last executing test programs: 28.706346206s ago: executing program 3 (id=14349): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x16}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e747", 0x43}], 0x1}, 0x4040804) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0xa) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000640)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x23, &(0x7f00000006c0)=@raw=[@printk={@llu}, @ldst={0x1, 0x1, 0x2, 0x1, 0x7, 0x10, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x2, 0xa, 0x4, 0x1ff, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x20}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xd, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r3, r1], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x3}, {0x5, 0x5, 0x4, 0xc}, {0x3, 0x5, 0x5, 0xb}, {0x1, 0x3, 0x1, 0x7}, {0x2, 0x2, 0x4}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000200)='./file0\x00', r3, 0x4000, r6}, 0x18) 26.287910288s ago: executing program 3 (id=14361): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)}], 0x1}, 0x20000040) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_clone(0x1000400, &(0x7f0000000340)="ba", 0x1, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)="b39d2d55778cefbf8521cc98c31168d53d4500935dd53e55178f26de8e3830d4ecb1272f557519cac262bf5d9d39b9726ae88617bc3c25c7e92d4cab5da816b8209f8ad6e4ed913638cd75ef33a19e789427f96265c51beb162a6e09c155a851672c2ffea1dea3a9ec922d6b413ebe22205059deea9e57827b53efe4f0381b3d20bac863d7433c76a2547dc1eeded50f3c8204523fd9b558be651315826613a72b678aff7dddbc5719ad13ac8a") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 24.64559437s ago: executing program 3 (id=14367): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xd5, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000000000002e00000000040000000000"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r6 = socket$kcm(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ff9850f06b38da854a51e178ee7f0000000000000092b600001e544c5402380cd9e7ea5000f0000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000700)="063180f7c12607e8a6545c63e923dd15cac6e860b43d938fcfbb2be66841cbb77c85c80fa501e6d4bace0154b38d7bb942a4bb2037c0f3eb9ede634814b3dd011c18436fd9837e6dcfca6b976359b98ac10f5ee9ac1faebb8e0a2ebb3bb3a4e074e465379e0010e7e02705bd341447917ffb5e00a39b62fb3ae8f30335d36834b8cd9647683059e046e0610318dc5f753d6e313c302192863d5966fb00", &(0x7f00000007c0)=""/78, &(0x7f0000000840)="655568e381907ec417d52bfe5c92c09262217bfa4562d6ce73d7caf6c4c2abfe46d83cffe91385c5d7d533732dcb99d36e7059f73dcd732ec1e9995789f9555099a1f88b60c8b26c5f13c3dc3d36ebcd3caa85d9a520109402d5cb", &(0x7f00000008c0)="f10ff85d98fd890be20bcfc4aab0e1ca93237b91ac5ec88fe0be3ae01f01372df576b600970d3fe6b8823d6449b17dce06c8f8e743b3fdbbc749ac19d4f21a3d43887c6e887763e608de9cc4945218d2d99c671487516f420784a43d34e968e4ef10b48d0add18d1c4d6626e4fcb", 0x0, r7}, 0x38) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r8 = perf_event_open$cgroup(&(0x7f0000000a80)={0x0, 0x80, 0x7, 0xc6, 0x3, 0xda, 0x0, 0xc, 0x10, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9}, 0x8060, 0xfffffffffffffff9, 0x0, 0x7, 0xfffffe0000000000, 0x1, 0x100, 0x0, 0x1, 0x0, 0x1}, r5, 0x1, r3, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000d40)={0x2, 0x80, 0x0, 0x81, 0x0, 0x74, 0x0, 0x8001, 0x892227075cced633, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x80, 0x4, 0x4, 0x6, 0x7, 0x3, 0x9, 0x0, 0x2, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="0e0f9291305a5d873b9bda16001757a39d9b", 0x12}, {&(0x7f0000001980)="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", 0x1000}], 0x2, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x48}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xfe33) 22.973205504s ago: executing program 3 (id=14375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)}], 0x1}, 0x20000040) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_clone(0x1000400, &(0x7f0000000340)="ba", 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000500)="b39d2d55778cefbf8521cc98c31168d53d4500935dd53e55178f26de8e3830d4ecb1272f557519cac262bf5d9d39b9726ae88617bc3c25c7e92d4cab5da816b8209f8ad6e4ed913638cd75ef33a19e789427f96265c51beb162a6e09c155a851672c2ffea1dea3a9ec922d6b413ebe22205059deea9e57827b53efe4f0381b3d20bac863d7433c76a2547dc1eeded50f3c8204523fd9b558be651315826613a72b678aff7dddbc5719ad13ac8a") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 19.539029036s ago: executing program 3 (id=14390): recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/232, 0xe8}], 0x2, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x102) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xf5, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000580)=0x7) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f00000007c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000d80)="1617cb0c1b3451ffe894994e8dc64b96d69cb702695dcf8ce365afdd47238b07aeb8f23db5e6f299e5505ad3b2c78a472b1f19", 0x33}, {&(0x7f0000000f80)}, {&(0x7f0000001000)="764e65723d76880c5725acf2f0d96ff79ef651f0a1f2e6ae6a91dcd0f467a2f74015f0ff7ae6148f086949cf7d160937551114e7260fc18523f2c4e2c1bac3d0f4d91a4b9f07ec9f30538d373436d08b32b86607797d5ad3903281b2255b1d701b10648b0640e96582bd", 0x6a}], 0x3, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x90}, 0x20004000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475c", 0x71}, {0x0}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb2", 0x549}], 0x3}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r6, &(0x7f0000000300)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002440)="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", 0x800}], 0x1, &(0x7f00000008c0)=[{0x48, 0x84, 0x3, "0e26b83c8a55634fb39c073fd4e05eef96c96cf605d8879adc259aaafdb0b21817c9edcf931656443621ba08f4cb9dcfab"}, {0x10, 0x10c, 0x180}], 0x58}, 0x4008000) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000640)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0fb7a3c0a25c73a87ac61326ff2bfa61b5ec588ad21ea9", 0x17}], 0x1, &(0x7f0000003100)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x20008880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 17.718592428s ago: executing program 0 (id=14395): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x3a}, 0x28) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224", 0x12}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x5dc0131d6a9f168f) r6 = syz_clone(0x0, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000640)="d0f609f06697f6acbe22fe8f7f1399cad43f99fb4cd23ada5f70b1c85ccdd8392a0085011c9173ec9adb00317e5e1a7a606de4b48af76511af4e1d89eb78b7c68ee1a7ef7e5f19384a2cf584") perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x656ee910, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 17.326702268s ago: executing program 3 (id=14398): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x34, 0x0, 0x8001, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000340)}, 0x40) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 16.421052284s ago: executing program 0 (id=14401): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003b, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a096", 0x2}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000026000000f1f12337b4a3c74bb63ca6116cabadf79ddb835b0b0bb0b259425a5b2da6a45b83138e8899cda81925fe00139c61b7803213615b79f4d677c9f5d753176d7276e074a4fa6268647085f5884343aa5e310ae7dcc018d09526a709ad63ea048fb11c41ee6f4d90e730c76dc03b3ba08f3b967696d903ed43d46603d344f90156452fdf7cd82d07be7134689884a77d091a002dec6efda5c86a87437941261e2c949b81fcbd268d8822baa364d09cb9d8cf29c4c26aca0601641b8d808aae751055a72ed213ec5ec4cecd30dad14f04b2dab256c6d75c2142e7ebe7eef8d47fee70771aaae7cea63ee4f4d40c9f928e56d1e617d0343c406c8b86f681215d0e70ce8972602dac860461efc4f2ac31df438ae084837976e6b88fc29017e10c4e9bd0704b3702c593a0c016e9b556135370ba2d955de9d6e5400b08aa441684aaaebae359eb98a3d2e1d2a165ec8b621585962bbb49e422efabc8b632f28ec60d0d723f09755f731f343b4dce3b933068088be9022627c1cbf51aa6d82ff8a92f38b1bd8f87c9306ebb874b2ce0feec7c702507f7b7c471757ee4aee793", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg(r8, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000) socket$kcm(0xa, 0x922000000003, 0x11) 14.178346716s ago: executing program 0 (id=14407): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x3, 0x5, 0x0, 0x0, 0x5, 0x60470, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x4, @perf_config_ext={0x86, 0x7}, 0x103c20, 0x1, 0xf7ffffff, 0x0, 0xf, 0x0, 0x3f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694", 0x8e}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 13.732621589s ago: executing program 0 (id=14409): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x3a}, 0x28) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224", 0x12}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x5dc0131d6a9f168f) r6 = syz_clone(0x0, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000640)="d0f609f06697f6acbe22fe8f7f1399cad43f99fb4cd23ada5f70b1c85ccdd8392a0085011c9173ec9adb00317e5e1a7a606de4b48af76511af4e1d89eb78b7c68ee1a7ef7e5f19384a2cf58473") perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x656ee910, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 11.926545909s ago: executing program 1 (id=14414): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="000026d4f47f0000000000000100000000000000000000001400000000000000000000000200000000000000000000e0ea2f79395f13e000000000000200000000000000000000001100000000000010000000000100000000000000000000001100000000000000020000000000000000000000000000000000000000000008000000070000008300000000790000206a77bdfca1965c5b9172f99e61d428d18fed29"], 0xf}, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a25f590000000000001c0000001c000000020000000e0000000000001104000000050000000f00000000000008000010000000"], 0x0, 0x36, 0x0, 0x1, 0x1, 0x10000}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32=r2, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.879949022s ago: executing program 2 (id=14415): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003b, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a096", 0x2}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg(r8, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000) socket$kcm(0xa, 0x922000000003, 0x11) 11.058145333s ago: executing program 0 (id=14416): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b000000000000000001"], 0xfe1b) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f00000012c0)=""/4117, 0x26, 0x1015, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r3, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15a4831324d235709561ad8", 0x10}], 0x1}, 0x20040000) 10.93038712s ago: executing program 1 (id=14417): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x3, 0x5, 0x0, 0x0, 0x5, 0x60470, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x4, @perf_config_ext={0x86, 0x7}, 0x103c20, 0x1, 0xf7ffffff, 0x0, 0xf, 0x0, 0x3f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800000000000000", 0x5c}, {&(0x7f00000000c0)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bfe64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183", 0xa6}, {&(0x7f0000000280)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5950020", 0xd4}, {&(0x7f0000000380)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d17897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fc9833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.697331441s ago: executing program 2 (id=14418): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01", 0x15}], 0x1}, 0x4004) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.53519911s ago: executing program 1 (id=14419): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x16}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e747", 0x43}], 0x1}, 0x4040804) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0xa) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000640)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x0, 0x0}, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x23, &(0x7f00000006c0)=@raw=[@printk={@llu}, @ldst={0x1, 0x1, 0x2, 0x1, 0x7, 0x10, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x2, 0xa, 0x4, 0x1ff, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x20}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x2e, &(0x7f0000000380)=""/46, 0x41000, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r3, r1], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x3}, {0x5, 0x5, 0x4, 0xc}, {0x3, 0x5, 0x5, 0xb}, {0x1, 0x3, 0x1, 0x7}, {0x2, 0x2, 0x4}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000200)='./file0\x00', r3, 0x4000, r6}, 0x18) 10.395711607s ago: executing program 2 (id=14420): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00', @random="c24f7b36aec9"}) (fail_nth: 4) 9.669953943s ago: executing program 2 (id=14421): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)}], 0x1}, 0x20000040) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() syz_clone(0x1000400, &(0x7f0000000340)="ba", 0x1, 0x0, 0x0, &(0x7f0000000500)="b39d2d55778cefbf8521cc98c31168d53d4500935dd53e55178f26de8e3830d4ecb1272f557519cac262bf5d9d39b9726ae88617bc3c25c7e92d4cab5da816b8209f8ad6e4ed913638cd75ef33a19e789427f96265c51beb162a6e09c155a851672c2ffea1dea3a9ec922d6b413ebe22205059deea9e57827b53efe4f0381b3d20bac863d7433c76a2547dc1eeded50f3c8204523fd9b558be651315826613a72b678aff7dddbc5719ad13ac8a") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 9.390765187s ago: executing program 0 (id=14422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904021d006a04000000e8fe55a1180015000600142603600e120900040000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000d00)={0x4, &(0x7f00000007c0)=[{0xfff9, 0x7, 0x8, 0x7}, {0x7, 0xc, 0x0, 0x1}, {0x40, 0x20, 0x2, 0x3}, {0x7, 0x7, 0x0, 0x6}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000080", @ANYRES32=r3, @ANYBLOB="e30600"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000040000000300"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032f00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f00000001c0)="eefe5c56413db04f9a2b4575eb24d1400c9e93d6966e91cdb8a206e7c5e2a973b7a0031cf815e08ee8b689e3d578065c371310a9ce4fe0812f3c096935c2f6", &(0x7f0000000580)=""/251, &(0x7f0000000680)="116461c68db4f41353d86404f0346a204b92f8a86e60d2af48e37343354a6b0476e6f0cd9bf8e64f7f42b8fea7e017263993757040420908a4b35e161eae9720020f5957786c3f5f28361c09df646a205aabf77aa0154933eb8a6a0c3ab739d8caad704b87f8aa063ae87e55ee89d5c458a94c4d50e55f7f73a4fd9e339e85fc8eb906cba7c4b3eadd46460dee52a66e6b016d7be3a0", &(0x7f0000000740)="0dd0da84bc32dfcafbde0938bde1abbe852189021decf0afcb4cdbdd82f9529548e9ded90d7ec6d4b8b0b22a09f5507341e517f5e4c7761b009b7013cbbf29c84a7051c30a74926c57937dea5236e3064656e9a9fcc521549f423077c4bb2151710c3a5b05cd78", 0xc06b, r9}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r9, 0x27, 0x14, 0x0, &(0x7f0000000280)="f8ad48cc02cb29efc8007f590800cfd601006e30", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$kcm(0x29, 0x7, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f900"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r12, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback=r11, r13, 0x2, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=r10, r14}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map=r9, r9, 0x25, 0x2013, r7, @value=r9, @void, @void, @void, r14}, 0x20) write$cgroup_subtree(r9, &(0x7f0000000180)={[{0x2b, 'rlimit'}, {0x2b, 'perf_event'}, {0x2b, 'io'}]}, 0x18) 9.015492286s ago: executing program 1 (id=14423): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x0, 0x45, 0xf3, &(0x7f0000000340)="58760e9d7258ad733ec12fbd20542a351961205412c03bd4489f2dc63544c96a67dd0def00cb120a8cb62cd46ee17217cd7b3909ae420bbb1e47e44f6a3949cb823853ef1f", &(0x7f0000000680)=""/243, 0xfffffffa, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x9, 0x0, 0xfffff801}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x1a, &(0x7f0000000880)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x9, 0x85, &(0x7f00000009c0)=""/133, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0xfffffffc, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0x3, 0x4, 0xd, 0x3}, {0x1, 0x4000005, 0xa, 0xb}, {0x5, 0x3, 0x80000000}], 0x10, 0x8000}, 0x94) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x1, 0x3, 0x5, 0x0, 0x2, 0x24000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000280), 0xd}, 0x114000, 0x101, 0x2, 0x2, 0x3, 0x5, 0x6, 0x0, 0x14000000, 0x0, 0x6}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$kcm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000500)=r6, 0x4) perf_event_open$cgroup(&(0x7f0000000800)={0x6, 0x80, 0x0, 0x2, 0x80, 0x2, 0x0, 0x5, 0x20000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x2000, 0x807, 0xfffffbff, 0x2, 0xffffffff, 0xfffffff8, 0x7, 0x0, 0xb97, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x4, r6, 0x7) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 8.305089801s ago: executing program 2 (id=14424): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x3a}, 0x28) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224", 0x12}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x5dc0131d6a9f168f) r6 = syz_clone(0x0, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000640)="d0f609f06697f6acbe22fe8f7f1399cad43f99fb4cd23ada5f70b1c85ccdd8392a0085011c9173ec9adb00317e5e1a7a606de4b48af76511af4e1d89eb78b7c68ee1a7ef7e5f19384a2cf58473") perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x656ee910, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 7.689660243s ago: executing program 1 (id=14425): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="000026d4f47f0000000000000100000000000000000000001400000000000000000000000200000000000000000000e0ea2f79395f13e000000000000200000000000000000000001100000000000010000000000100000000000000000000001100000000000000020000000000000000000000000000000000000000000008000000070000008300000000790000206a77bdfca1965c5b9172f99e61d428d18fed29"], 0xf}, 0x0) socket$kcm(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a25f590000000000001c0000001c000000020000000e0000000000001104000000050000000f00000000000008000010000000"], 0x0, 0x36, 0x0, 0x1, 0x1, 0x10000}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32=r2, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.458669975s ago: executing program 2 (id=14426): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)=0x604) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4000003b, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a096", 0x2}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000030000000500"/28], 0x50) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) recvmsg(r8, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x40000000) socket$kcm(0xa, 0x922000000003, 0x11) 1.500041394s ago: executing program 32 (id=14398): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x20, 0x0, 0xc, 0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) syz_clone(0x45004400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=0x1, 0x34, 0x0, 0x8001, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000340)}, 0x40) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=14428): recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/232, 0xe8}], 0x2, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x102) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0xf5, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000580)=0x7) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f00000007c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000d80)="1617cb0c1b3451ffe894994e8dc64b96d69cb702695dcf8ce365afdd47238b07aeb8f23db5e6f299e5505ad3b2c78a472b1f19", 0x33}, {&(0x7f0000000f80)}, {&(0x7f0000001000)="764e65723d76880c5725acf2f0d96ff79ef651f0a1f2e6ae6a91dcd0f467a2f74015f0ff7ae6148f086949cf7d160937551114e7260fc18523f2c4e2c1bac3d0f4d91a4b9f07ec9f30538d373436d08b32b86607797d5ad3903281b2255b1d701b10648b0640e96582bd", 0x6a}], 0x3, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x90}, 0x20004000) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475c", 0x71}, {0x0}, {&(0x7f0000001400)="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", 0x549}], 0x3}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r6, &(0x7f0000000300)={&(0x7f0000000200)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000002440)="147f0fc4e15f0e968bbdf8be9b9807b5f720ff71e41e02f57ab4cc7a5e581467b6055b42221fb8e57ff6fb143a0f84359210d38ae3134682addb70c1631d410090b0bfa987378d8c9fbb1869a71439a6b0ed04684a653439ba6f7a3b149f42205de79a317963de4105d327d8453571f7230dedef9a36265aa24c216c70850981bd7323c8406f74571439232ca30f6df26ca31d3168e801474196d10c11ab000b2a9218c0add0a5a2624237bbf8a759a103b49f6f44f0e738f4226e2c4d10bd84b4bda47bff2d85d52d8a0eee0abbf7109773627beedf75b906d07c95dcc01a343d1eb87d66d398d4cb224c9dd594208ae5f54a1bb5d819878206765b383d5599d5d292dea63555ebcbf9904ccaddf844f9d664a0aac744169fa1b6d60dbea504549d537f56943ac8c0c00e3d68cc965d467102a8c01ee0c295e96949f2a5018fe68ff144f67fabb63b95ec05b92c78f44e876047bcb6f8eb561a416567a9e9c6fe5ef0f219003374a54aff214374aa8579dddbbdb6a873631558ffc5c913f697824e5d9de0608475c66f14b9e91cf7310354440062133b208e8d769e427a0808c599f6df201ca26986bfc6e768f6b03b53a4fb49adeef3fd4bbc00e5a1a7ed3e7a9d87b368fd788fce521921090be4b62a2f768abffe7f89c51fb3bf3cbaa23078907d069fe17fff698d38c3abb492489829ec7d2b1fd3f57c6b27162405375df221482f3078e11ed8a11109b11fd7cde16d843398e755d7d726adb4263998e040e6926cdf750489a2cd0368a894c40b86701b815a4c1edb4b3ca1a9a9744765a099622e217255ce1c2985fb8e12d698e40edc8703efbfaa20931fc8811c318d745d4b41a6ca4d83a84fd9ddfe6f5ee0e7fdcfd4111cf5ad2972c55e7a57dc618bd420fedc6e8df359116d3ad44e4888a755d941b126e33250373078d62b1c87e2c2fdcb38efa0dbdca6f61eb37b20b9f6c901414454555dd901fadb87aa160d23eed675ad8c2ff8d17294451a129f104c678d21e98f581bdcefbf8aa7138da22a4df7b7fa335594c3e94c57cfa9ac0ed495c1e6eea029c0953b9a4a6eacbfbcdab0ea9a4dd1c13638b42720be7ea73b1192908c1f18b0d64146cd5f1a6ea38c8a86e984601ebd8261e515b86f1e492f53a262804c542e0b591f63df28c3c9022a3fed8255f321eafe97da773dc9ff2d5bebb417073bf9d7d49284be38e3acab6b77ed83bc59da8ba3b0dfeaa57a612b63d8fef609ebe0ec255f26e69ba373b27e3a7c26694be4b66e37b02d2a11b523d38d7ce01cbd3123dcc35b5fe0d5dd2f18989ad0c05cdd1fc73d3ceaa54e206a0f420ab98230dbf6f51d0c5ec79c421f17e6bc1a4278c9fba7d8223e50312f90ebfeab8c1e20f04550d0385d5810aa215eaa056d826e041f8bf1a9a8a69e4490f66e4e59ca3654e3223a878ed1d8b271a7ca74e202900aaf805c2203411fe71260d6fa988941ce0df23899c8c8abbd21d99845f98a98a87f285b68d76bfe25cebb0111a882e0a883a215a55172114ec2bfd1a80162cc54989992e20f94ba0b612c17bc18a128e99d5626aefe7c7527f14fa31ae58fe859d178e69b36de10b08e19f0aa856a1130b1b2516406243e5aa112f645dd6b0d7483b928c7ce7b60affa2299bcd772872730f310e159a2727755bc35bc9e52728b4d4c62bfe972b66ec23ef41f9dbf8007fdb2e706be06d7db94c85b84b183cfb38445cefa0ace257d291de7bbcd363726f26d6c379c952d93bb650bfd87fbac134a57be0b0daca198517738ebb69465a05556bc6a7fd3c2262753f43a86496a11318a18583b0af291a83ba90cb93758ede3b07a38a9ad582d0a00364ca825b939a080877db4db67bb098966ba2f88e2b3846fe7e50feaf8a14f1bb3b80bdcd8756b6cee6c74fb1e1f235781b797a28b8cead433dc51bb5377e51216b10ae9635f21527d476c7d24b03883e02f39fd40be9b184645b5a5829d3b1402740aa428949297c709d4246e6dae43747692329a19cea21d08f0924463d9390f1c11ca947226c8cd871f23a1a0d240704cc3d94c4a5fe0d121f8cd1e62d9392b77dcf7990cabae92d2ab3867023f6dc7518d9c64bbd9e36cb595ae42d8fb64990d24191bee952a1d9a62ae4b506648e1ec19452ccff00db21debe28ad1b0ea1108ac137284679292a60fcef42d35695eadbcb62561074e96771fd74c11a98ef7c34e31005395bbd2b988dbdde81809acc36ac915fe8a71b8e5d6c485891ab48fd43d9d8d013f76198f8bad2e8998bd6a0d824131bc97a5f47c3e4dad90c7edcc63ba28ac3b0d46f6361e71a266d7bc0daf3b4bb8705159ec460f183a4589d1c9d9bad2a5c0e6f6801db1b4ca50593c25aaf7eb4cab36a73d197be572302d7fec75d95e8733b260852c9cab9da68ff1f628bd3ab331c84c76cc04944a93ef755b55dbab331ec3457c08ff097dad7bc9e4b1e2ed284bbefc1398f6ea93091435b3a4bd9a11e77502aa3a31f65d3cfa94217180ac414be1a50b773dd525a00c9c05803f8bd07a1c53cd9b90a2514c10a50aafc82d1a6f374f9951ade6aa89f590ed10318c6aa9a7d549a1454554762e914ac5fa8657f3c102f36f4fb56e984d240633bf16dd5f55487cc591785dd70153a04669a23de257fbe098634ed355dd8cf8f056ed536246affd2f8630de56cc70f9859a12168feb887ea0e4769eac670e08b5d4f48458f0d9d7a02176d344cfef8bf8619c852a2fcddc9007a955196c0cf43186cf60b7172414b1149a059688af37841765eb7107e63dd7e7f02283b9a6a200122199d4844593e34928458317cfa594531c6ace37098b32ad82a6b9c17e3dee550a81bae38605e7bc6458414c88ac46d758b3df89930a9bcd76593776", 0x800}], 0x1, &(0x7f00000008c0)=[{0x48, 0x84, 0x3, "0e26b83c8a55634fb39c073fd4e05eef96c96cf605d8879adc259aaafdb0b21817c9edcf931656443621ba08f4cb9dcfab"}, {0x10, 0x10c, 0x180}], 0x58}, 0x4008000) sendmsg$kcm(r6, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0xfffd}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000640)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="0fb7a3c0a25c73a87ac61326ff2bfa61b5ec588ad21ea9", 0x17}], 0x1, &(0x7f0000003100)=ANY=[@ANYBLOB="e00000000000000014010000f7ffffffa4d6b5f12023803eaecd2bb42143f46750d4a8142056a65622be4950647f811edca0b1b41845708f004d74c53d82466213f20c353722b348cba2639e7c8359046375584a857b1bc0ae516b32684db80c7fefc5c000e3d48647e138d99b865ac74e96b7458cdb76105a9b36cc31b02c955f84a522e7187a748e3ac36ba8c4dd8141aa500eab59efb8a9496cda6fdc65dc6becef8f3c262c609566aafa490464e6f31483d96d73085b601c8808d3b60c54172126b411bcdfa6af421f0ac256665e6c602d651b2f2749f3cf70c84d9d00001001000000000000170100000000000026ebc60f5b23f561b1654e1fc1f1d4dda053a349795d9dc3afd9a84f46108ab219e7aa0f9ab23f92254e60e2ecf4326f73c5a79cfe0ffbc0e7a1da97a3d13a2d7063c5ccf4f458b9a46bc18892519365c683a5efdd7cf21617426e745334bbe6d880386c18a7902f364a9f4004237a8447a9a93624f4df647d37fcd832840caafa2097f6f0f0a0e8b4851a899b350b86d9f39b46e0787fbb07ae956bde5d9f34429b0df7cdea914fe10e391d6931039d1cb66fb269b592c545cbb33c337a38888d984a57345e58a1d94dd16a049c23a05dbde8a950001b5aebceabc212ffb982557135402a070ca00023a9aae6648b02375ab4b6711c4458f356000000000000c0000000000000000b01000048000000f482e50d412134ac5520ace70415aa875192446cd8eab52c8c35da55101ca2940072ea4694fa305b27c8a1846b1019160f51d54d84af36c8c250d85d42b5eb9ad49792648666bb4dbd7c3e2f64cf1d585a0a26f6f1ed0b4f495581de925d929d1e4e8abfbd35887934e6e13a3525c5a279afd984912050bb379b98d6c8caf81b5728c3843b32291dfcb3c2ba7826d4b83ae558f1bd5d9a3bdf418c2e442243ffc562965c5cb962aeb04eeca000000000000000010000000000000d010000010000004470401c7ace408055eb35c3baf53b9d1538b84e3ae7daf8cbb2a4ec6ad8919e0dd24ed9236b819597832faac769f0a214379d8810131d8c3e66f0579d6b25a64590c261d8193dfbc65c7a4e9d8503446576cb3da1fa7d5c2db55c78875f6ed49d7e47600dea8757e24d1a0e6e45a6c746465dbe88ec52625ee4d3afe8189311fba6b71002d70bc08f2d6780757bb103b39fde5d12b52049259053181d38413363ecded347e467043fc0f312b90c707516b3dfe02ceaa825270bba3061ce27320f0445122c4dce8b4ad0d705349ffd39677d15822baa613f67f62b52e8ab2515caccef36e1331e3ef2c9ac929efd0000380000000000000004010000000800007cb779ad9ecb2eb6e26c34c520ba2379f10b4283efe22e4894baa0c178eab679e000000000000000d800000000000000110c9bbb00000000f9340772efbba244d41f5eac27a9075a5ffc5e1cdb77fcae66cf18860df2943dbd52af2b840b5082a77e7a5ec3aec2c5fff5d0acad2f120d14e350b68198f003c62e93c7b36113b51a60ad3f3ea21a6a016aa76f00324d35695914528a58461740dd5e87a388ebdf4fe83b3cbbe20a42133a31bf77014aabd868d27d7401882f92020765c8383a489a02458254979933f4f4cc6c19e94845a5fd79485fcbe06b15063fb941ca9fbba24c14bc2d3f606cdacdd2399c63e6e7560aed82e89e46d8d30308a4f500a5be9a06036d5c00b72f1653160056e0e91c6bbb1b0781037f04cc55398c70050da1a398636a575672fc7e7f725adb2a2aa1fa36927cf8e707eb9388a41fa21ca1d9920ac3897a34be4081dd3f091075fe1e9d27e96cbece04cb3c943f752598e2f3cd034f8165ee39e72aeaa1275e79584d7e8dabfebb118d7b3dd582003e"], 0x4c0}, 0x20008880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): _info+0x20/0x20 [ 2588.881382][T15228] ? load_image+0x400/0x400 [ 2588.885950][T15228] ? perf_trace_lock_acquire+0x104/0x410 [ 2588.891640][T15228] ? verify_lock_unused+0x140/0x140 [ 2588.896890][T15228] ? perf_trace_lock_acquire+0x104/0x410 [ 2588.902596][T15228] should_fail_ex+0x39d/0x4d0 [ 2588.907352][T15228] should_failslab+0x9/0x20 [ 2588.911949][T15228] slab_pre_alloc_hook+0x59/0x310 [ 2588.917052][T15228] kmem_cache_alloc+0x5a/0x2d0 [ 2588.921873][T15228] ? skb_clone+0x1eb/0x370 [ 2588.926345][T15228] skb_clone+0x1eb/0x370 [ 2588.930649][T15228] __netlink_deliver_tap+0x41c/0x830 [ 2588.936030][T15228] ? netlink_deliver_tap+0x2e/0x1b0 [ 2588.941412][T15228] netlink_deliver_tap+0x19c/0x1b0 [ 2588.946600][T15228] netlink_unicast+0x72c/0x8d0 [ 2588.951448][T15228] netlink_sendmsg+0x8d0/0xbf0 [ 2588.956284][T15228] ? netlink_getsockopt+0x590/0x590 [ 2588.961574][T15228] ? aa_sock_msg_perm+0x94/0x150 [ 2588.966612][T15228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2588.971960][T15228] ? security_socket_sendmsg+0x80/0xa0 [ 2588.977476][T15228] ? netlink_getsockopt+0x590/0x590 [ 2588.982743][T15228] ____sys_sendmsg+0x5ba/0x960 [ 2588.987587][T15228] ? __asan_memset+0x22/0x40 [ 2588.992233][T15228] ? __sys_sendmsg_sock+0x30/0x30 [ 2588.997302][T15228] ? __import_iovec+0x5f2/0x850 [ 2589.002236][T15228] ? import_iovec+0x73/0xa0 [ 2589.006794][T15228] ___sys_sendmsg+0x2a6/0x360 [ 2589.011528][T15228] ? __sys_sendmsg+0x2a0/0x2a0 [ 2589.016486][T15228] ? __lock_acquire+0x7d40/0x7d40 [ 2589.021597][T15228] __se_sys_sendmsg+0x1c2/0x2b0 [ 2589.026507][T15228] ? __x64_sys_sendmsg+0x80/0x80 [ 2589.031516][T15228] ? lockdep_hardirqs_on+0x98/0x150 [ 2589.036786][T15228] do_syscall_64+0x55/0xa0 [ 2589.041363][T15228] ? clear_bhb_loop+0x40/0x90 [ 2589.046109][T15228] ? clear_bhb_loop+0x40/0x90 [ 2589.050840][T15228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2589.056782][T15228] RIP: 0033:0x7f5c1219c799 [ 2589.061243][T15228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2589.080898][T15228] RSP: 002b:00007f5c12fea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2589.089372][T15228] RAX: ffffffffffffffda RBX: 00007f5c12416090 RCX: 00007f5c1219c799 [ 2589.097402][T15228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2589.105423][T15228] RBP: 00007f5c12fea090 R08: 0000000000000000 R09: 0000000000000000 [ 2589.113445][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2589.121457][T15228] R13: 00007f5c12416128 R14: 00007f5c12416090 R15: 00007ffdcf3d0b68 [ 2589.129501][T15228] [ 2590.063228][T15240] netlink: 'syz.0.13285': attribute type 21 has an invalid length. [ 2590.072031][T15240] netlink: 'syz.0.13285': attribute type 6 has an invalid length. [ 2590.097148][T15240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13285'. [ 2590.536768][T15251] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13289'. [ 2590.661259][T15249] netlink: 'syz.3.13287': attribute type 21 has an invalid length. [ 2590.714634][T15249] netlink: 'syz.3.13287': attribute type 6 has an invalid length. [ 2590.722864][T15249] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13287'. [ 2590.816741][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.823147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.023887][T15254] netlink: 'syz.1.13290': attribute type 39 has an invalid length. [ 2591.850826][T15260] FAULT_INJECTION: forcing a failure. [ 2591.850826][T15260] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.910595][T15260] CPU: 1 PID: 15260 Comm: syz.3.13292 Not tainted syzkaller #0 [ 2591.918322][T15260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2591.928423][T15260] Call Trace: [ 2591.931744][T15260] [ 2591.934712][T15260] dump_stack_lvl+0x18c/0x250 [ 2591.939453][T15260] ? show_regs_print_info+0x20/0x20 [ 2591.944743][T15260] ? load_image+0x400/0x400 [ 2591.949304][T15260] ? __might_sleep+0xe0/0xe0 [ 2591.953940][T15260] ? __lock_acquire+0x7d40/0x7d40 [ 2591.959019][T15260] should_fail_ex+0x39d/0x4d0 [ 2591.963755][T15260] should_failslab+0x9/0x20 [ 2591.968406][T15260] slab_pre_alloc_hook+0x59/0x310 [ 2591.973485][T15260] ? apparmor_sk_alloc_security+0x77/0x100 [ 2591.979346][T15260] __kmem_cache_alloc_node+0x53/0x250 [ 2591.984790][T15260] ? apparmor_sk_alloc_security+0x77/0x100 [ 2591.990640][T15260] kmalloc_trace+0x2a/0xe0 [ 2591.995103][T15260] apparmor_sk_alloc_security+0x77/0x100 [ 2592.000765][T15260] security_sk_alloc+0x6e/0xa0 [ 2592.005561][T15260] sk_prot_alloc+0x101/0x210 [ 2592.010185][T15260] ? sk_alloc+0x24/0x360 [ 2592.014467][T15260] sk_alloc+0x3a/0x360 [ 2592.018559][T15260] ? bpf_ctx_init+0x163/0x1a0 [ 2592.023259][T15260] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 2592.028861][T15260] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 2592.034268][T15260] ? __fget_files+0x28/0x4b0 [ 2592.038888][T15260] ? __fget_files+0x28/0x4b0 [ 2592.043519][T15260] ? __fget_files+0x43d/0x4b0 [ 2592.048251][T15260] ? cpu_online+0x60/0x60 [ 2592.052635][T15260] bpf_prog_test_run+0x321/0x390 [ 2592.057618][T15260] __sys_bpf+0x49d/0x890 [ 2592.061904][T15260] ? bpf_link_show_fdinfo+0x390/0x390 [ 2592.067339][T15260] ? lock_chain_count+0x20/0x20 [ 2592.072245][T15260] __x64_sys_bpf+0x7c/0x90 [ 2592.076693][T15260] do_syscall_64+0x55/0xa0 [ 2592.081143][T15260] ? clear_bhb_loop+0x40/0x90 [ 2592.085847][T15260] ? clear_bhb_loop+0x40/0x90 [ 2592.090604][T15260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2592.096529][T15260] RIP: 0033:0x7fa27719c799 [ 2592.100972][T15260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2592.120611][T15260] RSP: 002b:00007fa278053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2592.129094][T15260] RAX: ffffffffffffffda RBX: 00007fa277416090 RCX: 00007fa27719c799 [ 2592.137105][T15260] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2592.145127][T15260] RBP: 00007fa278053090 R08: 0000000000000000 R09: 0000000000000000 [ 2592.153135][T15260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.161246][T15260] R13: 00007fa277416128 R14: 00007fa277416090 R15: 00007ffdf9047f48 [ 2592.169273][T15260] [ 2592.899538][T15262] netlink: 'syz.2.13293': attribute type 10 has an invalid length. [ 2596.748674][T15284] netlink: 'syz.2.13300': attribute type 21 has an invalid length. [ 2596.761039][T15284] netlink: 'syz.2.13300': attribute type 6 has an invalid length. [ 2596.793663][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13300'. [ 2597.080375][T15297] netlink: 'syz.1.13303': attribute type 39 has an invalid length. [ 2597.784699][T15311] netlink: 'syz.1.13307': attribute type 10 has an invalid length. [ 2600.104455][T15325] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13312'. [ 2600.518883][T15325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2600.604408][T15325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2600.698364][T15325] bond0 (unregistering): Released all slaves [ 2600.916859][T15333] netlink: 'syz.1.13313': attribute type 21 has an invalid length. [ 2600.954000][T15333] netlink: 'syz.1.13313': attribute type 6 has an invalid length. [ 2601.004738][T15333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13313'. [ 2601.288623][T15341] netlink: 'syz.0.13323': attribute type 21 has an invalid length. [ 2601.303793][T15341] netlink: 'syz.0.13323': attribute type 6 has an invalid length. [ 2601.311899][T15341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13323'. [ 2601.539758][T15345] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13316'. [ 2601.662538][T15345] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2601.789687][T15350] netlink: 'syz.2.13317': attribute type 10 has an invalid length. [ 2601.890147][T15350] netlink: 55 bytes leftover after parsing attributes in process `syz.2.13317'. [ 2602.301332][T15345] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13316'. [ 2602.742357][T15361] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13318'. [ 2602.793848][T15361] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2603.201277][T15360] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13318'. [ 2605.049927][T15374] netlink: 'syz.3.13322': attribute type 39 has an invalid length. [ 2606.102778][T15390] netlink: 'syz.2.13328': attribute type 21 has an invalid length. [ 2606.253422][T15390] netlink: 'syz.2.13328': attribute type 6 has an invalid length. [ 2606.366026][T15390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13328'. [ 2606.432756][T15392] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13329'. [ 2606.481619][T15392] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2606.628758][T15396] FAULT_INJECTION: forcing a failure. [ 2606.628758][T15396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2606.740554][T15396] CPU: 1 PID: 15396 Comm: syz.1.13330 Not tainted syzkaller #0 [ 2606.748194][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2606.758385][T15396] Call Trace: [ 2606.761702][T15396] [ 2606.764671][T15396] dump_stack_lvl+0x18c/0x250 [ 2606.769404][T15396] ? show_regs_print_info+0x20/0x20 [ 2606.774657][T15396] ? load_image+0x400/0x400 [ 2606.779221][T15396] ? __might_fault+0xaa/0x120 [ 2606.783952][T15396] ? __lock_acquire+0x7d40/0x7d40 [ 2606.789036][T15396] should_fail_ex+0x39d/0x4d0 [ 2606.793784][T15396] _copy_from_user+0x2f/0xe0 [ 2606.798445][T15396] __sys_bpf+0x23e/0x890 [ 2606.802737][T15396] ? bpf_link_show_fdinfo+0x390/0x390 [ 2606.808176][T15396] ? lock_chain_count+0x20/0x20 [ 2606.813092][T15396] __x64_sys_bpf+0x7c/0x90 [ 2606.817565][T15396] do_syscall_64+0x55/0xa0 [ 2606.822045][T15396] ? clear_bhb_loop+0x40/0x90 [ 2606.826770][T15396] ? clear_bhb_loop+0x40/0x90 [ 2606.831499][T15396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2606.837441][T15396] RIP: 0033:0x7f59c1f9c799 [ 2606.841896][T15396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2606.861553][T15396] RSP: 002b:00007f59c01f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2606.870022][T15396] RAX: ffffffffffffffda RBX: 00007f59c2216090 RCX: 00007f59c1f9c799 [ 2606.878039][T15396] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2606.886056][T15396] RBP: 00007f59c01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2606.894069][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2606.902078][T15396] R13: 00007f59c2216128 R14: 00007f59c2216090 R15: 00007ffcfad1c958 [ 2606.910100][T15396] [ 2606.970662][T15392] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13329'. [ 2608.420824][T15406] netlink: 'syz.3.13332': attribute type 10 has an invalid length. [ 2608.488419][T15406] netlink: 55 bytes leftover after parsing attributes in process `syz.3.13332'. [ 2610.773695][T15413] netlink: 'syz.2.13334': attribute type 39 has an invalid length. [ 2611.226300][T15422] netlink: 'syz.1.13337': attribute type 27 has an invalid length. [ 2611.259018][T15422] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13337'. [ 2611.331520][T15422] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2611.922270][T15420] delete_channel: no stack [ 2612.297797][T15429] netlink: 'syz.3.13339': attribute type 39 has an invalid length. [ 2612.552796][T15432] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13340'. [ 2612.562746][T15432] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2612.997719][T15432] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13340'. [ 2613.325236][T15448] netlink: 'syz.0.13346': attribute type 39 has an invalid length. [ 2613.987012][T15457] netlink: 'syz.3.13350': attribute type 21 has an invalid length. [ 2614.001333][T15453] netlink: 'syz.0.13348': attribute type 10 has an invalid length. [ 2614.039987][T15453] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13348'. [ 2614.165898][T15462] FAULT_INJECTION: forcing a failure. [ 2614.165898][T15462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2614.184268][T15462] CPU: 1 PID: 15462 Comm: syz.1.13351 Not tainted syzkaller #0 [ 2614.191977][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2614.202124][T15462] Call Trace: [ 2614.205492][T15462] [ 2614.208525][T15462] dump_stack_lvl+0x18c/0x250 [ 2614.213319][T15462] ? show_regs_print_info+0x20/0x20 [ 2614.218625][T15462] ? load_image+0x400/0x400 [ 2614.223253][T15462] ? __lock_acquire+0x7d40/0x7d40 [ 2614.228387][T15462] ? snprintf+0xe9/0x140 [ 2614.232748][T15462] should_fail_ex+0x39d/0x4d0 [ 2614.237569][T15462] _copy_to_user+0x2f/0xa0 [ 2614.242107][T15462] simple_read_from_buffer+0xe7/0x150 [ 2614.247622][T15462] proc_fail_nth_read+0x1e8/0x260 [ 2614.252764][T15462] ? proc_fault_inject_write+0x360/0x360 [ 2614.258482][T15462] ? fsnotify_perm+0x271/0x5e0 [ 2614.263344][T15462] ? proc_fault_inject_write+0x360/0x360 [ 2614.269068][T15462] vfs_read+0x28b/0x970 [ 2614.273348][T15462] ? kernel_read+0x1e0/0x1e0 [ 2614.278036][T15462] ? __fget_files+0x28/0x4b0 [ 2614.282721][T15462] ? __fget_files+0x28/0x4b0 [ 2614.287396][T15462] ? __fget_files+0x43d/0x4b0 [ 2614.292193][T15462] ? __fdget_pos+0x2a3/0x330 [ 2614.296853][T15462] ? ksys_read+0x75/0x260 [ 2614.301280][T15462] ksys_read+0x150/0x260 [ 2614.305622][T15462] ? vfs_write+0x990/0x990 [ 2614.310126][T15462] ? lockdep_hardirqs_on+0x98/0x150 [ 2614.315414][T15462] do_syscall_64+0x55/0xa0 [ 2614.319894][T15462] ? clear_bhb_loop+0x40/0x90 [ 2614.324672][T15462] ? clear_bhb_loop+0x40/0x90 [ 2614.329426][T15462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2614.335377][T15462] RIP: 0033:0x7f59c1f5cfce [ 2614.339859][T15462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2614.359529][T15462] RSP: 002b:00007f59c2d71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2614.368102][T15462] RAX: ffffffffffffffda RBX: 00007f59c2d726c0 RCX: 00007f59c1f5cfce [ 2614.376128][T15462] RDX: 000000000000000f RSI: 00007f59c2d720a0 RDI: 000000000000000a [ 2614.384150][T15462] RBP: 00007f59c2d72090 R08: 0000000000000000 R09: 0000000000000000 [ 2614.392169][T15462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2614.400189][T15462] R13: 00007f59c2216038 R14: 00007f59c2215fa0 R15: 00007ffcfad1c958 [ 2614.408278][T15462] [ 2614.841225][T15455] netlink: 'syz.2.13349': attribute type 10 has an invalid length. [ 2614.880241][T15455] team0: Port device geneve1 added [ 2614.903225][T15470] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13352'. [ 2614.944139][T15470] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2615.089244][T15470] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13352'. [ 2615.381066][T15480] netlink: 'syz.1.13356': attribute type 39 has an invalid length. [ 2617.360652][T15499] netlink: 'syz.2.13361': attribute type 10 has an invalid length. [ 2617.626010][T15502] netlink: 'syz.3.13362': attribute type 21 has an invalid length. [ 2617.670867][T15508] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13364'. [ 2617.697792][T15508] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2617.788595][T15508] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13364'. [ 2617.970255][T15515] netlink: 'syz.2.13367': attribute type 39 has an invalid length. [ 2619.368513][T15538] netlink: 'syz.0.13373': attribute type 10 has an invalid length. [ 2619.772203][T15544] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13376'. [ 2619.859385][T15544] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2620.143899][T15544] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13376'. [ 2620.839036][T15554] netlink: 'syz.1.13378': attribute type 39 has an invalid length. [ 2620.859993][T15558] netlink: 'syz.0.13379': attribute type 21 has an invalid length. [ 2620.999846][T15565] netlink: 'syz.2.13382': attribute type 27 has an invalid length. [ 2621.009796][T15565] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13382'. [ 2621.020193][T15565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2621.870386][T15564] delete_channel: no stack [ 2622.099604][T15577] netlink: 'syz.0.13385': attribute type 10 has an invalid length. [ 2623.331588][T15593] netlink: 'syz.1.13391': attribute type 39 has an invalid length. [ 2623.656316][T15601] netlink: 'syz.2.13393': attribute type 21 has an invalid length. [ 2624.436929][T15613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13396'. [ 2624.493528][T15613] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2624.589560][T15615] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13396'. [ 2625.561243][T15627] netlink: 'syz.2.13398': attribute type 10 has an invalid length. [ 2626.124599][T15637] netlink: 'syz.2.13402': attribute type 39 has an invalid length. [ 2626.150929][T15633] netlink: 'syz.0.13409': attribute type 10 has an invalid length. [ 2626.420625][T15645] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13405'. [ 2626.446945][T15645] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2626.561797][T15649] netlink: 'syz.2.13406': attribute type 21 has an invalid length. [ 2627.110620][T15647] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13405'. [ 2628.012774][T15667] netlink: 'syz.3.13413': attribute type 10 has an invalid length. [ 2628.507050][T15673] FAULT_INJECTION: forcing a failure. [ 2628.507050][T15673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2628.539430][T15673] CPU: 0 PID: 15673 Comm: syz.1.13414 Not tainted syzkaller #0 [ 2628.547078][T15673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2628.557161][T15673] Call Trace: [ 2628.560462][T15673] [ 2628.563416][T15673] dump_stack_lvl+0x18c/0x250 [ 2628.568131][T15673] ? show_regs_print_info+0x20/0x20 [ 2628.573362][T15673] ? load_image+0x400/0x400 [ 2628.577894][T15673] ? __lock_acquire+0x7d40/0x7d40 [ 2628.582948][T15673] ? snprintf+0xe9/0x140 [ 2628.587222][T15673] should_fail_ex+0x39d/0x4d0 [ 2628.591934][T15673] _copy_to_user+0x2f/0xa0 [ 2628.596384][T15673] simple_read_from_buffer+0xe7/0x150 [ 2628.601791][T15673] proc_fail_nth_read+0x1e8/0x260 [ 2628.606855][T15673] ? proc_fault_inject_write+0x360/0x360 [ 2628.612522][T15673] ? fsnotify_perm+0x271/0x5e0 [ 2628.617313][T15673] ? proc_fault_inject_write+0x360/0x360 [ 2628.622978][T15673] vfs_read+0x28b/0x970 [ 2628.627171][T15673] ? kernel_read+0x1e0/0x1e0 [ 2628.631789][T15673] ? __fget_files+0x28/0x4b0 [ 2628.636405][T15673] ? __fget_files+0x28/0x4b0 [ 2628.641021][T15673] ? __fget_files+0x43d/0x4b0 [ 2628.645732][T15673] ? __fdget_pos+0x2a3/0x330 [ 2628.650357][T15673] ? ksys_read+0x75/0x260 [ 2628.654719][T15673] ksys_read+0x150/0x260 [ 2628.659000][T15673] ? vfs_write+0x990/0x990 [ 2628.663449][T15673] ? lockdep_hardirqs_on+0x98/0x150 [ 2628.668686][T15673] do_syscall_64+0x55/0xa0 [ 2628.673141][T15673] ? clear_bhb_loop+0x40/0x90 [ 2628.677856][T15673] ? clear_bhb_loop+0x40/0x90 [ 2628.682558][T15673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2628.688478][T15673] RIP: 0033:0x7f59c1f5cfce [ 2628.692914][T15673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2628.712555][T15673] RSP: 002b:00007f59c01f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2628.721018][T15673] RAX: ffffffffffffffda RBX: 00007f59c01f66c0 RCX: 00007f59c1f5cfce [ 2628.729019][T15673] RDX: 000000000000000f RSI: 00007f59c01f60a0 RDI: 0000000000000004 [ 2628.737053][T15673] RBP: 00007f59c01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2628.745054][T15673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2628.753058][T15673] R13: 00007f59c2216128 R14: 00007f59c2216090 R15: 00007ffcfad1c958 [ 2628.761082][T15673] [ 2629.025913][T15680] netlink: 'syz.3.13415': attribute type 39 has an invalid length. [ 2629.409639][T15688] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13419'. [ 2629.420676][T15690] netlink: 'syz.3.13420': attribute type 21 has an invalid length. [ 2629.422233][T15688] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2629.511737][T15688] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13419'. [ 2629.863389][T15701] netlink: 'syz.0.13423': attribute type 10 has an invalid length. [ 2630.334802][T15707] netlink: 'syz.0.13425': attribute type 27 has an invalid length. [ 2630.381854][T15707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13425'. [ 2630.404054][T15707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2630.597967][T15714] netlink: 'syz.3.13428': attribute type 39 has an invalid length. [ 2630.642289][T15711] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.13427'. [ 2631.095179][T15705] delete_channel: no stack [ 2631.284740][T15717] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13429'. [ 2632.065980][T15727] FAULT_INJECTION: forcing a failure. [ 2632.065980][T15727] name failslab, interval 1, probability 0, space 0, times 0 [ 2632.085588][T15727] CPU: 1 PID: 15727 Comm: syz.0.13431 Not tainted syzkaller #0 [ 2632.093215][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2632.103317][T15727] Call Trace: [ 2632.106644][T15727] [ 2632.109624][T15727] dump_stack_lvl+0x18c/0x250 [ 2632.114378][T15727] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2632.120592][T15727] ? show_regs_print_info+0x20/0x20 [ 2632.125864][T15727] ? load_image+0x400/0x400 [ 2632.130431][T15727] should_fail_ex+0x39d/0x4d0 [ 2632.135177][T15727] should_failslab+0x9/0x20 [ 2632.139734][T15727] slab_pre_alloc_hook+0x59/0x310 [ 2632.144818][T15727] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2632.150598][T15727] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2632.156367][T15727] __kmem_cache_alloc_node+0x53/0x250 [ 2632.161800][T15727] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2632.167564][T15727] __kmalloc+0xa4/0x230 [ 2632.171804][T15727] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2632.177425][T15727] tomoyo_path_number_perm+0x248/0x620 [ 2632.182936][T15727] ? tomoyo_path_number_perm+0x217/0x620 [ 2632.188684][T15727] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2632.194206][T15727] ? ktime_get+0x7f/0x280 [ 2632.198619][T15727] ? __fget_files+0x28/0x4b0 [ 2632.203268][T15727] ? __fget_files+0x28/0x4b0 [ 2632.207923][T15727] security_file_ioctl+0x70/0xa0 [ 2632.212927][T15727] __se_sys_ioctl+0x48/0x170 [ 2632.217570][T15727] do_syscall_64+0x55/0xa0 [ 2632.222121][T15727] ? clear_bhb_loop+0x40/0x90 [ 2632.226830][T15727] ? clear_bhb_loop+0x40/0x90 [ 2632.231538][T15727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2632.237460][T15727] RIP: 0033:0x7f5c1219c799 [ 2632.241912][T15727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2632.261542][T15727] RSP: 002b:00007f5c1300b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2632.269986][T15727] RAX: ffffffffffffffda RBX: 00007f5c12415fa0 RCX: 00007f5c1219c799 [ 2632.277992][T15727] RDX: 0000200000000280 RSI: 000000004030582b RDI: 0000000000000004 [ 2632.285996][T15727] RBP: 00007f5c1300b090 R08: 0000000000000000 R09: 0000000000000000 [ 2632.293995][T15727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2632.301990][T15727] R13: 00007f5c12416038 R14: 00007f5c12415fa0 R15: 00007ffdcf3d0b68 [ 2632.310025][T15727] [ 2632.347711][T15731] netlink: 'syz.2.13433': attribute type 10 has an invalid length. [ 2632.357187][T15727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2632.664537][T15742] netlink: 'syz.0.13436': attribute type 21 has an invalid length. [ 2633.533898][T15755] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13439'. [ 2633.593775][T15755] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2633.769284][T15755] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13439'. [ 2633.967306][T15763] netlink: 'syz.3.13441': attribute type 27 has an invalid length. [ 2633.994064][T15763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13441'. [ 2634.003638][T15763] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2634.030152][T15760] netlink: 'syz.0.13440': attribute type 39 has an invalid length. [ 2634.665287][T15758] delete_channel: no stack [ 2635.035373][T15775] netlink: 'syz.2.13445': attribute type 10 has an invalid length. [ 2635.357591][T15783] netlink: 'syz.1.13448': attribute type 21 has an invalid length. [ 2635.578486][T15792] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13450'. [ 2635.609551][T15792] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2635.634129][T15795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13452'. [ 2635.661934][T15795] netlink: 'syz.0.13452': attribute type 21 has an invalid length. [ 2635.677947][T15795] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.13452'. [ 2635.701439][T15795] netlink: 'syz.0.13452': attribute type 10 has an invalid length. [ 2635.730492][T15792] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13450'. [ 2635.730570][T15795] geneve0: entered promiscuous mode [ 2635.769085][T15795] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 2636.050940][T15806] netlink: 'syz.3.13453': attribute type 39 has an invalid length. [ 2636.365681][T15809] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.13454'. [ 2636.537961][T15817] netlink: 'syz.3.13455': attribute type 27 has an invalid length. [ 2636.592446][T15817] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13455'. [ 2636.647008][T15817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2636.718079][T15819] netlink: 'syz.0.13458': attribute type 10 has an invalid length. [ 2637.122912][T15826] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13461'. [ 2637.150027][T15826] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2637.240309][T15831] netlink: 'syz.2.13463': attribute type 39 has an invalid length. [ 2637.339407][T15826] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13461'. [ 2637.450946][T15836] netlink: 'syz.3.13464': attribute type 21 has an invalid length. [ 2637.502856][T15824] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13460'. [ 2638.251209][T15850] netlink: 'syz.1.13467': attribute type 27 has an invalid length. [ 2638.304094][T15850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13467'. [ 2638.342442][T15850] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2638.793001][T15847] delete_channel: no stack [ 2638.829190][T15857] netlink: 'syz.3.13469': attribute type 10 has an invalid length. [ 2638.999123][T15862] netlink: 'syz.2.13470': attribute type 27 has an invalid length. [ 2639.024730][T15862] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2639.269893][T15868] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2639.312784][T15865] FAULT_INJECTION: forcing a failure. [ 2639.312784][T15865] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.340847][T15865] CPU: 0 PID: 15865 Comm: syz.3.13472 Not tainted syzkaller #0 [ 2639.348462][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2639.358573][T15865] Call Trace: [ 2639.361897][T15865] [ 2639.364881][T15865] dump_stack_lvl+0x18c/0x250 [ 2639.369627][T15865] ? show_regs_print_info+0x20/0x20 [ 2639.374883][T15865] ? load_image+0x400/0x400 [ 2639.379442][T15865] ? __might_sleep+0xe0/0xe0 [ 2639.384088][T15865] ? __lock_acquire+0x7d40/0x7d40 [ 2639.389165][T15865] ? irqentry_enter+0x37/0x50 [ 2639.393901][T15865] should_fail_ex+0x39d/0x4d0 [ 2639.398647][T15865] should_failslab+0x9/0x20 [ 2639.403207][T15865] slab_pre_alloc_hook+0x59/0x310 [ 2639.408291][T15865] ? sk_prot_alloc+0xe7/0x210 [ 2639.413046][T15865] ? sk_prot_alloc+0xe7/0x210 [ 2639.417772][T15865] __kmem_cache_alloc_node+0x53/0x250 [ 2639.423217][T15865] ? sk_prot_alloc+0xe7/0x210 [ 2639.427946][T15865] __kmalloc+0xa4/0x230 [ 2639.432165][T15865] sk_prot_alloc+0xe7/0x210 [ 2639.436729][T15865] ? sk_alloc+0x24/0x360 [ 2639.441028][T15865] sk_alloc+0x3a/0x360 [ 2639.445141][T15865] ? bpf_ctx_init+0x163/0x1a0 [ 2639.449881][T15865] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 2639.455468][T15865] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 2639.460863][T15865] ? __fget_files+0x28/0x4b0 [ 2639.465488][T15865] ? __fget_files+0x28/0x4b0 [ 2639.470111][T15865] ? __fget_files+0x43d/0x4b0 [ 2639.474833][T15865] ? cpu_online+0x60/0x60 [ 2639.479198][T15865] bpf_prog_test_run+0x321/0x390 [ 2639.484168][T15865] __sys_bpf+0x49d/0x890 [ 2639.488439][T15865] ? bpf_link_show_fdinfo+0x390/0x390 [ 2639.493866][T15865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2639.500077][T15865] __x64_sys_bpf+0x7c/0x90 [ 2639.504529][T15865] do_syscall_64+0x55/0xa0 [ 2639.508989][T15865] ? clear_bhb_loop+0x40/0x90 [ 2639.513701][T15865] ? clear_bhb_loop+0x40/0x90 [ 2639.518410][T15865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2639.524352][T15865] RIP: 0033:0x7fa27719c799 [ 2639.528796][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2639.548451][T15865] RSP: 002b:00007fa278074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2639.556902][T15865] RAX: ffffffffffffffda RBX: 00007fa277415fa0 RCX: 00007fa27719c799 [ 2639.564901][T15865] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2639.572918][T15865] RBP: 00007fa278074090 R08: 0000000000000000 R09: 0000000000000000 [ 2639.580927][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2639.588935][T15865] R13: 00007fa277416038 R14: 00007fa277415fa0 R15: 00007ffdf9047f48 [ 2639.596960][T15865] [ 2640.708176][T15884] validate_nla: 5 callbacks suppressed [ 2640.708220][T15884] netlink: 'syz.0.13477': attribute type 21 has an invalid length. [ 2641.567111][T15895] netlink: 'syz.1.13480': attribute type 10 has an invalid length. [ 2643.304435][T15908] FAULT_INJECTION: forcing a failure. [ 2643.304435][T15908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2643.389718][T15908] CPU: 1 PID: 15908 Comm: syz.1.13484 Not tainted syzkaller #0 [ 2643.397361][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2643.407460][T15908] Call Trace: [ 2643.410767][T15908] [ 2643.413736][T15908] dump_stack_lvl+0x18c/0x250 [ 2643.418460][T15908] ? show_regs_print_info+0x20/0x20 [ 2643.423704][T15908] ? load_image+0x400/0x400 [ 2643.428239][T15908] ? __might_fault+0xaa/0x120 [ 2643.433038][T15908] ? __lock_acquire+0x7d40/0x7d40 [ 2643.438103][T15908] should_fail_ex+0x39d/0x4d0 [ 2643.442834][T15908] _copy_from_user+0x2f/0xe0 [ 2643.447467][T15908] csum_and_copy_from_iter+0x1f3/0x14a0 [ 2643.453063][T15908] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 2643.458737][T15908] ? __kmem_cache_alloc_node+0x13a/0x250 [ 2643.464432][T15908] ? __alloc_skb+0x138/0x2c0 [ 2643.469059][T15908] ? rcu_is_watching+0x15/0xb0 [ 2643.473865][T15908] ip_generic_getfrag+0x163/0x2f0 [ 2643.478922][T15908] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2643.483842][T15908] ? skb_put+0x11b/0x210 [ 2643.488113][T15908] __ip_append_data+0x2f11/0x3d40 [ 2643.493188][T15908] ? raw_send_hdrinc+0x1170/0x1170 [ 2643.498330][T15908] ? mark_lock+0x94/0x320 [ 2643.502697][T15908] ? ip_setup_cork+0x860/0x860 [ 2643.507495][T15908] ? ip_setup_cork+0x530/0x860 [ 2643.512298][T15908] ip_append_data+0x10d/0x180 [ 2643.517003][T15908] ? raw_send_hdrinc+0x1170/0x1170 [ 2643.522141][T15908] raw_sendmsg+0x15c1/0x1c00 [ 2643.526790][T15908] ? compat_raw_ioctl+0x70/0x70 [ 2643.531688][T15908] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 2643.538129][T15908] ? sock_rps_record_flow+0x19/0x3f0 [ 2643.543445][T15908] ? inet_sendmsg+0x7c/0x2f0 [ 2643.548079][T15908] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2643.553393][T15908] ? security_socket_sendmsg+0x80/0xa0 [ 2643.558885][T15908] ? inet_send_prepare+0x260/0x260 [ 2643.564035][T15908] ____sys_sendmsg+0x5ba/0x960 [ 2643.568852][T15908] ? __lock_acquire+0x7d40/0x7d40 [ 2643.573909][T15908] ? __sys_sendmsg_sock+0x30/0x30 [ 2643.578954][T15908] ? __import_iovec+0x5f2/0x850 [ 2643.583847][T15908] ? import_iovec+0x73/0xa0 [ 2643.588379][T15908] ___sys_sendmsg+0x2a6/0x360 [ 2643.593081][T15908] ? get_pid_task+0x20/0x1e0 [ 2643.597706][T15908] ? __sys_sendmsg+0x2a0/0x2a0 [ 2643.602520][T15908] ? __lock_acquire+0x7d40/0x7d40 [ 2643.607593][T15908] __se_sys_sendmsg+0x1c2/0x2b0 [ 2643.612498][T15908] ? __x64_sys_sendmsg+0x80/0x80 [ 2643.617481][T15908] ? lockdep_hardirqs_on+0x98/0x150 [ 2643.622732][T15908] do_syscall_64+0x55/0xa0 [ 2643.627190][T15908] ? clear_bhb_loop+0x40/0x90 [ 2643.631895][T15908] ? clear_bhb_loop+0x40/0x90 [ 2643.636603][T15908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2643.642534][T15908] RIP: 0033:0x7f59c1f9c799 [ 2643.646977][T15908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2643.666610][T15908] RSP: 002b:00007f59c2d72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2643.675050][T15908] RAX: ffffffffffffffda RBX: 00007f59c2215fa0 RCX: 00007f59c1f9c799 [ 2643.683044][T15908] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000003 [ 2643.691058][T15908] RBP: 00007f59c2d72090 R08: 0000000000000000 R09: 0000000000000000 [ 2643.699051][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2643.707052][T15908] R13: 00007f59c2216038 R14: 00007f59c2215fa0 R15: 00007ffcfad1c958 [ 2643.715074][T15908] [ 2643.759830][T15905] netlink: 'syz.0.13486': attribute type 39 has an invalid length. [ 2644.282471][T15909] __nla_validate_parse: 5 callbacks suppressed [ 2644.282516][T15909] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13485'. [ 2644.381015][T15909] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2644.425113][T15911] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13485'. [ 2644.506051][T15919] netlink: 'syz.1.13487': attribute type 21 has an invalid length. [ 2644.535979][T15919] netlink: 'syz.1.13487': attribute type 6 has an invalid length. [ 2644.566511][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13487'. [ 2645.133746][T15926] netlink: 'syz.0.13490': attribute type 21 has an invalid length. [ 2645.616678][T15935] netlink: 'syz.1.13493': attribute type 10 has an invalid length. [ 2646.997393][T15946] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13498'. [ 2647.025177][T15946] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2647.130041][T15946] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13498'. [ 2647.278347][T15949] netlink: 'syz.2.13496': attribute type 39 has an invalid length. [ 2648.307359][T15970] netlink: 'syz.3.13505': attribute type 10 has an invalid length. [ 2648.512739][T15977] netlink: 'syz.0.13506': attribute type 21 has an invalid length. [ 2648.682405][T15971] netlink: 'syz.2.13504': attribute type 21 has an invalid length. [ 2648.773858][T15971] netlink: 'syz.2.13504': attribute type 6 has an invalid length. [ 2648.782591][T15971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13504'. [ 2650.560132][T15985] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13509'. [ 2650.687323][T15985] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2650.777589][T15992] netlink: 'syz.3.13512': attribute type 39 has an invalid length. [ 2650.914141][T15990] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13509'. [ 2651.857576][T16008] netlink: 'syz.3.13517': attribute type 21 has an invalid length. [ 2651.866988][T16008] netlink: 'syz.3.13517': attribute type 6 has an invalid length. [ 2651.978361][T16008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13517'. [ 2652.358611][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.365100][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2654.040086][T16024] netlink: 'syz.1.13520': attribute type 21 has an invalid length. [ 2654.794532][T16036] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13524'. [ 2654.823823][T16036] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2655.266588][T16040] netlink: 'syz.3.13525': attribute type 21 has an invalid length. [ 2655.402773][T16036] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13524'. [ 2655.454793][T16040] netlink: 'syz.3.13525': attribute type 6 has an invalid length. [ 2655.601114][T16040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13525'. [ 2658.486279][T16068] netlink: 'syz.1.13534': attribute type 21 has an invalid length. [ 2659.838047][T16077] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13535'. [ 2659.943998][T16077] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2660.216216][T16077] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13535'. [ 2660.387129][T16084] netlink: 'syz.2.13538': attribute type 21 has an invalid length. [ 2660.418754][T16084] netlink: 'syz.2.13538': attribute type 6 has an invalid length. [ 2660.432393][T16084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13538'. [ 2660.858691][T16086] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13547'. [ 2663.341836][T16109] netlink: 'syz.0.13545': attribute type 21 has an invalid length. [ 2664.890513][T16123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13549'. [ 2665.004478][T16123] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13549'. [ 2665.124596][T16129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13549'. [ 2667.034680][T16145] netlink: 'syz.3.13557': attribute type 21 has an invalid length. [ 2670.407143][T16187] netlink: 'syz.0.13569': attribute type 21 has an invalid length. [ 2671.008168][T16203] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.13576'. [ 2671.258205][T16210] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.13577'. [ 2672.987243][T16241] netlink: 'syz.1.13587': attribute type 21 has an invalid length. [ 2673.036235][T16244] FAULT_INJECTION: forcing a failure. [ 2673.036235][T16244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2673.066992][T16244] CPU: 1 PID: 16244 Comm: syz.3.13588 Not tainted syzkaller #0 [ 2673.074631][T16244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2673.084739][T16244] Call Trace: [ 2673.088081][T16244] [ 2673.091053][T16244] dump_stack_lvl+0x18c/0x250 [ 2673.095777][T16244] ? show_regs_print_info+0x20/0x20 [ 2673.101017][T16244] ? load_image+0x400/0x400 [ 2673.105557][T16244] ? __might_fault+0xaa/0x120 [ 2673.110267][T16244] ? __lock_acquire+0x7d40/0x7d40 [ 2673.115339][T16244] should_fail_ex+0x39d/0x4d0 [ 2673.120066][T16244] _copy_from_user+0x2f/0xe0 [ 2673.124714][T16244] dev_ethtool+0xc6/0x18d0 [ 2673.129164][T16244] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 2673.135435][T16244] ? __lock_acquire+0x7d40/0x7d40 [ 2673.140498][T16244] ? __might_fault+0xaa/0x120 [ 2673.145207][T16244] ? full_name_hash+0x92/0xe0 [ 2673.149922][T16244] ? dev_load+0x21/0x1f0 [ 2673.154214][T16244] dev_ioctl+0x392/0x1140 [ 2673.158583][T16244] sock_do_ioctl+0x239/0x310 [ 2673.163203][T16244] ? sock_show_fdinfo+0xb0/0xb0 [ 2673.168111][T16244] sock_ioctl+0x5ba/0x7e0 [ 2673.172469][T16244] ? sock_poll+0x3e0/0x3e0 [ 2673.176925][T16244] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2673.181899][T16244] ? security_file_ioctl+0x80/0xa0 [ 2673.187048][T16244] ? sock_poll+0x3e0/0x3e0 [ 2673.191493][T16244] __se_sys_ioctl+0xfd/0x170 [ 2673.196117][T16244] do_syscall_64+0x55/0xa0 [ 2673.200567][T16244] ? clear_bhb_loop+0x40/0x90 [ 2673.205282][T16244] ? clear_bhb_loop+0x40/0x90 [ 2673.209989][T16244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2673.215908][T16244] RIP: 0033:0x7fa27719c799 [ 2673.220347][T16244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2673.239991][T16244] RSP: 002b:00007fa278053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2673.248522][T16244] RAX: ffffffffffffffda RBX: 00007fa277416090 RCX: 00007fa27719c799 [ 2673.256534][T16244] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 2673.264539][T16244] RBP: 00007fa278053090 R08: 0000000000000000 R09: 0000000000000000 [ 2673.272531][T16244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2673.280530][T16244] R13: 00007fa277416128 R14: 00007fa277416090 R15: 00007ffdf9047f48 [ 2673.288540][T16244] [ 2674.906924][T16276] netlink: 'syz.1.13601': attribute type 21 has an invalid length. [ 2674.936408][T16276] netlink: 'syz.1.13601': attribute type 6 has an invalid length. [ 2674.963580][T16276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13601'. [ 2675.740237][T16294] netlink: 'syz.1.13606': attribute type 21 has an invalid length. [ 2676.752984][T16303] FAULT_INJECTION: forcing a failure. [ 2676.752984][T16303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2676.791137][T16303] CPU: 1 PID: 16303 Comm: syz.2.13610 Not tainted syzkaller #0 [ 2676.798786][T16303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2676.808907][T16303] Call Trace: [ 2676.812234][T16303] [ 2676.815202][T16303] dump_stack_lvl+0x18c/0x250 [ 2676.819932][T16303] ? show_regs_print_info+0x20/0x20 [ 2676.825202][T16303] ? load_image+0x400/0x400 [ 2676.829735][T16303] ? __might_fault+0xaa/0x120 [ 2676.834441][T16303] ? __lock_acquire+0x7d40/0x7d40 [ 2676.839501][T16303] should_fail_ex+0x39d/0x4d0 [ 2676.844219][T16303] _copy_from_user+0x2f/0xe0 [ 2676.848860][T16303] kstrtouint_from_user+0xde/0x170 [ 2676.854011][T16303] ? kstrtol_from_user+0x190/0x190 [ 2676.859174][T16303] proc_fail_nth_write+0x8f/0x250 [ 2676.864229][T16303] ? proc_fail_nth_read+0x260/0x260 [ 2676.869472][T16303] ? proc_fail_nth_read+0x260/0x260 [ 2676.874700][T16303] vfs_write+0x296/0x990 [ 2676.879000][T16303] ? file_end_write+0x250/0x250 [ 2676.883880][T16303] ? __fget_files+0x28/0x4b0 [ 2676.888493][T16303] ? __fget_files+0x28/0x4b0 [ 2676.893140][T16303] ? __fget_files+0x43d/0x4b0 [ 2676.897892][T16303] ? __fdget_pos+0x2a3/0x330 [ 2676.902545][T16303] ? ksys_write+0x75/0x260 [ 2676.907004][T16303] ksys_write+0x150/0x260 [ 2676.911372][T16303] ? __ia32_sys_read+0x90/0x90 [ 2676.916173][T16303] ? lockdep_hardirqs_on+0x98/0x150 [ 2676.921424][T16303] do_syscall_64+0x55/0xa0 [ 2676.925891][T16303] ? clear_bhb_loop+0x40/0x90 [ 2676.930601][T16303] ? clear_bhb_loop+0x40/0x90 [ 2676.935309][T16303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2676.941226][T16303] RIP: 0033:0x7f8f22d5cfce [ 2676.945666][T16303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2676.965294][T16303] RSP: 002b:00007f8f23c8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2676.973741][T16303] RAX: ffffffffffffffda RBX: 00007f8f23c8b6c0 RCX: 00007f8f22d5cfce [ 2676.981741][T16303] RDX: 0000000000000001 RSI: 00007f8f23c8b0a0 RDI: 0000000000000004 [ 2676.989735][T16303] RBP: 00007f8f23c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 2676.997729][T16303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2677.005724][T16303] R13: 00007f8f23016038 R14: 00007f8f23015fa0 R15: 00007ffe9999e098 [ 2677.013737][T16303] [ 2677.360345][T16311] netlink: 'syz.2.13614': attribute type 21 has an invalid length. [ 2677.383709][T16311] netlink: 'syz.2.13614': attribute type 6 has an invalid length. [ 2677.393053][T16311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13614'. [ 2677.619772][T16315] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.13616'. [ 2678.837705][T16340] netlink: 'syz.3.13621': attribute type 21 has an invalid length. [ 2678.938935][T16341] netlink: 'syz.2.13622': attribute type 27 has an invalid length. [ 2678.984567][T16341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13622'. [ 2679.053433][T16341] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2679.602379][T16334] delete_channel: no stack [ 2680.279651][T16355] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.13626'. [ 2681.763444][T16369] netlink: 'syz.2.13631': attribute type 21 has an invalid length. [ 2683.618705][T16398] netlink: 'syz.0.13645': attribute type 21 has an invalid length. [ 2684.268086][T16397] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13638'. [ 2685.033109][T16414] netlink: 'syz.0.13641': attribute type 21 has an invalid length. [ 2685.045233][T16414] netlink: 'syz.0.13641': attribute type 6 has an invalid length. [ 2685.053883][T16414] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13641'. [ 2686.344776][T16432] FAULT_INJECTION: forcing a failure. [ 2686.344776][T16432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2686.392610][T16432] CPU: 0 PID: 16432 Comm: syz.1.13644 Not tainted syzkaller #0 [ 2686.400243][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2686.410338][T16432] Call Trace: [ 2686.413656][T16432] [ 2686.416626][T16432] dump_stack_lvl+0x18c/0x250 [ 2686.421368][T16432] ? show_regs_print_info+0x20/0x20 [ 2686.426634][T16432] ? load_image+0x400/0x400 [ 2686.431207][T16432] ? __might_fault+0xaa/0x120 [ 2686.435932][T16432] ? __lock_acquire+0x7d40/0x7d40 [ 2686.441006][T16432] should_fail_ex+0x39d/0x4d0 [ 2686.445746][T16432] _copy_from_iter+0x1d9/0x12e0 [ 2686.450650][T16432] ? rep_movs_alternative+0x4a/0x90 [ 2686.455902][T16432] ? _copy_from_iter+0x24e/0x12e0 [ 2686.461022][T16432] ? __virt_addr_valid+0x18c/0x540 [ 2686.466197][T16432] ? __lock_acquire+0x7d40/0x7d40 [ 2686.471272][T16432] ? copyout_mc+0x70/0x70 [ 2686.475675][T16432] ? copyout_mc+0x70/0x70 [ 2686.480062][T16432] ? __virt_addr_valid+0x18c/0x540 [ 2686.485227][T16432] ? page_copy_sane+0x16a/0x270 [ 2686.490151][T16432] copy_page_from_iter+0x7b/0x100 [ 2686.495262][T16432] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 2686.501131][T16432] tun_get_user+0x15db/0x3ca0 [ 2686.505873][T16432] ? aa_file_perm+0x11b/0xee0 [ 2686.510602][T16432] ? rcu_read_unlock+0xa0/0xa0 [ 2686.515455][T16432] ? tun_get+0x1c/0x2e0 [ 2686.519659][T16432] ? __lock_acquire+0x7d40/0x7d40 [ 2686.524731][T16432] ? tun_get+0x1c/0x2e0 [ 2686.528938][T16432] tun_chr_write_iter+0x119/0x200 [ 2686.534014][T16432] vfs_write+0x46c/0x990 [ 2686.538333][T16432] ? file_end_write+0x250/0x250 [ 2686.543233][T16432] ? __fget_files+0x43d/0x4b0 [ 2686.547965][T16432] ? __fdget_pos+0x1d8/0x330 [ 2686.552603][T16432] ? ksys_write+0x75/0x260 [ 2686.557070][T16432] ksys_write+0x150/0x260 [ 2686.561457][T16432] ? __ia32_sys_read+0x90/0x90 [ 2686.566287][T16432] ? lockdep_hardirqs_on+0x98/0x150 [ 2686.571537][T16432] do_syscall_64+0x55/0xa0 [ 2686.576002][T16432] ? clear_bhb_loop+0x40/0x90 [ 2686.580746][T16432] ? clear_bhb_loop+0x40/0x90 [ 2686.585476][T16432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2686.591417][T16432] RIP: 0033:0x7f59c1f9c799 [ 2686.595873][T16432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2686.615534][T16432] RSP: 002b:00007f59c2d72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2686.624002][T16432] RAX: ffffffffffffffda RBX: 00007f59c2215fa0 RCX: 00007f59c1f9c799 [ 2686.632017][T16432] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 2686.640034][T16432] RBP: 00007f59c2d72090 R08: 0000000000000000 R09: 0000000000000000 [ 2686.648049][T16432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2686.656063][T16432] R13: 00007f59c2216038 R14: 00007f59c2215fa0 R15: 00007ffcfad1c958 [ 2686.664096][T16432] [ 2687.039445][T16448] netlink: 'syz.3.13650': attribute type 21 has an invalid length. [ 2687.972192][T16460] netlink: 'syz.1.13652': attribute type 27 has an invalid length. [ 2688.023615][T16460] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13652'. [ 2688.053418][T16460] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2688.941330][T16454] delete_channel: no stack [ 2690.238351][T16470] netlink: 'syz.1.13655': attribute type 21 has an invalid length. [ 2690.263913][T16470] netlink: 'syz.1.13655': attribute type 6 has an invalid length. [ 2690.339728][T16470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13655'. [ 2691.131242][T16471] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13663'. [ 2691.906720][T16497] netlink: 'syz.1.13662': attribute type 21 has an invalid length. [ 2692.727896][T16509] netlink: 'syz.3.13664': attribute type 27 has an invalid length. [ 2692.772160][T16509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13664'. [ 2692.797884][T16509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2693.143700][T16514] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13667'. [ 2693.300501][T16515] netlink: 'syz.1.13666': attribute type 21 has an invalid length. [ 2693.383656][T16515] netlink: 'syz.1.13666': attribute type 6 has an invalid length. [ 2693.391561][T16515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13666'. [ 2693.549898][T16505] delete_channel: no stack [ 2694.971545][T16532] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13672'. [ 2695.394410][T16540] netlink: 'syz.1.13674': attribute type 21 has an invalid length. [ 2696.247943][T16550] FAULT_INJECTION: forcing a failure. [ 2696.247943][T16550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2696.272040][T16550] CPU: 0 PID: 16550 Comm: syz.3.13676 Not tainted syzkaller #0 [ 2696.279681][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2696.289780][T16550] Call Trace: [ 2696.293096][T16550] [ 2696.296069][T16550] dump_stack_lvl+0x18c/0x250 [ 2696.300819][T16550] ? show_regs_print_info+0x20/0x20 [ 2696.306071][T16550] ? load_image+0x400/0x400 [ 2696.310624][T16550] ? __might_fault+0xaa/0x120 [ 2696.315355][T16550] ? __lock_acquire+0x7d40/0x7d40 [ 2696.320430][T16550] should_fail_ex+0x39d/0x4d0 [ 2696.325164][T16550] _copy_to_user+0x2f/0xa0 [ 2696.329642][T16550] generic_map_lookup_batch+0x8bd/0xc60 [ 2696.335228][T16550] ? bpf_map_update_value+0x720/0x720 [ 2696.340632][T16550] ? __fdget+0x180/0x210 [ 2696.344922][T16550] ? bpf_map_update_value+0x720/0x720 [ 2696.350354][T16550] bpf_map_do_batch+0x2cb/0x610 [ 2696.355343][T16550] ? bpf_lsm_bpf+0x9/0x10 [ 2696.359702][T16550] ? security_bpf+0x7e/0xa0 [ 2696.364240][T16550] __sys_bpf+0x7d7/0x890 [ 2696.368513][T16550] ? bpf_link_show_fdinfo+0x390/0x390 [ 2696.373930][T16550] ? lock_chain_count+0x20/0x20 [ 2696.378820][T16550] __x64_sys_bpf+0x7c/0x90 [ 2696.383273][T16550] do_syscall_64+0x55/0xa0 [ 2696.387731][T16550] ? clear_bhb_loop+0x40/0x90 [ 2696.392432][T16550] ? clear_bhb_loop+0x40/0x90 [ 2696.397132][T16550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2696.403065][T16550] RIP: 0033:0x7fa27719c799 [ 2696.407509][T16550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2696.427151][T16550] RSP: 002b:00007fa278074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2696.435597][T16550] RAX: ffffffffffffffda RBX: 00007fa277415fa0 RCX: 00007fa27719c799 [ 2696.443602][T16550] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 2696.451599][T16550] RBP: 00007fa278074090 R08: 0000000000000000 R09: 0000000000000000 [ 2696.459594][T16550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2696.467586][T16550] R13: 00007fa277416038 R14: 00007fa277415fa0 R15: 00007ffdf9047f48 [ 2696.475596][T16550] [ 2696.679674][T16556] netlink: 'syz.1.13677': attribute type 21 has an invalid length. [ 2696.688617][T16556] netlink: 'syz.1.13677': attribute type 6 has an invalid length. [ 2696.698580][T16556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13677'. [ 2697.880421][T16568] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13681'. [ 2698.278903][T16580] netlink: 'syz.2.13685': attribute type 21 has an invalid length. [ 2698.897969][T16590] netlink: 'syz.0.13688': attribute type 21 has an invalid length. [ 2698.920954][T16590] netlink: 'syz.0.13688': attribute type 6 has an invalid length. [ 2698.929751][T16590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13688'. [ 2699.627157][T16576] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13683'. [ 2699.836173][T16604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2702.079768][T16623] netlink: 'syz.2.13697': attribute type 21 has an invalid length. [ 2702.118998][T16625] netlink: 703 bytes leftover after parsing attributes in process `syz.0.13696'. [ 2704.801053][T16651] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13703'. [ 2706.271775][T16660] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.13707'. [ 2706.386064][T16666] netlink: 'syz.0.13708': attribute type 21 has an invalid length. [ 2708.194405][T16687] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13713'. [ 2708.441877][T16691] syzkaller0: entered promiscuous mode [ 2708.448388][T16691] syzkaller0: entered allmulticast mode [ 2711.723552][T16706] netlink: 'syz.0.13721': attribute type 21 has an invalid length. [ 2712.014301][T16727] FAULT_INJECTION: forcing a failure. [ 2712.014301][T16727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2712.043417][T16727] CPU: 1 PID: 16727 Comm: syz.1.13728 Not tainted syzkaller #0 [ 2712.051125][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2712.061219][T16727] Call Trace: [ 2712.064542][T16727] [ 2712.067512][T16727] dump_stack_lvl+0x18c/0x250 [ 2712.072253][T16727] ? show_regs_print_info+0x20/0x20 [ 2712.077523][T16727] ? load_image+0x400/0x400 [ 2712.082049][T16727] ? __might_fault+0xaa/0x120 [ 2712.086759][T16727] ? __lock_acquire+0x7d40/0x7d40 [ 2712.091849][T16727] should_fail_ex+0x39d/0x4d0 [ 2712.096590][T16727] _copy_from_iter+0x1d9/0x12e0 [ 2712.101500][T16727] ? slab_post_alloc_hook+0x8a/0x4b0 [ 2712.106819][T16727] ? __virt_addr_valid+0x18c/0x540 [ 2712.111958][T16727] ? __lock_acquire+0x7d40/0x7d40 [ 2712.117013][T16727] ? rcu_is_watching+0x15/0xb0 [ 2712.121808][T16727] ? copyout_mc+0x70/0x70 [ 2712.126167][T16727] ? __virt_addr_valid+0x18c/0x540 [ 2712.131316][T16727] ? __virt_addr_valid+0x18c/0x540 [ 2712.136540][T16727] ? __virt_addr_valid+0x469/0x540 [ 2712.141680][T16727] ? __check_object_size+0x506/0xa20 [ 2712.147003][T16727] netlink_sendmsg+0x76b/0xbf0 [ 2712.151816][T16727] ? netlink_getsockopt+0x590/0x590 [ 2712.157049][T16727] ? aa_sock_msg_perm+0x94/0x150 [ 2712.162010][T16727] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2712.167326][T16727] ? security_socket_sendmsg+0x80/0xa0 [ 2712.172811][T16727] ? netlink_getsockopt+0x590/0x590 [ 2712.178041][T16727] ____sys_sendmsg+0x5ba/0x960 [ 2712.182840][T16727] ? __asan_memset+0x22/0x40 [ 2712.187488][T16727] ? __sys_sendmsg_sock+0x30/0x30 [ 2712.192575][T16727] ? __import_iovec+0x5f2/0x850 [ 2712.197464][T16727] ? import_iovec+0x73/0xa0 [ 2712.201990][T16727] ___sys_sendmsg+0x2a6/0x360 [ 2712.206692][T16727] ? get_pid_task+0x20/0x1e0 [ 2712.211318][T16727] ? __sys_sendmsg+0x2a0/0x2a0 [ 2712.216121][T16727] ? __lock_acquire+0x7d40/0x7d40 [ 2712.221189][T16727] __se_sys_sendmsg+0x1c2/0x2b0 [ 2712.226064][T16727] ? __x64_sys_sendmsg+0x80/0x80 [ 2712.231049][T16727] ? lockdep_hardirqs_on+0x98/0x150 [ 2712.236281][T16727] do_syscall_64+0x55/0xa0 [ 2712.240738][T16727] ? clear_bhb_loop+0x40/0x90 [ 2712.245441][T16727] ? clear_bhb_loop+0x40/0x90 [ 2712.250155][T16727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2712.256074][T16727] RIP: 0033:0x7f59c1f9c799 [ 2712.260517][T16727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2712.280151][T16727] RSP: 002b:00007f59c2d72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2712.288590][T16727] RAX: ffffffffffffffda RBX: 00007f59c2215fa0 RCX: 00007f59c1f9c799 [ 2712.296583][T16727] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 2712.304583][T16727] RBP: 00007f59c2d72090 R08: 0000000000000000 R09: 0000000000000000 [ 2712.312583][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2712.320577][T16727] R13: 00007f59c2216038 R14: 00007f59c2215fa0 R15: 00007ffcfad1c958 [ 2712.328585][T16727] [ 2712.749174][T16741] netlink: 'syz.1.13732': attribute type 27 has an invalid length. [ 2712.783006][T16741] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13732'. [ 2712.873469][T16741] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2713.510980][T16737] delete_channel: no stack [ 2713.823665][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.830080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.278738][T16753] netlink: 'syz.1.13734': attribute type 21 has an invalid length. [ 2714.390196][T16755] netlink: 'syz.3.13736': attribute type 10 has an invalid length. [ 2715.078860][T16773] netlink: 'syz.3.13743': attribute type 27 has an invalid length. [ 2715.097894][T16773] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13743'. [ 2715.123456][T16773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2715.396469][T16781] netlink: 'syz.2.13745': attribute type 21 has an invalid length. [ 2715.453699][T16781] netlink: 'syz.2.13745': attribute type 6 has an invalid length. [ 2715.487340][T16781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13745'. [ 2715.551918][T16788] netlink: 'syz.1.13747': attribute type 10 has an invalid length. [ 2715.925246][T16772] delete_channel: no stack [ 2717.135896][T16811] netlink: 'syz.1.13755': attribute type 21 has an invalid length. [ 2717.509179][T16816] netlink: 'syz.3.13756': attribute type 21 has an invalid length. [ 2717.556233][T16816] netlink: 'syz.3.13756': attribute type 6 has an invalid length. [ 2717.591729][T16816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13756'. [ 2718.155806][T16826] netlink: 'syz.2.13758': attribute type 10 has an invalid length. [ 2718.228661][T16829] netlink: 'syz.1.13759': attribute type 21 has an invalid length. [ 2718.273635][T16829] netlink: 'syz.1.13759': attribute type 6 has an invalid length. [ 2718.300198][T16829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13759'. [ 2719.683759][T16852] netlink: 'syz.0.13767': attribute type 21 has an invalid length. [ 2719.975768][T16859] netlink: 'syz.1.13769': attribute type 10 has an invalid length. [ 2720.015978][T16856] netlink: 'syz.3.13768': attribute type 21 has an invalid length. [ 2720.067648][T16856] netlink: 'syz.3.13768': attribute type 6 has an invalid length. [ 2720.098858][T16856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13768'. [ 2721.004329][T16874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13775'. [ 2722.585204][T16892] validate_nla: 2 callbacks suppressed [ 2722.585227][T16892] netlink: 'syz.0.13780': attribute type 10 has an invalid length. [ 2722.951032][T16897] netlink: 'syz.1.13783': attribute type 21 has an invalid length. [ 2722.979451][T16897] netlink: 'syz.1.13783': attribute type 6 has an invalid length. [ 2722.997417][T16897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13783'. [ 2723.077115][T16900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13782'. [ 2723.225662][T16900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13782'. [ 2723.323582][T16902] netlink: 'syz.0.13784': attribute type 21 has an invalid length. [ 2723.459868][T16904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13782'. [ 2724.596782][T16921] FAULT_INJECTION: forcing a failure. [ 2724.596782][T16921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2724.636092][T16921] CPU: 0 PID: 16921 Comm: syz.2.13790 Not tainted syzkaller #0 [ 2724.643743][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2724.653850][T16921] Call Trace: [ 2724.657178][T16921] [ 2724.660153][T16921] dump_stack_lvl+0x18c/0x250 [ 2724.664895][T16921] ? show_regs_print_info+0x20/0x20 [ 2724.670139][T16921] ? load_image+0x400/0x400 [ 2724.674720][T16921] ? __might_fault+0xaa/0x120 [ 2724.679424][T16921] ? __lock_acquire+0x7d40/0x7d40 [ 2724.684487][T16921] should_fail_ex+0x39d/0x4d0 [ 2724.689207][T16921] _copy_to_user+0x2f/0xa0 [ 2724.693668][T16921] bpf_test_finish+0x25a/0x650 [ 2724.698494][T16921] ? convert_skb_to___skb+0x420/0x420 [ 2724.703910][T16921] ? read_tsc+0x9/0x20 [ 2724.708020][T16921] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 2724.714308][T16921] ? xdp_convert_buff_to_md+0x200/0x200 [ 2724.719970][T16921] ? __fget_files+0x28/0x4b0 [ 2724.724595][T16921] ? __fget_files+0x28/0x4b0 [ 2724.729232][T16921] ? xdp_convert_buff_to_md+0x200/0x200 [ 2724.734806][T16921] bpf_prog_test_run+0x321/0x390 [ 2724.739780][T16921] __sys_bpf+0x49d/0x890 [ 2724.744053][T16921] ? bpf_link_show_fdinfo+0x390/0x390 [ 2724.749480][T16921] ? lock_chain_count+0x20/0x20 [ 2724.754364][T16921] __x64_sys_bpf+0x7c/0x90 [ 2724.758816][T16921] do_syscall_64+0x55/0xa0 [ 2724.763269][T16921] ? clear_bhb_loop+0x40/0x90 [ 2724.767989][T16921] ? clear_bhb_loop+0x40/0x90 [ 2724.772699][T16921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2724.778620][T16921] RIP: 0033:0x7f8f22d9c799 [ 2724.783068][T16921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2724.802705][T16921] RSP: 002b:00007f8f23c8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2724.811150][T16921] RAX: ffffffffffffffda RBX: 00007f8f23015fa0 RCX: 00007f8f22d9c799 [ 2724.819150][T16921] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 2724.827147][T16921] RBP: 00007f8f23c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 2724.835142][T16921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2724.843182][T16921] R13: 00007f8f23016038 R14: 00007f8f23015fa0 R15: 00007ffe9999e098 [ 2724.851210][T16921] [ 2725.005072][T16930] netlink: 'syz.0.13792': attribute type 10 has an invalid length. [ 2725.600942][T16945] FAULT_INJECTION: forcing a failure. [ 2725.600942][T16945] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.623474][T16945] CPU: 0 PID: 16945 Comm: syz.0.13798 Not tainted syzkaller #0 [ 2725.631147][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2725.641282][T16945] Call Trace: [ 2725.644636][T16945] [ 2725.647645][T16945] dump_stack_lvl+0x18c/0x250 [ 2725.652432][T16945] ? show_regs_print_info+0x20/0x20 [ 2725.657719][T16945] ? load_image+0x400/0x400 [ 2725.662314][T16945] ? __might_sleep+0xe0/0xe0 [ 2725.666987][T16945] ? __lock_acquire+0x7d40/0x7d40 [ 2725.672110][T16945] should_fail_ex+0x39d/0x4d0 [ 2725.676894][T16945] should_failslab+0x9/0x20 [ 2725.681485][T16945] slab_pre_alloc_hook+0x59/0x310 [ 2725.686599][T16945] ? tomoyo_encode+0x28b/0x540 [ 2725.691436][T16945] ? tomoyo_encode+0x28b/0x540 [ 2725.696267][T16945] __kmem_cache_alloc_node+0x53/0x250 [ 2725.701792][T16945] ? tomoyo_encode+0x28b/0x540 [ 2725.706637][T16945] __kmalloc+0xa4/0x230 [ 2725.710855][T16945] tomoyo_encode+0x28b/0x540 [ 2725.715518][T16945] tomoyo_realpath_from_path+0x592/0x5d0 [ 2725.721241][T16945] tomoyo_path_number_perm+0x248/0x620 [ 2725.726762][T16945] ? tomoyo_path_number_perm+0x217/0x620 [ 2725.732455][T16945] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2725.738007][T16945] ? ksys_write+0x1c4/0x260 [ 2725.742666][T16945] ? __fget_files+0x28/0x4b0 [ 2725.747315][T16945] ? __fget_files+0x28/0x4b0 [ 2725.751998][T16945] security_file_ioctl+0x70/0xa0 [ 2725.757000][T16945] __se_sys_ioctl+0x48/0x170 [ 2725.761645][T16945] do_syscall_64+0x55/0xa0 [ 2725.766117][T16945] ? clear_bhb_loop+0x40/0x90 [ 2725.770849][T16945] ? clear_bhb_loop+0x40/0x90 [ 2725.775587][T16945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2725.781531][T16945] RIP: 0033:0x7f5c1219c799 [ 2725.786001][T16945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2725.805661][T16945] RSP: 002b:00007f5c1300b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2725.814121][T16945] RAX: ffffffffffffffda RBX: 00007f5c12415fa0 RCX: 00007f5c1219c799 [ 2725.822131][T16945] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000003 [ 2725.830145][T16945] RBP: 00007f5c1300b090 R08: 0000000000000000 R09: 0000000000000000 [ 2725.838160][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2725.846178][T16945] R13: 00007f5c12416038 R14: 00007f5c12415fa0 R15: 00007ffdcf3d0b68 [ 2725.854247][T16945] [ 2726.013718][T16945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2726.055254][T16944] netlink: 'syz.1.13796': attribute type 21 has an invalid length. [ 2728.282676][T16962] delete_channel: no stack [ 2728.471587][T16965] netlink: 'syz.1.13803': attribute type 10 has an invalid length. [ 2728.665872][T16961] delete_channel: no stack [ 2730.313591][T16981] netlink: 'syz.3.13809': attribute type 21 has an invalid length. [ 2730.428665][T16988] netlink: 'syz.1.13811': attribute type 21 has an invalid length. [ 2730.962736][T16998] netlink: 'syz.0.13815': attribute type 10 has an invalid length. [ 2731.510695][T16999] delete_channel: no stack [ 2732.074249][T17018] syzkaller0: entered promiscuous mode [ 2732.118569][T17018] syzkaller0: entered allmulticast mode [ 2732.135638][T17020] netlink: 'syz.2.13823': attribute type 21 has an invalid length. [ 2732.616828][T17028] netlink: 'syz.0.13824': attribute type 12 has an invalid length. [ 2732.638392][T17028] netlink: 'syz.0.13824': attribute type 11 has an invalid length. [ 2732.649091][T17028] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.13824'. [ 2736.082825][T17035] netlink: 'syz.2.13826': attribute type 10 has an invalid length. [ 2736.091182][T17039] netlink: 'syz.0.13827': attribute type 21 has an invalid length. [ 2736.779361][T17051] delete_channel: no stack [ 2736.926466][T17061] netlink: 'syz.2.13835': attribute type 27 has an invalid length. [ 2736.935569][T17061] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13835'. [ 2737.961964][T17068] netlink: 'syz.2.13836': attribute type 10 has an invalid length. [ 2738.071924][T17073] netlink: 'syz.1.13837': attribute type 21 has an invalid length. [ 2738.096707][T17075] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.13838'. [ 2738.209877][T17075] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13838'. [ 2739.417555][T17087] delete_channel: no stack [ 2740.114183][T17107] netlink: 'syz.2.13847': attribute type 10 has an invalid length. [ 2740.924281][T17117] netlink: 'syz.0.13852': attribute type 21 has an invalid length. [ 2741.847755][T17139] netlink: 'syz.3.13857': attribute type 10 has an invalid length. [ 2743.838638][T17171] netlink: 'syz.2.13866': attribute type 21 has an invalid length. [ 2744.678376][T17180] netlink: 'syz.2.13868': attribute type 8 has an invalid length. [ 2744.697504][T17180] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13868'. [ 2744.767543][T17178] syzkaller0: entered promiscuous mode [ 2744.773103][T17178] syzkaller0: entered allmulticast mode [ 2747.709136][T17205] netlink: 'syz.3.13877': attribute type 21 has an invalid length. [ 2748.739780][T17226] netlink: 'syz.1.13882': attribute type 12 has an invalid length. [ 2748.754620][T17226] netlink: 120 bytes leftover after parsing attributes in process `syz.1.13882'. [ 2749.406245][T17236] netlink: 'syz.2.13887': attribute type 27 has an invalid length. [ 2749.427906][T17236] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13887'. [ 2749.468742][T17236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2749.694490][T17245] netlink: 'syz.3.13889': attribute type 21 has an invalid length. [ 2750.199790][T17234] delete_channel: no stack [ 2750.319696][T17256] netlink: 'syz.1.13890': attribute type 10 has an invalid length. [ 2750.448721][T17256] veth0_macvtap: left promiscuous mode [ 2751.447740][T17267] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13892'. [ 2751.857091][T17275] netlink: 'syz.3.13893': attribute type 21 has an invalid length. [ 2751.877685][T17275] netlink: 'syz.3.13893': attribute type 6 has an invalid length. [ 2751.904160][T17275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13893'. [ 2753.031463][T17294] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13900'. [ 2753.044648][T17294] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 2753.123053][T17296] netlink: 'syz.1.13901': attribute type 21 has an invalid length. [ 2753.912359][T17305] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13902'. [ 2754.451618][T17312] netlink: 'syz.1.13906': attribute type 21 has an invalid length. [ 2754.462012][T17312] netlink: 'syz.1.13906': attribute type 6 has an invalid length. [ 2754.476074][T17312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13906'. [ 2755.627776][T17325] netlink: 'syz.1.13909': attribute type 21 has an invalid length. [ 2755.639022][T17325] netlink: 'syz.1.13909': attribute type 6 has an invalid length. [ 2755.648488][T17325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13909'. [ 2756.112742][T17335] netlink: 'syz.2.13914': attribute type 21 has an invalid length. [ 2756.130663][T17330] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13912'. [ 2756.375964][T17344] netlink: 'syz.3.13915': attribute type 27 has an invalid length. [ 2756.406513][T17344] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13915'. [ 2756.508023][T17344] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2757.330912][T17338] delete_channel: no stack [ 2758.490818][T17354] netlink: 'syz.2.13918': attribute type 21 has an invalid length. [ 2758.503642][T17354] netlink: 'syz.2.13918': attribute type 6 has an invalid length. [ 2758.511705][T17354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13918'. [ 2760.527595][T17386] netlink: 'syz.0.13926': attribute type 21 has an invalid length. [ 2760.921960][T17383] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13924'. [ 2761.864285][T17387] netlink: 'syz.3.13928': attribute type 10 has an invalid length. [ 2761.910845][T17387] veth0_macvtap: left promiscuous mode [ 2762.067901][T17399] netlink: 'syz.1.13929': attribute type 27 has an invalid length. [ 2762.118113][T17399] netlink: 'syz.1.13929': attribute type 1 has an invalid length. [ 2762.369106][T17403] netlink: 'syz.0.13930': attribute type 10 has an invalid length. [ 2762.419476][T17403] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13930'. [ 2762.470609][T17403] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2763.498029][T17425] netlink: 'syz.3.13938': attribute type 21 has an invalid length. [ 2766.259611][T17445] netlink: 'syz.0.13941': attribute type 10 has an invalid length. [ 2767.438064][T17445] veth0_macvtap: left promiscuous mode [ 2767.897717][T17465] netlink: 'syz.1.13946': attribute type 2 has an invalid length. [ 2767.922936][T17465] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.13946'. [ 2768.142922][T17454] netlink: 'syz.2.13944': attribute type 2 has an invalid length. [ 2768.183466][T17454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13944'. [ 2768.253397][T17470] netlink: 'syz.0.13949': attribute type 21 has an invalid length. [ 2772.299501][T17506] netlink: 'syz.2.13958': attribute type 10 has an invalid length. [ 2773.112011][T17512] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13960'. [ 2773.485726][T17506] veth0_macvtap: left promiscuous mode [ 2774.384523][T17530] netlink: 'syz.3.13963': attribute type 21 has an invalid length. [ 2775.107289][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.113924][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.220132][T17544] netlink: 'syz.1.13976': attribute type 6 has an invalid length. [ 2775.228700][T17544] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13976'. [ 2775.469101][T17550] netlink: 'syz.2.13978': attribute type 21 has an invalid length. [ 2777.595610][T17573] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13974'. [ 2777.956359][T17585] netlink: 'syz.0.13980': attribute type 27 has an invalid length. [ 2777.964701][T17585] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.13980'. [ 2778.034803][T17584] netlink: 'syz.3.13981': attribute type 39 has an invalid length. [ 2778.139849][T17585] netlink: 'syz.0.13980': attribute type 10 has an invalid length. [ 2778.164374][T17585] batman_adv: batadv0: Removing interface: netdevsim0 [ 2778.315860][T17585] team0: Port device netdevsim0 added [ 2779.198407][T17594] netlink: 'syz.3.13983': attribute type 21 has an invalid length. [ 2779.592401][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13987'. [ 2779.603632][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13987'. [ 2779.621160][T17612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13987'. [ 2780.589446][T17614] netlink: 'syz.0.13997': attribute type 21 has an invalid length. [ 2780.720326][T17618] netlink: 'syz.2.13990': attribute type 39 has an invalid length. [ 2780.975763][T17616] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13989'. [ 2781.398977][T17641] netlink: 'syz.2.13998': attribute type 21 has an invalid length. [ 2781.411334][T17641] netlink: 'syz.2.13998': attribute type 6 has an invalid length. [ 2781.428626][T17641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13998'. [ 2781.652781][T17645] netlink: 'syz.0.14000': attribute type 39 has an invalid length. [ 2782.298313][T17649] netlink: 'syz.1.14001': attribute type 21 has an invalid length. [ 2782.332392][T17649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14001'. [ 2783.171410][T17657] validate_nla: 1 callbacks suppressed [ 2783.171450][T17657] netlink: 'syz.0.14004': attribute type 2 has an invalid length. [ 2783.209071][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14004'. [ 2783.235544][T17667] netlink: 'syz.3.14008': attribute type 21 has an invalid length. [ 2784.444767][T17684] netlink: 'syz.1.14012': attribute type 39 has an invalid length. [ 2785.057981][T17693] netlink: 'syz.0.14016': attribute type 21 has an invalid length. [ 2785.088704][T17693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14016'. [ 2785.188622][T17695] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14014'. [ 2785.469861][T17701] netlink: 'syz.3.14019': attribute type 10 has an invalid length. [ 2785.489306][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14019'. [ 2785.679633][T17707] netlink: 'syz.3.14022': attribute type 10 has an invalid length. [ 2785.708241][T17707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14022'. [ 2785.738655][T17707] FAULT_INJECTION: forcing a failure. [ 2785.738655][T17707] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.763547][T17707] CPU: 0 PID: 17707 Comm: syz.3.14022 Not tainted syzkaller #0 [ 2785.771171][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2785.781280][T17707] Call Trace: [ 2785.784604][T17707] [ 2785.787574][T17707] dump_stack_lvl+0x18c/0x250 [ 2785.792310][T17707] ? show_regs_print_info+0x20/0x20 [ 2785.797561][T17707] ? load_image+0x400/0x400 [ 2785.802110][T17707] ? __might_sleep+0xe0/0xe0 [ 2785.806752][T17707] ? __lock_acquire+0x7d40/0x7d40 [ 2785.811825][T17707] ? preempt_schedule+0xc0/0xd0 [ 2785.816733][T17707] ? schedule_preempt_disabled+0x20/0x20 [ 2785.822423][T17707] should_fail_ex+0x39d/0x4d0 [ 2785.827164][T17707] should_failslab+0x9/0x20 [ 2785.831722][T17707] slab_pre_alloc_hook+0x59/0x310 [ 2785.836816][T17707] kmem_cache_alloc_node+0x60/0x320 [ 2785.842076][T17707] ? __alloc_skb+0x103/0x2c0 [ 2785.846730][T17707] __alloc_skb+0x103/0x2c0 [ 2785.851220][T17707] netlink_ack+0x376/0x1180 [ 2785.855778][T17707] ? _raw_spin_unlock+0x40/0x40 [ 2785.860707][T17707] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 2785.867358][T17707] ? netlink_dump+0xe50/0xe50 [ 2785.872101][T17707] ? perf_trace_lock+0xfc/0x3b0 [ 2785.877025][T17707] netlink_rcv_skb+0x2c5/0x4d0 [ 2785.881847][T17707] ? rtnetlink_bind+0x80/0x80 [ 2785.886568][T17707] ? netlink_ack+0x1180/0x1180 [ 2785.891403][T17707] ? __lock_acquire+0x7d40/0x7d40 [ 2785.896483][T17707] ? __rcu_read_unlock+0x7c/0xd0 [ 2785.901483][T17707] ? netlink_deliver_tap+0x2e/0x1b0 [ 2785.906737][T17707] netlink_unicast+0x751/0x8d0 [ 2785.911560][T17707] netlink_sendmsg+0x8d0/0xbf0 [ 2785.916387][T17707] ? netlink_getsockopt+0x590/0x590 [ 2785.921648][T17707] ? aa_sock_msg_perm+0x94/0x150 [ 2785.926639][T17707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2785.932011][T17707] ? security_socket_sendmsg+0x80/0xa0 [ 2785.937537][T17707] ? netlink_getsockopt+0x590/0x590 [ 2785.942801][T17707] ____sys_sendmsg+0x5ba/0x960 [ 2785.947616][T17707] ? __asan_memset+0x22/0x40 [ 2785.952255][T17707] ? __sys_sendmsg_sock+0x30/0x30 [ 2785.957337][T17707] ? __import_iovec+0x5f2/0x850 [ 2785.962251][T17707] ? import_iovec+0x73/0xa0 [ 2785.966804][T17707] ___sys_sendmsg+0x2a6/0x360 [ 2785.971524][T17707] ? __sys_sendmsg+0x2a0/0x2a0 [ 2785.976367][T17707] ? __lock_acquire+0x7d40/0x7d40 [ 2785.981459][T17707] __se_sys_sendmsg+0x1c2/0x2b0 [ 2785.986385][T17707] ? __x64_sys_sendmsg+0x80/0x80 [ 2785.991399][T17707] ? lockdep_hardirqs_on+0x98/0x150 [ 2785.996687][T17707] do_syscall_64+0x55/0xa0 [ 2786.001184][T17707] ? clear_bhb_loop+0x40/0x90 [ 2786.005927][T17707] ? clear_bhb_loop+0x40/0x90 [ 2786.010649][T17707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2786.016592][T17707] RIP: 0033:0x7fa27719c799 [ 2786.021055][T17707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2786.040716][T17707] RSP: 002b:00007fa278074028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2786.049198][T17707] RAX: ffffffffffffffda RBX: 00007fa277415fa0 RCX: 00007fa27719c799 [ 2786.057216][T17707] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2786.065231][T17707] RBP: 00007fa278074090 R08: 0000000000000000 R09: 0000000000000000 [ 2786.073242][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2786.081252][T17707] R13: 00007fa277416038 R14: 00007fa277415fa0 R15: 00007ffdf9047f48 [ 2786.089290][T17707] [ 2786.349314][T17712] netlink: 'syz.3.14023': attribute type 21 has an invalid length. [ 2787.496207][T17723] netlink: 'syz.1.14026': attribute type 39 has an invalid length. [ 2787.713679][T17722] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14027'. [ 2788.254402][T17739] netlink: 'syz.2.14032': attribute type 2 has an invalid length. [ 2788.283537][T17739] netlink: 'syz.2.14032': attribute type 5 has an invalid length. [ 2788.386138][T17742] netlink: 'syz.3.14034': attribute type 27 has an invalid length. [ 2788.404168][T17742] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14034'. [ 2789.083706][T17754] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14036'. [ 2789.153479][T17753] netlink: 'syz.0.14038': attribute type 21 has an invalid length. [ 2789.308799][T17758] netlink: 'syz.3.14039': attribute type 27 has an invalid length. [ 2789.328531][T17758] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14039'. [ 2789.641161][T17765] netlink: 'syz.2.14041': attribute type 39 has an invalid length. [ 2790.829129][T17773] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.14044'. [ 2790.874625][T17773] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.14044'. [ 2790.892844][T17773] netlink: 2 bytes leftover after parsing attributes in process `syz.3.14044'. [ 2790.949021][T17780] netlink: 'syz.0.14047': attribute type 21 has an invalid length. [ 2790.974083][T17780] netlink: 'syz.0.14047': attribute type 6 has an invalid length. [ 2790.994197][T17780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14047'. [ 2791.408434][T17788] netlink: 'syz.3.14050': attribute type 21 has an invalid length. [ 2791.686368][T17784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14049'. [ 2792.568570][T17803] netlink: 'syz.0.14053': attribute type 21 has an invalid length. [ 2792.626718][T17803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14053'. [ 2793.789137][T17810] validate_nla: 1 callbacks suppressed [ 2793.789275][T17810] netlink: 'syz.3.14054': attribute type 39 has an invalid length. [ 2794.448988][T17822] netlink: 'syz.1.14062': attribute type 21 has an invalid length. [ 2794.684621][T17828] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14060'. [ 2795.292254][T17840] netlink: 'syz.3.14065': attribute type 21 has an invalid length. [ 2795.323743][T17840] netlink: 'syz.3.14065': attribute type 6 has an invalid length. [ 2795.355017][T17840] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14065'. [ 2798.511078][T17847] netlink: 'syz.1.14067': attribute type 39 has an invalid length. [ 2799.901118][T17869] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14072'. [ 2800.600013][T17874] netlink: 'syz.1.14075': attribute type 21 has an invalid length. [ 2800.925882][T17879] netlink: 'syz.3.14076': attribute type 21 has an invalid length. [ 2800.968280][T17879] netlink: 'syz.3.14076': attribute type 6 has an invalid length. [ 2801.019368][T17879] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14076'. [ 2801.277865][T17884] FAULT_INJECTION: forcing a failure. [ 2801.277865][T17884] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.381730][T17884] CPU: 0 PID: 17884 Comm: syz.0.14077 Not tainted syzkaller #0 [ 2801.389377][T17884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2801.399510][T17884] Call Trace: [ 2801.402828][T17884] [ 2801.405798][T17884] dump_stack_lvl+0x18c/0x250 [ 2801.410534][T17884] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2801.416304][T17884] ? show_regs_print_info+0x20/0x20 [ 2801.421565][T17884] ? load_image+0x400/0x400 [ 2801.426133][T17884] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2801.432187][T17884] should_fail_ex+0x39d/0x4d0 [ 2801.436924][T17884] should_failslab+0x9/0x20 [ 2801.441474][T17884] slab_pre_alloc_hook+0x59/0x310 [ 2801.446554][T17884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2801.452745][T17884] kmem_cache_alloc+0x5a/0x2d0 [ 2801.457554][T17884] ? skb_clone+0x1eb/0x370 [ 2801.462015][T17884] skb_clone+0x1eb/0x370 [ 2801.466288][T17884] __netlink_deliver_tap+0x41c/0x830 [ 2801.471619][T17884] ? netlink_deliver_tap+0x2e/0x1b0 [ 2801.476849][T17884] netlink_deliver_tap+0x19c/0x1b0 [ 2801.481995][T17884] netlink_unicast+0x72c/0x8d0 [ 2801.486852][T17884] netlink_sendmsg+0x8d0/0xbf0 [ 2801.491659][T17884] ? netlink_getsockopt+0x590/0x590 [ 2801.496889][T17884] ? aa_sock_msg_perm+0x94/0x150 [ 2801.501865][T17884] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2801.507188][T17884] ? security_socket_sendmsg+0x80/0xa0 [ 2801.512681][T17884] ? netlink_getsockopt+0x590/0x590 [ 2801.517915][T17884] ____sys_sendmsg+0x5ba/0x960 [ 2801.522713][T17884] ? __asan_memset+0x22/0x40 [ 2801.527331][T17884] ? __sys_sendmsg_sock+0x30/0x30 [ 2801.532375][T17884] ? __import_iovec+0x5f2/0x850 [ 2801.537356][T17884] ? import_iovec+0x73/0xa0 [ 2801.541880][T17884] ___sys_sendmsg+0x2a6/0x360 [ 2801.546598][T17884] ? __sys_sendmsg+0x2a0/0x2a0 [ 2801.551441][T17884] __se_sys_sendmsg+0x1c2/0x2b0 [ 2801.556334][T17884] ? __x64_sys_sendmsg+0x80/0x80 [ 2801.561324][T17884] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2801.567261][T17884] do_syscall_64+0x55/0xa0 [ 2801.571715][T17884] ? clear_bhb_loop+0x40/0x90 [ 2801.576462][T17884] ? clear_bhb_loop+0x40/0x90 [ 2801.581189][T17884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2801.587115][T17884] RIP: 0033:0x7f5c1219c799 [ 2801.591556][T17884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2801.611196][T17884] RSP: 002b:00007f5c1300b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2801.619640][T17884] RAX: ffffffffffffffda RBX: 00007f5c12415fa0 RCX: 00007f5c1219c799 [ 2801.627641][T17884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2801.635635][T17884] RBP: 00007f5c1300b090 R08: 0000000000000000 R09: 0000000000000000 [ 2801.643640][T17884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2801.651632][T17884] R13: 00007f5c12416038 R14: 00007f5c12415fa0 R15: 00007ffdcf3d0b68 [ 2801.659664][T17884] [ 2803.365695][T17896] netlink: 'syz.0.14081': attribute type 39 has an invalid length. [ 2803.812584][T17901] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14084'. [ 2804.484003][T17908] netlink: 'syz.0.14086': attribute type 21 has an invalid length. [ 2804.588688][T17910] netlink: 'syz.3.14087': attribute type 39 has an invalid length. [ 2804.679786][T17913] netlink: 'syz.1.14088': attribute type 21 has an invalid length. [ 2804.737231][T17913] netlink: 'syz.1.14088': attribute type 6 has an invalid length. [ 2804.782201][T17913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14088'. [ 2806.339659][T17935] netlink: 'syz.1.14093': attribute type 27 has an invalid length. [ 2806.456900][T17935] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14093'. [ 2806.588886][T17935] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2806.723256][T17939] netlink: 'syz.3.14094': attribute type 39 has an invalid length. [ 2806.918699][T17928] delete_channel: no stack [ 2807.656411][T17943] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14096'. [ 2807.945028][T17951] netlink: 'syz.3.14098': attribute type 21 has an invalid length. [ 2808.235898][T17956] netlink: 'syz.0.14099': attribute type 21 has an invalid length. [ 2808.283935][T17956] netlink: 'syz.0.14099': attribute type 6 has an invalid length. [ 2808.292525][T17956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14099'. [ 2808.611297][T17961] netlink: 'syz.2.14101': attribute type 21 has an invalid length. [ 2808.653798][T17961] netlink: 'syz.2.14101': attribute type 6 has an invalid length. [ 2808.683373][T17961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14101'. [ 2810.915088][T17981] netlink: 'syz.2.14106': attribute type 39 has an invalid length. [ 2812.237768][T17983] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14107'. [ 2812.573599][T17992] netlink: 'syz.2.14110': attribute type 21 has an invalid length. [ 2813.315440][T17999] netlink: 'syz.0.14112': attribute type 21 has an invalid length. [ 2813.414769][T17999] netlink: 'syz.0.14112': attribute type 6 has an invalid length. [ 2813.478016][T17999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14112'. [ 2815.705482][T18017] netlink: 'syz.3.14117': attribute type 39 has an invalid length. [ 2817.444666][T18032] netlink: 'syz.3.14122': attribute type 21 has an invalid length. [ 2817.612948][T18034] netlink: 'syz.2.14123': attribute type 21 has an invalid length. [ 2817.621985][T18034] netlink: 'syz.2.14123': attribute type 6 has an invalid length. [ 2817.697178][T18034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14123'. [ 2818.154455][T18028] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14119'. [ 2818.434512][T18045] netlink: 'syz.1.14125': attribute type 27 has an invalid length. [ 2818.442507][T18045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14125'. [ 2818.559425][T18045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2819.108678][T18042] delete_channel: no stack [ 2819.277987][T18057] netlink: 'syz.2.14130': attribute type 39 has an invalid length. [ 2820.267269][T18077] netlink: 'syz.2.14134': attribute type 21 has an invalid length. [ 2821.402277][T18090] netlink: 'syz.3.14135': attribute type 27 has an invalid length. [ 2821.493239][T18090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14135'. [ 2821.502457][T18090] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2821.693814][T18092] netlink: 'syz.2.14137': attribute type 21 has an invalid length. [ 2821.723466][T18092] netlink: 'syz.2.14137': attribute type 6 has an invalid length. [ 2821.794176][T18092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14137'. [ 2821.863608][T18089] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14136'. [ 2822.060963][T18083] delete_channel: no stack [ 2822.886093][T18105] netlink: 'syz.3.14139': attribute type 27 has an invalid length. [ 2822.969999][T18105] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14139'. [ 2823.038007][T18105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2823.402560][T18100] delete_channel: no stack [ 2823.888700][T18113] netlink: 'syz.1.14142': attribute type 39 has an invalid length. [ 2824.811372][T18121] netlink: 'syz.3.14146': attribute type 21 has an invalid length. [ 2825.817414][T18125] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14147'. [ 2826.239118][T18138] netlink: 'syz.1.14150': attribute type 21 has an invalid length. [ 2826.333935][T18138] netlink: 'syz.1.14150': attribute type 6 has an invalid length. [ 2826.342338][T18138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14150'. [ 2826.684276][T18141] netlink: 'syz.3.14153': attribute type 39 has an invalid length. [ 2827.990726][T18157] netlink: 'syz.3.14157': attribute type 21 has an invalid length. [ 2828.756155][T18169] netlink: 'syz.2.14158': attribute type 27 has an invalid length. [ 2828.873510][T18169] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14158'. [ 2828.882740][T18169] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2829.130108][T18168] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14160'. [ 2829.831799][T18160] delete_channel: no stack [ 2829.854161][T18179] netlink: 'syz.0.14164': attribute type 21 has an invalid length. [ 2829.990520][T18179] netlink: 'syz.0.14164': attribute type 6 has an invalid length. [ 2830.057039][T18179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14164'. [ 2830.127442][T18180] netlink: 'syz.1.14163': attribute type 39 has an invalid length. [ 2830.984403][T18198] netlink: 'syz.3.14170': attribute type 21 has an invalid length. [ 2832.530442][T18201] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14171'. [ 2833.774831][T18225] FAULT_INJECTION: forcing a failure. [ 2833.774831][T18225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.954483][T18223] netlink: 'syz.3.14179': attribute type 17 has an invalid length. [ 2833.962479][T18223] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14179'. [ 2833.973418][T18225] CPU: 0 PID: 18225 Comm: syz.0.14177 Not tainted syzkaller #0 [ 2833.981028][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2833.991127][T18225] Call Trace: [ 2833.994455][T18225] [ 2833.997432][T18225] dump_stack_lvl+0x18c/0x250 [ 2834.002174][T18225] ? show_regs_print_info+0x20/0x20 [ 2834.007428][T18225] ? load_image+0x400/0x400 [ 2834.011987][T18225] ? __might_fault+0xaa/0x120 [ 2834.016719][T18225] ? __lock_acquire+0x7d40/0x7d40 [ 2834.021804][T18225] ? unix_ioctl+0x261/0x670 [ 2834.026371][T18225] should_fail_ex+0x39d/0x4d0 [ 2834.031108][T18225] _copy_from_user+0x2f/0xe0 [ 2834.035756][T18225] sock_do_ioctl+0x190/0x310 [ 2834.040405][T18225] ? sock_show_fdinfo+0xb0/0xb0 [ 2834.045317][T18225] sock_ioctl+0x5ba/0x7e0 [ 2834.049702][T18225] ? sock_poll+0x3e0/0x3e0 [ 2834.054195][T18225] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2834.059179][T18225] ? security_file_ioctl+0x80/0xa0 [ 2834.064344][T18225] ? sock_poll+0x3e0/0x3e0 [ 2834.068810][T18225] __se_sys_ioctl+0xfd/0x170 [ 2834.073459][T18225] do_syscall_64+0x55/0xa0 [ 2834.077936][T18225] ? clear_bhb_loop+0x40/0x90 [ 2834.082678][T18225] ? clear_bhb_loop+0x40/0x90 [ 2834.087413][T18225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2834.093365][T18225] RIP: 0033:0x7f5c1219c799 [ 2834.097842][T18225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2834.117497][T18225] RSP: 002b:00007f5c12fea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2834.125958][T18225] RAX: ffffffffffffffda RBX: 00007f5c12416090 RCX: 00007f5c1219c799 [ 2834.133973][T18225] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 2834.141991][T18225] RBP: 00007f5c12fea090 R08: 0000000000000000 R09: 0000000000000000 [ 2834.150126][T18225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2834.158147][T18225] R13: 00007f5c12416128 R14: 00007f5c12416090 R15: 00007ffdcf3d0b68 [ 2834.166188][T18225] [ 2834.590922][T18226] netlink: 'syz.3.14179': attribute type 17 has an invalid length. [ 2834.653402][T18226] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14179'. [ 2834.806763][T18226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2835.923269][T18233] netlink: 'syz.1.14180': attribute type 39 has an invalid length. [ 2836.321660][T18236] netlink: 'syz.3.14181': attribute type 21 has an invalid length. [ 2836.614069][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.620483][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.476244][T18248] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14185'. [ 2839.333379][T18262] netlink: 'syz.1.14190': attribute type 21 has an invalid length. [ 2839.409995][T18262] netlink: 'syz.1.14190': attribute type 6 has an invalid length. [ 2839.533625][T18262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14190'. [ 2839.726281][T18264] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14189'. [ 2840.277978][T18275] netlink: 'syz.3.14192': attribute type 39 has an invalid length. [ 2841.142410][T18277] netlink: 'syz.1.14193': attribute type 21 has an invalid length. [ 2843.934434][T18289] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14196'. [ 2844.926921][T18317] netlink: 'syz.1.14204': attribute type 21 has an invalid length. [ 2846.471653][T18327] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14209'. [ 2848.295903][T18351] netlink: 'syz.3.14218': attribute type 6 has an invalid length. [ 2848.366497][T18351] netlink: 159388 bytes leftover after parsing attributes in process `syz.3.14218'. [ 2848.674557][T18359] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14212'. [ 2848.984059][T18358] netlink: 'syz.1.14219': attribute type 21 has an invalid length. [ 2851.080728][T18370] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14224'. [ 2851.881257][T18379] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14229'. [ 2853.057973][T18395] netlink: 'syz.2.14232': attribute type 21 has an invalid length. [ 2854.373855][T18406] FAULT_INJECTION: forcing a failure. [ 2854.373855][T18406] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.455510][T18406] CPU: 1 PID: 18406 Comm: syz.3.14238 Not tainted syzkaller #0 [ 2854.463160][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2854.473266][T18406] Call Trace: [ 2854.476593][T18406] [ 2854.479580][T18406] dump_stack_lvl+0x18c/0x250 [ 2854.484333][T18406] ? show_regs_print_info+0x20/0x20 [ 2854.489609][T18406] ? load_image+0x400/0x400 [ 2854.494187][T18406] ? __might_sleep+0xe0/0xe0 [ 2854.498830][T18406] ? __lock_acquire+0x7d40/0x7d40 [ 2854.503932][T18406] ? __might_sleep+0xe0/0xe0 [ 2854.508582][T18406] should_fail_ex+0x39d/0x4d0 [ 2854.513329][T18406] should_failslab+0x9/0x20 [ 2854.517894][T18406] slab_pre_alloc_hook+0x59/0x310 [ 2854.522985][T18406] kmem_cache_alloc_lru+0x4d/0x2d0 [ 2854.528153][T18406] ? sock_alloc_inode+0x28/0xc0 [ 2854.533209][T18406] sock_alloc_inode+0x28/0xc0 [ 2854.537945][T18406] ? sockfs_init_fs_context+0xb0/0xb0 [ 2854.543387][T18406] new_inode_pseudo+0x63/0x1d0 [ 2854.548207][T18406] __sock_create+0x12d/0x940 [ 2854.552885][T18406] __sys_socketpair+0x236/0x550 [ 2854.557797][T18406] __x64_sys_socketpair+0x9b/0xb0 [ 2854.562888][T18406] do_syscall_64+0x55/0xa0 [ 2854.567378][T18406] ? clear_bhb_loop+0x40/0x90 [ 2854.572123][T18406] ? clear_bhb_loop+0x40/0x90 [ 2854.576864][T18406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2854.582810][T18406] RIP: 0033:0x7fa27719c799 [ 2854.587274][T18406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2854.607014][T18406] RSP: 002b:00007fa278074028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 2854.615492][T18406] RAX: ffffffffffffffda RBX: 00007fa277415fa0 RCX: 00007fa27719c799 [ 2854.623519][T18406] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000018 [ 2854.631623][T18406] RBP: 00007fa278074090 R08: 0000000000000000 R09: 0000000000000000 [ 2854.639648][T18406] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000001 [ 2854.647671][T18406] R13: 00007fa277416038 R14: 00007fa277415fa0 R15: 00007ffdf9047f48 [ 2854.655707][T18406] [ 2855.033676][T18406] socket: no more sockets [ 2856.057063][T18408] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14240'. [ 2856.848853][T18433] netlink: 'syz.3.14245': attribute type 10 has an invalid length. [ 2857.916205][T18441] netlink: 'syz.0.14248': attribute type 21 has an invalid length. [ 2857.994473][T18444] netlink: 'syz.3.14249': attribute type 21 has an invalid length. [ 2858.052794][T18444] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14249'. [ 2858.093537][T18444] netlink: 'syz.3.14249': attribute type 5 has an invalid length. [ 2858.130681][T18444] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14249'. [ 2859.656470][T14987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2859.690382][T14987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2859.703973][T14987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2859.715409][T14987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2859.725088][T14987] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2859.743473][T14987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2861.475790][T18462] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14254'. [ 2861.823715][T14987] Bluetooth: hci0: command tx timeout [ 2862.537774][T27436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2862.955156][T18476] netlink: 'syz.1.14257': attribute type 10 has an invalid length. [ 2863.097782][T27436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.556706][T27436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2863.668679][T18457] chnl_net:caif_netlink_parms(): no params data found [ 2863.887697][T27436] batman_adv: batadv0: Removing interface: netdevsim0 [ 2863.903354][T14987] Bluetooth: hci0: command tx timeout [ 2864.025432][T27436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2864.602652][T18457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2864.663674][T18457] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.671008][T18457] bridge_slave_0: entered allmulticast mode [ 2864.723410][T18457] bridge_slave_0: entered promiscuous mode [ 2864.743932][T18457] bridge0: port 2(bridge_slave_1) entered blocking state [ 2864.751278][T18457] bridge0: port 2(bridge_slave_1) entered disabled state [ 2864.773543][T18457] bridge_slave_1: entered allmulticast mode [ 2864.781125][T18457] bridge_slave_1: entered promiscuous mode [ 2865.291635][T18457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2865.651416][T18457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2865.867189][T18503] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14264'. [ 2865.983608][T14987] Bluetooth: hci0: command tx timeout [ 2866.772678][T18457] team0: Port device team_slave_0 added [ 2866.810781][T18457] team0: Port device team_slave_1 added [ 2867.706460][T18520] netlink: 'syz.0.14267': attribute type 10 has an invalid length. [ 2868.073216][T14987] Bluetooth: hci0: command tx timeout [ 2868.533937][T18457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2868.541003][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2868.633235][T18457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2868.676017][T18457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2868.683053][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2868.793303][T18457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2869.686080][T18457] hsr_slave_0: entered promiscuous mode [ 2869.733993][T18457] hsr_slave_1: entered promiscuous mode [ 2869.753506][T18457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2869.772187][T18457] Cannot create hsr debugfs directory [ 2870.930939][T18557] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14273'. [ 2871.448734][T18561] netlink: 'syz.0.14274': attribute type 21 has an invalid length. [ 2871.496844][T18561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14274'. [ 2871.560920][T18561] netlink: 'syz.0.14274': attribute type 4 has an invalid length. [ 2871.571333][T18561] netlink: 'syz.0.14274': attribute type 3 has an invalid length. [ 2871.611594][T18561] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14274'. [ 2872.456196][T18573] netlink: 'syz.2.14276': attribute type 10 has an invalid length. [ 2873.314811][T18582] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14279'. [ 2873.844385][T18582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2874.032095][T18582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2874.218289][T18582] bond0 (unregistering): Released all slaves [ 2875.438639][T27436] hsr_slave_0: left promiscuous mode [ 2875.463427][T27436] hsr_slave_1: left promiscuous mode [ 2875.481940][T27436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2875.510182][T27436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2875.580973][T27436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2875.593908][T27436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2875.664855][T27436] bridge_slave_1: left allmulticast mode [ 2875.685370][T27436] bridge_slave_1: left promiscuous mode [ 2875.711639][T27436] bridge0: port 2(bridge_slave_1) entered disabled state [ 2875.733628][T27436] bridge_slave_0: left allmulticast mode [ 2875.739364][T27436] bridge_slave_0: left promiscuous mode [ 2875.782468][T27436] bridge0: port 1(bridge_slave_0) entered disabled state [ 2876.377859][T18600] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14283'. [ 2877.452388][T27436] team0 (unregistering): Port device team_slave_1 removed [ 2877.675916][T27436] team0 (unregistering): Port device team_slave_0 removed [ 2878.926393][T18599] netlink: 'syz.2.14284': attribute type 21 has an invalid length. [ 2878.937220][T18599] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14284'. [ 2878.953823][T18599] netlink: 'syz.2.14284': attribute type 4 has an invalid length. [ 2878.961707][T18599] netlink: 'syz.2.14284': attribute type 3 has an invalid length. [ 2878.983703][T18599] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14284'. [ 2879.003690][T18610] netlink: 'syz.1.14286': attribute type 10 has an invalid length. [ 2879.150198][T18457] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2879.208337][T18457] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2879.265377][T18457] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2879.489788][T18457] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2879.806049][T18457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2880.028842][T18457] 8021q: adding VLAN 0 to HW filter on device team0 [ 2880.103586][T27431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2880.110841][T27431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2880.282811][T27428] bridge0: port 2(bridge_slave_1) entered blocking state [ 2880.290088][T27428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2880.431729][T18629] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14292'. [ 2880.512437][T18457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2881.356184][T18457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2881.473749][T18654] netlink: 'syz.0.14294': attribute type 1 has an invalid length. [ 2881.564476][T18654] netlink: 'syz.0.14294': attribute type 3 has an invalid length. [ 2881.610712][T18654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14294'. [ 2881.694136][T18457] veth0_vlan: entered promiscuous mode [ 2881.758450][T18457] veth1_vlan: entered promiscuous mode [ 2881.770699][T18654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14294'. [ 2881.853477][T18654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14294'. [ 2881.944124][T18657] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14294'. [ 2882.080753][T18457] veth0_macvtap: entered promiscuous mode [ 2882.147810][T18457] veth1_macvtap: entered promiscuous mode [ 2882.218616][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2882.244804][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.263799][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2882.318536][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.343068][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2882.391314][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.417514][T18457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2882.438823][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.471140][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.493363][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.504453][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.515048][T18457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2882.525902][T18457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2882.538097][T18457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2882.556817][T18457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.565922][T18457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.576725][T18457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.585688][T18457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2882.802849][T18670] netlink: 'syz.2.14296': attribute type 10 has an invalid length. [ 2883.005955][T18656] netlink: 'syz.1.14295': attribute type 39 has an invalid length. [ 2883.341977][T27431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2883.381735][T27431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2883.483710][T27431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2883.491613][T27431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2883.813942][T18683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14299'. [ 2883.976128][T18695] sctp: [Deprecated]: syz.3.14252 (pid 18695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2883.976128][T18695] Use struct sctp_sack_info instead [ 2884.163807][T18683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2884.423089][T18683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2884.656972][T18683] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 2884.876001][T18683] bond0 (unregistering): Released all slaves [ 2885.256505][T18686] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14300'. [ 2885.388127][T18712] veth1_macvtap: left promiscuous mode [ 2885.957510][T18721] netlink: 'syz.0.14304': attribute type 21 has an invalid length. [ 2886.477973][T18731] netlink: 'syz.3.14307': attribute type 10 has an invalid length. [ 2886.808748][T18731] team0: Port device macvlan0 added [ 2887.083078][T18735] netlink: 'syz.1.14306': attribute type 27 has an invalid length. [ 2887.144846][T18735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14306'. [ 2887.173934][T18730] delete_channel: no stack [ 2887.183928][T18735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2887.648192][T18744] netlink: 'syz.0.14309': attribute type 39 has an invalid length. [ 2888.970455][T18755] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14313'. [ 2889.553757][T18777] netlink: 'syz.0.14319': attribute type 10 has an invalid length. [ 2890.847121][T18786] netlink: 'syz.3.14320': attribute type 27 has an invalid length. [ 2890.914689][T18786] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14320'. [ 2891.034161][T18786] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2891.587160][T18782] delete_channel: no stack [ 2892.774920][T18806] netlink: 'syz.0.14327': attribute type 39 has an invalid length. [ 2893.074825][T18804] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14326'. [ 2893.264101][T18814] FAULT_INJECTION: forcing a failure. [ 2893.264101][T18814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2893.295620][T18814] CPU: 1 PID: 18814 Comm: syz.2.14328 Not tainted syzkaller #0 [ 2893.303270][T18814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2893.313382][T18814] Call Trace: [ 2893.316705][T18814] [ 2893.319675][T18814] dump_stack_lvl+0x18c/0x250 [ 2893.324460][T18814] ? show_regs_print_info+0x20/0x20 [ 2893.329722][T18814] ? load_image+0x400/0x400 [ 2893.334307][T18814] ? __might_fault+0xaa/0x120 [ 2893.339033][T18814] ? __lock_acquire+0x7d40/0x7d40 [ 2893.344117][T18814] should_fail_ex+0x39d/0x4d0 [ 2893.348860][T18814] _copy_from_user+0x2f/0xe0 [ 2893.353535][T18814] __sys_bpf+0x23e/0x890 [ 2893.357822][T18814] ? bpf_link_show_fdinfo+0x390/0x390 [ 2893.363268][T18814] ? lock_chain_count+0x20/0x20 [ 2893.368178][T18814] __x64_sys_bpf+0x7c/0x90 [ 2893.372642][T18814] do_syscall_64+0x55/0xa0 [ 2893.377133][T18814] ? clear_bhb_loop+0x40/0x90 [ 2893.381874][T18814] ? clear_bhb_loop+0x40/0x90 [ 2893.386598][T18814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2893.392534][T18814] RIP: 0033:0x7f8f22d9c799 [ 2893.396992][T18814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2893.416646][T18814] RSP: 002b:00007f8f23c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2893.425111][T18814] RAX: ffffffffffffffda RBX: 00007f8f23016090 RCX: 00007f8f22d9c799 [ 2893.433135][T18814] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2893.441150][T18814] RBP: 00007f8f23c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2893.449183][T18814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2893.457192][T18814] R13: 00007f8f23016128 R14: 00007f8f23016090 R15: 00007ffe9999e098 [ 2893.465224][T18814] [ 2893.666349][T18816] netlink: 'syz.0.14329': attribute type 10 has an invalid length. [ 2894.384945][T18823] netlink: 'syz.2.14331': attribute type 21 has an invalid length. [ 2894.877124][T18835] netlink: 'syz.1.14336': attribute type 21 has an invalid length. [ 2894.896641][T18835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14336'. [ 2895.129485][T18837] netlink: 'syz.0.14337': attribute type 39 has an invalid length. [ 2895.158645][T18835] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14336'. [ 2895.536896][T18841] netlink: 'syz.1.14340': attribute type 10 has an invalid length. [ 2895.581870][T18841] team0: Device ipvlan1 failed to register rx_handler [ 2895.774093][T18849] netlink: 'syz.1.14340': attribute type 22 has an invalid length. [ 2895.782085][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14340'. [ 2895.995334][T18843] netlink: 'syz.1.14340': attribute type 10 has an invalid length. [ 2896.027502][T18843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14340'. [ 2896.082262][T18843] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2896.144536][T18855] netlink: 'syz.0.14342': attribute type 10 has an invalid length. [ 2896.330502][T18843] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2896.337383][T18843] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2897.448149][T18844] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14338'. [ 2897.989112][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.997168][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.154840][T18872] netlink: 'syz.2.14347': attribute type 21 has an invalid length. [ 2898.678359][T18876] netlink: 'syz.3.14349': attribute type 39 has an invalid length. [ 2899.742630][T18893] netlink: 'syz.1.14353': attribute type 10 has an invalid length. [ 2900.387102][T18903] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14357'. [ 2900.407982][T18911] netlink: 'syz.0.14360': attribute type 10 has an invalid length. [ 2900.440522][T18911] team0: Device ipvlan1 failed to register rx_handler [ 2900.613514][T18914] netlink: 'syz.0.14360': attribute type 10 has an invalid length. [ 2900.659166][T18914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14360'. [ 2900.710431][T18914] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2900.798978][T18911] netlink: 'syz.0.14360': attribute type 22 has an invalid length. [ 2900.833222][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14360'. [ 2900.888220][T18914] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2900.895567][T18914] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2901.060964][T18920] netlink: 'syz.1.14363': attribute type 21 has an invalid length. [ 2901.711340][T18933] netlink: 'syz.0.14366': attribute type 10 has an invalid length. [ 2902.873793][T18938] netlink: 'syz.1.14369': attribute type 23 has an invalid length. [ 2903.145276][T18943] netlink: 'syz.0.14370': attribute type 39 has an invalid length. [ 2903.875668][T18954] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14373'. [ 2904.083079][T18961] netlink: 'syz.1.14376': attribute type 21 has an invalid length. [ 2904.573806][T18969] netlink: 'syz.2.14378': attribute type 10 has an invalid length. [ 2905.207284][T18976] netlink: 'syz.1.14381': attribute type 39 has an invalid length. [ 2906.462212][T18989] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14385'. [ 2907.227126][T19004] netlink: 'syz.0.14389': attribute type 21 has an invalid length. [ 2907.432978][T19006] netlink: 'syz.1.14388': attribute type 10 has an invalid length. [ 2908.385247][T19017] netlink: 'syz.2.14391': attribute type 39 has an invalid length. [ 2909.494503][T19030] netlink: 'syz.1.14397': attribute type 153 has an invalid length. [ 2909.502592][T19030] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.14397'. [ 2909.877819][T19024] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14395'. [ 2910.113468][T19032] netlink: 'syz.2.14399': attribute type 39 has an invalid length. [ 2910.473977][T19044] netlink: 'syz.1.14400': attribute type 10 has an invalid length. [ 2911.136355][T19050] netlink: 'syz.2.14402': attribute type 10 has an invalid length. [ 2911.342447][T19047] netlink: 'syz.0.14401': attribute type 21 has an invalid length. [ 2912.520934][T19060] netlink: 'syz.1.14405': attribute type 39 has an invalid length. [ 2913.259821][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 2913.366587][T19074] bridge0: port 1(bridge_slave_0) entered blocking state [ 2913.374060][T19074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2913.975111][T19078] netlink: 'syz.1.14411': attribute type 10 has an invalid length. [ 2914.131261][T19080] netlink: 'syz.2.14412': attribute type 29 has an invalid length. [ 2914.164145][T19080] netlink: 'syz.2.14412': attribute type 29 has an invalid length. [ 2914.195809][T19080] netlink: 'syz.2.14412': attribute type 29 has an invalid length. [ 2915.137079][T19085] netlink: 'syz.2.14415': attribute type 21 has an invalid length. [ 2915.197909][T19073] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14409'. [ 2916.377527][T19102] FAULT_INJECTION: forcing a failure. [ 2916.377527][T19102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2916.414127][T19102] CPU: 0 PID: 19102 Comm: syz.2.14420 Not tainted syzkaller #0 [ 2916.421772][T19102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2916.431878][T19102] Call Trace: [ 2916.435196][T19102] [ 2916.438164][T19102] dump_stack_lvl+0x18c/0x250 [ 2916.443015][T19102] ? show_regs_print_info+0x20/0x20 [ 2916.448291][T19102] ? load_image+0x400/0x400 [ 2916.452935][T19102] ? __lock_acquire+0x7d40/0x7d40 [ 2916.458014][T19102] ? snprintf+0xe9/0x140 [ 2916.462307][T19102] should_fail_ex+0x39d/0x4d0 [ 2916.467065][T19102] _copy_to_user+0x2f/0xa0 [ 2916.471527][T19102] simple_read_from_buffer+0xe7/0x150 [ 2916.476967][T19102] proc_fail_nth_read+0x1e8/0x260 [ 2916.482074][T19102] ? proc_fault_inject_write+0x360/0x360 [ 2916.487770][T19102] ? fsnotify_perm+0x271/0x5e0 [ 2916.492587][T19102] ? proc_fault_inject_write+0x360/0x360 [ 2916.498370][T19102] vfs_read+0x28b/0x970 [ 2916.502588][T19102] ? kernel_read+0x1e0/0x1e0 [ 2916.507241][T19102] ? __fget_files+0x28/0x4b0 [ 2916.511882][T19102] ? __fget_files+0x28/0x4b0 [ 2916.516531][T19102] ? __fget_files+0x43d/0x4b0 [ 2916.521272][T19102] ? __fdget_pos+0x2a3/0x330 [ 2916.525918][T19102] ? ksys_read+0x75/0x260 [ 2916.530283][T19102] ksys_read+0x150/0x260 [ 2916.534559][T19102] ? vfs_write+0x990/0x990 [ 2916.539005][T19102] ? lockdep_hardirqs_on+0x98/0x150 [ 2916.544240][T19102] do_syscall_64+0x55/0xa0 [ 2916.548690][T19102] ? clear_bhb_loop+0x40/0x90 [ 2916.553395][T19102] ? clear_bhb_loop+0x40/0x90 [ 2916.558101][T19102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2916.564059][T19102] RIP: 0033:0x7f8f22d5cfce [ 2916.568495][T19102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2916.588126][T19102] RSP: 002b:00007f8f23c8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2916.596582][T19102] RAX: ffffffffffffffda RBX: 00007f8f23c8b6c0 RCX: 00007f8f22d5cfce [ 2916.604572][T19102] RDX: 000000000000000f RSI: 00007f8f23c8b0a0 RDI: 0000000000000005 [ 2916.612570][T19102] RBP: 00007f8f23c8b090 R08: 0000000000000000 R09: 0000000000000000 [ 2916.620564][T19102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2916.628565][T19102] R13: 00007f8f23016038 R14: 00007f8f23015fa0 R15: 00007ffe9999e098 [ 2916.636573][T19102] [ 2916.865851][T19106] netlink: 'syz.1.14419': attribute type 39 has an invalid length. [ 2918.115991][T19117] netlink: 'syz.1.14423': attribute type 10 has an invalid length. [ 2918.153963][T19118] netlink: 'syz.0.14422': attribute type 21 has an invalid length. [ 2918.191853][T19118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14422'. [ 2918.906618][T19121] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.14424'. [ 2918.925735][T19115] syzkaller0: entered promiscuous mode [ 2919.004103][T19115] syzkaller0: entered allmulticast mode [ 2925.531244][T10223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2925.540467][T10223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2925.584156][T10223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2925.602061][T10223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2925.617317][T10223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2925.629118][T10223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2926.562707][T19130] netlink: 'syz.2.14426': attribute type 21 has an invalid length. [ 2926.872313][T19148] netlink: 'syz.2.14429': attribute type 27 has an invalid length. [ 2926.931954][T19148] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14429'. [ 2926.983312][T19148] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2927.139440][T19137] chnl_net:caif_netlink_parms(): no params data found [ 2927.310851][T19152] netlink: 'syz.1.14431': attribute type 39 has an invalid length. [ 2927.334870][T19137] bridge0: port 1(bridge_slave_0) entered blocking state [ 2927.342744][T19137] bridge0: port 1(bridge_slave_0) entered disabled state [ 2927.350416][T19137] bridge_slave_0: entered allmulticast mode [ 2927.358170][T19137] bridge_slave_0: entered promiscuous mode [ 2927.368545][T19137] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.375869][T19137] bridge0: port 2(bridge_slave_1) entered disabled state [ 2927.383229][T19137] bridge_slave_1: entered allmulticast mode [ 2927.390800][T19137] bridge_slave_1: entered promiscuous mode [ 2927.497982][T19137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2927.511273][T19137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2927.585983][T19137] team0: Port device team_slave_0 added [ 2927.602717][T19143] delete_channel: no stack [ 2927.743927][T10223] Bluetooth: hci1: command tx timeout [ 2927.780732][T19137] team0: Port device team_slave_1 added [ 2927.918840][T19160] netlink: 'syz.1.14433': attribute type 10 has an invalid length. [ 2928.159913][ T9045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.182197][T19137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2928.199114][T19137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2928.230063][T19137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2928.257276][T19137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2928.267018][T19137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2928.324233][T19166] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14434'. [ 2928.361705][T19137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2928.446087][ T9045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.541189][T19137] hsr_slave_0: entered promiscuous mode [ 2928.548807][T19137] hsr_slave_1: entered promiscuous mode [ 2928.555475][T19137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2928.563322][T19137] Cannot create hsr debugfs directory [ 2928.607406][ T9045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2928.735973][ T9045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2929.261626][T19137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2929.328161][T19137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2929.348999][T19137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2929.378197][T19137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2929.785746][T19137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2929.843309][T10223] Bluetooth: hci1: command tx timeout [ 2929.995501][T19137] 8021q: adding VLAN 0 to HW filter on device team0 [ 2930.127284][T27431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2930.134602][T27431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2930.233768][ T2057] bridge0: port 2(bridge_slave_1) entered blocking state [ 2930.241000][ T2057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2930.669794][ T9045] hsr_slave_0: left promiscuous mode [ 2930.685470][ T9045] hsr_slave_1: left promiscuous mode [ 2930.704002][ T9045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2930.711564][ T9045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2930.729778][ T9045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2930.737319][ T9045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2930.746579][ T9045] bridge_slave_1: left allmulticast mode [ 2930.752265][ T9045] bridge_slave_1: left promiscuous mode [ 2930.758939][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 2930.786563][ T9045] bridge_slave_0: left allmulticast mode [ 2930.792291][ T9045] bridge_slave_0: left promiscuous mode [ 2930.814309][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 2930.865825][ T9045] veth0_macvtap: left promiscuous mode [ 2930.871565][ T9045] veth1_vlan: left promiscuous mode [ 2930.877638][ T9045] veth0_vlan: left promiscuous mode [ 2931.348225][ T9045] team0 (unregistering): Port device macvlan0 removed [ 2931.732809][ T9045] team0 (unregistering): Port device team_slave_1 removed [ 2931.786933][ T9045] team0 (unregistering): Port device team_slave_0 removed [ 2931.842824][ T9045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2931.895561][ T9045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2931.921146][T10223] Bluetooth: hci1: command tx timeout [ 2932.271435][ T9045] bond0 (unregistering): Released all slaves [ 2932.516971][T19137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2932.951489][T19137] veth0_vlan: entered promiscuous mode [ 2932.972724][T19137] veth1_vlan: entered promiscuous mode [ 2933.022845][T19137] veth0_macvtap: entered promiscuous mode [ 2933.040865][T19137] veth1_macvtap: entered promiscuous mode [ 2933.070488][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.086319][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.099346][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.113406][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.127249][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2933.140139][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.156741][T19137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2933.172908][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.188756][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.200289][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.213510][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.223858][T19137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2933.235279][T19137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2933.248371][T19137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2933.268988][T19137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.278084][T19137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.288531][T19137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.301016][T19137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2933.410260][T27431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2933.424293][T27431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2933.461816][T27428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2933.476697][T27428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2933.983408][T10223] Bluetooth: hci1: command tx timeout [ 2959.427291][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.433754][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.866591][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.873001][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3048.543437][T14987] Bluetooth: hci1: command 0x0406 tx timeout [ 3082.306936][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.313417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.746291][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.752655][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.197410][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.204940][ T1280] ieee802154 phy1 wpan1: encryption failed: -22