910b6903adc135cc3f123805e3f51decec883990a95d9bd899862b464c3e69121d88e994e610d6fbdfeb54039f7e40a6c4b0235190f074fad1e26dafa3f2c1936e7cadfc8e9cd449ba094ea68756b38e83ec58a4bec77cb6d0eb0c239d94e50f87a2ce4942406728c06ac77f76d6ff6cde1ded06c68e8987faa442fd3d9a1cabf9d2c2ef9b383122a0cc0a20bec95c349158c8a53b0b69c3fe0310cb8c6f25804a33e0f2f038a765f04feaed9d76b5556c95190ba01835ce590c5361f969cc7e1069e587a719b27d2ab565dada9975c8f1f6bc20c9c3ad8c652328f73cf4865c249650f36799532ad14277c8cec8bba62dfdf33be7f196b37178f242afa6e482c0e2970ae67180b8b97ebc54e30524da317b925c030f50c1c2f1078db972d2f405932953d5f55301cacaf9e0edec32e4c410656078a304821aa357868b366fb0a24b220d2a48d1585fd83bc9c84d69dbc07a12542eae49dc05b5a79fbd865688ac6b4ff81326fbf77fb12534c980060ca7ba2304420f0f5943f9bccf91f6d714f0e8342b85db0be49f2d69db7ad60bde9245880eed31a7fb9a3e3d6acc4eb03015c4bc041a7e0bdcf3842b528ca528cc2", 0x0, 0x5, 0x0, 0x88fa}, 0x50) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000045) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r4, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180800000000000000000000000000009500000000000000c3be95c373a09c4749fffa35b4090343d37d681597bf583ab3b1257f9121229273d57a1b44d0b83a9f45552483d0a3d474eabd606e7efc26024e3fede7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000580)}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4301c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x10000000, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x6) socket$kcm(0x10, 0x6, 0x4) 7.136719913s ago: executing program 2 (id=13504): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000640)=""/144, 0x90, 0x0, &(0x7f0000000700)=""/214, 0xd6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095000000000000002a615fa548aeadb893eca27ac2a3933043aa1c68a9ef3843aa969e6acd353afad7bb3068e74e6fe284cf646ebd743ccc841ae44aa4ccd982480589140a32177acb706dcdb7224aa18e947099489678dbb6a80b6624b3e6436c28f853fb0da800b2"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10310, 0xc8, 0x2, 0x8, 0x0, 0x1, 0xa, 0x0, 0x800, 0x0, 0xfffffffffffffffd}, 0x0, 0x400040000000009, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0xf9) r4 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x50) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="650a0000ffffffff611164000000000018000000000000000000000000000000950000000000000051a7f0df9e5041ed55e4e715dcdd0423a9e04a85e15a0403c287a60b86016fd9e7e4fcf826d62cab866fdd7c496dacaec94bdc10b6857d415cc8baac21086aba78"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.905623717s ago: executing program 4 (id=13506): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x5, 0xa) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d800000010008104687da3aa7143a0b8c81f08", 0x13}], 0x1}, 0x20000050) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) mkdir(&(0x7f0000000200)='./cgroup/../file0\x00', 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000300)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f00000000c0), 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x3, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@ifindex=r7, r3, 0x37, 0x28, r3}, 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0xc, 0x0, 0x2e) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 5.752512504s ago: executing program 1 (id=13518): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x5) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xff8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0x3}, 0x10000, 0x2, 0x7, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.669555842s ago: executing program 4 (id=13509): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000500)={'wlan1\x00', @random="8000230d1100"}) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x2f8}, 0x20000800) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000400)=r1, 0x78) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000e78536ab6557edf6182015", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000200"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000001040)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001dc0)="d8000000180081064e81f782e444b9040a1d080006007c3ee2e4a4a10a0015577a467de3ec95931208001e0000000401040016004000090000000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791647abce4ce1b14d6d930dfe1d9d322fe7c9f8775730516a4683f6feb4edbb57a5025ccca9e00360db70100000040fad90100e0b28134849c6caa721f06dcdf63951f215ce3bb9ad809d5e1e8e194430bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001080)={&(0x7f00000010c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1, 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001c00)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000001c40)={&(0x7f0000001c80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001cc0)={r10, r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d00)={r7, r4}) close(r8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1e, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000001000100000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000019000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018420000000000000000000000000000186300000f00000000000000070000001860000000000000000000000500000018260000", @ANYRES32=r11, @ANYBLOB="ffffff185400000e0000000000000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095000000000000009b175ba5be593ba009574ea951838593f99278ed2c13ce300d302bee6c877c30e603bb767341a26ff0b70ef3de93ff1056883caf3cc04682ccc05afc3f1907"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 5.524612467s ago: executing program 0 (id=13510): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) 5.214969919s ago: executing program 0 (id=13511): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="2971f8ceee70309500000000", @ANYRES32=0x0, @ANYRES64=r4], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x12, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000840)=""/6, 0x40e00, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r2, r6, r2], &(0x7f0000000900)=[{0x3, 0x2, 0x7}, {0x5, 0x4, 0xf, 0x2}, {0x2, 0x2, 0x1, 0x3}, {0x1, 0x3, 0x3, 0x2}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200", 0xe}], 0x1}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x4813, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 4.627770229s ago: executing program 3 (id=13514): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001200)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0x19, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001440)={r4}, 0xc) 4.610809201s ago: executing program 4 (id=13515): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000200), 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=""/248, 0x0, 0xf8, 0x1, 0x7ce}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000b00)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x20}, 0x24088054) r5 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa122, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000a00)={&(0x7f0000000b40)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="f5d2b9ed", 0x4}, {&(0x7f0000000c00)="4fff54c1020045768718b4da1ceb33c9381f3291be99a909af93cab03a", 0x1d}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r2, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000c80)=[0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3ff, '\x00', r8, r0, 0x1, 0x4, 0x3}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r10}, 0xc) sendmsg$sock(r7, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40002000) 4.524677639s ago: executing program 2 (id=13516): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x800003ff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xd) (async) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000180), 0xcf) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000240)=@in6={0xa, 0x4e23, 0xe, @mcast1, 0x6}, 0x80, 0x0}, 0x48084) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 4.375502944s ago: executing program 3 (id=13517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10d8, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/4088, 0xff8}], 0x1}, 0x0) (async, rerun: 32) r3 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000001980)={0x0, 0xffffff0a, &(0x7f00000019c0)=[{&(0x7f0000001a00)="c01803003f000b12d25a80648c2594f90124fc60020c024002000a00053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) (async) close(0x3) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0b9547ed387db05abc8996f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x1e, 0x1, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xf, '\x00', r1, r4, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001bc0)={{r9}, &(0x7f0000001b40), &(0x7f0000001b80)='%-5lx \x00'}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) (async) socket$kcm(0x28, 0x5, 0x0) 3.943630768s ago: executing program 1 (id=13519): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000840)={0x1, 0xffffffffffffff28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_config_ext={0x8a71, 0xc21}, 0x108a04, 0xffffffff, 0x0, 0x0, 0x7, 0x3, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@arena={0x21, 0x0, 0x0, 0x5, 0x40000, r1, 0xfffffffb, '\x00', 0x0, r1, 0x3, 0x3, 0x3}, 0x50) socketpair(0x22, 0x5, 0x9, &(0x7f0000000380)={0xffffffffffffffff}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/200, 0xc8}, {&(0x7f0000000c80)=""/176, 0xb0}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x3}, 0x2) recvmsg$kcm(r7, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0xffffff2d, &(0x7f00000000c0)=[{&(0x7f0000000100)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.575506516s ago: executing program 0 (id=13520): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x1138, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}, 0x40000) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000001000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x8}, 0x80}) r2 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='memory.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000fc0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000180)="fb9eae20e5c966", 0x7}, {&(0x7f00000001c0)="e2dff9ff83e17f3b7826b10043bdf783548967ca2437874ce2bcd79b7cf3da612cee2f091c598acea8ca9e52", 0x2c}, {&(0x7f0000000200)="8cc07f9e2e642ecf5ed521893e7101b6f83fbd875b825b4b70eaf58f3520aacf8ea9b9a275c062cc8f81ca24b60e3d4fc5924be5b45d273afc0bf6fab556edd593c7df5e1f32c64a47a029c6dbffe9dd8a4cbb7481397d1e864aab92f5", 0x5d}, {&(0x7f00000007c0)="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", 0xfc}, {&(0x7f0000000a00)="1a198db31414def23b2f5c9e84a2a7f0e6f628b6b96987cb8a75660195d171db85b2d39e217fb0333cccc925cab046f13eeb1178da83de99111524ac79e4d87e2e74c1bf594999151b4e0a6e52b12e6d56709424d4e15be74e726a88748682a7a1ddd820da3f9ca1ec873e9ef73f1fac99fde687346e9ebd2cd175f1198ff92a00e96f7ec5", 0x85}, {&(0x7f0000000c40)="6332a923c37dd6bbaec0ebb75aa46a3eba18d7ca053b3a592d66f53fa5e0e4c26fd9543be4418e1a002c281c46377cd25ff3d40cc206f848afa9e921fd9d868ab66afb228b321f1b29635ec24752ef0d5ac8fa04c9ccd84ce6101b78d36b5e3310649a419bd19df7b2180f01f9f3dcd21b0699bd71022454", 0x78}, {&(0x7f0000000cc0)="cac76b309901c9fc15bc1ea3227e5ad7150f967029632524ecd3a44d767e8fb0cb2b79cc535b0b408ab8a40fc0a018fdb8537ea6ea3047c2c4db209e1b8506ca70970c4a29e0b13eeb8778ceb6087a30364092c6b79b66fa9d6468152b43d8c7e50b", 0x62}, {&(0x7f0000000d40)="92", 0x1}, {&(0x7f0000000d80)="f9972087bf124bdb5e8b616a935a76c88ca358df54236194858b98134e706f264e096d897a47f545a7b7c61aa05d0fb86ea4bdfb1c1f34bcb392569245c24cbbc79efcee2ed9aae02a94540675ddb5b172f375", 0x53}, {&(0x7f0000000e00)="bf72867c09ca5c312a103f1e877e3fde4d3735cf6c9d183ab6d5985d854fbc04b08b63111c795944dc54dc97f1463720dd6f43df9bc039cae317db60b0aadb1bf8673274bac04cb3f568b392f3434812f0ce495783ec743f8bc8cc211b24a147a1a6229db6c0fdb7eead07280609088f98f6f2d83d4e32c40b9433d5f4fbe27207d43b9bcb04ba506770fbd139f9feb09fd17161af3e036d2fec8df3fde8d0962e444b1e8502e6f8047e3f0b59fb226c8f804f92ba2c76f8c946246b73a63992b16c5b0fbf9d365d7f4178d39496cb669c3b176324a929731de80b27879cfe3c064f8e40cce269aacc62699c11", 0xed}], 0xa}, 0x4004080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000001100), 0xfdef) openat$cgroup_subtree(r5, &(0x7f0000001140), 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000900)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="99", 0x1}], 0x1}, 0x844) 3.464656827s ago: executing program 2 (id=13521): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x5, 0xa) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000004c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d800000010008104687da3aa7143a0b8c81f08", 0x13}], 0x1}, 0x20000050) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) mkdir(&(0x7f0000000200)='./cgroup/../file0\x00', 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000300)={'full', 0x20, 0x2, 0x20, 0x1000000}, 0x2f) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f00000000c0), 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x3, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@ifindex=r7, r3, 0x37, 0x28, r3}, 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0xc, 0x0, 0x2e) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 3.217191382s ago: executing program 3 (id=13522): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) 3.004132624s ago: executing program 3 (id=13523): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000900), 0x4) sendmsg$kcm(r0, &(0x7f00000009c0)={&(0x7f0000000a00)=@hci={0x1f, 0x0, 0x9}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b00)="27030200f00f00000600002fb9088965c7297a05a201916bafedef4e39ffffffffe1053742e0e4650058f700000088641100114408000300b8bf4a31accb", 0x3e}, {&(0x7f0000000b40)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab0801d45a30bc7923756426ed6029cea34be70fd52bfbde2bb1171c48961a58bc64c2dafc47263af31c8d405d712a94a8f88b4e74d1e510c60100010000000000b6d31f118703445f42717726b721981296ae4348b0767e6b67335a9da9d3d4936b861ea72bb996e01bb88357f9bed242d7c1bd6b09940e23a2f9903cd9925d22f8112f9741e5658b5e62a4b23a292c858fcb8362e401d3", 0xee}, {&(0x7f0000000000)="b6986e54ee7137807146de0ab7ee755b7aed5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000cc0)="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", 0x191}, {&(0x7f0000000e80)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0x7b}, {&(0x7f0000001280)="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", 0xbed}], 0x6}, 0xc806) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r2], 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f0000000c40)="000000000000000002", 0x0}, 0x50) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000000000000000000700f8a8e932e74f2a7300000a010f0100000000"], 0x20}, 0x8000) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, 0x0}, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) sendmsg$unix(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="f926e5b328b3c636e3d5c06ba6", 0xd}, {&(0x7f0000000180)="cda7bfab3d766474fbb6c93144457ea06c2ba44490f78e187229b0321e07263fb9f53206899bdb3a08cfe70db472e27360c6f5815c92c88c06fade1ddc60aeb4e3fa49d4813e52e57b346a82319be5d9d32f3ce89b9c03766e2495ec13dbe1ba678202e290698e42a0b810bd01ea47c0350b31e0c5eb5cfcad5a6847ef8de4d26520a5aca37ae8f029608c0d07", 0x8d}, {&(0x7f0000000240)="c87122fb199ef1ffcb90582431093f9b2566df0fa81fad0ca131ac86ee89ccf6fb980727562dbf72bd279f0ecfa12b3842d92d558136d9fa236a88bed4d9784004e4dba5e9dcdffff8856c1070184c3ae6e5a2", 0x53}, {&(0x7f00000002c0)="e796c8bd510b9895450730519f8b584053f58ff087fa0e2b9f5c5d9a0dd74e04c23dbe1265f32f37636c33eeab65554d8f22527be8feb3d8f8471bfe4e9d383c66ff47521591c942cc5245d800bd4b54d0849e9fa5e4", 0x56}, {&(0x7f0000000340)="8b48b0ee7cc9141c9acdb25cd76238353f7a1c2fc47da4904a936c9aa99b1cb56f41901d54d5e1fba47421180611d1e9d69a7370cab070403377a116f01b7520d70e71d29eecf5a7f82baa38141f1c", 0x4f}], 0x5, 0x0, 0x0, 0x8000}, 0x10040) 2.564619989s ago: executing program 1 (id=13524): socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3e, 0x9}, 0x292, 0xa7, 0x2, 0x5, 0x2, 0x9b9b, 0xd406, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x6, 0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)) recvmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000200000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{0x1}, 0x0, &(0x7f0000001880)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x0, 0x5, &(0x7f0000001980)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x7}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000019c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001a00)={'sit0\x00'}) 2.290037017s ago: executing program 2 (id=13525): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="2971f8ceee70309500000000", @ANYRES32=0x0, @ANYRES64=r4], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x12, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000840)=""/6, 0x40e00, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r2, r6, r2], &(0x7f0000000900)=[{0x3, 0x2, 0x7}, {0x5, 0x4, 0xf, 0x2}, {0x2, 0x2, 0x1, 0x3}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200", 0xe}], 0x1}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x4813, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.145428921s ago: executing program 0 (id=13526): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='.\x00') (async) r0 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/254, 0xfe}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/128, 0x80}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x20ffd7ab9541a9a0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002180)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000002200)="d8661035880157ca1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) 1.908584156s ago: executing program 3 (id=13527): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000380)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x45240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x800, 0x84, 0x2, 0x5, 0x0, 0xfffffffc, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x2}, 0x0, 0xfff, 0xf008, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x2, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x20}, 0x24088054) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x15, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.219110796s ago: executing program 1 (id=13528): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f0000000280)=r2, 0x8) r3 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000900)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000980)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000a00)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40), 0x200002, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000b40)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000b80), 0x12) r9 = openat$cgroup_procs(r6, &(0x7f0000000bc0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="150000002a000000", @ANYRES32, @ANYBLOB="25c8dfc236549812f852fba3954c63e3c933fe87a277bf16c01a4b22dfa388b960b663850bf9cdee4ce91b8b4a4b7bcb4e80062adae83cd4e8c2ed34c07c95650679d34b7d179650348567c81f309b0ebae4b6827658f9a74675ed0e6ba443028b5d05", @ANYRES32=r11, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="f0409dd3f7eaa5b431afa9e69ad85f124c", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r5, @ANYRES64=0x0], 0xfffffd8e) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 933.842265ms ago: executing program 0 (id=13529): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x5) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xff8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x20008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44, 0x4}, 0x401, 0x0, 0x0, 0x0, 0x200, 0xfffffffc, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1, 0x3}, 0x10000, 0x2, 0x7, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 696.995989ms ago: executing program 2 (id=13530): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x54}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000004000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007b1130000000000085100000020000008500640005e2ffff94003300000000009500a505000000004577fefacfb13df0bcbf6e8b712bd4a89c6b9d0dc0f0bed4e7354736f82eefc8307c4f7731a145382a6e3282b6b1fb8ceb4a3993489bb1f219b1774a47f2b6af68f7d7e0f74b065a5c7ce471e0da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 440.571485ms ago: executing program 1 (id=13531): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="2971f8ceee70309500000000", @ANYRES32=0x0, @ANYRES64=r4], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x12, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x6, &(0x7f0000000840)=""/6, 0x40e00, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x7, 0x10000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r2, r6, r2], &(0x7f0000000900)=[{0x3, 0x2, 0x7}, {0x5, 0x4, 0xf, 0x2}, {0x2, 0x2, 0x1, 0x3}, {0x1, 0x3, 0x3, 0x2}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r7, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200", 0xe}], 0x1}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x4813, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 428.538096ms ago: executing program 2 (id=13532): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x111614, 0x0, 0x0, 0x0, 0x0, 0x57fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xe, &(0x7f0000000700)=ANY=[@ANYRES8=r2], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8709000, 0x6}, 0x1, 0x3, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000001380)=ANY=[@ANYRES8=r3], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x7}, 0x8, 0x10, &(0x7f0000002300), 0x10}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000002340), 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002380), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000023c0)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000002400)={0x2, &(0x7f0000002440)=[{0x28, 0xfe, 0x7, 0xfffff01c}, {0x6, 0x7f, 0x22, 0x5}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000002480)=r7, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000002500)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002540)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYRESDEC=r6, @ANYRES8=r5, @ANYRES64=r9, @ANYRESHEX=r0, @ANYRES32=r9, @ANYRESDEC=r1], 0x50) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000025c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x5, 0x3, &(0x7f0000002700)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000002740)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002780)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002880)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f0000002980)="dd6863b880c3d0b273e5d7e1bf5430b1635b1df0f82639070379b2d280a0c314fc4d5ebed70e78d06b2e9da8a2d19bca3e23ac110383f9aa2dd323fa062dbab61f92452406adaa0adb2bdfca2b542b72fab07b0511f84d7bc31b898f62833738cd123ef465e413bef4eb39f658e0aab7770845600e", 0x75}], 0x2, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x3a) openat$cgroup_subtree(r7, &(0x7f0000002a00), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0xe, 0x4, &(0x7f0000002b00)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000002b80)={0x0, 0xf, &(0x7f0000002bc0)=[{&(0x7f0000002c00)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1236}, 0x0) socket$kcm(0xa, 0x3, 0x73) 394.15206ms ago: executing program 4 (id=13533): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) 168.402993ms ago: executing program 4 (id=13534): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0x230, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65}, 0x4a) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x1ff) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000ac0)={r1, &(0x7f0000000940)="41d1c0cb990109fa62b5e823839207d564b85e85f2b22505d8da3943cd841ba447fce644ae729508ab329148db095cacc3fc018ff574b80072eae5de8e453030b375549a47a52b5582758585e29c3e6d062b37a851e60e5c7dd3741b9e2362631ea1bdfdac36137486021a11fe43be4c556a11f3", &(0x7f00000009c0)=""/244}, 0x20) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50) syz_clone(0x9b001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f00000003c0), &(0x7f0000000500)=r4}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x4, &(0x7f0000000cc0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x1, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="1000"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0300000005000000050000000000000000000000009e0000000058a5826eb81b28490c5195bbad4159f1078595c88530d941fb9e377f58c07bcc4ea9f0f77dd21f57dc072a0f238b074ffab0382cf9dbb9f57cfb1ec2802015dac0083349b5494b0d878858526e1f86b7b07d20255cc4e14e1d4a6510291c581d3ca94bacfcb8c6a76e207679742bf9ebd034093f6615cd4fb264a02e77644511d9128e99d1d14c143001893cb16d1f813818b5295b4c22cf3ebcafdc4bffa2c9046cdc99b386d9747ab91c46b1"], 0x50) 137.899056ms ago: executing program 3 (id=13535): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2d, 'blkio'}, {0x2780c6f32147c67a, 'freezer'}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x4, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xa8, 0x0, &(0x7f00000021c0)="b9fb0307683ae5aa000000000000c5c8f7b017535b8d592ff4ea7112e6fdf680398a19044167ca07e248cfed8da2a7f6658914097da57f8823cb2c3599db646b1df48d27f19dd78e4f1f05af31d371aa9b9410511920978dcfb8e2c0fa2617981935699f7630c569244f1feaf196541afbedfb8d58af8b40235e7acb2d9911a4ac2f6a4dc844c357b7e35659495ff9e8a0590b8e01d41f7f91437cc709f3c80d5830a519eaa87169", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x114, 0x4, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r2, &(0x7f0000001280)="94a6e719ee77c5698c6571516a8e2d9ad1bfc832547977cc6753f879e94a4aea48b21faa9aaf1b048aa8e9a7982b0a2575312428cdae62b5a8d7994c3dc35cd6585d35d23dffd30c415fba995b7b2b76eee8b65b955ab4955ea847f82acbdb4ad3c000a8bbbfed4dd5676cbcbbfe2ae7ffc0de345b51611fa67189fc933c568d46bee4835b97cce1", &(0x7f0000001340)=""/1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r3}) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x9150, 0xad08}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000002400)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x5, 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000002e00)='GPL\x00', 0x5, 0x252, &(0x7f0000002e40)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002fc0)="1400000034003507d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000003040)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000030c0)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000003100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f9, &(0x7f0000003140)) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000002280)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b1800089030400008450892f325f003911050b038902005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0xc0, 0x45, &(0x7f0000001180)="20ddd82c9dc4f41339b7f51c7e973043654c504cf9a42cb0f13ebd26d908f193a0257ab48a4b4dd7305ea658d3441aa2b6bbe814c5b56b251bbc13266a15592f0fcb4a789ee0ebb0d2289501ca6b87517738a20289cddfafa3b6e0e5a58b4e532229570a58d6f6c8457214c70f44b6a4ecee7eca8f6216d22022a320eab36c78a4397509a340c8873de2ac263ea2734d42bc039c58124d2e5c5cf357856e5751abc7e82fc7a8323ebcfa5e3ea74f836ae7dc66707715cb2271a2b56e479c652f", &(0x7f0000001100)="8fdbff819ac439bf540c67cf6ec0d0802663c4162749536307a9bb8cf330286ddebad1e2ff42f4c8556c13fab302997bc6fc2e011afd31652665de244dc1ccab08718cd9d2"}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[], 0xfe33) 0s ago: executing program 0 (id=13536): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f0000000d40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r2, 0x0, 0xf, 0x0, &(0x7f0000000e80)="6a0000b90400dce169b1f032667539", 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000340)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0000007f07c4cbc7af33ab5f99653a1795d517a861eff570fd40b4d806e877e099fb97c2b57d0a450c1bd104000030c42eaaa02480220a9286526f01583feaaef7782f4ae13d9a68e82a42095c8e4611464d36428f91cddc01c35544e0a034ced1e894461c7cf8dc4eec87755c0aa2faf839e900ee065123a1", 0x79}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000840)=""/80, 0x50}], 0x1, &(0x7f0000000a80)=""/189, 0xbd}, 0x40000022) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d7, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) kernel console output (not intermixed with test programs): dmsg+0x80/0x80 [ 2361.609944][T20909] ? lockdep_hardirqs_on+0x94/0x140 [ 2361.615157][T20909] do_syscall_64+0x4c/0xa0 [ 2361.619608][T20909] ? clear_bhb_loop+0x60/0xb0 [ 2361.624283][T20909] ? clear_bhb_loop+0x60/0xb0 [ 2361.629016][T20909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2361.635023][T20909] RIP: 0033:0x7ff625b9f559 [ 2361.639460][T20909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2361.659079][T20909] RSP: 002b:00007ff626aa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2361.667494][T20909] RAX: ffffffffffffffda RBX: 00007ff625e26360 RCX: 00007ff625b9f559 [ 2361.675469][T20909] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000010 [ 2361.683450][T20909] RBP: 00007ff625c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2361.691440][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2361.699407][T20909] R13: 00007ff625e263f8 R14: 00007ff625e26360 R15: 00007ffe7e95f418 [ 2361.707392][T20909] [ 2363.096901][T20686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2363.129161][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2363.171944][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2363.186711][T20686] 8021q: adding VLAN 0 to HW filter on device team0 [ 2363.227591][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2363.255472][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2363.295153][T16298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.302367][T16298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.388343][T28239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2363.413540][T28239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2363.437586][T28239] bridge0: port 2(bridge_slave_1) entered disabled state [ 2363.461743][T28239] device bridge_slave_0 left promiscuous mode [ 2363.481984][T28239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2363.562728][T28239] device veth0_macvtap left promiscuous mode [ 2364.751855][T28239] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2364.911411][T28239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2364.965694][T28239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2365.264736][T28239] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2365.295441][T28239] bond0 (unregistering): Released all slaves [ 2365.358761][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2365.367459][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2365.376518][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2365.386449][T16298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2365.393679][T16298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2365.412779][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2365.421782][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2365.430665][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2365.441590][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2365.511893][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2365.520045][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2365.562010][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2365.584687][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2365.611742][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2365.641341][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2365.663570][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2365.705549][T20686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2366.555970][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2366.570615][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2366.617311][T20686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2367.562757][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2367.577523][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2367.624243][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2367.647251][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2367.664332][T20686] device veth0_vlan entered promiscuous mode [ 2367.678676][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2367.697036][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2367.725897][T20686] device veth1_vlan entered promiscuous mode [ 2367.765044][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2367.774356][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2367.784740][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2367.802236][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2367.835132][T20686] device veth0_macvtap entered promiscuous mode [ 2367.857720][T20686] device veth1_macvtap entered promiscuous mode [ 2367.918109][T20686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2367.963078][T20686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2367.977234][T20686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2367.989438][T20686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.026894][T20686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2368.051962][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2368.076187][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2368.098827][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2368.128451][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2368.157258][T20686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.182656][T20686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.209995][T20686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2368.237597][T20686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2368.254576][T20686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2368.269649][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2368.290050][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2368.317755][T20686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.333955][T20686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.346478][T20686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.376499][T20686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.617339][T16298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.657219][T16298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.705338][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2368.862467][ T8666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2368.901612][ T8666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.946300][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2369.265532][T21046] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11850'. [ 2369.345216][T21046] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11850'. [ 2370.114390][T21052] netlink: 'syz.4.11783': attribute type 1 has an invalid length. [ 2370.132949][T21052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11783'. [ 2370.173013][T21060] netlink: 'syz.4.11783': attribute type 1 has an invalid length. [ 2370.192846][T21060] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11783'. [ 2370.300225][T21065] rxe_eth0 speed is unknown, defaulting to 1000 [ 2370.449095][T21078] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11856'. [ 2370.587071][T21088] netlink: 'syz.4.11860': attribute type 19 has an invalid length. [ 2370.631887][T21088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11860'. [ 2371.721711][T21118] netlink: 'syz.4.11868': attribute type 2 has an invalid length. [ 2371.757557][T21118] netlink: 'syz.4.11868': attribute type 1 has an invalid length. [ 2371.809901][T21118] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11868'. [ 2371.895348][T21117] netlink: 'syz.4.11868': attribute type 2 has an invalid length. [ 2372.005673][T21117] netlink: 'syz.4.11868': attribute type 1 has an invalid length. [ 2372.029374][T21120] netlink: 'syz.1.11869': attribute type 46 has an invalid length. [ 2372.067091][T21117] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11868'. [ 2374.016577][T21157] netlink: 'syz.2.11879': attribute type 19 has an invalid length. [ 2374.070193][T21155] rxe_eth0 speed is unknown, defaulting to 1000 [ 2374.390336][T21176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11886'. [ 2374.691364][T21180] netlink: 'syz.1.11887': attribute type 29 has an invalid length. [ 2375.708524][T21190] device sit0 left promiscuous mode [ 2375.847748][T21191] device sit0 entered promiscuous mode [ 2376.409403][T21209] delete_channel: no stack [ 2376.420784][T21209] delete_channel: no stack [ 2376.638213][T21221] IPv6: NLM_F_CREATE should be specified when creating new route [ 2380.105021][T21239] device sit0 left promiscuous mode [ 2380.583819][T21246] device sit0 entered promiscuous mode [ 2380.992895][T21265] validate_nla: 2 callbacks suppressed [ 2380.992941][T21265] netlink: 'syz.2.11911': attribute type 1 has an invalid length. [ 2381.064054][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11911'. [ 2381.103335][T21269] netlink: 'syz.3.11913': attribute type 10 has an invalid length. [ 2381.666155][T21269] team0: Device wg1 is of different type [ 2381.878965][T21287] netlink: 'syz.0.11925': attribute type 21 has an invalid length. [ 2382.497304][T21307] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11921'. [ 2383.345074][T21315] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.11924'. [ 2383.746481][T21337] netlink: 'syz.2.11933': attribute type 21 has an invalid length. [ 2383.761433][T21337] IPv6: NLM_F_CREATE should be specified when creating new route [ 2383.780134][T21337] IPv6: Can't replace route, no match found [ 2383.821561][T21337] netlink: 'syz.2.11933': attribute type 1 has an invalid length. [ 2383.829840][T21337] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.11933'. [ 2383.861873][T21337] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11933'. [ 2384.051879][T21357] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11936'. [ 2384.231188][ T4290] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2384.239653][ T4290] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:128' [ 2384.249656][ T4290] CPU: 1 PID: 4290 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 2384.257239][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2384.267321][ T4290] Workqueue: hci4 hci_rx_work [ 2384.272151][ T4290] Call Trace: [ 2384.275447][ T4290] [ 2384.278397][ T4290] dump_stack_lvl+0x188/0x24e [ 2384.283106][ T4290] ? show_regs_print_info+0x12/0x12 [ 2384.288328][ T4290] ? load_image+0x410/0x410 [ 2384.292875][ T4290] sysfs_create_dir_ns+0x26a/0x290 [ 2384.298018][ T4290] ? __lock_acquire+0x7ea0/0x7ea0 [ 2384.303114][ T4290] ? sysfs_warn_dup+0xa0/0xa0 [ 2384.307834][ T4290] ? do_raw_spin_unlock+0x11d/0x230 [ 2384.313081][ T4290] kobject_add_internal+0x617/0xca0 [ 2384.318331][ T4290] kobject_add+0x160/0x230 [ 2384.322791][ T4290] ? kobject_init+0x1c0/0x1c0 [ 2384.327501][ T4290] ? __raw_spin_lock_init+0x41/0x100 [ 2384.332812][ T4290] ? klist_children_get+0x50/0x50 [ 2384.337861][ T4290] ? get_device_parent+0x121/0x3e0 [ 2384.343015][ T4290] device_add+0x470/0x1050 [ 2384.347464][ T4290] hci_conn_add_sysfs+0xd1/0x1e0 [ 2384.352533][ T4290] le_conn_complete_evt+0xf93/0x15c0 [ 2384.357933][ T4290] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2384.364193][ T4290] ? bt_info+0x180/0x180 [ 2384.368620][ T4290] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2384.374272][ T4290] ? mutex_unlock+0x10/0x10 [ 2384.378786][ T4290] ? skb_pull_data+0xec/0x1f0 [ 2384.383508][ T4290] hci_le_conn_complete_evt+0x183/0x440 [ 2384.389067][ T4290] ? hci_remote_host_features_evt+0x230/0x230 [ 2384.395138][ T4290] hci_event_packet+0x7b3/0x1290 [ 2384.400168][ T4290] ? lock_chain_count+0x20/0x20 [ 2384.405023][ T4290] ? bis_list+0x280/0x280 [ 2384.409348][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2384.415244][ T4290] ? kcov_remote_start+0x50f/0x810 [ 2384.420356][ T4290] ? lockdep_hardirqs_on+0x94/0x140 [ 2384.425569][ T4290] ? hci_send_to_monitor+0x9c/0x4a0 [ 2384.430772][ T4290] hci_rx_work+0x3eb/0xd40 [ 2384.435241][ T4290] ? process_one_work+0x7b4/0x1160 [ 2384.440549][ T4290] process_one_work+0x8ab/0x1160 [ 2384.445504][ T4290] ? worker_detach_from_pool+0x240/0x240 [ 2384.451136][ T4290] ? _raw_spin_lock_irq+0x86/0xf0 [ 2384.456310][ T4290] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2384.461344][ T4290] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2384.466914][ T4290] ? wq_worker_running+0x97/0x190 [ 2384.472031][ T4290] worker_thread+0xaf5/0x12a0 [ 2384.476726][ T4290] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2384.482633][ T4290] kthread+0x29d/0x330 [ 2384.486701][ T4290] ? worker_clr_flags+0x1a0/0x1a0 [ 2384.491816][ T4290] ? kthread_blkcg+0xd0/0xd0 [ 2384.496406][ T4290] ret_from_fork+0x1f/0x30 [ 2384.500851][ T4290] [ 2384.507443][ T4290] kobject_add_internal failed for hci4:128 with -EEXIST, don't try to register things with the same name in the same directory. [ 2384.521417][ T4290] Bluetooth: hci4: failed to register connection device [ 2384.645121][T21369] device syzkaller0 entered promiscuous mode [ 2384.749958][T21377] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.11942'. [ 2386.605847][ T4290] Bluetooth: hci4: command 0x2016 tx timeout [ 2386.924654][T21385] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2386.934216][T21385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2386.951063][T21385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2387.099002][T21392] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.11946'. [ 2387.182916][T21398] device sit0 left promiscuous mode [ 2387.349298][T21404] device sit0 entered promiscuous mode [ 2387.666010][T21408] Â: renamed from pim6reg1 [ 2387.712905][T21410] netlink: 'syz.3.11953': attribute type 39 has an invalid length. [ 2388.239191][T21434] device sit0 left promiscuous mode [ 2388.344758][T21437] device sit0 entered promiscuous mode [ 2388.929654][T21453] device sit0 left promiscuous mode [ 2389.401136][T21456] device sit0 entered promiscuous mode [ 2389.643160][T21471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11972'. [ 2389.732388][T21473] netlink: 'syz.1.11973': attribute type 39 has an invalid length. [ 2389.889322][T21478] netlink: 'syz.3.11974': attribute type 3 has an invalid length. [ 2389.898074][T21478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11974'. [ 2389.939581][T21478] netlink: 'syz.3.11974': attribute type 3 has an invalid length. [ 2389.948102][T21478] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11974'. [ 2389.987225][T21479] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11975'. [ 2390.161579][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11979'. [ 2390.650245][T21498] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.11981'. [ 2394.008199][T21516] device sit0 left promiscuous mode [ 2394.056574][T21515] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11985'. [ 2394.294260][T21519] device sit0 entered promiscuous mode [ 2394.562494][T21530] netlink: 'syz.3.11988': attribute type 21 has an invalid length. [ 2394.594844][T21530] netlink: 'syz.3.11988': attribute type 3 has an invalid length. [ 2394.640737][T21530] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11988'. [ 2394.653303][T21532] netlink: 'syz.1.11989': attribute type 3 has an invalid length. [ 2394.675390][T21532] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11989'. [ 2395.580141][T21549] netlink: 'syz.3.11992': attribute type 3 has an invalid length. [ 2395.603340][T21549] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11992'. [ 2395.636631][T21553] netlink: 'syz.2.11994': attribute type 21 has an invalid length. [ 2395.645451][T21553] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.11994'. [ 2395.849643][T21562] netlink: 'syz.2.11997': attribute type 3 has an invalid length. [ 2395.902274][T21561] Â: renamed from pim6reg1 [ 2395.905812][T21562] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11997'. [ 2395.939693][T21574] device sit0 left promiscuous mode [ 2396.329292][T21556] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.11995'. [ 2396.469449][T21575] device sit0 entered promiscuous mode [ 2396.741934][T21587] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2396.824274][T21594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12003'. [ 2396.848668][T21596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12004'. [ 2396.858798][T21594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12003'. [ 2397.806709][T21618] delete_channel: no stack [ 2397.818785][T21618] delete_channel: no stack [ 2397.987596][T21621] device sit0 left promiscuous mode [ 2398.050032][T21629] delete_channel: no stack [ 2398.055659][T21629] delete_channel: no stack [ 2398.299588][T21627] device sit0 entered promiscuous mode [ 2398.458281][T21618] rxe_eth0 speed is unknown, defaulting to 1000 [ 2398.783516][T21623] rxe_eth0 speed is unknown, defaulting to 1000 [ 2399.889522][T21673] : port 1(ip6gretap0) entered blocking state [ 2399.905953][T21673] : port 1(ip6gretap0) entered disabled state [ 2399.924137][T21673] device ip6gretap0 entered promiscuous mode [ 2400.387621][T21688] device sit0 left promiscuous mode [ 2400.691727][T21703] device sit0 entered promiscuous mode [ 2401.158617][T21720] netlink: 'syz.2.12032': attribute type 2 has an invalid length. [ 2401.204259][T21720] netlink: 'syz.2.12032': attribute type 2 has an invalid length. [ 2401.622431][T21731] __nla_validate_parse: 4 callbacks suppressed [ 2401.622452][T21731] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.12034'. [ 2401.964622][T21710] Â: renamed from pim6reg1 [ 2402.397364][T21749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12039'. [ 2402.580457][T21753] device sit0 left promiscuous mode [ 2403.338673][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12042'. [ 2403.398917][T21760] device sit0 entered promiscuous mode [ 2404.932323][T21809] rxe_eth0 speed is unknown, defaulting to 1000 [ 2406.194665][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.201113][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.663784][T21826] tipc: Started in network mode [ 2406.690334][T21826] tipc: Node identity 9215a268, cluster identity 4711 [ 2406.730991][T21826] tipc: Node number set to 2450891368 [ 2406.850627][T21833] netlink: 'syz.1.12060': attribute type 9 has an invalid length. [ 2406.881332][T21833] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.12060'. [ 2406.905877][T21831] device sit0 left promiscuous mode [ 2407.213935][T21842] device sit0 entered promiscuous mode [ 2409.016234][T21911] netlink: 'syz.4.12081': attribute type 29 has an invalid length. [ 2409.063414][T21911] netlink: 'syz.4.12081': attribute type 29 has an invalid length. [ 2409.126241][T21911] netlink: 'syz.4.12081': attribute type 10 has an invalid length. [ 2409.140390][T21911] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12081'. [ 2409.675908][T21930] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12086'. [ 2410.013854][T21944] netlink: 'syz.1.12090': attribute type 39 has an invalid length. [ 2410.145290][T21954] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12093'. [ 2410.521972][T21958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12091'. [ 2411.398080][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2411.412189][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2411.429099][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2411.438713][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2411.446761][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2411.454475][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2411.570452][T21974] rxe_eth0 speed is unknown, defaulting to 1000 [ 2411.797742][T21970] rxe_eth0 speed is unknown, defaulting to 1000 [ 2412.205139][T21991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2412.211689][T21991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2412.366383][T21970] chnl_net:caif_netlink_parms(): no params data found [ 2412.499862][T21970] bridge0: port 1(bridge_slave_0) entered blocking state [ 2412.551044][T21970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2412.572116][T21970] device bridge_slave_0 entered promiscuous mode [ 2412.581712][T21970] bridge0: port 2(bridge_slave_1) entered blocking state [ 2412.589005][T21970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2412.598061][T21970] device bridge_slave_1 entered promiscuous mode [ 2412.654587][T22003] netlink: 'syz.2.12106': attribute type 10 has an invalid length. [ 2412.789839][T22003] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2412.825629][T21970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2412.865994][T22003] netlink: 207032 bytes leftover after parsing attributes in process `syz.2.12106'. [ 2412.889670][T21970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2412.944230][T22013] device sit0 left promiscuous mode [ 2413.038906][T21970] team0: Port device team_slave_0 added [ 2413.062368][T22012] device sit0 entered promiscuous mode [ 2413.553575][T27891] Bluetooth: hci1: command 0x0409 tx timeout [ 2413.623784][T21970] team0: Port device team_slave_1 added [ 2413.773104][T28255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.810116][T22003] rxe_eth0 speed is unknown, defaulting to 1000 [ 2413.848132][T21970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2413.867760][T21970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2413.956928][T21970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2414.027593][T28255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.058706][T21970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2414.072806][T21970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2414.136324][T21970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2414.172049][T22027] netlink: 'syz.1.12112': attribute type 10 has an invalid length. [ 2414.193330][T22028] netlink: 'syz.1.12112': attribute type 4 has an invalid length. [ 2414.226277][T22028] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12112'. [ 2414.249508][T22028] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2414.433850][T28255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.457358][T22040] netlink: 6127 bytes leftover after parsing attributes in process `syz.4.12113'. [ 2414.559156][T22046] FAULT_INJECTION: forcing a failure. [ 2414.559156][T22046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.585078][T28255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2414.597510][T22046] CPU: 1 PID: 22046 Comm: syz.1.12115 Not tainted syzkaller #0 [ 2414.605120][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2414.615205][T22046] Call Trace: [ 2414.618521][T22046] [ 2414.621481][T22046] dump_stack_lvl+0x188/0x24e [ 2414.626187][T22046] ? show_regs_print_info+0x12/0x12 [ 2414.631405][T22046] ? load_image+0x410/0x410 [ 2414.635942][T22046] ? __lock_acquire+0x7ea0/0x7ea0 [ 2414.641009][T22046] ? perf_trace_lock_acquire+0x101/0x3f0 [ 2414.646680][T22046] should_fail_ex+0x390/0x4c0 [ 2414.651406][T22046] _copy_from_user+0x2c/0x170 [ 2414.656123][T22046] ___sys_sendmsg+0x1c3/0x360 [ 2414.660839][T22046] ? __sys_sendmsg+0x2a0/0x2a0 [ 2414.665686][T22046] __se_sys_sendmsg+0x1c3/0x2b0 [ 2414.670572][T22046] ? perf_trace_preemptirq_template+0x268/0x320 [ 2414.676851][T22046] ? __x64_sys_sendmsg+0x80/0x80 [ 2414.681839][T22046] ? lockdep_hardirqs_on+0x94/0x140 [ 2414.687069][T22046] do_syscall_64+0x4c/0xa0 [ 2414.691495][T22046] ? clear_bhb_loop+0x60/0xb0 [ 2414.696174][T22046] ? clear_bhb_loop+0x60/0xb0 [ 2414.700951][T22046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2414.706865][T22046] RIP: 0033:0x7ff625b9f559 [ 2414.711284][T22046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2414.730945][T22046] RSP: 002b:00007ff626b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2414.739384][T22046] RAX: ffffffffffffffda RBX: 00007ff625e25fa0 RCX: 00007ff625b9f559 [ 2414.747361][T22046] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 2414.755333][T22046] RBP: 00007ff626b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 2414.763393][T22046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2414.771451][T22046] R13: 00007ff625e26038 R14: 00007ff625e25fa0 R15: 00007ffe7e95f418 [ 2414.779450][T22046] [ 2414.878459][T21970] device hsr_slave_0 entered promiscuous mode [ 2414.886601][T21970] device hsr_slave_1 entered promiscuous mode [ 2414.893554][T21970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2414.901424][T21970] Cannot create hsr debugfs directory [ 2415.324167][T28255] device 0 left promiscuous mode [ 2415.579824][T28255] tipc: Left network mode [ 2415.631066][T27891] Bluetooth: hci1: command 0x041b tx timeout [ 2416.064500][T22072] netlink: 'syz.0.12120': attribute type 10 has an invalid length. [ 2416.214474][T22082] device sit0 left promiscuous mode [ 2416.296854][T22080] device sit0 entered promiscuous mode [ 2417.333301][T21970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2417.351694][T21970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2417.364744][T21970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2417.408366][T22109] netlink: 'syz.1.12126': attribute type 11 has an invalid length. [ 2417.419607][T21970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2417.441143][T22109] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12126'. [ 2417.458988][T22111] FAULT_INJECTION: forcing a failure. [ 2417.458988][T22111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2417.479574][T22111] CPU: 0 PID: 22111 Comm: syz.0.12127 Not tainted syzkaller #0 [ 2417.487227][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2417.497306][T22111] Call Trace: [ 2417.500608][T22111] [ 2417.503672][T22111] dump_stack_lvl+0x188/0x24e [ 2417.508412][T22111] ? show_regs_print_info+0x12/0x12 [ 2417.513740][T22111] ? load_image+0x410/0x410 [ 2417.518286][T22111] ? __lock_acquire+0x7ea0/0x7ea0 [ 2417.523356][T22111] should_fail_ex+0x390/0x4c0 [ 2417.528081][T22111] _copy_from_user+0x2c/0x170 [ 2417.532796][T22111] __copy_msghdr+0x384/0x560 [ 2417.537428][T22111] ___sys_sendmsg+0x210/0x360 [ 2417.542153][T22111] ? __sys_sendmsg+0x2a0/0x2a0 [ 2417.546976][T22111] ? __lock_acquire+0x7ea0/0x7ea0 [ 2417.552071][T22111] __se_sys_sendmsg+0x1c3/0x2b0 [ 2417.556955][T22111] ? perf_trace_preemptirq_template+0x268/0x320 [ 2417.563236][T22111] ? __x64_sys_sendmsg+0x80/0x80 [ 2417.568221][T22111] ? lockdep_hardirqs_on+0x94/0x140 [ 2417.573462][T22111] do_syscall_64+0x4c/0xa0 [ 2417.577912][T22111] ? clear_bhb_loop+0x60/0xb0 [ 2417.582611][T22111] ? clear_bhb_loop+0x60/0xb0 [ 2417.587310][T22111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2417.593234][T22111] RIP: 0033:0x7f525939f559 [ 2417.597670][T22111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2417.617472][T22111] RSP: 002b:00007f525a193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2417.625927][T22111] RAX: ffffffffffffffda RBX: 00007f5259625fa0 RCX: 00007f525939f559 [ 2417.633928][T22111] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 2417.641924][T22111] RBP: 00007f525a193090 R08: 0000000000000000 R09: 0000000000000000 [ 2417.649918][T22111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2417.657912][T22111] R13: 00007f5259626038 R14: 00007f5259625fa0 R15: 00007ffdab738898 [ 2417.665937][T22111] [ 2417.684921][T22115] netlink: 'syz.1.12126': attribute type 11 has an invalid length. [ 2417.701752][T22115] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12126'. [ 2417.712212][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 2418.117871][T21970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2418.166624][T22140] netlink: 'syz.2.12132': attribute type 10 has an invalid length. [ 2418.187023][T22108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2418.361736][T22140] team0 (unregistering): Port device team_slave_0 removed [ 2418.418332][T22140] team0 (unregistering): Port device team_slave_1 removed [ 2418.498055][T22144] netlink: 'syz.4.12134': attribute type 22 has an invalid length. [ 2418.506539][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12134'. [ 2418.529692][T22143] netlink: 'syz.4.12134': attribute type 22 has an invalid length. [ 2418.546165][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12134'. [ 2418.588624][T22158] device sit0 left promiscuous mode [ 2418.786544][T22150] device sit0 entered promiscuous mode [ 2419.200751][T21970] 8021q: adding VLAN 0 to HW filter on device team0 [ 2419.221583][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2419.230154][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2419.419703][T22172] FAULT_INJECTION: forcing a failure. [ 2419.419703][T22172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2419.449184][T22172] CPU: 1 PID: 22172 Comm: syz.0.12140 Not tainted syzkaller #0 [ 2419.456805][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2419.466872][T22172] Call Trace: [ 2419.470154][T22172] [ 2419.473098][T22172] dump_stack_lvl+0x188/0x24e [ 2419.477779][T22172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2419.483935][T22172] ? show_regs_print_info+0x12/0x12 [ 2419.489157][T22172] ? load_image+0x410/0x410 [ 2419.493670][T22172] should_fail_ex+0x390/0x4c0 [ 2419.498362][T22172] _copy_from_user+0x2c/0x170 [ 2419.503129][T22172] iovec_from_user+0x143/0x360 [ 2419.507898][T22172] __import_iovec+0x6c/0x510 [ 2419.512502][T22172] import_iovec+0x6f/0xa0 [ 2419.516840][T22172] ___sys_sendmsg+0x252/0x360 [ 2419.521546][T22172] ? __sys_sendmsg+0x2a0/0x2a0 [ 2419.526322][T22172] ? __lock_acquire+0x7ea0/0x7ea0 [ 2419.531361][T22172] __se_sys_sendmsg+0x1c3/0x2b0 [ 2419.536208][T22172] ? perf_trace_preemptirq_template+0x268/0x320 [ 2419.542453][T22172] ? __x64_sys_sendmsg+0x80/0x80 [ 2419.547423][T22172] ? lockdep_hardirqs_on+0x94/0x140 [ 2419.552621][T22172] do_syscall_64+0x4c/0xa0 [ 2419.557031][T22172] ? clear_bhb_loop+0x60/0xb0 [ 2419.561702][T22172] ? clear_bhb_loop+0x60/0xb0 [ 2419.566378][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2419.572269][T22172] RIP: 0033:0x7f525939f559 [ 2419.576691][T22172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2419.596405][T22172] RSP: 002b:00007f525a193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2419.604907][T22172] RAX: ffffffffffffffda RBX: 00007f5259625fa0 RCX: 00007f525939f559 [ 2419.612906][T22172] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 2419.620893][T22172] RBP: 00007f525a193090 R08: 0000000000000000 R09: 0000000000000000 [ 2419.628879][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2419.636851][T22172] R13: 00007f5259626038 R14: 00007f5259625fa0 R15: 00007ffdab738898 [ 2419.644848][T22172] [ 2419.693049][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2419.718630][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2419.751993][T16298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.759157][T16298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2419.778644][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2419.791156][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 2419.801460][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2419.810169][T16298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.817353][T16298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2419.826674][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2419.836268][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2419.880335][T22176] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12141'. [ 2419.995044][T22176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2420.016157][T22176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2420.036523][T22176] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2420.055963][T22176] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 2420.073163][T22176] bond0 (unregistering): Released all slaves [ 2420.084850][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2420.107027][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2420.124909][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2420.137789][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2420.150136][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2420.166311][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2420.177811][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2420.192364][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2420.207433][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2420.220191][T16298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2420.240076][T21970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2420.408761][T22195] netlink: 'syz.2.12146': attribute type 11 has an invalid length. [ 2420.430010][T22195] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12146'. [ 2420.470312][T22195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2420.767988][T22200] device sit0 left promiscuous mode [ 2421.280361][T22211] device sit0 entered promiscuous mode [ 2421.407058][T28255] device veth0_macvtap left promiscuous mode [ 2421.420361][T28255] device veth1_vlan left promiscuous mode [ 2423.084452][T28255] team0 (unregistering): Port device geneve1 removed [ 2423.304251][T28255] team0 (unregistering): Port device vlan0 removed [ 2423.387265][T28255] team0 (unregistering): Port device virt_wifi0 removed [ 2423.644241][T28255] team0 (unregistering): Port device team_slave_1 removed [ 2424.025085][T22220] device sit0 left promiscuous mode [ 2424.067910][T22221] device sit0 entered promiscuous mode [ 2424.180923][T22244] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.12155'. [ 2424.206623][T22244] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.12155'. [ 2424.230988][T22244] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.12155'. [ 2424.304701][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2424.319056][T28243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2424.353171][T22249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12158'. [ 2424.397762][T21970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2424.869933][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2424.890330][T28235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2424.924753][T22259] device sit0 entered promiscuous mode [ 2425.017233][T28239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2425.038568][T28239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2425.064913][T28239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2425.085788][T28239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2425.101839][T21970] device veth0_vlan entered promiscuous mode [ 2425.120157][T21970] device veth1_vlan entered promiscuous mode [ 2425.153129][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2425.162987][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2425.193688][T21970] device veth0_macvtap entered promiscuous mode [ 2425.213934][T21970] device veth1_macvtap entered promiscuous mode [ 2425.244140][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2425.258304][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.278907][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2425.297060][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.308069][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2425.406804][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.444246][T21970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2425.468851][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2425.478294][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2425.494670][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2425.517971][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2425.548612][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.584960][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.595303][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.609542][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.620151][T21970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2425.637807][T21970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2425.649898][T21970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2425.668325][T21970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.679715][T21970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.693969][T21970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.704688][T21970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2425.736295][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2425.755416][T28255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2425.971784][T28255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2425.979672][T28255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2426.005380][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2426.083654][ T8666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2426.094236][ T8666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2426.127397][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2426.174146][T22282] device sit0 left promiscuous mode [ 2426.705053][T22293] netlink: 'syz.3.12094': attribute type 2 has an invalid length. [ 2426.717252][T22293] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.12094'. [ 2426.780961][T22294] device sit0 entered promiscuous mode [ 2426.829432][T22307] netlink: 'syz.2.12171': attribute type 1 has an invalid length. [ 2426.861111][T22307] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.12171'. [ 2426.936130][T22305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2426.956154][T22305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2426.984964][T22305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2427.009141][T22305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2427.032246][T22305] batman_adv: batadv0: Interface deactivated: vlan1 [ 2427.056765][T22305] batman_adv: batadv0: Removing interface: vlan1 [ 2427.213572][T22313] rxe_eth0 speed is unknown, defaulting to 1000 [ 2427.881720][T22359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12182'. [ 2428.035468][T22362] netlink: 763 bytes leftover after parsing attributes in process `syz.2.12184'. [ 2428.228618][T22375] device sit0 left promiscuous mode [ 2428.349585][T22371] device sit0 entered promiscuous mode [ 2428.614435][T22382] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.12188'. [ 2428.797539][T22379] device sit0 left promiscuous mode [ 2428.878391][T22380] device sit0 entered promiscuous mode [ 2429.388777][T22382] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2429.399405][T22382] CPU: 1 PID: 22382 Comm: syz.1.12188 Not tainted syzkaller #0 [ 2429.407004][T22382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2429.417087][T22382] Call Trace: [ 2429.420390][T22382] [ 2429.423355][T22382] dump_stack_lvl+0x188/0x24e [ 2429.428070][T22382] ? show_regs_print_info+0x12/0x12 [ 2429.433301][T22382] ? load_image+0x410/0x410 [ 2429.437868][T22382] sysfs_warn_dup+0x8a/0xa0 [ 2429.442411][T22382] sysfs_do_create_link_sd+0xc0/0x110 [ 2429.447827][T22382] device_add+0x83b/0x1050 [ 2429.452378][T22382] wiphy_register+0x1d8b/0x2aa0 [ 2429.457287][T22382] ? cfg80211_event_work+0x40/0x40 [ 2429.462448][T22382] ? ieee80211_register_hw+0x2d01/0x3b00 [ 2429.468111][T22382] ? ieee80211_register_hw+0x2b97/0x3b00 [ 2429.473782][T22382] ? kasan_check_range+0xe/0x290 [ 2429.478761][T22382] ieee80211_register_hw+0x2e33/0x3b00 [ 2429.484277][T22382] ? ieee80211_register_hw+0xf01/0x3b00 [ 2429.489861][T22382] ? ieee80211_register_hw+0xf01/0x3b00 [ 2429.495428][T22382] ? ieee80211_tasklet_handler+0x20/0x20 [ 2429.501066][T22382] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2429.506990][T22382] ? __debug_object_init+0xed/0x440 [ 2429.512197][T22382] ? memset+0x1e/0x40 [ 2429.516193][T22382] ? __hrtimer_init+0x189/0x270 [ 2429.521222][T22382] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2429.526954][T22382] ? memcpy+0x3c/0x60 [ 2429.530943][T22382] hwsim_new_radio_nl+0xab7/0xc90 [ 2429.535998][T22382] genl_family_rcv_msg_doit+0x22f/0x350 [ 2429.541559][T22382] ? end_current_label_crit_section+0x170/0x170 [ 2429.547822][T22382] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2429.553736][T22382] ? bpf_lsm_capable+0x5/0x10 [ 2429.558420][T22382] ? security_capable+0x85/0xb0 [ 2429.563277][T22382] genl_rcv_msg+0x601/0x790 [ 2429.567797][T22382] ? genl_bind+0x360/0x360 [ 2429.572209][T22382] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2429.578652][T22382] netlink_rcv_skb+0x1ef/0x440 [ 2429.583428][T22382] ? genl_bind+0x360/0x360 [ 2429.587866][T22382] ? netlink_ack+0x1160/0x1160 [ 2429.592634][T22382] ? lockdep_hardirqs_on+0x94/0x140 [ 2429.597850][T22382] ? down_read+0x1a8/0x2d0 [ 2429.602395][T22382] genl_rcv+0x24/0x40 [ 2429.606484][T22382] netlink_unicast+0x7ad/0x920 [ 2429.611283][T22382] netlink_sendmsg+0x8ad/0xbd0 [ 2429.616072][T22382] ? apparmor_socket_sendmsg+0x15/0x330 [ 2429.621622][T22382] ? netlink_getsockopt+0x550/0x550 [ 2429.626858][T22382] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2429.632413][T22382] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2429.637697][T22382] ? security_socket_sendmsg+0x7c/0xa0 [ 2429.643162][T22382] ? netlink_getsockopt+0x550/0x550 [ 2429.648362][T22382] ____sys_sendmsg+0x5ed/0x9a0 [ 2429.653147][T22382] ? __sys_sendmsg_sock+0x30/0x30 [ 2429.658176][T22382] ? __import_iovec+0x306/0x510 [ 2429.663044][T22382] ? import_iovec+0x6f/0xa0 [ 2429.667581][T22382] ___sys_sendmsg+0x2a2/0x360 [ 2429.672268][T22382] ? __sys_sendmsg+0x2a0/0x2a0 [ 2429.677082][T22382] __se_sys_sendmsg+0x1c3/0x2b0 [ 2429.681938][T22382] ? __x64_sys_sendmsg+0x80/0x80 [ 2429.686892][T22382] ? lockdep_hardirqs_on+0x94/0x140 [ 2429.692103][T22382] do_syscall_64+0x4c/0xa0 [ 2429.696516][T22382] ? clear_bhb_loop+0x60/0xb0 [ 2429.701192][T22382] ? clear_bhb_loop+0x60/0xb0 [ 2429.705864][T22382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2429.711759][T22382] RIP: 0033:0x7ff625b9f559 [ 2429.716172][T22382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2429.735799][T22382] RSP: 002b:00007ff626b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2429.744219][T22382] RAX: ffffffffffffffda RBX: 00007ff625e25fa0 RCX: 00007ff625b9f559 [ 2429.752196][T22382] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2429.760185][T22382] RBP: 00007ff625c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 2429.768152][T22382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2429.776124][T22382] R13: 00007ff625e26038 R14: 00007ff625e25fa0 R15: 00007ffe7e95f418 [ 2429.784132][T22382] [ 2429.954019][T22399] netlink: 'syz.2.12192': attribute type 10 has an invalid length. [ 2431.107895][T22434] netlink: 'syz.0.12200': attribute type 1 has an invalid length. [ 2431.116233][T22434] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.12200'. [ 2431.132867][T22434] netlink: 'syz.0.12200': attribute type 29 has an invalid length. [ 2431.208379][T22442] device sit0 left promiscuous mode [ 2431.306332][T22434] netlink: 'syz.0.12200': attribute type 29 has an invalid length. [ 2431.322642][T22437] device sit0 entered promiscuous mode [ 2431.883874][T22455] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.12205'. [ 2431.915484][T22455] netlink: 17 bytes leftover after parsing attributes in process `syz.0.12205'. [ 2431.999943][T22448] device sit0 entered promiscuous mode [ 2432.058215][T22453] device sit0 left promiscuous mode [ 2432.182799][T22445] device sit0 entered promiscuous mode [ 2433.027091][T22460] device syzkaller0 entered promiscuous mode [ 2433.253709][T22489] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.12212'. [ 2433.266563][T22481] rxe_eth0 speed is unknown, defaulting to 1000 [ 2433.322770][T22489] netlink: zone id is out of range [ 2433.339398][T22489] netlink: get zone limit has 8 unknown bytes [ 2433.637630][T22503] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.12216'. [ 2433.909131][T22510] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.12218'. [ 2434.133129][T22522] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.12219'. [ 2434.182740][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.205592][T22516] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2434.245621][T22520] device sit0 left promiscuous mode [ 2434.270243][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.285348][T22516] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2434.354211][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.422852][T22516] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.12220'. [ 2434.446252][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.470773][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.497939][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.542562][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.572971][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.604443][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.628010][T22516] netlink: 'syz.3.12220': attribute type 1 has an invalid length. [ 2434.636391][T22534] device sit0 entered promiscuous mode [ 2437.542309][T22556] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2437.563797][T22560] Q±6ã�`Ò˜: renamed from lo [ 2437.569708][T22564] __nla_validate_parse: 31 callbacks suppressed [ 2437.569722][T22564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12229'. [ 2437.649119][T22578] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.12232'. [ 2437.827116][T22583] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12233'. [ 2437.982439][T22586] device sit0 left promiscuous mode [ 2438.411538][T22591] device sit0 entered promiscuous mode [ 2439.969969][T27891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2439.984384][T27891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2440.001260][T27891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2440.013609][T27891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2440.021759][T27891] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2440.029316][T27891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2440.099634][T22644] rxe_eth0 speed is unknown, defaulting to 1000 [ 2440.209322][T22648] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12249'. [ 2440.381380][T28239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.574028][T28239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.693653][T28239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.817074][T28239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2441.012046][T22644] chnl_net:caif_netlink_parms(): no params data found [ 2441.024521][T22671] €Â0: renamed from pim6reg1 [ 2441.178289][T22644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2441.197177][T22644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2441.211605][T22644] device bridge_slave_0 entered promiscuous mode [ 2441.234966][T22644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.242543][T22644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2441.258107][T22644] device bridge_slave_1 entered promiscuous mode [ 2441.346933][T22644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2441.390174][T22644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2442.110977][T27891] Bluetooth: hci3: command 0x0409 tx timeout [ 2442.126926][T28239] device ip6gretap0 left promiscuous mode [ 2442.133125][T28239] : port 1(ip6gretap0) entered disabled state [ 2442.176376][T22709] validate_nla: 25 callbacks suppressed [ 2442.176392][T22709] netlink: 'syz.3.12259': attribute type 19 has an invalid length. [ 2442.196539][T22709] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12259'. [ 2442.394697][T22644] team0: Port device team_slave_0 added [ 2442.410450][T22722] device sit0 left promiscuous mode [ 2442.489301][T22644] team0: Port device team_slave_1 added [ 2442.672487][T22718] device sit0 entered promiscuous mode [ 2442.709105][T22733] netlink: 'syz.3.12264': attribute type 3 has an invalid length. [ 2442.741738][T22733] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12264'. [ 2443.208264][T22644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2443.218893][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.255474][T22644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2443.385155][T22747] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12266'. [ 2443.395428][T22644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2443.417110][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2443.454609][T22644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2443.520148][T22747] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12266'. [ 2443.551522][T22752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12266'. [ 2443.701398][T22753] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12267'. [ 2444.120283][T22773] netlink: 'syz.4.12270': attribute type 13 has an invalid length. [ 2444.137170][T22773] netlink: 172 bytes leftover after parsing attributes in process `syz.4.12270'. [ 2444.196985][T27891] Bluetooth: hci3: command 0x041b tx timeout [ 2444.430390][T22783] device sit0 left promiscuous mode [ 2444.757542][T22644] device hsr_slave_0 entered promiscuous mode [ 2444.794572][T22644] device hsr_slave_1 entered promiscuous mode [ 2444.826009][T22644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2444.839838][T22799] netlink: 'syz.3.12274': attribute type 9 has an invalid length. [ 2444.855112][T22644] Cannot create hsr debugfs directory [ 2444.863326][T22799] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.12274'. [ 2444.869139][T22765] device sit0 entered promiscuous mode [ 2445.105093][T22790] netlink: 'syz.2.12272': attribute type 10 has an invalid length. [ 2445.174085][T22810] device sit0 left promiscuous mode [ 2445.622674][T22804] device sit0 entered promiscuous mode [ 2446.281207][T27891] Bluetooth: hci3: command 0x040f tx timeout [ 2446.820057][T22844] netlink: 'syz.0.12285': attribute type 29 has an invalid length. [ 2446.858576][T22844] netlink: 'syz.0.12285': attribute type 29 has an invalid length. [ 2446.916075][T22845] netlink: 'syz.0.12285': attribute type 29 has an invalid length. [ 2447.322137][T22848] device sit0 left promiscuous mode [ 2447.677017][T22851] device sit0 entered promiscuous mode [ 2448.106337][T22644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2448.183524][T22644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2448.226784][T22644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2448.255961][T22644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2448.361023][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 2448.508284][T28239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2448.531055][T28239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2448.555280][T28239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2448.601281][T28239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2449.241154][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 2451.898655][T22877] device sit0 left promiscuous mode [ 2451.953241][T22878] device sit0 entered promiscuous mode [ 2452.109110][T22889] device veth1_macvtap left promiscuous mode [ 2452.197412][T22892] netlink: 'syz.3.12295': attribute type 5 has an invalid length. [ 2452.218316][T22644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2452.239523][T22644] 8021q: adding VLAN 0 to HW filter on device team0 [ 2452.250280][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2452.259749][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2452.361821][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2452.386979][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2452.446127][T18534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.453404][T18534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2452.501554][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2452.527467][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2452.568792][T18534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.576167][T18534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2452.586125][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2452.598577][T22896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12296'. [ 2452.696654][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2452.717408][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2452.740672][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2452.768098][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2452.788244][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2452.827173][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2452.854032][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2452.904890][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2452.924058][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2452.965454][T22698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2452.987077][T22698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2453.107327][T22908] device sit0 left promiscuous mode [ 2453.688319][T22913] device sit0 entered promiscuous mode [ 2453.846831][T22919] device sit0 left promiscuous mode [ 2454.301712][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2454.310543][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2454.335840][T22644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2454.414265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2454.430759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2454.490270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2454.509662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2454.536097][T22644] device veth0_vlan entered promiscuous mode [ 2454.553482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2454.570328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2454.608899][T22644] device veth1_vlan entered promiscuous mode [ 2454.647165][T22960] netlink: 'syz.2.12308': attribute type 27 has an invalid length. [ 2454.693972][T22962] netlink: 'syz.4.12309': attribute type 10 has an invalid length. [ 2454.704916][T22962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12309'. [ 2454.736353][T22644] device veth0_macvtap entered promiscuous mode [ 2454.763209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2454.776273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2454.789505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2454.814577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2454.836395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2454.871810][T22644] device veth1_macvtap entered promiscuous mode [ 2454.949115][T22968] IPv6: pim6reg1: Disabled Multicast RS [ 2455.022838][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.046042][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.063062][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2455.085683][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.103287][T22644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2455.178273][T22979] device sit0 left promiscuous mode [ 2455.280272][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2455.292990][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2455.313662][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2455.338652][T22974] device sit0 entered promiscuous mode [ 2455.785683][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.817783][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.835214][T22644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2455.847778][T22644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2455.865959][T22644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2455.892320][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2455.903606][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2455.946518][T22644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.966684][T22644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2455.987033][T22644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.021084][T22644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2456.151736][T22995] netlink: 'syz.2.12316': attribute type 29 has an invalid length. [ 2456.201029][T22995] netlink: 'syz.2.12316': attribute type 29 has an invalid length. [ 2456.223878][T23000] netlink: 'syz.2.12316': attribute type 29 has an invalid length. [ 2456.277174][ T4886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.295946][ T4886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.318029][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2456.461929][ T4886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2456.469898][ T4886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2456.553601][T22698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2456.637440][T23013] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12319'. [ 2456.656247][T23004] device sit0 entered promiscuous mode [ 2456.887024][T23002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12318'. [ 2457.378732][T23024] netlink: 'syz.1.12244': attribute type 21 has an invalid length. [ 2457.938207][T23052] device sit0 left promiscuous mode [ 2458.535951][T23065] device sit0 entered promiscuous mode [ 2459.819822][T23104] device sit0 entered promiscuous mode [ 2460.073071][T23107] netlink: 'syz.0.12335': attribute type 21 has an invalid length. [ 2460.113394][T23107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12335'. [ 2460.392535][T23122] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.12343'. [ 2460.441646][T23121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12342'. [ 2460.500987][T23121] device hsr_slave_0 left promiscuous mode [ 2460.507003][T23131] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.12343'. [ 2460.520336][T23121] device hsr_slave_1 left promiscuous mode [ 2460.523818][T23123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12340'. [ 2460.699398][T23118] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12341'. [ 2460.731232][T23118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2460.772304][T23118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2460.908221][T23138] device sit0 left promiscuous mode [ 2461.166926][T23154] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.12348'. [ 2461.391175][T23150] device sit0 entered promiscuous mode [ 2461.936734][T23144] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12346'. [ 2462.054223][T23165] netlink: 'syz.3.12350': attribute type 29 has an invalid length. [ 2462.071038][T23154] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.12348'. [ 2462.161176][T23165] netlink: 'syz.3.12350': attribute type 29 has an invalid length. [ 2462.412176][T23162] rxe_eth0 speed is unknown, defaulting to 1000 [ 2463.006867][T23192] device syzkaller0 entered promiscuous mode [ 2463.040929][T23195] netlink: 'syz.1.12354': attribute type 21 has an invalid length. [ 2463.048882][T23195] IPv6: NLM_F_CREATE should be specified when creating new route [ 2463.061214][T23195] IPv6: Can't replace route, no match found [ 2467.069366][T23230] netlink: 'syz.0.12359': attribute type 21 has an invalid length. [ 2467.077771][T23230] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12359'. [ 2467.088274][T23230] netlink: 'syz.0.12359': attribute type 4 has an invalid length. [ 2467.096507][T23230] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12359'. [ 2467.109118][T23235] device sit0 left promiscuous mode [ 2467.205077][T23236] device sit0 entered promiscuous mode [ 2467.634604][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.641034][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.989731][T23273] netlink: 'syz.1.12373': attribute type 21 has an invalid length. [ 2468.008242][T23276] netlink: 'syz.4.12374': attribute type 3 has an invalid length. [ 2468.020578][T23273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12373'. [ 2468.035491][T23276] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12374'. [ 2468.723863][T23289] device sit0 left promiscuous mode [ 2469.152061][T23302] device sit0 entered promiscuous mode [ 2469.396475][T23310] netlink: 'syz.2.12382': attribute type 3 has an invalid length. [ 2469.432819][T23310] netlink: 'syz.2.12382': attribute type 1 has an invalid length. [ 2469.469722][T23310] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.12382'. [ 2470.249857][T23337] rxe_eth0 speed is unknown, defaulting to 1000 [ 2470.582550][T23351] netlink: 'syz.0.12395': attribute type 39 has an invalid length. [ 2470.725959][T23356] device sit0 left promiscuous mode [ 2471.305133][T23359] device sit0 entered promiscuous mode [ 2471.330697][T23373] netlink: 'syz.1.12399': attribute type 2 has an invalid length. [ 2471.339330][T23373] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12399'. [ 2471.596745][T23380] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.12400'. [ 2471.617198][T23381] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12403'. [ 2471.714371][T23390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12402'. [ 2471.818231][T23382] rxe_eth0 speed is unknown, defaulting to 1000 [ 2471.876852][T23390] netlink: 'syz.1.12402': attribute type 10 has an invalid length. [ 2472.267029][T23390] team0 (unregistering): Port device team_slave_0 removed [ 2472.305125][T23390] team0 (unregistering): Port device team_slave_1 removed [ 2472.358302][T23409] netlink: 'syz.2.12408': attribute type 1 has an invalid length. [ 2472.865655][T23433] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.12415'. [ 2473.791522][T23425] device sit0 left promiscuous mode [ 2473.894173][T23426] device sit0 entered promiscuous mode [ 2474.002697][T23427] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12410'. [ 2474.831416][T27891] Bluetooth: hci2: command 0x0406 tx timeout [ 2475.543673][T23449] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12417'. [ 2475.847050][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2477.201400][T23491] device sit0 left promiscuous mode [ 2477.489602][T23499] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.12432'. [ 2477.923509][T23495] device sit0 entered promiscuous mode [ 2478.011667][T23502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12432'. [ 2478.335188][T23510] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12435'. [ 2478.942274][T23533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12443'. [ 2479.020190][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2479.030687][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2479.040959][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2479.050053][T17274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2479.059041][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2479.066560][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2479.195872][T23534] rxe_eth0 speed is unknown, defaulting to 1000 [ 2479.356317][T23550] device sit0 left promiscuous mode [ 2480.306659][T28237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.325563][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12449'. [ 2480.401310][T23534] chnl_net:caif_netlink_parms(): no params data found [ 2480.507810][T28237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.672225][T28237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.685077][T23576] netlink: 'syz.3.12453': attribute type 39 has an invalid length. [ 2480.712883][T23576] device veth0_macvtap left promiscuous mode [ 2480.826705][T23571] netlink: 'syz.1.12452': attribute type 10 has an invalid length. [ 2480.848945][T23571] device syz_tun entered promiscuous mode [ 2480.919311][T23571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2481.007758][T28237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.049387][T23584] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12465'. [ 2481.087944][T23534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2481.116179][T23534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2481.151631][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 2481.171851][T23534] device bridge_slave_0 entered promiscuous mode [ 2481.194778][T23534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2481.202133][T23534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2481.210260][T23534] device bridge_slave_1 entered promiscuous mode [ 2481.312262][T23534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2481.413828][T23534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2481.644005][T23534] team0: Port device team_slave_0 added [ 2481.710692][T23534] team0: Port device team_slave_1 added [ 2481.757521][T23606] netlink: 'syz.1.12461': attribute type 29 has an invalid length. [ 2481.782620][T28237] device 0 left promiscuous mode [ 2481.814085][T23606] netlink: 'syz.1.12461': attribute type 29 has an invalid length. [ 2481.864677][T23608] netlink: 'syz.1.12461': attribute type 29 has an invalid length. [ 2481.889503][T23607] device sit0 left promiscuous mode [ 2481.970110][T23604] device sit0 entered promiscuous mode [ 2482.549981][T28237] device 1 left promiscuous mode [ 2483.231000][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 2485.269630][T23534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2485.279966][T23534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.307025][T23534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2485.321180][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 2485.408605][T28237] device 2 left promiscuous mode [ 2485.419363][T23534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2485.430601][T23534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2485.493584][T23534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2485.537740][T28237] device 3 left promiscuous mode [ 2485.583420][T23637] netlink: 'syz.2.12466': attribute type 2 has an invalid length. [ 2485.606117][T23637] netlink: 'syz.2.12466': attribute type 8 has an invalid length. [ 2485.660938][T23637] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.12466'. [ 2485.718951][T23643] netlink: 'syz.2.12466': attribute type 2 has an invalid length. [ 2485.750570][T23643] netlink: 'syz.2.12466': attribute type 8 has an invalid length. [ 2485.772827][T23643] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.12466'. [ 2485.950726][T23534] device hsr_slave_0 entered promiscuous mode [ 2486.192441][T23534] device hsr_slave_1 entered promiscuous mode [ 2486.213158][T23534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2486.241505][T23534] Cannot create hsr debugfs directory [ 2486.301614][T23653] delete_channel: no stack [ 2486.875321][T23685] netlink: 'syz.1.12474': attribute type 29 has an invalid length. [ 2486.932004][T23685] netlink: 'syz.1.12474': attribute type 29 has an invalid length. [ 2487.048955][T23687] netlink: 'syz.1.12474': attribute type 29 has an invalid length. [ 2487.084644][T23691] netlink: 'syz.3.12476': attribute type 17 has an invalid length. [ 2487.106888][T23691] netlink: 'syz.3.12476': attribute type 16 has an invalid length. [ 2487.167118][T23691] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12476'. [ 2487.396109][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 2487.983997][T23713] device syzkaller0 entered promiscuous mode [ 2488.002080][T23713] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2488.129374][T23534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2488.149928][T23727] netlink: 'syz.2.12484': attribute type 46 has an invalid length. [ 2488.177070][T23727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12484'. [ 2488.221299][T23534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2488.294128][T23534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2488.329742][T23534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2488.368890][T23731] -1Ï2y�: renamed from syzkaller0 [ 2488.880503][T23756] netlink: 'syz.2.12492': attribute type 17 has an invalid length. [ 2488.903219][T23756] netlink: 'syz.2.12492': attribute type 16 has an invalid length. [ 2488.916073][T23756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12492'. [ 2489.039074][T23758] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12493'. [ 2489.079004][T23534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2489.166499][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2489.188184][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2489.225803][T23534] 8021q: adding VLAN 0 to HW filter on device team0 [ 2489.244455][T23769] device veth1_to_bridge entered promiscuous mode [ 2489.291459][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2489.334527][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2489.358229][T16409] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.365477][T16409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2489.413957][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2489.450740][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2489.469276][T16409] bridge0: port 2(bridge_slave_1) entered blocking state [ 2489.476520][T16409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2489.503012][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2489.522431][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2489.577154][T28237] device hsr_slave_0 left promiscuous mode [ 2489.578533][T23784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12497'. [ 2489.602195][T28237] device hsr_slave_1 left promiscuous mode [ 2489.616737][T28237] bridge0: port 3(hsr0) entered disabled state [ 2489.642192][T28237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.731649][T28237] device veth0_macvtap left promiscuous mode [ 2490.560719][T28237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2490.628677][T28237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2491.032411][T28237] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2491.077297][T28237] bond0 (unregistering): Released all slaves [ 2491.167817][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2491.178376][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2491.189316][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2491.199079][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2491.249894][T23790] validate_nla: 1 callbacks suppressed [ 2491.249908][T23790] netlink: 'syz.3.12498': attribute type 10 has an invalid length. [ 2491.306660][T23790] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2491.341036][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2491.359498][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2491.368292][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2491.392297][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2491.427755][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2491.443153][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2491.490799][T23534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2491.983192][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2492.383183][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2492.736259][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2492.817582][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2492.825757][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2492.829418][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2492.889900][T23534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2492.976168][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2493.004838][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2493.022280][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.058851][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2493.089031][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2493.099260][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2493.126188][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.136535][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2493.154272][T23534] device veth0_vlan entered promiscuous mode [ 2493.182004][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.219672][T23534] device veth1_vlan entered promiscuous mode [ 2493.276450][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.332119][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.344857][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2493.360100][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2493.360501][T23817] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12501'. [ 2493.388594][T23534] device veth0_macvtap entered promiscuous mode [ 2493.410082][T23534] device veth1_macvtap entered promiscuous mode [ 2493.487127][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2493.518151][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.541099][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2493.563624][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.596136][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2493.616952][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.639058][T23534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2493.652260][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2493.672406][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2493.680807][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2493.692652][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2493.714992][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2493.760944][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.782192][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2493.805960][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.831776][T23534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2493.890145][T23534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2493.906424][T23534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2493.928507][T23867] device sit0 left promiscuous mode [ 2494.401225][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2494.432801][T23417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2494.479182][T23534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.499041][T23534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.512263][T23534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.521819][T23534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2494.537334][T23860] device sit0 entered promiscuous mode [ 2494.982405][ T9800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2494.990288][ T9800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2495.086087][T18534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2495.122508][ T4886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2495.130403][ T4886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2495.148773][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2495.720200][T23918] device vcan0 entered promiscuous mode [ 2495.780491][T23918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2496.108573][T23931] netlink: 'syz.3.12520': attribute type 8 has an invalid length. [ 2496.467135][T23945] netlink: 'syz.2.12524': attribute type 28 has an invalid length. [ 2496.593499][T23945] netlink: 'syz.2.12524': attribute type 3 has an invalid length. [ 2497.173394][T23940] device sit0 left promiscuous mode [ 2497.464448][T23946] device sit0 entered promiscuous mode [ 2497.576555][T23945] device bridge_slave_1 left promiscuous mode [ 2497.593302][T23945] bridge0: port 2(bridge_slave_1) entered disabled state [ 2497.610198][T23945] device bridge_slave_0 left promiscuous mode [ 2497.621356][T23945] bridge0: port 1(bridge_slave_0) entered disabled state [ 2497.910441][T23957] device sit0 entered promiscuous mode [ 2497.987715][T23974] netlink: 'syz.2.12529': attribute type 16 has an invalid length. [ 2498.011587][T23967] netlink: 'syz.3.12528': attribute type 21 has an invalid length. [ 2498.019847][T23974] __nla_validate_parse: 3 callbacks suppressed [ 2498.019862][T23974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12529'. [ 2498.073076][T23967] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12528'. [ 2498.601927][T23999] netlink: 'syz.3.12532': attribute type 10 has an invalid length. [ 2498.793574][T23973] delete_channel: no stack [ 2498.821177][T24005] netlink: 'syz.3.12532': attribute type 10 has an invalid length. [ 2499.803325][T24047] device sit0 entered promiscuous mode [ 2500.456297][T24068] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.12546'. [ 2500.777132][T24085] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2502.693690][T24104] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12551'. [ 2502.760172][T24106] netlink: 'syz.4.12553': attribute type 4 has an invalid length. [ 2503.849029][T24130] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2503.856148][T24130] syzkaller0: linktype set to 0 [ 2504.363156][T24147] device sit0 left promiscuous mode [ 2504.669122][T24156] device sit0 entered promiscuous mode [ 2510.251040][T24235] netlink: 'syz.1.12601': attribute type 4 has an invalid length. [ 2510.271229][T24235] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12601'. [ 2510.304033][T24235] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2511.891142][T24323] netlink: 'syz.4.12641': attribute type 21 has an invalid length. [ 2517.643453][T24575] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12750'. [ 2517.663889][T24575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2517.685438][T24575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2518.640311][ T4290] Bluetooth: hci5: Malformed Event: 0x13 [ 2518.987914][T24640] mac80211_hwsim hwsim182 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2519.934059][T24686] can: request_module (can-proto-4) failed. [ 2520.131381][ T4290] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 2520.441872][T24716] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12815'. [ 2521.266842][T24762] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 2521.277982][T24762] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 2522.190985][ T4290] Bluetooth: hci1: command 0x2016 tx timeout [ 2524.762342][T24898] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2524.776781][T24898] device syzkaller0 entered promiscuous mode [ 2524.890782][T24907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12902'. [ 2524.929248][T24907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12902'. [ 2524.979438][T24910] sctp: [Deprecated]: syz.2.12904 (pid 24910) Use of int in maxseg socket option. [ 2524.979438][T24910] Use struct sctp_assoc_value instead [ 2525.023739][T24914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12906'. [ 2525.101002][T24914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12906'. [ 2525.176572][T24915] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12906'. [ 2525.928728][T24940] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12917'. [ 2526.658579][T24978] device macsec0 entered promiscuous mode [ 2527.034171][T24997] netlink: 'syz.3.12944': attribute type 33 has an invalid length. [ 2527.056616][T24997] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12944'. [ 2527.462768][T25018] netlink: 'syz.4.12951': attribute type 10 has an invalid length. [ 2527.489119][T25018] team0: Port device netdevsim0 added [ 2527.512390][T25018] netlink: 'syz.4.12951': attribute type 10 has an invalid length. [ 2527.595630][T25018] team0: Port device netdevsim0 removed [ 2527.614345][T25018] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2529.085340][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.091966][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.019410][T25134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12999'. [ 2531.411470][T25194] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.13025'. [ 2532.055392][T25217] netlink: 'syz.1.13035': attribute type 29 has an invalid length. [ 2533.977753][T25200] netlink: 'syz.2.13027': attribute type 10 has an invalid length. [ 2534.006216][T25217] netlink: 'syz.1.13035': attribute type 29 has an invalid length. [ 2534.017608][T25222] netlink: 'syz.3.13036': attribute type 10 has an invalid length. [ 2534.242063][T25238] netlink: 'syz.0.13041': attribute type 21 has an invalid length. [ 2534.283369][T25238] netlink: 'syz.0.13041': attribute type 1 has an invalid length. [ 2536.280965][T27891] Bluetooth: hci1: command 0x0406 tx timeout [ 2538.218136][T25330] FAULT_INJECTION: forcing a failure. [ 2538.218136][T25330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2538.238835][T25330] CPU: 0 PID: 25330 Comm: syz.1.13081 Not tainted syzkaller #0 [ 2538.246448][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2538.256522][T25330] Call Trace: [ 2538.259820][T25330] [ 2538.262774][T25330] dump_stack_lvl+0x188/0x24e [ 2538.267481][T25330] ? show_regs_print_info+0x12/0x12 [ 2538.272705][T25330] ? load_image+0x410/0x410 [ 2538.277238][T25330] ? __lock_acquire+0x7ea0/0x7ea0 [ 2538.282294][T25330] should_fail_ex+0x390/0x4c0 [ 2538.287091][T25330] _copy_from_user+0x2c/0x170 [ 2538.291806][T25330] ___sys_recvmsg+0x170/0x590 [ 2538.296609][T25330] ? __sys_recvmsg+0x2a0/0x2a0 [ 2538.301403][T25330] ? common_file_perm+0x171/0x1c0 [ 2538.306463][T25330] ? __fget_files+0x3fc/0x460 [ 2538.311183][T25330] __x64_sys_recvmsg+0x20d/0x2e0 [ 2538.316153][T25330] ? ___sys_recvmsg+0x590/0x590 [ 2538.321061][T25330] ? lockdep_hardirqs_on+0x94/0x140 [ 2538.326312][T25330] do_syscall_64+0x4c/0xa0 [ 2538.330758][T25330] ? clear_bhb_loop+0x60/0xb0 [ 2538.335449][T25330] ? clear_bhb_loop+0x60/0xb0 [ 2538.340228][T25330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2538.346148][T25330] RIP: 0033:0x7f0f70d9f559 [ 2538.350567][T25330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2538.370178][T25330] RSP: 002b:00007f0f71cf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2538.378588][T25330] RAX: ffffffffffffffda RBX: 00007f0f71025fa0 RCX: 00007f0f70d9f559 [ 2538.386556][T25330] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 2538.394519][T25330] RBP: 00007f0f71cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2538.402480][T25330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2538.410464][T25330] R13: 00007f0f71026038 R14: 00007f0f71025fa0 R15: 00007fffd9dc4678 [ 2538.418463][T25330] [ 2538.679434][T25343] FAULT_INJECTION: forcing a failure. [ 2538.679434][T25343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2538.703260][T25346] netlink: 'syz.4.13088': attribute type 10 has an invalid length. [ 2538.715483][T25343] CPU: 1 PID: 25343 Comm: syz.2.13085 Not tainted syzkaller #0 [ 2538.723084][T25343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2538.733158][T25343] Call Trace: [ 2538.736437][T25343] [ 2538.739365][T25343] dump_stack_lvl+0x188/0x24e [ 2538.744078][T25343] ? show_regs_print_info+0x12/0x12 [ 2538.749359][T25343] ? load_image+0x410/0x410 [ 2538.753867][T25343] ? __lock_acquire+0x7ea0/0x7ea0 [ 2538.758898][T25343] should_fail_ex+0x390/0x4c0 [ 2538.763576][T25343] _copy_from_user+0x2c/0x170 [ 2538.768249][T25343] ___sys_sendmsg+0x1c3/0x360 [ 2538.772933][T25343] ? __sys_sendmsg+0x2a0/0x2a0 [ 2538.777706][T25343] ? __lock_acquire+0x7ea0/0x7ea0 [ 2538.782755][T25343] __se_sys_sendmsg+0x1c3/0x2b0 [ 2538.787615][T25343] ? __x64_sys_sendmsg+0x80/0x80 [ 2538.792572][T25343] ? lockdep_hardirqs_on+0x94/0x140 [ 2538.797779][T25343] do_syscall_64+0x4c/0xa0 [ 2538.802211][T25343] ? clear_bhb_loop+0x60/0xb0 [ 2538.806885][T25343] ? clear_bhb_loop+0x60/0xb0 [ 2538.811556][T25343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2538.817807][T25343] RIP: 0033:0x7fe8fa59f559 [ 2538.822322][T25343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2538.841964][T25343] RSP: 002b:00007fe8fb46c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2538.850483][T25343] RAX: ffffffffffffffda RBX: 00007fe8fa825fa0 RCX: 00007fe8fa59f559 [ 2538.858449][T25343] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 2538.866411][T25343] RBP: 00007fe8fb46c090 R08: 0000000000000000 R09: 0000000000000000 [ 2538.874377][T25343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2538.882345][T25343] R13: 00007fe8fa826038 R14: 00007fe8fa825fa0 R15: 00007ffcc9e16cc8 [ 2538.890325][T25343] [ 2538.900964][T25346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13088'. [ 2538.990083][T25351] FAULT_INJECTION: forcing a failure. [ 2538.990083][T25351] name failslab, interval 1, probability 0, space 0, times 0 [ 2539.026393][T25351] CPU: 1 PID: 25351 Comm: syz.1.13089 Not tainted syzkaller #0 [ 2539.034006][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2539.044080][T25351] Call Trace: [ 2539.047377][T25351] [ 2539.050324][T25351] dump_stack_lvl+0x188/0x24e [ 2539.055029][T25351] ? show_regs_print_info+0x12/0x12 [ 2539.060255][T25351] ? load_image+0x410/0x410 [ 2539.064838][T25351] ? __might_sleep+0xd0/0xd0 [ 2539.069443][T25351] ? __lock_acquire+0x7ea0/0x7ea0 [ 2539.074487][T25351] should_fail_ex+0x390/0x4c0 [ 2539.079166][T25351] should_failslab+0x5/0x20 [ 2539.083666][T25351] slab_pre_alloc_hook+0x59/0x300 [ 2539.088691][T25351] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2539.094437][T25351] __kmem_cache_alloc_node+0x4f/0x270 [ 2539.099843][T25351] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 2539.105586][T25351] __kmalloc+0xa3/0x240 [ 2539.109864][T25351] tomoyo_realpath_from_path+0xe2/0x5c0 [ 2539.115440][T25351] ? tomoyo_domain+0xd2/0x120 [ 2539.120146][T25351] ? tomoyo_path_number_perm+0x205/0x650 [ 2539.125809][T25351] tomoyo_path_number_perm+0x22f/0x650 [ 2539.131296][T25351] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2539.136786][T25351] ? ksys_write+0x1ce/0x260 [ 2539.141324][T25351] ? common_file_perm+0x171/0x1c0 [ 2539.146414][T25351] ? __fget_files+0x28/0x460 [ 2539.151043][T25351] security_file_ioctl+0x6c/0xa0 [ 2539.156023][T25351] __se_sys_ioctl+0x48/0x170 [ 2539.160700][T25351] do_syscall_64+0x4c/0xa0 [ 2539.165119][T25351] ? clear_bhb_loop+0x60/0xb0 [ 2539.169815][T25351] ? clear_bhb_loop+0x60/0xb0 [ 2539.174511][T25351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2539.180429][T25351] RIP: 0033:0x7f0f70d9f559 [ 2539.184863][T25351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2539.204490][T25351] RSP: 002b:00007f0f71cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2539.212944][T25351] RAX: ffffffffffffffda RBX: 00007f0f71025fa0 RCX: 00007f0f70d9f559 [ 2539.220917][T25351] RDX: 00002000000008c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 2539.228918][T25351] RBP: 00007f0f71cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2539.236895][T25351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2539.244869][T25351] R13: 00007f0f71026038 R14: 00007f0f71025fa0 R15: 00007fffd9dc4678 [ 2539.252852][T25351] [ 2539.279838][T25351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2541.104660][T25346] netlink: 'syz.4.13088': attribute type 10 has an invalid length. [ 2541.113342][T25346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13088'. [ 2542.081504][T25391] device sit0 left promiscuous mode [ 2542.468839][T25401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2542.627575][T25393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13103'. [ 2542.637352][T25398] device sit0 entered promiscuous mode [ 2542.815404][T25401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2542.859856][T25404] netlink: 'syz.3.13105': attribute type 21 has an invalid length. [ 2542.874682][T25404] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2542.915886][T25404] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2542.984247][T25402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13105'. [ 2543.125907][T25408] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2546.753005][T25455] FAULT_INJECTION: forcing a failure. [ 2546.753005][T25455] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.800955][T25455] CPU: 0 PID: 25455 Comm: syz.4.13117 Not tainted syzkaller #0 [ 2546.808567][T25455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2546.818658][T25455] Call Trace: [ 2546.821955][T25455] [ 2546.825016][T25455] dump_stack_lvl+0x188/0x24e [ 2546.829733][T25455] ? show_regs_print_info+0x12/0x12 [ 2546.834955][T25455] ? load_image+0x410/0x410 [ 2546.839531][T25455] ? __might_sleep+0xd0/0xd0 [ 2546.844171][T25455] ? __lock_acquire+0x7ea0/0x7ea0 [ 2546.849227][T25455] should_fail_ex+0x390/0x4c0 [ 2546.853934][T25455] should_failslab+0x5/0x20 [ 2546.858460][T25455] slab_pre_alloc_hook+0x59/0x300 [ 2546.863503][T25455] ? ima_match_policy+0x10d/0x21b0 [ 2546.868665][T25455] kmem_cache_alloc_node+0x5a/0x310 [ 2546.873882][T25455] ? __alloc_skb+0xf9/0x7d0 [ 2546.878414][T25455] __alloc_skb+0xf9/0x7d0 [ 2546.882778][T25455] alloc_skb_with_frags+0xa7/0x710 [ 2546.887924][T25455] ? mark_lock+0x94/0x320 [ 2546.892279][T25455] sock_alloc_send_pskb+0x87f/0x9a0 [ 2546.897516][T25455] ? sock_kzfree_s+0x50/0x50 [ 2546.902131][T25455] ? verify_lock_unused+0x140/0x140 [ 2546.907390][T25455] ? __kmem_cache_free+0xb6/0x200 [ 2546.912436][T25455] ? dev_get_by_index+0x1e/0x2d0 [ 2546.917410][T25455] ? dev_get_by_index+0x1e/0x2d0 [ 2546.922380][T25455] packet_sendmsg+0x31b9/0x4c30 [ 2546.927366][T25455] ? __might_sleep+0xd0/0xd0 [ 2546.931981][T25455] ? verify_lock_unused+0x140/0x140 [ 2546.937203][T25455] ? mark_lock+0x94/0x320 [ 2546.941548][T25455] ? aa_sk_perm+0x81f/0x950 [ 2546.946054][T25455] ? aa_af_perm+0x340/0x340 [ 2546.950605][T25455] ? packet_getsockopt+0x980/0x980 [ 2546.955738][T25455] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2546.961320][T25455] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2546.966636][T25455] ? security_socket_sendmsg+0x7c/0xa0 [ 2546.972123][T25455] ? packet_getsockopt+0x980/0x980 [ 2546.977265][T25455] ____sys_sendmsg+0x5ed/0x9a0 [ 2546.982064][T25455] ? __lock_acquire+0x7ea0/0x7ea0 [ 2546.987121][T25455] ? __sys_sendmsg_sock+0x30/0x30 [ 2546.992175][T25455] ? __import_iovec+0x306/0x510 [ 2546.997077][T25455] ? import_iovec+0x6f/0xa0 [ 2547.001618][T25455] ___sys_sendmsg+0x2a2/0x360 [ 2547.006338][T25455] ? __sys_sendmsg+0x2a0/0x2a0 [ 2547.011148][T25455] ? __lock_acquire+0x7ea0/0x7ea0 [ 2547.016220][T25455] __se_sys_sendmsg+0x1c3/0x2b0 [ 2547.021100][T25455] ? __x64_sys_sendmsg+0x80/0x80 [ 2547.026082][T25455] ? lockdep_hardirqs_on+0x94/0x140 [ 2547.031317][T25455] do_syscall_64+0x4c/0xa0 [ 2547.035753][T25455] ? clear_bhb_loop+0x60/0xb0 [ 2547.040447][T25455] ? clear_bhb_loop+0x60/0xb0 [ 2547.045237][T25455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2547.051152][T25455] RIP: 0033:0x7efc0339f559 [ 2547.055598][T25455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2547.075218][T25455] RSP: 002b:00007efc042e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.083630][T25455] RAX: ffffffffffffffda RBX: 00007efc03625fa0 RCX: 00007efc0339f559 [ 2547.091604][T25455] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 2547.099574][T25455] RBP: 00007efc042e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2547.107555][T25455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2547.115521][T25455] R13: 00007efc03626038 R14: 00007efc03625fa0 R15: 00007ffcd921a128 [ 2547.123507][T25455] [ 2549.024656][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.083443][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.155009][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.207118][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.238049][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.268246][T25522] netlink: 'syz.2.13139': attribute type 21 has an invalid length. [ 2549.285134][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.332478][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.397243][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.421271][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2549.445416][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2551.540631][T25548] device sit0 left promiscuous mode [ 2551.597569][T25549] device sit0 entered promiscuous mode [ 2551.852778][T25552] device sit0 left promiscuous mode [ 2552.380548][T25561] device sit0 entered promiscuous mode [ 2553.014239][T25585] netlink: 'syz.4.13157': attribute type 10 has an invalid length. [ 2553.087599][T25585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.240890][T25585] device bridge_slave_1 left promiscuous mode [ 2553.247261][T25585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2553.499783][T25599] device sit0 left promiscuous mode [ 2553.605040][T25596] device sit0 entered promiscuous mode [ 2554.123825][T25581] rxe_eth0 speed is unknown, defaulting to 1000 [ 2554.369158][T25616] netlink: 'syz.4.13166': attribute type 29 has an invalid length. [ 2554.401983][T25616] netlink: 'syz.4.13166': attribute type 29 has an invalid length. [ 2554.437142][T25620] __nla_validate_parse: 6 callbacks suppressed [ 2554.437176][T25620] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.13167'. [ 2554.560968][T25616] netlink: 'syz.4.13166': attribute type 29 has an invalid length. [ 2554.879312][T25625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13168'. [ 2554.953661][T25643] netlink: 'syz.1.13173': attribute type 39 has an invalid length. [ 2554.994068][T25643] device veth0_macvtap left promiscuous mode [ 2555.370577][T25651] device sit0 left promiscuous mode [ 2556.110472][T25647] device sit0 entered promiscuous mode [ 2556.508038][T25671] netlink: 'syz.4.13181': attribute type 2 has an invalid length. [ 2556.538625][T25671] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.13181'. [ 2557.270457][T25693] device sit0 left promiscuous mode [ 2558.083466][T25699] device sit0 entered promiscuous mode [ 2559.249822][T25736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13198'. [ 2559.318403][T25739] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13200'. [ 2559.515124][T25742] device sit0 left promiscuous mode [ 2560.069297][T25749] device sit0 entered promiscuous mode [ 2560.241821][T25737] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13199'. [ 2560.296722][T25737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2560.359499][T25737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2560.760908][T25772] device sit0 left promiscuous mode [ 2561.293131][T25775] device sit0 entered promiscuous mode [ 2561.319954][T25788] netlink: 'syz.0.13212': attribute type 3 has an invalid length. [ 2561.351722][T25788] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13212'. [ 2561.435599][T25795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13213'. [ 2561.601794][T25795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13213'. [ 2561.749038][T25793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13213'. [ 2561.874035][T25801] netlink: 71 bytes leftover after parsing attributes in process `syz.0.13215'. [ 2563.136141][T25838] device sit0 left promiscuous mode [ 2563.215364][T25840] device sit0 entered promiscuous mode [ 2563.293412][T25844] netlink: 'syz.3.13226': attribute type 3 has an invalid length. [ 2563.348470][T25844] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13226'. [ 2564.145107][T25879] netlink: 'syz.0.13236': attribute type 10 has an invalid length. [ 2564.298990][T25879] batman_adv: batadv0: Adding interface: netdevsim0 [ 2564.339698][T25879] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2564.424985][T25879] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2564.982912][T25894] device sit0 left promiscuous mode [ 2565.336814][T25895] device sit0 entered promiscuous mode [ 2565.433428][T25910] netlink: 'syz.2.13243': attribute type 3 has an invalid length. [ 2565.462219][T25910] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13243'. [ 2565.756706][T25919] netlink: 'syz.0.13244': attribute type 11 has an invalid length. [ 2565.796820][T25919] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13244'. [ 2565.844246][T25922] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13247'. [ 2566.094897][T25936] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.13251'. [ 2566.219510][T25927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2566.868914][T25956] device sit0 left promiscuous mode [ 2567.024141][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 2567.255214][T25961] device sit0 entered promiscuous mode [ 2569.530802][T26029] device sit0 left promiscuous mode [ 2570.248474][T26034] device sit0 entered promiscuous mode [ 2570.471484][T26048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13280'. [ 2570.505818][T26047] netlink: 'syz.3.13281': attribute type 3 has an invalid length. [ 2570.544705][T26047] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13281'. [ 2570.634906][T26048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13280'. [ 2570.668909][T26037] nr0: port 1(hsr0) entered blocking state [ 2570.684876][T26037] nr0: port 1(hsr0) entered disabled state [ 2570.698773][T26037] device hsr0 entered promiscuous mode [ 2571.675385][T26068] netlink: 'syz.4.13287': attribute type 29 has an invalid length. [ 2571.706102][T26068] netlink: 'syz.4.13287': attribute type 29 has an invalid length. [ 2571.751355][T26069] netlink: 'syz.4.13287': attribute type 2 has an invalid length. [ 2571.785466][T26069] netlink: 'syz.4.13287': attribute type 8 has an invalid length. [ 2571.826845][T26069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13287'. [ 2571.920810][T26071] netlink: 'syz.4.13287': attribute type 2 has an invalid length. [ 2571.941617][T26071] netlink: 'syz.4.13287': attribute type 8 has an invalid length. [ 2571.974893][T26071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13287'. [ 2572.108711][T26084] device sit0 left promiscuous mode [ 2572.447772][T26086] device sit0 entered promiscuous mode [ 2573.514943][T26120] netlink: 'syz.3.13300': attribute type 2 has an invalid length. [ 2573.691659][T26125] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13301'. [ 2574.326186][T26144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.13306'. [ 2575.461452][T26159] device sit0 left promiscuous mode [ 2575.667138][T26154] device sit0 entered promiscuous mode [ 2576.402180][T26177] FAULT_INJECTION: forcing a failure. [ 2576.402180][T26177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2576.445893][T26177] CPU: 1 PID: 26177 Comm: syz.4.13314 Not tainted syzkaller #0 [ 2576.453513][T26177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2576.463590][T26177] Call Trace: [ 2576.466892][T26177] [ 2576.469830][T26177] dump_stack_lvl+0x188/0x24e [ 2576.474528][T26177] ? show_regs_print_info+0x12/0x12 [ 2576.479729][T26177] ? load_image+0x410/0x410 [ 2576.484240][T26177] ? __lock_acquire+0x7ea0/0x7ea0 [ 2576.489276][T26177] should_fail_ex+0x390/0x4c0 [ 2576.493965][T26177] _copy_from_user+0x2c/0x170 [ 2576.498653][T26177] __sys_bpf+0x2ea/0x780 [ 2576.502936][T26177] ? bpf_link_show_fdinfo+0x380/0x380 [ 2576.508335][T26177] ? lock_chain_count+0x20/0x20 [ 2576.513250][T26177] __x64_sys_bpf+0x78/0x90 [ 2576.517690][T26177] do_syscall_64+0x4c/0xa0 [ 2576.522102][T26177] ? clear_bhb_loop+0x60/0xb0 [ 2576.526774][T26177] ? clear_bhb_loop+0x60/0xb0 [ 2576.531467][T26177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2576.537391][T26177] RIP: 0033:0x7efc0339f559 [ 2576.541803][T26177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2576.561580][T26177] RSP: 002b:00007efc042e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2576.570018][T26177] RAX: ffffffffffffffda RBX: 00007efc03625fa0 RCX: 00007efc0339f559 [ 2576.577989][T26177] RDX: 000000000000000c RSI: 0000200000001440 RDI: 000000000000000a [ 2576.585957][T26177] RBP: 00007efc042e8090 R08: 0000000000000000 R09: 0000000000000000 [ 2576.593929][T26177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.601896][T26177] R13: 00007efc03626038 R14: 00007efc03625fa0 R15: 00007ffcd921a128 [ 2576.609884][T26177] [ 2578.102820][T26211] device sit0 left promiscuous mode [ 2578.242415][T26217] device sit0 entered promiscuous mode [ 2578.401358][T26220] device sit0 left promiscuous mode [ 2578.483242][T26221] device sit0 entered promiscuous mode [ 2578.606026][T26232] netlink: 'syz.4.13330': attribute type 10 has an invalid length. [ 2578.967174][T26244] delete_channel: no stack [ 2578.977572][T26244] delete_channel: no stack [ 2579.952213][T26268] device sit0 left promiscuous mode [ 2580.598950][T26274] device sit0 entered promiscuous mode [ 2581.026102][T26293] netlink: 'syz.2.13344': attribute type 10 has an invalid length. [ 2581.107276][T26297] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13345'. [ 2581.172435][T26296] device sit0 left promiscuous mode [ 2581.275705][T26289] device sit0 entered promiscuous mode [ 2581.689755][T26305] FAULT_INJECTION: forcing a failure. [ 2581.689755][T26305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2581.705744][T26305] CPU: 1 PID: 26305 Comm: syz.2.13346 Not tainted syzkaller #0 [ 2581.713350][T26305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2581.723415][T26305] Call Trace: [ 2581.726704][T26305] [ 2581.729623][T26305] dump_stack_lvl+0x188/0x24e [ 2581.734319][T26305] ? show_regs_print_info+0x12/0x12 [ 2581.739554][T26305] ? load_image+0x410/0x410 [ 2581.744097][T26305] ? __lock_acquire+0x7ea0/0x7ea0 [ 2581.749161][T26305] ? snprintf+0xe5/0x140 [ 2581.753433][T26305] should_fail_ex+0x390/0x4c0 [ 2581.758146][T26305] _copy_to_user+0x2c/0x130 [ 2581.762974][T26305] simple_read_from_buffer+0xe3/0x150 [ 2581.768471][T26305] proc_fail_nth_read+0x1a6/0x220 [ 2581.773535][T26305] ? proc_fault_inject_write+0x310/0x310 [ 2581.779209][T26305] ? fsnotify_perm+0x248/0x550 [ 2581.784012][T26305] ? proc_fault_inject_write+0x310/0x310 [ 2581.789669][T26305] vfs_read+0x2db/0x960 [ 2581.793862][T26305] ? kernel_read+0x1e0/0x1e0 [ 2581.798466][T26305] ? __fget_files+0x28/0x460 [ 2581.803073][T26305] ? __fget_files+0x3fc/0x460 [ 2581.807809][T26305] ? __fdget_pos+0x2ae/0x360 [ 2581.812426][T26305] ? ksys_read+0x70/0x260 [ 2581.816777][T26305] ksys_read+0x14d/0x260 [ 2581.821044][T26305] ? vfs_write+0x9a0/0x9a0 [ 2581.825484][T26305] ? lockdep_hardirqs_on+0x94/0x140 [ 2581.830690][T26305] do_syscall_64+0x4c/0xa0 [ 2581.835122][T26305] ? clear_bhb_loop+0x60/0xb0 [ 2581.839796][T26305] ? clear_bhb_loop+0x60/0xb0 [ 2581.844478][T26305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2581.850396][T26305] RIP: 0033:0x7fe8fa55fd8e [ 2581.854826][T26305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2581.874488][T26305] RSP: 002b:00007fe8fb46bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2581.882918][T26305] RAX: ffffffffffffffda RBX: 00007fe8fb46c6c0 RCX: 00007fe8fa55fd8e [ 2581.891325][T26305] RDX: 000000000000000f RSI: 00007fe8fb46c0a0 RDI: 0000000000000006 [ 2581.899298][T26305] RBP: 00007fe8fb46c090 R08: 0000000000000000 R09: 0000000000000000 [ 2581.907269][T26305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2581.915234][T26305] R13: 00007fe8fa826038 R14: 00007fe8fa825fa0 R15: 00007ffcc9e16cc8 [ 2581.923220][T26305] [ 2582.816312][T26335] device sit0 left promiscuous mode [ 2582.974636][T26329] device sit0 entered promiscuous mode [ 2583.305205][T26347] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.13354'. [ 2583.411716][T26347] netlink: zone id is out of range [ 2583.443924][T26347] netlink: zone id is out of range [ 2583.909567][T26374] netlink: 'syz.0.13357': attribute type 29 has an invalid length. [ 2583.951651][T26374] netlink: 'syz.0.13357': attribute type 29 has an invalid length. [ 2583.967048][T26361] netlink: 'syz.0.13357': attribute type 29 has an invalid length. [ 2583.979154][T26361] netlink: 'syz.0.13357': attribute type 29 has an invalid length. [ 2584.026048][T26361] netlink: 'syz.0.13357': attribute type 29 has an invalid length. [ 2584.126348][T26378] netlink: 'syz.3.13362': attribute type 10 has an invalid length. [ 2584.716035][T26378] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2585.201742][T26416] netlink: 'syz.3.13366': attribute type 1 has an invalid length. [ 2585.210440][T26416] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.13366'. [ 2585.491674][T26423] device sit0 left promiscuous mode [ 2585.956238][T26431] device sit0 entered promiscuous mode [ 2586.287466][T26447] device sit0 left promiscuous mode [ 2586.571954][T26456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13376'. [ 2586.638961][T26451] device sit0 entered promiscuous mode [ 2586.730269][T26456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13376'. [ 2587.148170][T26478] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.13378'. [ 2587.499689][T26503] IPv6: NLM_F_CREATE should be specified when creating new route [ 2587.527048][T26503] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13389'. [ 2590.150218][T26575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13410'. [ 2590.171707][T26575] openvswitch: netlink: Message has 6 unknown bytes. [ 2590.525175][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.531581][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.055764][T26591] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.13414'. [ 2591.188265][T26594] netlink: 184 bytes leftover after parsing attributes in process `syz.4.13415'. [ 2591.256632][T26585] rxe_eth0 speed is unknown, defaulting to 1000 [ 2591.319750][T26597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2591.327276][T26597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2591.425644][T26598] bridge0: port 2(bridge_slave_1) entered blocking state [ 2591.432846][T26598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2591.440310][T26598] bridge0: port 1(bridge_slave_0) entered blocking state [ 2591.447501][T26598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2591.501306][T26598] device bridge0 entered promiscuous mode [ 2591.516558][T26594] rxe_eth0 speed is unknown, defaulting to 1000 [ 2591.903708][T26616] netlink: 'syz.2.13422': attribute type 28 has an invalid length. [ 2594.865373][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2595.066317][T26634] netlink: 184 bytes leftover after parsing attributes in process `syz.4.13429'. [ 2595.358884][T26652] netlink: 'syz.2.13432': attribute type 10 has an invalid length. [ 2595.387359][T26652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13432'. [ 2595.422958][T26652] device dummy0 entered promiscuous mode [ 2595.430652][T26652] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2595.634442][T26662] device sit0 left promiscuous mode [ 2595.785488][T26671] netlink: 'syz.2.13439': attribute type 29 has an invalid length. [ 2596.138278][T26669] device sit0 entered promiscuous mode [ 2596.308689][T26671] netlink: 'syz.2.13439': attribute type 29 has an invalid length. [ 2596.355349][T26672] netlink: 'syz.2.13439': attribute type 29 has an invalid length. [ 2596.803357][T26700] netlink: 'syz.4.13448': attribute type 21 has an invalid length. [ 2596.822838][T26700] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13448'. [ 2596.864335][T26700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13448'. [ 2597.422378][T26722] netlink: 'syz.2.13454': attribute type 19 has an invalid length. [ 2597.430344][T26722] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.13454'. [ 2597.553605][T26732] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.13451'. [ 2597.651916][T26732] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2597.721813][T26732] CPU: 0 PID: 26732 Comm: syz.3.13451 Not tainted syzkaller #0 [ 2597.729432][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2597.739603][T26732] Call Trace: [ 2597.742903][T26732] [ 2597.745854][T26732] dump_stack_lvl+0x188/0x24e [ 2597.750563][T26732] ? show_regs_print_info+0x12/0x12 [ 2597.755792][T26732] ? load_image+0x410/0x410 [ 2597.760343][T26732] sysfs_warn_dup+0x8a/0xa0 [ 2597.764884][T26732] sysfs_do_create_link_sd+0xc0/0x110 [ 2597.770302][T26732] device_add+0x83b/0x1050 [ 2597.774764][T26732] wiphy_register+0x1d8b/0x2aa0 [ 2597.779670][T26732] ? cfg80211_event_work+0x40/0x40 [ 2597.784821][T26732] ? minstrel_ht_alloc+0x894/0xa20 [ 2597.789982][T26732] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2597.796097][T26732] ieee80211_register_hw+0x2e33/0x3b00 [ 2597.801686][T26732] ? ieee80211_register_hw+0xf01/0x3b00 [ 2597.807259][T26732] ? ieee80211_register_hw+0xf01/0x3b00 [ 2597.812834][T26732] ? ieee80211_tasklet_handler+0x20/0x20 [ 2597.818574][T26732] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2597.824501][T26732] ? __debug_object_init+0xed/0x440 [ 2597.829720][T26732] ? memset+0x1e/0x40 [ 2597.833721][T26732] ? __hrtimer_init+0x189/0x270 [ 2597.838595][T26732] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2597.844378][T26732] ? memcpy+0x3c/0x60 [ 2597.848384][T26732] hwsim_new_radio_nl+0xab7/0xc90 [ 2597.853435][T26732] genl_family_rcv_msg_doit+0x22f/0x350 [ 2597.858998][T26732] ? end_current_label_crit_section+0x170/0x170 [ 2597.865269][T26732] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2597.871188][T26732] ? bpf_lsm_capable+0x5/0x10 [ 2597.875884][T26732] ? security_capable+0x85/0xb0 [ 2597.880763][T26732] genl_rcv_msg+0x601/0x790 [ 2597.885286][T26732] ? genl_bind+0x360/0x360 [ 2597.889713][T26732] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2597.896091][T26732] netlink_rcv_skb+0x1ef/0x440 [ 2597.900885][T26732] ? genl_bind+0x360/0x360 [ 2597.905412][T26732] ? netlink_ack+0x1160/0x1160 [ 2597.910206][T26732] ? down_read+0x1a8/0x2d0 [ 2597.914649][T26732] genl_rcv+0x24/0x40 [ 2597.918643][T26732] netlink_unicast+0x7ad/0x920 [ 2597.923433][T26732] netlink_sendmsg+0x8ad/0xbd0 [ 2597.928225][T26732] ? netlink_getsockopt+0x550/0x550 [ 2597.933447][T26732] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2597.939009][T26732] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2597.944307][T26732] ? security_socket_sendmsg+0x7c/0xa0 [ 2597.949783][T26732] ? netlink_getsockopt+0x550/0x550 [ 2597.955005][T26732] ____sys_sendmsg+0x5ed/0x9a0 [ 2597.959839][T26732] ? __sys_sendmsg_sock+0x30/0x30 [ 2597.964893][T26732] ? __import_iovec+0x306/0x510 [ 2597.969868][T26732] ? import_iovec+0x6f/0xa0 [ 2597.974407][T26732] ___sys_sendmsg+0x2a2/0x360 [ 2597.979147][T26732] ? __sys_sendmsg+0x2a0/0x2a0 [ 2597.983987][T26732] __se_sys_sendmsg+0x1c3/0x2b0 [ 2597.988860][T26732] ? __x64_sys_sendmsg+0x80/0x80 [ 2597.993841][T26732] ? lockdep_hardirqs_on+0x94/0x140 [ 2597.999055][T26732] do_syscall_64+0x4c/0xa0 [ 2598.003483][T26732] ? clear_bhb_loop+0x60/0xb0 [ 2598.008177][T26732] ? clear_bhb_loop+0x60/0xb0 [ 2598.012865][T26732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2598.018768][T26732] RIP: 0033:0x7fb2e179f559 [ 2598.023374][T26732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2598.043082][T26732] RSP: 002b:00007fb2df591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2598.051514][T26732] RAX: ffffffffffffffda RBX: 00007fb2e1a26270 RCX: 00007fb2e179f559 [ 2598.059586][T26732] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2598.067572][T26732] RBP: 00007fb2e1836b20 R08: 0000000000000000 R09: 0000000000000000 [ 2598.075554][T26732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2598.083536][T26732] R13: 00007fb2e1a26308 R14: 00007fb2e1a26270 R15: 00007fff1fb7f1f8 [ 2598.091536][T26732] [ 2598.419716][T26743] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.13458'. [ 2598.472921][T26743] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2598.494499][T26741] device sit0 left promiscuous mode [ 2598.616324][T26746] device sit0 entered promiscuous mode [ 2600.006374][T26799] device sit0 left promiscuous mode [ 2600.424231][T26804] device sit0 entered promiscuous mode [ 2601.121981][T26827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13483'. [ 2601.149409][T26827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13483'. [ 2601.173359][T26827] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13483'. [ 2602.414839][T26859] device sit0 left promiscuous mode [ 2602.539616][T26855] device sit0 entered promiscuous mode [ 2602.836770][T27891] Bluetooth: hci5: command 0x0406 tx timeout [ 2604.217041][T26899] netlink: 'syz.3.13505': attribute type 29 has an invalid length. [ 2604.251382][T26899] netlink: 'syz.3.13505': attribute type 29 has an invalid length. [ 2604.276203][T26899] netlink: 'syz.3.13505': attribute type 29 has an invalid length. [ 2604.312555][T26899] netlink: 'syz.3.13505': attribute type 29 has an invalid length. [ 2604.331293][T26899] netlink: 'syz.3.13505': attribute type 29 has an invalid length. [ 2604.564752][T26904] netlink: 'syz.4.13506': attribute type 10 has an invalid length. [ 2605.284407][T26904] team0 (unregistering): Port device team_slave_0 removed [ 2605.320748][T26904] team0 (unregistering): Port device team_slave_1 removed [ 2605.378255][T26901] rxe_eth0 speed is unknown, defaulting to 1000 [ 2605.725931][T26918] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13509'. [ 2606.415125][T26928] device sit0 left promiscuous mode [ 2607.023208][T26932] device sit0 entered promiscuous mode [ 2607.093022][T26950] netlink: 'syz.3.13517': attribute type 2 has an invalid length. [ 2607.235167][T26950] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.13517'. [ 2607.399934][T26939] netlink: 'syz.4.13515': attribute type 10 has an invalid length. [ 2607.709503][T26941] rxe_eth0 speed is unknown, defaulting to 1000 [ 2607.720491][T26958] netlink: 'syz.1.13519': attribute type 3 has an invalid length. [ 2607.778445][T26958] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13519'. [ 2608.587074][T26971] netlink: 'syz.2.13521': attribute type 10 has an invalid length. [ 2609.221625][T26980] device sit0 left promiscuous mode [ 2610.112285][T26983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13526'. [ 2610.149825][T26987] device sit0 entered promiscuous mode [ 2610.365033][T26990] rxe_eth0 speed is unknown, defaulting to 1000 [ 2610.997099][T27010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13532'. [ 2611.141376][T27008] device sit0 left promiscuous mode [ 2638.511077][T23293] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2638 jiffies s: 303449 root: 0x2/. [ 2638.538514][T23293] rcu: blocking rcu_node structures (internal RCU debug): [ 2638.563340][T23293] Sending NMI from CPU 0 to CPUs 1: [ 2638.568613][ C1] NMI backtrace for cpu 1 [ 2638.568643][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 2638.568659][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2638.568668][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 2638.568693][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d a0 9b a0 0d 48 89 de 5b e9 a7 91 50 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d b4 28 80 7e 65 8b 15 b5 28 80 7e 81 e2 00 [ 2638.568707][ C1] RSP: 0018:ffffc900001b7778 EFLAGS: 00000093 [ 2638.568721][ C1] RAX: ffffffff818a6104 RBX: 0000000000000014 RCX: 0000000000000100 [ 2638.568733][ C1] RDX: ffff888018759e00 RSI: 0000000000000001 RDI: 0000000000000004 [ 2638.568743][ C1] RBP: 0000000000000001 R08: ffff8880b8d357cb R09: 1ffff110171a6af9 [ 2638.568754][ C1] R10: dffffc0000000000 R11: ffffed10171a6afa R12: ffffffff8c88d988 [ 2638.568766][ C1] R13: dffffc0000000000 R14: ffffc900001b7800 R15: 0000000000000001 [ 2638.568777][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 2638.568790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2638.568801][ C1] CR2: 00007fdc8f9ecc40 CR3: 000000007b297000 CR4: 00000000003506e0 [ 2638.568815][ C1] DR0: 0000000000000000 DR1: 0000200000000500 DR2: 0000200000000500 [ 2638.568825][ C1] DR3: 0000200000000500 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2638.568835][ C1] Call Trace: [ 2638.568841][ C1] [ 2638.568846][ C1] perf_trace_buf_alloc+0x152/0x300 [ 2638.568870][ C1] perf_trace_preemptirq_template+0x143/0x320 [ 2638.568891][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2638.568908][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2638.568928][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2638.568952][ C1] ? lock_chain_count+0x20/0x20 [ 2638.568974][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 2638.568989][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 2638.569012][ C1] trace_hardirqs_on+0x24/0x40 [ 2638.569030][ C1] asm_sysvec_irq_work+0x16/0x20 [ 2638.569045][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2638.569061][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 68 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2638.569074][ C1] RSP: 0018:ffffc900001b7980 EFLAGS: 00000206 [ 2638.569086][ C1] RAX: 2d75d4cac0aef100 RBX: 1ffff92000036f38 RCX: 2d75d4cac0aef100 [ 2638.569098][ C1] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0 [ 2638.569109][ C1] RBP: ffffc900001b7a70 R08: ffff8880b8d357cb R09: 1ffff110171a6af9 [ 2638.569120][ C1] R10: dffffc0000000000 R11: ffffed10171a6afa R12: 0000000000000246 [ 2638.569131][ C1] R13: dffffc0000000000 R14: ffff8880b8d3bb00 R15: 0000000000000002 [ 2638.569154][ C1] ? kmem_cache_free+0xe0/0x2a0 [ 2638.569175][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 2638.569200][ C1] __rcu_read_unlock+0x78/0xd0 [ 2638.569214][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 2638.569347][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2638.569366][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 2638.569392][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 2638.569411][ C1] __hrtimer_run_queues+0x522/0xc90 [ 2638.569433][ C1] ? hw_scan_work+0xf00/0xf00 [ 2638.569456][ C1] ? hrtimer_interrupt+0x980/0x980 [ 2638.569480][ C1] hrtimer_run_softirq+0x173/0x290 [ 2638.569501][ C1] handle_softirqs+0x291/0x910 [ 2638.569521][ C1] ? run_ksoftirqd+0xa4/0x100 [ 2638.569540][ C1] ? do_softirq+0x210/0x210 [ 2638.569556][ C1] ? run_ksoftirqd+0x81/0x100 [ 2638.569571][ C1] ? run_ksoftirqd+0x81/0x100 [ 2638.569589][ C1] run_ksoftirqd+0xa4/0x100 [ 2638.569604][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 2638.569620][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 2638.569651][ C1] ? takeover_tasklets+0x770/0x770 [ 2638.569665][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 2638.569681][ C1] smpboot_thread_fn+0x667/0xa30 [ 2638.569704][ C1] ? smpboot_thread_fn+0x49/0xa30 [ 2638.569731][ C1] kthread+0x29d/0x330 [ 2638.569744][ C1] ? cpu_report_death+0x250/0x250 [ 2638.569763][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2638.569779][ C1] ret_from_fork+0x1f/0x30 [ 2638.569808][ C1]