last executing test programs: 5.058901668s ago: executing program 3 (id=2600): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r8) openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000000900000000000007000000000000005f612e5f2106d110"], 0x0, 0x30, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r12}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e9", 0x17}], 0x2}, 0x0) 4.319498486s ago: executing program 1 (id=2607): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r8) openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000000900000000000007000000000000005f612e5f2106d110"], 0x0, 0x30, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r12}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e9", 0x17}], 0x2}, 0x0) 4.11100658s ago: executing program 0 (id=2609): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000100081044e81f782db44b904021d08fc00000000e8fe55a1010115000600142603600e120800040000001101a8002e000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x400c850) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.001097813s ago: executing program 2 (id=2610): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x9, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1, 0x7fffffff, 0x7, 0x4, 0x4003, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r7, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@in={0x2, 0x4e24, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) 3.427613907s ago: executing program 3 (id=2611): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x9, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1, 0x7fffffff, 0x7, 0x4, 0x4003, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r6, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@in={0x2, 0x4e24, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) 3.027188697s ago: executing program 1 (id=2612): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="540000002d000b63717a3c4a7ad8985b0808aa782223fbe40f80e0932eab389d2db26277c4abda16ad715fb33005cbd9ec3dd4f1cd7d38005797c978516b8909cc0bc70f6a034cbb95c40c4c46699d726a6172e6", 0x54}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000)=r8, 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe7", 0x2a}], 0x1}, 0x4000000) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20028070) 2.598622807s ago: executing program 0 (id=2613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2805, 0x3, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="830000000c0000000c00000002004000"/38], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="9500000000000000000000000000000085100000feffffff95"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 2.465036731s ago: executing program 0 (id=2614): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000180)='FREEZING\x00', 0x9) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x12}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x48110) r5 = bpf$MAP_CREATE(0x1400000000000000, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2, @ANYBLOB="b1cdb50ea8ef3fffc2350435bdb63a06ca4f833ec407c172be0000000000000000", @ANYRES64=r3, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="3f0000005c000000040000008020870874875944bfdb46178597f7003539a462823d5b5ea32a06aec6b75c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x11, 0x200000000000003, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800001002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffe3d}, 0x28) sendmsg$sock(r3, 0x0, 0x8001) 2.45948495s ago: executing program 2 (id=2615): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffc56aaaf8130f647c00b7030000500dff80850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000040)=""/60, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x1a, 0x2014}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x555}], 0x1}, 0x0) 2.294026294s ago: executing program 0 (id=2616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)}, 0x42880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x50) close(r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev}}}], 0x20}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(r3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) 2.283730945s ago: executing program 2 (id=2617): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900", 0xba}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0xa3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r8, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800) 2.199374717s ago: executing program 3 (id=2618): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/227, 0xe3}, 0x100000000000000) 2.129272388s ago: executing program 1 (id=2619): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a800160005000140030000000360", 0x3e}], 0x1}, 0x40000f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, &(0x7f0000000540)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43, 0xe}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000be7f99fabc2ec39e21b45c146607347a83cb51468448279f89784e1f0793a275788e3a05ed1e5aadf1c3c9c050d1c234960c470085761085bc80d554db30ed15a26cf9c20ae1386ba2cebc20d3c3737fddcd292d469b8054033179663dd57ddfb6a9da897cede44e2ffdaec155816ac0105c9cf53abec13ca1fd11f5dfeb79c60b0265", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100057, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x4001, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb43}, {}, {}, [@generic={0x1, 0xe, 0x6, 0x6, 0x3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0xa}, @generic={0x84, 0x4, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x21, &(0x7f0000000a00)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xcd, 0x9, 0xa, 0x5, 0xf61e}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', r3, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000009c0)=""/30, 0x40, 0x1e, 0x1, 0x1ff}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) 2.04616467s ago: executing program 2 (id=2620): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r8) openat$cgroup_subtree(r9, &(0x7f00000000c0), 0x2, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r10}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000c0000000900000000000007000000000000005f612e5f2106d110"], 0x0, 0x30, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r12}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e9", 0x17}], 0x2}, 0x0) 1.864371785s ago: executing program 3 (id=2621): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000100081044e81f782db44b904021d08fc00000000e8fe55a1010115000600142603600e120800040000001101a8002e000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x400c850) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.762409687s ago: executing program 1 (id=2622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2805, 0x3, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="830000000c0000000c00000002004000"/38], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="9500000000000000000000000000000085100000feffffff95"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1.739936648s ago: executing program 0 (id=2623): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x9, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1, 0x7fffffff, 0x7, 0x4, 0x4003, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r7, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@in={0x2, 0x4e24, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) 1.348864818s ago: executing program 1 (id=2624): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000180)='FREEZING\x00', 0x9) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x12}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x48110) r5 = bpf$MAP_CREATE(0x1400000000000000, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r2, @ANYBLOB="b1cdb50ea8ef3fffc2350435bdb63a06ca4f833ec407c172be0000000000000000", @ANYRES64=r3, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c"], 0xfe33) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="3f0000005c000000040000008020870874875944bfdb46178597f7003539a462823d5b5ea32a06aec6b75c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x11, 0x200000000000003, 0x300) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800001002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0xfffffffffffffe3d}, 0x28) sendmsg$sock(r3, 0x0, 0x8001) 766.973921ms ago: executing program 3 (id=2625): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffc56aaaf8130f647c00b7030000500dff80850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000040)=""/60, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x1a, 0x2014}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="2d544357ed4dfc32a9827a7c49ea9fb18e68be4131dd89821b2f0732a1ee74bb9f20c9fefe2105f4fa9b415212d4d179f13c522d61724d3aae414f27353a0c0f05ead2bcb8d77393edd05b854e95b3e67c472e054e55f5192b7b1dc09f73713a605bbf7f94b392f7d89ad250b9f9f93ff0ff6f837881cbabab18fb6f0a9626d03a8142839bb017b634029982fa31a6633bac5d26af28006ec8c317c20e7a1a1e0af1cf88a0a8a47b3b911bfd0cb280b6bed2c7c6e0a0159255ea25130d1f54d67369b7bbabd1e86acc8a74dbb56b66750ee5bea872b111d2c173dfe97caf5c572586cb9293f8ad83c2a167fc3f96a7f8bc2ff0daad91bd395616818650d24d9e4c17451b31cddd859b9f6a8dba0466cab7f6f7d797af7067920283efd585b38bcac4bad0077faaf0dcbb53ba7d5e339e2b05acb86dd7c056b816e0a307e61b0a92d41694da807ef729007cbe987a605e7e28c72b929a408339a9f296142aa472444f9aebe545a4961e3df6b7c12a305846f36f05a963bca674edbcb62592201e93846cf88d656ecb546a2627e4a0536c0aa3815546533427810453c441b2ae1cfa56c0816b834dbee7235e2b8ce81b67551045736b5b6f15af6c18a3df2aa31207fb27875d3bebca34406d2612e4647fec228c856478abdd9ccae237e0a6199d14fc3b5088df36e0a6219ccc6a5a396c6d6fc91ad7c0d2deaad2fdaaf40d1ab6d08054cdc0c7c3c732b59ecd2ceb3ab3c09104b00542aa61d0ef5dcaf7d63095bbebc874b5bc01305871d0b012b25c19245ae0bdf40fda548df61eacf8877eb9df8e4c0f96eafd9483179edc41999c92c8dc535b2b21190d0023ea416ae8598eb2c280b4798ecce906b3253c80b4dc33db0391cbc96fc8c0c6266f97a535e6cf780ff26d26af57b742b53fcf8bf70c115ae6b1ce6bda9f1d0ca4925c61f0af5857dd5f392cb9e621f8dc89a259f5992a64295c0fd6609d793905e4fe9efd227bc3158fda26fd5248af82bcd19dd86a9311767f9f0929e697e230b078bc39b59f002ea627367b2fdfe0354ddc688609554a7222eb78894dffa4bee3ab468578435d3cf86ac37b3b0e6fc6d00a5c74c3d9889847346dd65918b158c9acec81c1ae1c784cb082eeac76eb45cb13365d4b3e7a7a933a25c68ec3a4375b4c5f6e09819fefec73b5a2939cf5f5f25e429f7f3be8d069f9a0532353aa049defaf8f37e8aa0df8852909a7b4ac6ab0a446d1b31185aa991764eaf55feb89a2fac2333fa7f795d3994b7360a57c19e0ecf6d9d411d524c86045e70610cd225846b5a7019ee6717a8c4ee9d2c81d89622ad6c24f2e801e09f1d46c3d20cbeb729eccfe67de7afe1441557bf6bbb72fbca528ce55696f321a393de3a4c6356b39e164bdf7fe187e6e0c0478f53b02095795180fa6bf428184ec7b6aa3b0e434f98e8f16a304ac0bf48d6ec647352303e96f9361edcd54a2b063c53290eb7a8869b0350086cad5b020a47059a08e591f7edc905100add1a9feb0292ecc4841ce7cacba50fb603ab6ca1b195ca735e44003c6a698da76f1690ac43388813d6ff39fe76b5d5550bb3d9d2ac1641b550949d2cadae942f879afbefdc7d36a77a40a35a87a76676efc4d1f4fd4661b4ed0bc3ab5ad1e4d6301d853c8a825c8ed9b9bc6d8747492b3a021345e4a437b89276bfe9ae05239ca7b39cda6ad67f7d2ec07cbcd132f5002f001d28280a05643d3f127f352a93143e10ccadeb11e3cbce226c761da0f9ece7862a041e8959ae67c743bc4d870cf52e4ca4cdae7a39501df9465b985c768fe9ca2bab1a6618c9b8d6dd653832941072d081acbee0c40813b0701886db6ddb0e3e37dd761177a3f6d365a0788a0949840544f29cd57f183be09973a1545f101dc78d0342b580eac7d8eabe532c3a645d25da143a5", 0x555}], 0x1}, 0x0) 619.411255ms ago: executing program 1 (id=2626): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x9, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x1, 0x7fffffff, 0x7, 0x4, 0x4003, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, r0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x14, &(0x7f0000000000), 0x8) sendmsg$inet(r6, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@in={0x2, 0x4e24, @private=0xa010100}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) 463.707169ms ago: executing program 0 (id=2627): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x1, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="540000002d000b63717a3c4a7ad8985b0808aa782223fbe40f80e0932eab389d2db26277c4abda16ad715fb33005cbd9ec3dd4f1cd7d38005797c978516b8909cc0bc70f6a034cbb95c40c4c46699d726a6172e6", 0x54}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000)=r8, 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028000b6394f90509a16dd8e50000cc577836970686eb8790519b82b4aa31cc3ce90019982fe7", 0x2a}], 0x1}, 0x4000000) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20028070) 366.453871ms ago: executing program 2 (id=2628): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f900", 0xba}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0xa3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r8, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800) 347.849832ms ago: executing program 3 (id=2629): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) (async) r2 = openat$cgroup_netprio_ifpriomap(r1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="cdd91dc526641f", 0x7}], 0x1}, 0x40040) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x3}, 0x114905, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async) r5 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10001, 0x3}, 0x114905, 0x4, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) close(r4) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) (async) write$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x52) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000140)='ns/net\x00') ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f00000002c0), &(0x7f0000000400)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r8}, &(0x7f00000002c0), &(0x7f0000000400)='%pB \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8922, &(0x7f0000000080)) 0s ago: executing program 2 (id=2630): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a800160005000140030000000360", 0x3e}], 0x1}, 0x40000f0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000be7f99fabc2ec39e21b45c146607347a83cb51468448279f89784e1f0793a275788e3a05ed1e5aadf1c3c9c050d1c234960c470085761085bc80d554db30ed15a26cf9c20ae1386ba2cebc20d3c3737fddcd292d469b8054033179663dd57ddfb6a9da897cede44e2ffdaec155816ac0105c9cf53abec13ca1fd11f5dfeb79c60b0265", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100057, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x4001, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb43}, {}, {}, [@generic={0x1, 0xe, 0x6, 0x6, 0x3}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0xa}, @generic={0x84, 0x4, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x21, &(0x7f0000000a00)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xcd, 0x9, 0xa, 0x5, 0xf61e}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', r3, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x0]}}, &(0x7f00000009c0)=""/30, 0x40, 0x1e, 0x1, 0x1ff}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) kernel console output (not intermixed with test programs): 4][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.332490][T10443] __nla_validate_parse: 3 callbacks suppressed [ 317.332503][T10443] netlink: 822 bytes leftover after parsing attributes in process `syz.2.1627'. [ 317.811009][T10454] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 317.820629][T10454] veth0_vlan: left promiscuous mode [ 317.828385][T10454] veth0_vlan: entered promiscuous mode [ 317.836053][T10454] team0: Device veth0_vlan failed to register rx_handler [ 317.962651][T10459] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1632'. [ 318.278717][T10464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1635'. [ 318.399576][T10471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.407042][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.414630][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.422115][T10471] IPv6: NLM_F_CREATE should be set when creating new route [ 318.624610][T10471] netlink: 'syz.1.1636': attribute type 9 has an invalid length. [ 318.632594][T10471] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1636'. [ 319.040047][T10477] netlink: 'syz.1.1636': attribute type 9 has an invalid length. [ 319.070424][T10477] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1636'. [ 319.083914][T10491] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 319.113155][T10491] veth0_vlan: left promiscuous mode [ 319.138631][T10491] veth0_vlan: entered promiscuous mode [ 319.150038][T10493] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1643'. [ 319.167555][T10491] team0: Device veth0_vlan failed to register rx_handler [ 319.713944][T10505] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1646'. [ 320.227454][T10521] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1652'. [ 320.302360][T10523] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 320.314745][T10523] veth0_vlan: left allmulticast mode [ 320.372949][T10523] veth0_vlan: left promiscuous mode [ 320.388150][T10523] veth0_vlan: entered promiscuous mode [ 320.416416][T10523] team0: Device veth0_vlan failed to register rx_handler [ 320.537523][T10523] syz.1.1653 (10523) used greatest stack depth: 17832 bytes left [ 320.729404][T10532] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1656'. [ 320.965889][T10538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1658'. [ 321.705093][T10552] netlink: 'syz.0.1670': attribute type 46 has an invalid length. [ 321.760450][T10553] netlink: 'syz.3.1663': attribute type 10 has an invalid length. [ 321.769570][T10553] veth0_vlan: left promiscuous mode [ 321.793083][T10553] veth0_vlan: entered promiscuous mode [ 321.808494][T10553] team0: Device veth0_vlan failed to register rx_handler [ 323.608084][T10583] netlink: 'syz.1.1669': attribute type 46 has an invalid length. [ 324.190651][T10596] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 324.239334][T10596] veth0_vlan: left promiscuous mode [ 324.256818][T10596] veth0_vlan: entered promiscuous mode [ 324.269662][T10596] team0: Device veth0_vlan failed to register rx_handler [ 324.280617][T10600] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1675'. [ 324.611276][T10604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.618697][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 324.626261][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 324.633776][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 324.688325][T10606] netlink: 'syz.1.1678': attribute type 10 has an invalid length. [ 324.702983][T10606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1678'. [ 324.809158][T10611] netlink: 'syz.2.1677': attribute type 9 has an invalid length. [ 324.831770][T10611] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1677'. [ 324.843675][T10604] netlink: 'syz.2.1677': attribute type 9 has an invalid length. [ 324.868346][T10604] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1677'. [ 325.939469][T10620] netlink: 'syz.1.1681': attribute type 46 has an invalid length. [ 326.810983][T10639] netlink: 'syz.0.1685': attribute type 46 has an invalid length. [ 327.091341][T10643] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1687'. [ 327.848965][T10652] netlink: 'syz.1.1691': attribute type 10 has an invalid length. [ 327.906846][T10652] veth0_vlan: left promiscuous mode [ 327.979003][T10652] veth0_vlan: entered promiscuous mode [ 328.046345][T10652] team0: Device veth0_vlan failed to register rx_handler [ 328.719682][T10674] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 328.730107][T10674] veth0_vlan: left promiscuous mode [ 328.743177][T10674] veth0_vlan: entered promiscuous mode [ 328.776120][T10674] team0: Device veth0_vlan failed to register rx_handler [ 329.205002][T10687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1700'. [ 329.364200][T10693] netlink: 'syz.2.1701': attribute type 46 has an invalid length. [ 330.325113][T10709] netlink: 'syz.0.1706': attribute type 10 has an invalid length. [ 330.382568][T10709] veth0_vlan: left promiscuous mode [ 330.391137][T10709] veth0_vlan: entered promiscuous mode [ 330.403694][T10709] team0: Device veth0_vlan failed to register rx_handler [ 331.290084][T10729] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 331.308523][T10729] veth0_vlan: left promiscuous mode [ 331.320634][T10729] veth0_vlan: entered promiscuous mode [ 331.354048][T10729] team0: Device veth0_vlan failed to register rx_handler [ 331.366114][T10733] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1713'. [ 331.868571][T10744] netlink: 'syz.0.1716': attribute type 46 has an invalid length. [ 331.881249][T10746] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1718'. [ 332.759988][T10761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1723'. [ 333.544010][T10790] netlink: 'syz.0.1729': attribute type 46 has an invalid length. [ 334.021634][T10796] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1732'. [ 334.371808][T10804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1735'. [ 334.710952][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1737'. [ 334.720869][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1737'. [ 335.213745][T10830] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1744'. [ 335.502591][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1749'. [ 335.513298][T10841] FAULT_INJECTION: forcing a failure. [ 335.513298][T10841] name failslab, interval 1, probability 0, space 0, times 0 [ 335.522853][T10839] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1747'. [ 335.535366][T10841] CPU: 1 PID: 10841 Comm: syz.1.1749 Not tainted syzkaller #0 [ 335.543576][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 335.553651][T10841] Call Trace: [ 335.556955][T10841] [ 335.559899][T10841] dump_stack_lvl+0x18c/0x250 [ 335.564606][T10841] ? show_regs_print_info+0x20/0x20 [ 335.569825][T10841] ? load_image+0x420/0x420 [ 335.574355][T10841] ? __might_sleep+0xe0/0xe0 [ 335.578986][T10841] ? __lock_acquire+0x7d80/0x7d80 [ 335.584038][T10841] should_fail_ex+0x394/0x4c0 [ 335.588746][T10841] should_failslab+0x9/0x20 [ 335.593275][T10841] slab_pre_alloc_hook+0x59/0x300 [ 335.598336][T10841] kmem_cache_alloc_node+0x5e/0x310 [ 335.603565][T10841] ? __alloc_skb+0x103/0x2c0 [ 335.608191][T10841] __alloc_skb+0x103/0x2c0 [ 335.612648][T10841] netlink_dump+0x1ee/0xec0 [ 335.617188][T10841] ? rcu_is_watching+0x15/0xb0 [ 335.621986][T10841] ? __mutex_lock+0x30d/0xc80 [ 335.626690][T10841] ? netlink_lookup+0x200/0x200 [ 335.631595][T10841] ? netlink_lookup+0x30/0x200 [ 335.636398][T10841] ? netlink_lookup+0x30/0x200 [ 335.641206][T10841] __netlink_dump_start+0x57c/0x7a0 [ 335.646449][T10841] rtnetlink_rcv_msg+0xe19/0xf90 [ 335.651420][T10841] ? rtnetlink_rcv_msg+0x220/0xf90 [ 335.656563][T10841] ? rtnl_getlink+0xd20/0xd20 [ 335.661268][T10841] ? rtnetlink_bind+0x80/0x80 [ 335.666033][T10841] ? rtnl_getlink+0xd20/0xd20 [ 335.670733][T10841] ? ref_tracker_free+0x686/0x830 [ 335.675784][T10841] netlink_rcv_skb+0x235/0x4c0 [ 335.680583][T10841] ? rtnetlink_bind+0x80/0x80 [ 335.685287][T10841] ? netlink_ack+0x1160/0x1160 [ 335.690094][T10841] ? __lock_acquire+0x7d80/0x7d80 [ 335.695158][T10841] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.700391][T10841] netlink_unicast+0x7b1/0x930 [ 335.705198][T10841] netlink_sendmsg+0x8d0/0xbf0 [ 335.710005][T10841] ? netlink_getsockopt+0x590/0x590 [ 335.715255][T10841] ? apparmor_socket_sendmsg+0x8e/0x330 [ 335.720828][T10841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 335.726153][T10841] ? security_socket_sendmsg+0x80/0xa0 [ 335.731645][T10841] ? netlink_getsockopt+0x590/0x590 [ 335.736883][T10841] ____sys_sendmsg+0x61b/0x980 [ 335.741684][T10841] ? __asan_memset+0x22/0x40 [ 335.746308][T10841] ? __sys_sendmsg_sock+0x30/0x30 [ 335.751364][T10841] ? __import_iovec+0x5f2/0x850 [ 335.756255][T10841] ? import_iovec+0x73/0xa0 [ 335.760797][T10841] ___sys_sendmsg+0x2a6/0x360 [ 335.765495][T10841] ? __sys_sendmsg+0x2b0/0x2b0 [ 335.770294][T10841] ? trace_call_bpf+0xc3/0x6c0 [ 335.775106][T10841] __se_sys_sendmsg+0x1d0/0x2c0 [ 335.779976][T10841] ? perf_trace_preemptirq_template+0x269/0x330 [ 335.786250][T10841] ? __x64_sys_sendmsg+0x80/0x80 [ 335.791226][T10841] ? lockdep_hardirqs_on+0x98/0x150 [ 335.796453][T10841] do_syscall_64+0x55/0xb0 [ 335.800894][T10841] ? clear_bhb_loop+0x40/0x90 [ 335.805592][T10841] ? clear_bhb_loop+0x40/0x90 [ 335.810300][T10841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.816234][T10841] RIP: 0033:0x7f71f459de99 [ 335.820675][T10841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.840307][T10841] RSP: 002b:00007f71f54fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.848748][T10841] RAX: ffffffffffffffda RBX: 00007f71f4825fa0 RCX: 00007f71f459de99 [ 335.856747][T10841] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 335.864748][T10841] RBP: 00007f71f54fd090 R08: 0000000000000000 R09: 0000000000000000 [ 335.872740][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.880736][T10841] R13: 00007f71f4826038 R14: 00007f71f4825fa0 R15: 00007ffc41d786c8 [ 335.888753][T10841] [ 337.097659][T10874] __nla_validate_parse: 1 callbacks suppressed [ 337.097680][T10874] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1760'. [ 337.587266][T10888] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1764'. [ 337.733066][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1765'. [ 337.835255][T10890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1765'. [ 338.271494][T10909] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1771'. [ 339.095207][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1778'. [ 339.158882][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1778'. [ 339.945193][T10945] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1783'. [ 339.957674][T10945] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 340.144335][T10957] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1785'. [ 340.264135][T10965] netlink: 16018 bytes leftover after parsing attributes in process `syz.3.1789'. [ 340.486631][T10972] netlink: 'syz.1.1793': attribute type 9 has an invalid length. [ 340.549527][T10975] netlink: 'syz.1.1793': attribute type 9 has an invalid length. [ 341.921238][T11009] netlink: 'syz.3.1804': attribute type 9 has an invalid length. [ 341.930049][T11007] FAULT_INJECTION: forcing a failure. [ 341.930049][T11007] name failslab, interval 1, probability 0, space 0, times 0 [ 341.982416][T11007] CPU: 0 PID: 11007 Comm: syz.1.1803 Not tainted syzkaller #0 [ 341.989954][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.000030][T11007] Call Trace: [ 342.003331][T11007] [ 342.006295][T11007] dump_stack_lvl+0x18c/0x250 [ 342.011002][T11007] ? show_regs_print_info+0x20/0x20 [ 342.015494][T11012] netlink: 'syz.3.1804': attribute type 9 has an invalid length. [ 342.016205][T11007] ? load_image+0x420/0x420 [ 342.028434][T11007] ? __might_sleep+0xe0/0xe0 [ 342.033048][T11007] ? __lock_acquire+0x7d80/0x7d80 [ 342.038092][T11007] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 342.044104][T11007] should_fail_ex+0x394/0x4c0 [ 342.048815][T11007] should_failslab+0x9/0x20 [ 342.053366][T11007] slab_pre_alloc_hook+0x59/0x300 [ 342.058429][T11007] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 342.063739][T11007] __kmem_cache_alloc_node+0x53/0x250 [ 342.069145][T11007] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 342.074461][T11007] kmalloc_trace+0x2a/0xe0 [ 342.078894][T11007] __xdp_reg_mem_model+0x1e3/0x5a0 [ 342.084008][T11007] ? kvmalloc_node+0x70/0x180 [ 342.088685][T11007] ? kvmalloc_node+0x70/0x180 [ 342.093359][T11007] ? xdp_reg_mem_model+0x40/0x40 [ 342.098305][T11007] xdp_reg_mem_model+0x22/0x40 [ 342.103066][T11007] bpf_test_run_xdp_live+0x262/0x1b30 [ 342.108440][T11007] ? 0xffffffffa00041c0 [ 342.112590][T11007] ? 0xffffffffa00041c0 [ 342.116768][T11007] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 342.122671][T11007] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.128827][T11007] ? xdp_convert_md_to_buff+0x330/0x330 [ 342.134395][T11007] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 342.140630][T11007] ? _copy_from_user+0xa5/0xe0 [ 342.145393][T11007] ? bpf_test_init+0x119/0x140 [ 342.150148][T11007] ? xdp_convert_md_to_buff+0x5b/0x330 [ 342.155603][T11007] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 342.160971][T11007] ? __lock_acquire+0x7d80/0x7d80 [ 342.165999][T11007] ? dev_put+0x80/0x80 [ 342.170071][T11007] ? dev_put+0x80/0x80 [ 342.174136][T11007] bpf_prog_test_run+0x31f/0x390 [ 342.179073][T11007] __sys_bpf+0x49d/0x890 [ 342.183313][T11007] ? bpf_link_show_fdinfo+0x390/0x390 [ 342.188691][T11007] ? lock_chain_count+0x20/0x20 [ 342.193535][T11007] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 342.199516][T11007] __x64_sys_bpf+0x7c/0x90 [ 342.203932][T11007] do_syscall_64+0x55/0xb0 [ 342.208344][T11007] ? clear_bhb_loop+0x40/0x90 [ 342.213016][T11007] ? clear_bhb_loop+0x40/0x90 [ 342.217688][T11007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.223585][T11007] RIP: 0033:0x7f71f459de99 [ 342.228015][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.247616][T11007] RSP: 002b:00007f71f54fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.256036][T11007] RAX: ffffffffffffffda RBX: 00007f71f4825fa0 RCX: 00007f71f459de99 [ 342.264000][T11007] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 342.271963][T11007] RBP: 00007f71f54fd090 R08: 0000000000000000 R09: 0000000000000000 [ 342.279929][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.287895][T11007] R13: 00007f71f4826038 R14: 00007f71f4825fa0 R15: 00007ffc41d786c8 [ 342.295880][T11007] [ 342.456001][T11014] __nla_validate_parse: 6 callbacks suppressed [ 342.457764][T11014] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1807'. [ 342.461009][T11020] netlink: 'syz.1.1808': attribute type 21 has an invalid length. [ 342.482042][T11020] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.490174][T11020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.497431][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 342.504736][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 342.512008][T11020] IPv6: NLM_F_CREATE should be set when creating new route [ 343.117668][T11040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.194495][T11043] netlink: 'syz.3.1813': attribute type 9 has an invalid length. [ 343.231350][T11043] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1813'. [ 343.334624][T11044] netlink: 'syz.3.1813': attribute type 9 has an invalid length. [ 343.372935][T11044] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1813'. [ 343.498757][T11048] netlink: 'syz.2.1816': attribute type 9 has an invalid length. [ 343.509144][T11048] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1816'. [ 343.603059][T11049] netlink: 'syz.0.1815': attribute type 2 has an invalid length. [ 343.610988][T11049] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1815'. [ 343.620506][T11049] FAULT_INJECTION: forcing a failure. [ 343.620506][T11049] name failslab, interval 1, probability 0, space 0, times 0 [ 343.643485][T11049] CPU: 1 PID: 11049 Comm: syz.0.1815 Not tainted syzkaller #0 [ 343.650997][T11049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 343.661055][T11049] Call Trace: [ 343.664338][T11049] [ 343.667265][T11049] dump_stack_lvl+0x18c/0x250 [ 343.671985][T11049] ? show_regs_print_info+0x20/0x20 [ 343.677183][T11049] ? load_image+0x420/0x420 [ 343.681699][T11049] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.687771][T11049] ? verify_lock_unused+0x140/0x140 [ 343.692981][T11049] should_fail_ex+0x394/0x4c0 [ 343.697670][T11049] should_failslab+0x9/0x20 [ 343.702181][T11049] slab_pre_alloc_hook+0x59/0x300 [ 343.707210][T11049] ? nsim_fib_event_nb+0x187/0x1040 [ 343.712408][T11049] __kmem_cache_alloc_node+0x53/0x250 [ 343.717793][T11049] ? nsim_fib_event_nb+0x187/0x1040 [ 343.722994][T11049] kmalloc_trace+0x2a/0xe0 [ 343.727417][T11049] nsim_fib_event_nb+0x187/0x1040 [ 343.732438][T11049] ? read_lock_is_recursive+0x20/0x20 [ 343.737815][T11049] notifier_call_chain+0x18f/0x380 [ 343.742928][T11049] ? atomic_notifier_call_chain+0x26/0x180 [ 343.748737][T11049] atomic_notifier_call_chain+0xda/0x180 [ 343.754374][T11049] call_fib_notifiers+0x31/0x60 [ 343.759224][T11049] fib_table_delete+0xc6e/0xfc0 [ 343.764098][T11049] ? nexthop_get_nhc_lookup+0x400/0x400 [ 343.769649][T11049] ? perf_trace_lock+0xfc/0x3b0 [ 343.774501][T11049] ? l3mdev_fib_table+0x18/0x160 [ 343.779441][T11049] ? fib_new_table+0x10a/0x2d0 [ 343.784211][T11049] fib_magic+0x2ee/0x3b0 [ 343.788462][T11049] ? fib_add_ifaddr+0x5d0/0x5d0 [ 343.793336][T11049] fib_del_ifaddr+0x10b6/0x14c0 [ 343.798193][T11049] ? inetaddr_event+0xf0/0x150 [ 343.802955][T11049] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 343.809548][T11049] ? fib_del_ifaddr+0x2f6/0x14c0 [ 343.814498][T11049] fib_inetaddr_event+0xbb/0x1d0 [ 343.819437][T11049] notifier_call_chain+0x18f/0x380 [ 343.824557][T11049] blocking_notifier_call_chain+0x6a/0x90 [ 343.830277][T11049] __inet_del_ifa+0xaac/0x1090 [ 343.835055][T11049] inet_rtm_deladdr+0x6b4/0x7d0 [ 343.839925][T11049] ? inet_rtm_newaddr+0x1a20/0x1a20 [ 343.845137][T11049] ? inet_rtm_newaddr+0x1a20/0x1a20 [ 343.850330][T11049] rtnetlink_rcv_msg+0x843/0xf90 [ 343.855267][T11049] ? rtnetlink_rcv_msg+0x220/0xf90 [ 343.860379][T11049] ? rtnetlink_bind+0x80/0x80 [ 343.865060][T11049] ? perf_trace_preemptirq_template+0xac/0x330 [ 343.871250][T11049] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 343.877231][T11049] ? lock_chain_count+0x20/0x20 [ 343.882085][T11049] ? __local_bh_enable_ip+0x13a/0x1c0 [ 343.887464][T11049] ? lockdep_hardirqs_on+0x98/0x150 [ 343.892659][T11049] ? __local_bh_enable_ip+0x13a/0x1c0 [ 343.898029][T11049] ? _local_bh_enable+0xa0/0xa0 [ 343.902900][T11049] ? __dev_queue_xmit+0x275/0x3630 [ 343.908014][T11049] ? __dev_queue_xmit+0x1bc2/0x3630 [ 343.913215][T11049] ? __dev_queue_xmit+0x275/0x3630 [ 343.918341][T11049] ? perf_trace_lock+0xfc/0x3b0 [ 343.923199][T11049] netlink_rcv_skb+0x235/0x4c0 [ 343.927969][T11049] ? rtnetlink_bind+0x80/0x80 [ 343.932643][T11049] ? netlink_ack+0x1160/0x1160 [ 343.937418][T11049] ? __lock_acquire+0x7d80/0x7d80 [ 343.942449][T11049] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.947661][T11049] netlink_unicast+0x7b1/0x930 [ 343.952441][T11049] netlink_sendmsg+0x8d0/0xbf0 [ 343.957217][T11049] ? netlink_getsockopt+0x590/0x590 [ 343.962426][T11049] ? apparmor_socket_sendmsg+0x8e/0x330 [ 343.967973][T11049] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 343.973258][T11049] ? security_socket_sendmsg+0x80/0xa0 [ 343.978719][T11049] ? netlink_getsockopt+0x590/0x590 [ 343.983952][T11049] ____sys_sendmsg+0x61b/0x980 [ 343.988728][T11049] ? __asan_memset+0x22/0x40 [ 343.993317][T11049] ? __sys_sendmsg_sock+0x30/0x30 [ 343.998334][T11049] ? __import_iovec+0x5f2/0x850 [ 344.003193][T11049] ? import_iovec+0x73/0xa0 [ 344.007700][T11049] ___sys_sendmsg+0x2a6/0x360 [ 344.012378][T11049] ? __sys_sendmsg+0x2b0/0x2b0 [ 344.017160][T11049] ? __lock_acquire+0x7d80/0x7d80 [ 344.022207][T11049] __se_sys_sendmsg+0x1d0/0x2c0 [ 344.027055][T11049] ? __x64_sys_sendmsg+0x80/0x80 [ 344.032007][T11049] ? lockdep_hardirqs_on+0x98/0x150 [ 344.037210][T11049] do_syscall_64+0x55/0xb0 [ 344.041628][T11049] ? clear_bhb_loop+0x40/0x90 [ 344.046298][T11049] ? clear_bhb_loop+0x40/0x90 [ 344.050972][T11049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.056868][T11049] RIP: 0033:0x7fe5d6b9de99 [ 344.061281][T11049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.080913][T11049] RSP: 002b:00007fe5d799b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.089324][T11049] RAX: ffffffffffffffda RBX: 00007fe5d6e26090 RCX: 00007fe5d6b9de99 [ 344.097291][T11049] RDX: 0000000000044804 RSI: 0000200000000080 RDI: 0000000000000009 [ 344.105260][T11049] RBP: 00007fe5d799b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.113226][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.121191][T11049] R13: 00007fe5d6e26128 R14: 00007fe5d6e26090 R15: 00007fff1bb3f9e8 [ 344.129175][T11049] [ 344.233360][T11050] netlink: 'syz.2.1816': attribute type 9 has an invalid length. [ 344.292584][T11050] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1816'. [ 344.675222][T11056] veth0_vlan: left promiscuous mode [ 344.681363][T11056] veth0_vlan: entered promiscuous mode [ 344.736884][T11056] team0: Device veth0_vlan failed to register rx_handler [ 344.839790][T11059] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1819'. [ 345.695607][T11081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.772860][T11083] validate_nla: 1 callbacks suppressed [ 345.772878][T11083] netlink: 'syz.3.1827': attribute type 9 has an invalid length. [ 345.812695][T11062] delete_channel: no stack [ 345.839066][T11083] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1827'. [ 346.091449][T11090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.099082][T11090] IPv6: NLM_F_CREATE should be set when creating new route [ 346.107027][T11090] IPv6: NLM_F_CREATE should be set when creating new route [ 346.114711][T11090] IPv6: NLM_F_CREATE should be set when creating new route [ 346.145725][T11084] netlink: 'syz.3.1827': attribute type 9 has an invalid length. [ 346.202791][T11084] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1827'. [ 346.335521][T11090] netlink: 'syz.0.1828': attribute type 9 has an invalid length. [ 346.389492][T11090] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1828'. [ 346.441847][T11095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.698318][T11092] netlink: 'syz.0.1828': attribute type 9 has an invalid length. [ 346.940114][T11098] netlink: 'syz.1.1829': attribute type 9 has an invalid length. [ 347.082694][T11099] netlink: 'syz.1.1829': attribute type 9 has an invalid length. [ 348.026852][T11123] netlink: 'syz.3.1836': attribute type 10 has an invalid length. [ 348.043702][T11123] veth0_vlan: left promiscuous mode [ 348.054870][T11123] veth0_vlan: entered promiscuous mode [ 348.062473][T11123] team0: Device veth0_vlan failed to register rx_handler [ 348.565627][T11139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.655621][T11142] netlink: 'syz.3.1842': attribute type 9 has an invalid length. [ 348.719802][T11142] __nla_validate_parse: 4 callbacks suppressed [ 348.719821][T11142] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1842'. [ 348.806592][T11143] netlink: 'syz.3.1842': attribute type 9 has an invalid length. [ 348.815472][T11143] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1842'. [ 349.108269][T11146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1844'. [ 349.445067][T11157] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 349.466790][T11157] veth0_vlan: left promiscuous mode [ 349.472960][T11157] veth0_vlan: entered promiscuous mode [ 349.489826][T11157] team0: Device veth0_vlan failed to register rx_handler [ 351.777058][T11183] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1855'. [ 351.970609][T11192] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 351.980158][T11192] veth0_vlan: left promiscuous mode [ 351.989251][T11192] veth0_vlan: entered promiscuous mode [ 351.998620][T11192] team0: Device veth0_vlan failed to register rx_handler [ 352.167881][T11198] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1860'. [ 352.612681][T11212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1865'. [ 352.908689][T11221] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 352.922684][T11221] veth0_vlan: left promiscuous mode [ 352.929937][T11221] veth0_vlan: entered promiscuous mode [ 352.937786][T11221] team0: Device veth0_vlan failed to register rx_handler [ 353.164241][T11227] netlink: 'syz.2.1870': attribute type 2 has an invalid length. [ 353.172206][T11227] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1870'. [ 353.337251][T11235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1874'. [ 353.886100][T11253] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 353.922884][T11253] veth0_vlan: left promiscuous mode [ 353.944180][T11253] veth0_vlan: entered promiscuous mode [ 353.964379][T11253] team0: Device veth0_vlan failed to register rx_handler [ 354.524128][T11268] netlink: 'syz.2.1884': attribute type 10 has an invalid length. [ 354.539303][T11268] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1884'. [ 354.563762][T11268] batadv_slave_1: entered promiscuous mode [ 354.579184][T11268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.588069][T11272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1886'. [ 354.607462][T11268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.640154][T11289] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 355.658045][T11289] veth0_vlan: left promiscuous mode [ 355.667961][T11289] veth0_vlan: entered promiscuous mode [ 355.685326][T11289] team0: Device veth0_vlan failed to register rx_handler [ 355.833827][T11299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.862592][T11301] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1895'. [ 355.922726][T11303] netlink: 'syz.1.1896': attribute type 9 has an invalid length. [ 355.992172][T11303] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1896'. [ 356.247720][T11305] netlink: 'syz.1.1896': attribute type 9 has an invalid length. [ 356.312592][T11305] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1896'. [ 357.139554][T11331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1905'. [ 357.338574][T11337] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 357.354783][T11337] veth0_vlan: left promiscuous mode [ 357.360986][T11337] veth0_vlan: entered promiscuous mode [ 357.369323][T11337] team0: Device veth0_vlan failed to register rx_handler [ 358.761059][T11364] netlink: 'syz.1.1915': attribute type 21 has an invalid length. [ 358.771293][T11364] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1915'. [ 358.802793][T11367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.817667][T11364] netlink: 'syz.1.1915': attribute type 10 has an invalid length. [ 358.843645][T11364] team0: Device vxcan1 is of different type [ 358.892430][T11373] netlink: 'syz.0.1914': attribute type 9 has an invalid length. [ 358.903053][T11373] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 358.970412][T11372] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 358.988197][T11372] veth0_vlan: left promiscuous mode [ 359.011487][T11372] veth0_vlan: entered promiscuous mode [ 359.038877][T11372] team0: Device veth0_vlan failed to register rx_handler [ 359.155502][T11377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.330503][T11374] netlink: 'syz.0.1914': attribute type 9 has an invalid length. [ 359.395775][T11374] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 359.547512][T11378] netlink: 'syz.1.1917': attribute type 9 has an invalid length. [ 359.652919][T11378] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1917'. [ 360.001151][T11381] netlink: 'syz.1.1917': attribute type 9 has an invalid length. [ 360.033666][T11381] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1917'. [ 360.041735][T11388] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1920'. [ 360.058815][T11388] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 361.542112][T11416] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 361.551145][T11416] veth0_vlan: left promiscuous mode [ 361.566939][T11416] veth0_vlan: entered promiscuous mode [ 361.578552][T11416] team0: Device veth0_vlan failed to register rx_handler [ 361.832621][T11426] netlink: 'syz.1.1929': attribute type 10 has an invalid length. [ 361.853033][T11426] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1929'. [ 361.877778][T11426] batadv_slave_1: entered promiscuous mode [ 361.893760][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.910737][T11426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.273686][T11441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.342043][T11442] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1932'. [ 362.408841][T11440] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1933'. [ 362.431106][T11440] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 362.522838][T11444] validate_nla: 1 callbacks suppressed [ 362.522850][T11444] netlink: 'syz.1.1932': attribute type 9 has an invalid length. [ 362.551870][T11444] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1932'. [ 363.470220][T11468] netlink: 'syz.1.1938': attribute type 10 has an invalid length. [ 363.497686][T11468] veth0_vlan: left promiscuous mode [ 363.504031][T11468] veth0_vlan: entered promiscuous mode [ 363.511283][T11468] team0: Device veth0_vlan failed to register rx_handler [ 364.235698][T11484] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1944'. [ 364.264706][T11484] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 364.369374][T11492] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1946'. [ 364.572836][T11496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.655421][T11501] netlink: 'syz.1.1947': attribute type 9 has an invalid length. [ 364.696929][T11501] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1947'. [ 364.893709][T11505] netlink: 'syz.1.1947': attribute type 9 has an invalid length. [ 364.991530][T11505] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1947'. [ 365.462992][T11519] netlink: 'syz.0.1955': attribute type 10 has an invalid length. [ 365.483175][T11519] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1955'. [ 365.494180][T11519] batadv_slave_1: entered promiscuous mode [ 366.122052][T11530] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1957'. [ 366.132971][T11530] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 367.684008][T11577] netlink: 'syz.2.1968': attribute type 10 has an invalid length. [ 367.704952][T11577] veth0_vlan: left promiscuous mode [ 367.726665][T11577] veth0_vlan: entered promiscuous mode [ 367.748521][T11577] team0: Device veth0_vlan failed to register rx_handler [ 367.831099][T11576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1971'. [ 367.859836][T11576] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 369.305542][T11616] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1984'. [ 369.323758][T11625] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 369.331844][T11625] veth0_vlan: left promiscuous mode [ 369.366591][T11616] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 369.387859][T11625] veth0_vlan: entered promiscuous mode [ 369.396780][T11625] team0: Device veth0_vlan failed to register rx_handler [ 370.068964][T11637] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1989'. [ 370.789076][T11656] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1996'. [ 371.000073][T11660] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1997'. [ 371.017408][T11660] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 373.516440][T11698] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2008'. [ 373.837740][T11706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.957108][T11709] netlink: 'syz.3.2009': attribute type 9 has an invalid length. [ 373.967131][T11709] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2009'. [ 374.058422][T11710] netlink: 'syz.3.2009': attribute type 9 has an invalid length. [ 374.094612][T11710] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2009'. [ 374.253406][T11714] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2011'. [ 374.284006][T11714] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 375.513087][T11735] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 375.522366][T11735] veth0_vlan: left promiscuous mode [ 375.529410][T11735] veth0_vlan: entered promiscuous mode [ 375.537482][T11735] team0: Device veth0_vlan failed to register rx_handler [ 375.916502][T11742] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2027'. [ 375.930890][T11742] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 377.268676][T11755] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2023'. [ 377.279967][T11755] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 377.785134][T11769] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2026'. [ 377.809239][T11769] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 378.483353][T11782] netlink: 'syz.1.2028': attribute type 10 has an invalid length. [ 378.491859][T11782] veth0_vlan: left promiscuous mode [ 378.499383][T11782] veth0_vlan: entered promiscuous mode [ 378.507183][T11782] team0: Device veth0_vlan failed to register rx_handler [ 378.764889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.771432][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.840469][T11798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.925268][T11800] netlink: 'syz.3.2037': attribute type 9 has an invalid length. [ 379.001628][T11800] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2037'. [ 379.023306][T11792] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2035'. [ 379.057917][T11792] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 379.151327][T11793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2032'. [ 379.190542][T11793] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 379.239401][T11802] netlink: 'syz.3.2037': attribute type 9 has an invalid length. [ 379.263239][T11802] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2037'. [ 379.676611][T11808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 379.739133][T11812] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2040'. [ 379.799836][T11812] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 379.818655][T11813] netlink: 'syz.2.2039': attribute type 9 has an invalid length. [ 379.883791][T11813] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2039'. [ 380.175375][T11808] netlink: 'syz.2.2039': attribute type 9 has an invalid length. [ 380.187623][T11808] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2039'. [ 380.281381][T11820] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 380.289511][T11820] veth0_vlan: left promiscuous mode [ 380.298234][T11820] veth0_vlan: entered promiscuous mode [ 380.305623][T11820] team0: Device veth0_vlan failed to register rx_handler [ 381.203120][T11838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.260552][T11836] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2047'. [ 381.278984][T11840] netlink: 'syz.2.2048': attribute type 9 has an invalid length. [ 381.302459][T11836] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 381.306058][T11840] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2048'. [ 381.401919][T11843] netlink: 'syz.2.2048': attribute type 9 has an invalid length. [ 381.423190][T11843] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2048'. [ 381.643285][T11849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.793255][T11852] netlink: 'syz.3.2051': attribute type 9 has an invalid length. [ 381.931974][T11848] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2052'. [ 381.967266][T11853] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 381.975450][T11852] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2051'. [ 382.011375][T11853] veth0_vlan: left promiscuous mode [ 382.017876][T11848] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 382.062482][T11853] veth0_vlan: entered promiscuous mode [ 382.097431][T11853] team0: Device veth0_vlan failed to register rx_handler [ 382.189062][T11855] netlink: 'syz.3.2051': attribute type 9 has an invalid length. [ 382.200499][T11855] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2051'. [ 384.028287][T11894] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 384.049706][T11894] veth0_vlan: left promiscuous mode [ 384.056927][T11894] veth0_vlan: entered promiscuous mode [ 384.069069][T11894] team0: Device veth0_vlan failed to register rx_handler [ 384.492338][T11898] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2063'. [ 384.533174][T11898] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 384.898739][T11910] netlink: 'syz.3.2066': attribute type 10 has an invalid length. [ 384.906924][T11910] veth0_vlan: left promiscuous mode [ 384.912865][T11910] veth0_vlan: entered promiscuous mode [ 384.921861][T11910] team0: Device veth0_vlan failed to register rx_handler [ 386.126961][T11934] netlink: 'syz.1.2072': attribute type 9 has an invalid length. [ 386.147430][T11934] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2072'. [ 386.678115][T11928] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 386.687798][T11928] veth0_vlan: left promiscuous mode [ 386.696526][T11928] veth0_vlan: entered promiscuous mode [ 386.703506][T11928] team0: Device veth0_vlan failed to register rx_handler [ 386.726506][T11932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.783331][T11933] netlink: 'syz.1.2072': attribute type 9 has an invalid length. [ 386.804904][T11933] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2072'. [ 387.490611][T11948] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2078'. [ 387.509980][T11948] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 387.907629][T11954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.018688][T11954] netlink: 'syz.0.2079': attribute type 9 has an invalid length. [ 388.028967][T11954] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2079'. [ 388.248164][T11963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.256494][T11957] netlink: 'syz.0.2079': attribute type 9 has an invalid length. [ 388.272170][T11964] netlink: 'syz.3.2081': attribute type 10 has an invalid length. [ 388.287470][T11957] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2079'. [ 388.297280][T11964] veth0_vlan: left promiscuous mode [ 388.305694][T11964] veth0_vlan: entered promiscuous mode [ 388.319051][T11964] team0: Device veth0_vlan failed to register rx_handler [ 388.620127][T11968] netlink: 16187 bytes leftover after parsing attributes in process `syz.3.2083'. [ 388.792885][T11966] netlink: 'syz.2.2082': attribute type 9 has an invalid length. [ 388.806992][T11966] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2082'. [ 388.946617][T11963] netlink: 'syz.2.2082': attribute type 9 has an invalid length. [ 388.971605][T11963] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2082'. [ 389.846497][T11981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.884436][T11984] netlink: 'syz.3.2089': attribute type 9 has an invalid length. [ 389.900762][T11984] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2089'. [ 390.048738][T11983] netlink: 'syz.3.2089': attribute type 9 has an invalid length. [ 390.068379][T11983] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2089'. [ 390.122747][T11989] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2090'. [ 390.132996][T11989] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 390.355251][T11998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.442855][T11999] netlink: 'syz.2.2094': attribute type 9 has an invalid length. [ 390.508161][T11994] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 390.685650][T12001] netlink: 'syz.2.2094': attribute type 9 has an invalid length. [ 391.331686][T12020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.481790][T12024] netlink: 'syz.0.2101': attribute type 9 has an invalid length. [ 391.630897][T12023] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 391.812640][T12025] netlink: 'syz.0.2101': attribute type 9 has an invalid length. [ 391.911436][T12025] __nla_validate_parse: 7 callbacks suppressed [ 391.911452][T12025] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2101'. [ 391.953267][T12032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.201695][T12034] netlink: 'syz.3.2104': attribute type 9 has an invalid length. [ 392.243466][T12034] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2104'. [ 392.337787][T12035] netlink: 'syz.3.2104': attribute type 9 has an invalid length. [ 392.378377][T12035] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2104'. [ 392.545266][T12041] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2105'. [ 392.558914][T12041] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 393.176371][T12057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.258288][T12058] netlink: 'syz.0.2113': attribute type 9 has an invalid length. [ 393.329165][T12054] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2112'. [ 393.370267][T12058] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2113'. [ 393.384925][T12054] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 393.781703][T12063] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2114'. [ 393.791721][T12060] netlink: 'syz.0.2113': attribute type 9 has an invalid length. [ 393.842221][T12063] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 393.864711][T12060] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2113'. [ 394.494384][T12076] netlink: 'syz.3.2117': attribute type 10 has an invalid length. [ 394.520102][T12076] veth0_vlan: left promiscuous mode [ 394.526652][T12076] veth0_vlan: entered promiscuous mode [ 394.534251][T12076] team0: Device veth0_vlan failed to register rx_handler [ 394.599843][T12078] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2118'. [ 394.694140][T12078] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 395.290398][T12090] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2123'. [ 395.320687][T12090] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 395.372544][T12096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.484500][T12099] netlink: 'syz.0.2125': attribute type 9 has an invalid length. [ 395.512849][T12098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.660526][T12101] netlink: 'syz.0.2125': attribute type 9 has an invalid length. [ 395.851891][T12098] netlink: 'syz.1.2126': attribute type 9 has an invalid length. [ 396.142904][T12103] netlink: 'syz.1.2126': attribute type 9 has an invalid length. [ 397.186569][T12129] __nla_validate_parse: 4 callbacks suppressed [ 397.186673][T12129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2135'. [ 397.229468][T12129] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 397.248244][T12131] netlink: 'syz.2.2137': attribute type 10 has an invalid length. [ 397.268564][T12131] veth0_vlan: left promiscuous mode [ 397.294748][T12131] veth0_vlan: entered promiscuous mode [ 397.321072][T12131] team0: Device veth0_vlan failed to register rx_handler [ 397.397781][T12142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.491135][T12146] netlink: 'syz.1.2139': attribute type 9 has an invalid length. [ 397.500180][T12146] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2139'. [ 397.525160][T12145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.793191][T12149] netlink: 'syz.1.2139': attribute type 9 has an invalid length. [ 397.889469][T12149] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2139'. [ 398.417827][T12150] netlink: 'syz.2.2140': attribute type 9 has an invalid length. [ 398.551943][T12150] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2140'. [ 398.663945][T12153] netlink: 'syz.2.2140': attribute type 9 has an invalid length. [ 398.703691][T12153] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2140'. [ 399.053024][T12172] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2148'. [ 399.066847][T12172] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 399.178953][T12174] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 399.190710][T12174] veth0_vlan: left promiscuous mode [ 399.220358][T12174] veth0_vlan: entered promiscuous mode [ 399.250309][T12174] team0: Device veth0_vlan failed to register rx_handler [ 400.892279][ T5778] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 401.761923][T12208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.843216][T12209] netlink: 'syz.0.2159': attribute type 9 has an invalid length. [ 401.881145][T12209] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2159'. [ 401.910218][T12206] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2160'. [ 401.921953][T12206] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 402.013211][T12211] netlink: 'syz.0.2159': attribute type 9 has an invalid length. [ 402.042954][T12211] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2159'. [ 402.292944][T12219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.386983][T12220] netlink: 'syz.2.2162': attribute type 9 has an invalid length. [ 402.432694][T12220] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2162'. [ 402.508247][T12223] netlink: 'syz.2.2162': attribute type 9 has an invalid length. [ 402.548774][T12223] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2162'. [ 402.645226][T12227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.106429][T12228] netlink: 'syz.3.2166': attribute type 9 has an invalid length. [ 403.256667][T12228] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2166'. [ 403.677572][T12229] netlink: 'syz.3.2166': attribute type 9 has an invalid length. [ 403.796092][T12229] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2166'. [ 404.026531][T12242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.071104][T12242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.082659][T12247] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.096699][T12242] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2168'. [ 404.266538][T12244] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2169'. [ 404.284193][T12244] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 404.605220][T12261] netlink: 'syz.0.2176': attribute type 4 has an invalid length. [ 404.613293][T12261] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2176'. [ 404.634623][T12261] .`: renamed from bond0 (while UP) [ 404.675132][T12263] netlink: 'syz.3.2175': attribute type 10 has an invalid length. [ 405.335358][T12274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.432254][T12277] netlink: 'syz.3.2179': attribute type 9 has an invalid length. [ 405.567190][T12280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.904869][T12284] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 405.940971][T12278] netlink: 'syz.3.2179': attribute type 9 has an invalid length. [ 406.893693][T12301] validate_nla: 2 callbacks suppressed [ 406.893708][T12301] netlink: 'syz.3.2187': attribute type 4 has an invalid length. [ 406.919148][T12301] .`: renamed from bond0 (while UP) [ 406.952087][T12299] netlink: 'syz.1.2186': attribute type 10 has an invalid length. [ 407.155162][T12308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.382388][T12314] netlink: 'syz.3.2191': attribute type 9 has an invalid length. [ 407.745264][T12314] __nla_validate_parse: 7 callbacks suppressed [ 407.745279][T12314] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2191'. [ 408.319417][T12318] netlink: 'syz.3.2191': attribute type 9 has an invalid length. [ 408.389930][T12324] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2192'. [ 408.389947][T12318] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2191'. [ 408.413273][T12324] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 409.339300][T12341] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2198'. [ 409.371144][T12343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.454898][T12345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.508231][T12346] netlink: 'syz.2.2206': attribute type 9 has an invalid length. [ 409.624117][T12346] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2206'. [ 409.868969][T12352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.123637][T12347] netlink: 'syz.3.2207': attribute type 9 has an invalid length. [ 410.173756][T12347] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2207'. [ 410.443568][T12349] netlink: 'syz.3.2207': attribute type 9 has an invalid length. [ 410.473664][T12349] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2207'. [ 410.483748][T12350] netlink: 'syz.2.2206': attribute type 9 has an invalid length. [ 410.508633][T12350] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2206'. [ 410.705284][T12355] netlink: 'syz.0.2199': attribute type 9 has an invalid length. [ 410.725732][T12355] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2199'. [ 410.817094][T12352] netlink: 'syz.0.2199': attribute type 9 has an invalid length. [ 410.841979][T12352] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2199'. [ 410.872682][T12364] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 411.141045][T12371] FAULT_INJECTION: forcing a failure. [ 411.141045][T12371] name failslab, interval 1, probability 0, space 0, times 0 [ 411.169959][T12371] CPU: 1 PID: 12371 Comm: syz.0.2203 Not tainted syzkaller #0 [ 411.177482][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 411.187563][T12371] Call Trace: [ 411.190862][T12371] [ 411.193831][T12371] dump_stack_lvl+0x18c/0x250 [ 411.198537][T12371] ? show_regs_print_info+0x20/0x20 [ 411.203757][T12371] ? load_image+0x420/0x420 [ 411.208337][T12371] ? __might_sleep+0xe0/0xe0 [ 411.212953][T12371] ? __lock_acquire+0x7d80/0x7d80 [ 411.218007][T12371] should_fail_ex+0x394/0x4c0 [ 411.222716][T12371] should_failslab+0x9/0x20 [ 411.227242][T12371] slab_pre_alloc_hook+0x59/0x300 [ 411.232293][T12371] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 411.237956][T12371] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 411.243616][T12371] __kmem_cache_alloc_node+0x53/0x250 [ 411.249020][T12371] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 411.254676][T12371] __kmalloc_node+0xa6/0x240 [ 411.259299][T12371] memcg_alloc_slab_cgroups+0x85/0x120 [ 411.264823][T12371] slab_post_alloc_hook+0xec/0x4d0 [ 411.269973][T12371] kmem_cache_alloc_node+0x1af/0x310 [ 411.275287][T12371] ? __alloc_skb+0x103/0x2c0 [ 411.279913][T12371] __alloc_skb+0x103/0x2c0 [ 411.284361][T12371] alloc_skb_with_frags+0xcd/0x7a0 [ 411.289503][T12371] ? aa_label_sk_perm+0x4d4/0x660 [ 411.294559][T12371] sock_alloc_send_pskb+0x883/0x9a0 [ 411.299802][T12371] ? sock_kzfree_s+0x50/0x50 [ 411.304423][T12371] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 411.310433][T12371] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 411.316526][T12371] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 411.322792][T12371] unix_stream_sendmsg+0x48b/0xbf0 [ 411.327945][T12371] ? unix_show_fdinfo+0x280/0x280 [ 411.332999][T12371] ? apparmor_socket_sendmsg+0x8e/0x330 [ 411.338571][T12371] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 411.343878][T12371] ? security_socket_sendmsg+0x80/0xa0 [ 411.349364][T12371] ? unix_show_fdinfo+0x280/0x280 [ 411.354418][T12371] ____sys_sendmsg+0x61b/0x980 [ 411.359211][T12371] ? __asan_memset+0x22/0x40 [ 411.363827][T12371] ? __sys_sendmsg_sock+0x30/0x30 [ 411.368890][T12371] ? __import_iovec+0x5f2/0x850 [ 411.373778][T12371] ? import_iovec+0x73/0xa0 [ 411.378319][T12371] ___sys_sendmsg+0x2a6/0x360 [ 411.383024][T12371] ? __sys_sendmsg+0x2b0/0x2b0 [ 411.387850][T12371] __se_sys_sendmsg+0x1d0/0x2c0 [ 411.392725][T12371] ? __x64_sys_sendmsg+0x80/0x80 [ 411.397697][T12371] ? syscall_enter_from_user_mode+0x2e/0x80 [ 411.403621][T12371] do_syscall_64+0x55/0xb0 [ 411.408058][T12371] ? clear_bhb_loop+0x40/0x90 [ 411.412752][T12371] ? clear_bhb_loop+0x40/0x90 [ 411.417451][T12371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.423413][T12371] RIP: 0033:0x7fe5d6b9de99 [ 411.427852][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.447486][T12371] RSP: 002b:00007fe5d79bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.455934][T12371] RAX: ffffffffffffffda RBX: 00007fe5d6e25fa0 RCX: 00007fe5d6b9de99 [ 411.463933][T12371] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005 [ 411.471941][T12371] RBP: 00007fe5d79bc090 R08: 0000000000000000 R09: 0000000000000000 [ 411.479933][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.487930][T12371] R13: 00007fe5d6e26038 R14: 00007fe5d6e25fa0 R15: 00007fff1bb3f9e8 [ 411.495940][T12371] [ 412.802087][T12396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.928431][T12403] netlink: 'syz.1.2213': attribute type 9 has an invalid length. [ 412.992344][T12400] __nla_validate_parse: 3 callbacks suppressed [ 412.992410][T12400] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2214'. [ 413.036212][T12400] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 413.051238][T12403] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2213'. [ 414.082295][T12407] netlink: 'syz.1.2213': attribute type 9 has an invalid length. [ 414.109014][T12407] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2213'. [ 414.807911][T12423] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2218'. [ 415.020677][T12428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2222'. [ 415.159851][T12430] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 415.176243][T12430] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2223'. [ 415.428912][T12435] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2225'. [ 415.441298][T12435] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 415.570606][T12447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.690785][T12450] netlink: 'syz.1.2229': attribute type 9 has an invalid length. [ 415.724982][T12450] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2229'. [ 416.050254][T12451] netlink: 'syz.1.2229': attribute type 9 has an invalid length. [ 416.175002][T12451] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2229'. [ 416.866225][T12463] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2235'. [ 417.945465][T12491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.022369][T12492] netlink: 'syz.3.2245': attribute type 9 has an invalid length. [ 418.083475][T12492] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2245'. [ 418.302666][T12496] netlink: 'syz.3.2245': attribute type 9 has an invalid length. [ 418.358089][T12496] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2245'. [ 418.745855][T12505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2247'. [ 419.180185][T12513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.311813][T12515] netlink: 'syz.3.2251': attribute type 9 has an invalid length. [ 419.468050][T12515] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2251'. [ 419.779212][T12516] netlink: 'syz.3.2251': attribute type 9 has an invalid length. [ 419.876223][T12516] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2251'. [ 421.463566][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.472998][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.482125][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.491241][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.500386][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.509520][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.518670][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.527803][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.536972][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.546090][T12534] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 421.560624][T12539] sit0: entered allmulticast mode [ 421.580006][T12541] sit0: entered promiscuous mode [ 421.911614][T12555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.028509][T12556] netlink: 'syz.2.2264': attribute type 9 has an invalid length. [ 422.104624][T12556] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2264'. [ 422.187585][T12560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.426125][T12557] netlink: 'syz.2.2264': attribute type 9 has an invalid length. [ 422.544474][T12557] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2264'. [ 423.059413][T12563] netlink: 'syz.0.2265': attribute type 9 has an invalid length. [ 423.078336][T12563] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2265'. [ 423.153759][T12564] netlink: 'syz.0.2265': attribute type 9 has an invalid length. [ 423.161753][T12564] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2265'. [ 424.878653][T12603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.917644][T12605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.997215][T12606] netlink: 'syz.0.2276': attribute type 9 has an invalid length. [ 425.040631][T12606] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2276'. [ 425.369080][T12611] netlink: 'syz.0.2276': attribute type 9 has an invalid length. [ 425.473462][T12611] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2276'. [ 425.926552][T12612] netlink: 'syz.1.2277': attribute type 9 has an invalid length. [ 425.959602][T12612] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2277'. [ 426.130963][T12626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.153922][T12613] netlink: 'syz.1.2277': attribute type 9 has an invalid length. [ 426.161798][T12613] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2277'. [ 426.267177][T12627] netlink: 'syz.0.2280': attribute type 9 has an invalid length. [ 426.303685][T12627] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2280'. [ 426.471107][T12628] netlink: 'syz.0.2280': attribute type 9 has an invalid length. [ 426.569445][T12628] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2280'. [ 428.453228][T12652] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 428.537840][T12652] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2289'. [ 428.829544][T12655] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 428.868420][T12655] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2289'. [ 429.141140][T12662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.269584][T12666] netlink: 'syz.0.2291': attribute type 9 has an invalid length. [ 429.277727][T12666] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2291'. [ 429.330003][T12668] netlink: 'syz.1.2292': attribute type 10 has an invalid length. [ 429.355453][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.365046][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.372736][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.382833][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.391672][T12668] veth0_vlan: left promiscuous mode [ 429.410649][T12668] veth0_vlan: entered promiscuous mode [ 429.426020][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.427758][T12668] team0: Device veth0_vlan failed to register rx_handler [ 429.440554][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.683591][T12667] netlink: 'syz.0.2291': attribute type 9 has an invalid length. [ 429.693262][T12667] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2291'. [ 429.842128][ T8754] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.981300][ T8754] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.017058][T12677] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2294'. [ 430.155650][ T8754] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.305898][ T8754] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.348221][T12688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.414776][T12689] netlink: 'syz.1.2297': attribute type 9 has an invalid length. [ 430.453166][T12689] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2297'. [ 430.683803][T12669] chnl_net:caif_netlink_parms(): no params data found [ 430.856267][T12690] netlink: 'syz.1.2297': attribute type 9 has an invalid length. [ 430.961424][T12690] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2297'. [ 431.138935][ T8754] tipc: Left network mode [ 431.228076][T12669] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.235609][T12669] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.242829][T12669] bridge_slave_0: entered allmulticast mode [ 431.255109][T12669] bridge_slave_0: entered promiscuous mode [ 431.343128][T12702] netlink: 'syz.1.2300': attribute type 9 has an invalid length. [ 431.358048][T12702] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2300'. [ 431.414320][T12669] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.422329][T12669] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.441417][T12669] bridge_slave_1: entered allmulticast mode [ 431.449157][T12669] bridge_slave_1: entered promiscuous mode [ 431.543665][ T5778] Bluetooth: hci4: command tx timeout [ 431.703499][T12703] netlink: 'syz.1.2300': attribute type 9 has an invalid length. [ 431.718763][T12669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.723121][T12703] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2300'. [ 431.770005][T12669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.930577][T12669] team0: Port device team_slave_0 added [ 431.939817][T12669] team0: Port device team_slave_1 added [ 431.970849][T12720] netlink: 'syz.0.2301': attribute type 10 has an invalid length. [ 431.995821][T12720] veth0_vlan: left promiscuous mode [ 432.002038][T12720] veth0_vlan: entered promiscuous mode [ 432.009795][T12720] team0: Device veth0_vlan failed to register rx_handler [ 432.166892][T12669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.176479][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.208144][T12669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.249052][T12669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.256529][T12669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.283376][T12669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.309105][T12725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.378202][T12725] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2303'. [ 432.489845][T12669] hsr_slave_0: entered promiscuous mode [ 432.507854][T12669] hsr_slave_1: entered promiscuous mode [ 432.517282][T12669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.531025][T12669] Cannot create hsr debugfs directory [ 433.391320][ T8754] hsr_slave_0: left promiscuous mode [ 433.398767][ T8754] hsr_slave_1: left promiscuous mode [ 433.408849][ T8754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.419463][ T8754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.451863][ T8754] veth1_macvtap: left promiscuous mode [ 433.458048][ T8754] veth0_macvtap: left promiscuous mode [ 433.467718][ T8754] veth1_vlan: left promiscuous mode [ 433.624051][ T5778] Bluetooth: hci4: command tx timeout [ 434.067363][ T8754] team0 (unregistering): Port device team_slave_1 removed [ 434.109866][ T8754] team0 (unregistering): Port device team_slave_0 removed [ 434.152933][ T8754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.198490][ T8754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.238662][ T8754] team0 (unregistering): Port device bridge_slave_1 removed [ 434.262945][ T8754] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 434.491263][ T8754] bond0 (unregistering): Released all slaves [ 434.550766][T12761] validate_nla: 3 callbacks suppressed [ 434.550781][T12761] netlink: 'syz.3.2309': attribute type 10 has an invalid length. [ 434.569178][T12761] veth0_vlan: left promiscuous mode [ 434.578922][T12761] veth0_vlan: entered promiscuous mode [ 434.591064][T12761] team0: Device veth0_vlan failed to register rx_handler [ 434.749095][T12764] netlink: 'syz.0.2310': attribute type 9 has an invalid length. [ 434.778089][T12764] __nla_validate_parse: 3 callbacks suppressed [ 434.778105][T12764] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2310'. [ 435.266961][T12785] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2315'. [ 435.520346][T12795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.629789][T12797] netlink: 'syz.3.2316': attribute type 9 has an invalid length. [ 435.686234][T12797] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2316'. [ 435.706700][ T5778] Bluetooth: hci4: command tx timeout [ 436.018098][T12802] netlink: 'syz.3.2316': attribute type 9 has an invalid length. [ 436.033862][T12802] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2316'. [ 436.252837][T12669] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.276793][T12669] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.323898][T12669] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.373597][T12669] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.697283][T12669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.803660][T12819] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 436.904576][T12819] veth0_vlan: left promiscuous mode [ 436.943941][T12819] veth0_vlan: entered promiscuous mode [ 436.979531][T12819] team0: Device veth0_vlan failed to register rx_handler [ 437.095268][T12669] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.188149][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.195397][ T8754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.230605][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.237831][ T8754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.545682][T12842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2322'. [ 437.796433][ T5778] Bluetooth: hci4: command tx timeout [ 437.831992][T12669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.944135][T12847] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2323'. [ 437.992000][T12669] veth0_vlan: entered promiscuous mode [ 438.049280][T12669] veth1_vlan: entered promiscuous mode [ 438.146774][T12669] veth0_macvtap: entered promiscuous mode [ 438.175920][T12669] veth1_macvtap: entered promiscuous mode [ 438.211142][T12669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.228936][T12669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.264997][T12669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.339388][T12669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.399294][T12669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.480280][T12870] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2328'. [ 438.483664][T12669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.535101][T12669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.544077][T12669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.041501][T12880] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 439.058318][T12880] veth0_vlan: left promiscuous mode [ 439.087757][T12880] veth0_vlan: entered promiscuous mode [ 439.121080][T12880] team0: Device veth0_vlan failed to register rx_handler [ 439.302540][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.337646][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.432835][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.445785][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.614028][T12893] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2333'. [ 439.642171][T12897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.780401][T12898] netlink: 'syz.3.2334': attribute type 9 has an invalid length. [ 439.828529][T12898] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2334'. [ 440.094326][T12912] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2336'. [ 440.187195][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.193894][T12905] netlink: 'syz.3.2334': attribute type 9 has an invalid length. [ 440.213818][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308176][T12905] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2334'. [ 441.022628][T12937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2341'. [ 441.043298][T12933] netlink: 'syz.0.2339': attribute type 10 has an invalid length. [ 441.063905][T12933] veth0_vlan: left promiscuous mode [ 441.072861][T12933] veth0_vlan: entered promiscuous mode [ 441.083984][T12933] team0: Device veth0_vlan failed to register rx_handler [ 441.572440][T12950] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2343'. [ 441.906566][T12960] netlink: 16375 bytes leftover after parsing attributes in process `syz.1.2346'. [ 442.033269][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.042916][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.053078][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.093844][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.103848][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.123512][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.505921][T12976] netlink: 'syz.0.2350': attribute type 10 has an invalid length. [ 442.528852][T12976] veth0_vlan: left promiscuous mode [ 442.572229][T12976] veth0_vlan: entered promiscuous mode [ 442.603539][T12976] team0: Device veth0_vlan failed to register rx_handler [ 442.963741][T12966] chnl_net:caif_netlink_parms(): no params data found [ 443.148964][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.156342][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.171112][T12966] bridge_slave_0: entered allmulticast mode [ 443.184886][T12966] bridge_slave_0: entered promiscuous mode [ 443.215757][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.223190][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.240330][T12966] bridge_slave_1: entered allmulticast mode [ 443.259244][T12966] bridge_slave_1: entered promiscuous mode [ 443.326552][T12994] bridge_slave_1: left allmulticast mode [ 443.353647][T12994] bridge_slave_1: left promiscuous mode [ 443.376908][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.467771][T12994] bridge_slave_0: left allmulticast mode [ 443.479219][T12994] bridge_slave_0: left promiscuous mode [ 443.495523][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.540234][T12997] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.2356'. [ 443.692862][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.718936][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.789355][T12966] team0: Port device team_slave_0 added [ 443.822531][T12966] team0: Port device team_slave_1 added [ 443.902798][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.913811][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.964936][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.992894][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.007180][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.047452][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.128373][T12966] hsr_slave_0: entered promiscuous mode [ 444.148892][T12966] hsr_slave_1: entered promiscuous mode [ 444.167617][T13009] netlink: 'syz.0.2359': attribute type 10 has an invalid length. [ 444.175979][T13009] veth0_vlan: left promiscuous mode [ 444.181912][T13009] veth0_vlan: entered promiscuous mode [ 444.183627][ T51] Bluetooth: hci1: command tx timeout [ 444.190724][T13009] team0: Device veth0_vlan failed to register rx_handler [ 444.991531][T12966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.169060][T13021] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.2364'. [ 445.212463][T12966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.243254][T13022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.323869][T13022] netlink: 'syz.1.2363': attribute type 9 has an invalid length. [ 445.331880][T13022] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2363'. [ 445.411941][T12966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.595190][T12966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.754738][T13023] netlink: 'syz.1.2363': attribute type 9 has an invalid length. [ 445.774222][T13023] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2363'. [ 446.081152][T13034] netlink: 'syz.0.2367': attribute type 10 has an invalid length. [ 446.089662][T13034] veth0_vlan: left promiscuous mode [ 446.103170][T13034] veth0_vlan: entered promiscuous mode [ 446.111697][T13034] team0: Device veth0_vlan failed to register rx_handler [ 446.147314][T12966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.205551][T12966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.219825][T12966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.258410][T12966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.268441][ T51] Bluetooth: hci1: command tx timeout [ 446.717263][T13044] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2370'. [ 446.891383][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.963085][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.977302][T13049] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.2372'. [ 447.009320][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.016545][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.030650][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.037864][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.340612][T13057] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2375'. [ 447.351226][T13057] net_ratelimit: 54 callbacks suppressed [ 447.351270][T13057] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 447.457597][T13066] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 447.470209][T13066] veth0_vlan: left promiscuous mode [ 447.476313][T13066] veth0_vlan: entered promiscuous mode [ 447.483051][T13066] team0: Device veth0_vlan failed to register rx_handler [ 447.538674][T12966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.582491][T12966] veth0_vlan: entered promiscuous mode [ 447.600904][T12966] veth1_vlan: entered promiscuous mode [ 447.673687][T13067] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2377'. [ 447.759424][T12966] veth0_macvtap: entered promiscuous mode [ 447.787870][T12966] veth1_macvtap: entered promiscuous mode [ 447.825134][T12966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.838802][T12966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.850805][T12966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.861458][T12966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.877916][T12966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.905641][T12966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.939330][T12966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.953277][T12966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.977561][T12966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.989841][T12966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.999724][T12966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.010984][T12966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.138861][T13077] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.2381'. [ 448.344020][ T51] Bluetooth: hci1: command tx timeout [ 448.356932][ T8753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.391109][ T8753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.419904][ T8753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.459059][ T8753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.903769][T13091] netlink: 'syz.0.2385': attribute type 10 has an invalid length. [ 448.911858][T13091] veth0_vlan: left promiscuous mode [ 448.918612][T13094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2386'. [ 448.940491][T13091] veth0_vlan: entered promiscuous mode [ 448.950649][T13091] team0: Device veth0_vlan failed to register rx_handler [ 449.370165][T13101] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.2387'. [ 449.637501][T13110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.645085][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 449.653007][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 449.660593][T13110] IPv6: NLM_F_CREATE should be set when creating new route [ 449.752980][T13115] netlink: 'syz.3.2392': attribute type 9 has an invalid length. [ 449.935875][T13118] netlink: 'syz.3.2392': attribute type 9 has an invalid length. [ 450.007096][T13120] netlink: 'syz.0.2396': attribute type 10 has an invalid length. [ 450.067047][T13120] veth0_vlan: left promiscuous mode [ 450.106702][T13120] veth0_vlan: entered promiscuous mode [ 450.152540][T13120] team0: Device veth0_vlan failed to register rx_handler [ 450.425479][ T51] Bluetooth: hci1: command tx timeout [ 450.649840][T13140] __nla_validate_parse: 4 callbacks suppressed [ 450.649856][T13140] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2400'. [ 450.748477][T13145] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.2401'. [ 451.020182][T13147] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2403'. [ 451.029932][T13147] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 451.052262][T13151] bridge_slave_1: left allmulticast mode [ 451.071373][T13151] bridge_slave_1: left promiscuous mode [ 451.089409][T13151] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.182425][T13151] bridge_slave_0: left allmulticast mode [ 451.196216][T13151] bridge_slave_0: left promiscuous mode [ 451.203463][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.482699][T13165] netlink: 'syz.1.2409': attribute type 9 has an invalid length. [ 451.503524][T13165] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2409'. [ 451.582830][T13159] netlink: 'syz.2.2407': attribute type 10 has an invalid length. [ 451.662306][T13159] veth0_vlan: left promiscuous mode [ 451.690295][T13159] veth0_vlan: entered promiscuous mode [ 451.711999][T13159] team0: Device veth0_vlan failed to register rx_handler [ 451.771590][T13160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.781739][T13162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.897984][T13166] netlink: 'syz.0.2408': attribute type 9 has an invalid length. [ 451.911972][T13166] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2408'. [ 451.973664][T13167] netlink: 'syz.1.2409': attribute type 9 has an invalid length. [ 451.985229][T13167] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2409'. [ 452.100032][T13164] netlink: 'syz.0.2408': attribute type 9 has an invalid length. [ 452.116605][T13164] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2408'. [ 452.136901][T13171] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2410'. [ 452.846084][T13183] netlink: 16375 bytes leftover after parsing attributes in process `syz.1.2413'. [ 452.908161][T13181] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2414'. [ 453.393885][T13202] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 453.414917][T13202] veth0_vlan: left promiscuous mode [ 453.422505][T13202] veth0_vlan: entered promiscuous mode [ 453.428876][T13201] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 453.436576][T13202] team0: Device veth0_vlan failed to register rx_handler [ 453.569632][T13204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 453.577102][T13204] IPv6: NLM_F_CREATE should be set when creating new route [ 453.584803][T13204] IPv6: NLM_F_CREATE should be set when creating new route [ 453.592273][T13204] IPv6: NLM_F_CREATE should be set when creating new route [ 453.696067][T13210] netlink: 'syz.2.2421': attribute type 9 has an invalid length. [ 454.122316][T13211] netlink: 'syz.2.2421': attribute type 9 has an invalid length. [ 455.045650][T13238] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 455.053953][T13238] veth0_vlan: left promiscuous mode [ 455.059996][T13238] veth0_vlan: entered promiscuous mode [ 455.080819][T13238] team0: Device veth0_vlan failed to register rx_handler [ 455.342210][T13246] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 455.365253][T13246] veth0_vlan: left promiscuous mode [ 455.371795][T13246] veth0_vlan: entered promiscuous mode [ 455.382821][T13246] team0: Device veth0_vlan failed to register rx_handler [ 455.481808][T13245] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 455.665588][T13252] __nla_validate_parse: 7 callbacks suppressed [ 455.665623][T13252] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2436'. [ 455.675925][T13254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.771984][T13256] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2437'. [ 455.978027][T13260] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2437'. [ 455.989443][T13263] veth0_vlan: left promiscuous mode [ 456.059623][T13263] veth0_vlan: entered promiscuous mode [ 456.073731][T13263] team0: Device veth0_vlan failed to register rx_handler [ 456.252267][T13257] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2438'. [ 456.785446][T13279] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2445'. [ 456.986520][T13287] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2448'. [ 457.298671][T13293] validate_nla: 3 callbacks suppressed [ 457.298688][T13293] netlink: 'syz.0.2450': attribute type 10 has an invalid length. [ 457.426251][T13293] veth0_vlan: left promiscuous mode [ 457.432456][T13293] veth0_vlan: entered promiscuous mode [ 457.440120][T13293] team0: Device veth0_vlan failed to register rx_handler [ 458.123982][T13302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.206514][T13303] netlink: 'syz.3.2453': attribute type 9 has an invalid length. [ 458.252110][T13303] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2453'. [ 458.441987][T13305] netlink: 'syz.3.2453': attribute type 9 has an invalid length. [ 458.486711][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.495777][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.513247][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.522483][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.524392][T13305] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2453'. [ 458.530685][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.554129][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.879540][T13307] chnl_net:caif_netlink_parms(): no params data found [ 459.012767][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.020849][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.028656][T13307] bridge_slave_0: entered allmulticast mode [ 459.036476][T13307] bridge_slave_0: entered promiscuous mode [ 459.062749][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.093941][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.102489][T13307] bridge_slave_1: entered allmulticast mode [ 459.110660][T13307] bridge_slave_1: entered promiscuous mode [ 459.160524][T13320] FAULT_INJECTION: forcing a failure. [ 459.160524][T13320] name failslab, interval 1, probability 0, space 0, times 0 [ 459.191091][T13320] CPU: 1 PID: 13320 Comm: syz.3.2456 Not tainted syzkaller #0 [ 459.198617][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 459.208703][T13320] Call Trace: [ 459.212003][T13320] [ 459.214951][T13320] dump_stack_lvl+0x18c/0x250 [ 459.219662][T13320] ? show_regs_print_info+0x20/0x20 [ 459.224893][T13320] ? load_image+0x420/0x420 [ 459.229428][T13320] ? __might_sleep+0xe0/0xe0 [ 459.234054][T13320] ? __lock_acquire+0x7d80/0x7d80 [ 459.239107][T13320] should_fail_ex+0x394/0x4c0 [ 459.243813][T13320] should_failslab+0x9/0x20 [ 459.248343][T13320] slab_pre_alloc_hook+0x59/0x300 [ 459.253394][T13320] ? sctp_association_new+0x89/0x25b0 [ 459.258794][T13320] __kmem_cache_alloc_node+0x53/0x250 [ 459.264199][T13320] ? sctp_association_new+0x89/0x25b0 [ 459.269602][T13320] kmalloc_trace+0x2a/0xe0 [ 459.274045][T13320] sctp_association_new+0x89/0x25b0 [ 459.279275][T13320] ? __ipv6_addr_type+0x249/0x2e0 [ 459.284325][T13320] sctp_connect_new_asoc+0x2de/0x6a0 [ 459.289638][T13320] ? __sctp_connect+0xd80/0xd80 [ 459.294510][T13320] ? __local_bh_enable_ip+0x13a/0x1c0 [ 459.300086][T13320] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 459.306091][T13320] ? security_sctp_bind_connect+0x89/0xb0 [ 459.311836][T13320] sctp_sendmsg+0x1519/0x27b0 [ 459.316547][T13320] ? sctp_getsockopt+0xb60/0xb60 [ 459.321515][T13320] ? aa_af_perm+0x330/0x330 [ 459.326051][T13320] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 459.332494][T13320] ? sock_rps_record_flow+0x19/0x3f0 [ 459.337794][T13320] ? inet_sendmsg+0xce/0x2a0 [ 459.342391][T13320] ? inet_send_prepare+0x250/0x250 [ 459.347508][T13320] ____sys_sendmsg+0x61b/0x980 [ 459.352279][T13320] ? __asan_memset+0x22/0x40 [ 459.356873][T13320] ? __sys_sendmsg_sock+0x30/0x30 [ 459.361894][T13320] ? __import_iovec+0x5f2/0x850 [ 459.366759][T13320] ? import_iovec+0x73/0xa0 [ 459.371269][T13320] ___sys_sendmsg+0x2a6/0x360 [ 459.375945][T13320] ? get_pid_task+0x20/0x1e0 [ 459.380540][T13320] ? __sys_sendmsg+0x2b0/0x2b0 [ 459.385317][T13320] ? __lock_acquire+0x7d80/0x7d80 [ 459.390362][T13320] __se_sys_sendmsg+0x1d0/0x2c0 [ 459.395222][T13320] ? __x64_sys_sendmsg+0x80/0x80 [ 459.400170][T13320] ? lockdep_hardirqs_on+0x98/0x150 [ 459.405373][T13320] do_syscall_64+0x55/0xb0 [ 459.409790][T13320] ? clear_bhb_loop+0x40/0x90 [ 459.414462][T13320] ? clear_bhb_loop+0x40/0x90 [ 459.419140][T13320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.425037][T13320] RIP: 0033:0x7fbaf539de99 [ 459.429450][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.449076][T13320] RSP: 002b:00007fbaf6336028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.457510][T13320] RAX: ffffffffffffffda RBX: 00007fbaf5625fa0 RCX: 00007fbaf539de99 [ 459.465490][T13320] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 459.473461][T13320] RBP: 00007fbaf6336090 R08: 0000000000000000 R09: 0000000000000000 [ 459.481434][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.489408][T13320] R13: 00007fbaf5626038 R14: 00007fbaf5625fa0 R15: 00007ffc13445518 [ 459.497397][T13320] [ 459.544764][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.561122][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.607972][T13307] team0: Port device team_slave_0 added [ 459.619589][T13307] team0: Port device team_slave_1 added [ 459.682593][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.699092][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.750492][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.766451][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.775620][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.803624][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.911428][T13307] hsr_slave_0: entered promiscuous mode [ 459.921109][T13307] hsr_slave_1: entered promiscuous mode [ 459.927716][T13307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.933040][T13329] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2459'. [ 459.937133][T13307] Cannot create hsr debugfs directory [ 460.173365][T13334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.182328][T13332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.268147][T13337] netlink: 'syz.1.2462': attribute type 9 has an invalid length. [ 460.298411][T13307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.309146][T13337] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2462'. [ 460.495965][T13338] netlink: 'syz.3.2461': attribute type 9 has an invalid length. [ 460.520257][T13307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.667936][ T5778] Bluetooth: hci0: command tx timeout [ 460.730878][T13307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.823223][T13339] netlink: 'syz.1.2462': attribute type 9 has an invalid length. [ 460.904026][T13339] __nla_validate_parse: 1 callbacks suppressed [ 460.904043][T13339] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2462'. [ 461.065175][T13307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.085279][T13349] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 461.094089][T13349] veth0_vlan: left promiscuous mode [ 461.101355][T13349] veth0_vlan: entered promiscuous mode [ 461.111216][T13349] team0: Device veth0_vlan failed to register rx_handler [ 461.254835][T13340] netlink: 'syz.3.2461': attribute type 9 has an invalid length. [ 461.294184][T13340] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2461'. [ 461.339577][T13307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.412760][T13307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.463303][T13307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.511005][T13307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.652665][T13307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.680195][T13307] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.708407][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.715662][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.765413][T13360] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2469'. [ 461.795827][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.803021][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.095989][T13373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.172040][T13376] netlink: 'syz.3.2473': attribute type 10 has an invalid length. [ 462.175738][T13375] netlink: 'syz.2.2474': attribute type 9 has an invalid length. [ 462.194106][T13375] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2474'. [ 462.340969][T13376] veth0_vlan: left promiscuous mode [ 462.378672][T13376] veth0_vlan: entered promiscuous mode [ 462.410660][T13376] team0: Device veth0_vlan failed to register rx_handler [ 462.528254][T13380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.589760][T13377] netlink: 'syz.2.2474': attribute type 9 has an invalid length. [ 462.605401][T13377] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2474'. [ 462.607554][T13307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.743751][ T5778] Bluetooth: hci0: command tx timeout [ 462.753124][T13307] veth0_vlan: entered promiscuous mode [ 462.768183][T13307] veth1_vlan: entered promiscuous mode [ 462.802416][T13383] netlink: 'syz.1.2475': attribute type 9 has an invalid length. [ 462.818121][T13383] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2475'. [ 462.905587][T13307] veth0_macvtap: entered promiscuous mode [ 462.957611][T13307] veth1_macvtap: entered promiscuous mode [ 462.982740][T13380] netlink: 'syz.1.2475': attribute type 9 has an invalid length. [ 463.010294][T13380] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2475'. [ 463.025757][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.041702][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.052480][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.081307][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.092559][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.111156][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.136310][T13307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.152552][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.176214][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.196355][T13307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.211568][T13307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.244318][T13307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.347256][T13307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.357330][T13307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.371967][T13307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.388697][T13307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.678337][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.760541][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.811102][ T8752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.819538][ T8752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.893312][T13400] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 463.909387][T13400] veth0_vlan: left promiscuous mode [ 463.936364][T13400] veth0_vlan: entered promiscuous mode [ 463.973761][T13400] team0: Device veth0_vlan failed to register rx_handler [ 464.536933][T13407] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2452'. [ 464.823756][ T5778] Bluetooth: hci0: command tx timeout [ 465.151333][T13419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.248536][T13423] netlink: 'syz.2.2486': attribute type 9 has an invalid length. [ 465.301201][T13423] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2486'. [ 466.076883][T13426] netlink: 'syz.0.2485': attribute type 10 has an invalid length. [ 466.128439][T13426] veth0_vlan: left promiscuous mode [ 466.147952][T13426] veth0_vlan: entered promiscuous mode [ 466.176396][T13426] team0: Device veth0_vlan failed to register rx_handler [ 466.281340][T13427] netlink: 'syz.2.2486': attribute type 9 has an invalid length. [ 466.291057][T13427] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2486'. [ 466.340917][T13432] bridge_slave_1: left allmulticast mode [ 466.348150][T13432] bridge_slave_1: left promiscuous mode [ 466.357609][T13432] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.402331][T13432] bridge_slave_0: left allmulticast mode [ 466.415671][T13432] bridge_slave_0: left promiscuous mode [ 466.423491][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.903578][ T5778] Bluetooth: hci0: command tx timeout [ 467.510514][T13446] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2493'. [ 468.896339][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.910255][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.928263][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.946406][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.958779][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.966434][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.217196][ T3490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.247277][T13457] chnl_net:caif_netlink_parms(): no params data found [ 469.334014][ T3490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.356121][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.363308][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.370651][T13457] bridge_slave_0: entered allmulticast mode [ 469.377787][T13457] bridge_slave_0: entered promiscuous mode [ 469.389771][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.396996][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.406434][T13457] bridge_slave_1: entered allmulticast mode [ 469.413241][T13457] bridge_slave_1: entered promiscuous mode [ 469.448880][ T3490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.477854][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.489779][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.520191][ T3490] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.552326][T13457] team0: Port device team_slave_0 added [ 469.561626][T13457] team0: Port device team_slave_1 added [ 469.583957][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.590944][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.617082][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.630937][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.639669][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.666339][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.726367][T13457] hsr_slave_0: entered promiscuous mode [ 469.733962][T13457] hsr_slave_1: entered promiscuous mode [ 469.740368][T13457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.750916][T13457] Cannot create hsr debugfs directory [ 469.879870][T13467] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2498'. [ 469.989884][T13475] netlink: 'syz.0.2504': attribute type 10 has an invalid length. [ 470.003073][T13475] veth0_vlan: left promiscuous mode [ 470.018305][T13475] veth0_vlan: entered promiscuous mode [ 470.028570][T13475] team0: Device veth0_vlan failed to register rx_handler [ 470.171750][T13476] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 470.194723][T13476] veth0_vlan: left promiscuous mode [ 470.212288][T13476] veth0_vlan: entered promiscuous mode [ 470.234583][T13476] team0: Device veth0_vlan failed to register rx_handler [ 470.382757][T13486] netlink: 'syz.3.2500': attribute type 9 has an invalid length. [ 470.413708][T13486] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2500'. [ 470.437190][T13482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.503892][T13481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.511263][T13481] IPv6: NLM_F_CREATE should be set when creating new route [ 470.518780][T13481] IPv6: NLM_F_CREATE should be set when creating new route [ 470.526338][T13481] IPv6: NLM_F_CREATE should be set when creating new route [ 470.733694][T13485] netlink: 'syz.0.2501': attribute type 9 has an invalid length. [ 470.756715][T13485] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2501'. [ 471.032773][T13489] netlink: 'syz.0.2501': attribute type 9 has an invalid length. [ 471.076093][ T5778] Bluetooth: hci2: command tx timeout [ 471.100564][T13489] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2501'. [ 471.163693][T13482] netlink: 'syz.3.2500': attribute type 9 has an invalid length. [ 471.183614][T13482] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2500'. [ 472.293731][T13504] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2507'. [ 472.367874][T13457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.581615][T13457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.742286][T13457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.896674][T13457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.036898][ T3490] hsr_slave_0: left promiscuous mode [ 473.042874][ T3490] hsr_slave_1: left promiscuous mode [ 473.049025][ T3490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.057328][ T3490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.065673][ T3490] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 473.072780][ T3490] batman_adv: batadv0: Removing interface: virt_wifi0 [ 473.091855][ T3490] veth1_macvtap: left promiscuous mode [ 473.097478][ T3490] veth0_macvtap: left promiscuous mode [ 473.103031][ T3490] veth1_vlan: left promiscuous mode [ 473.143799][ T5778] Bluetooth: hci2: command tx timeout [ 473.682357][ T3490] team0 (unregistering): Port device team_slave_1 removed [ 473.725187][ T3490] team0 (unregistering): Port device team_slave_0 removed [ 473.770166][ T3490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.813745][ T3490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.855075][ T3490] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 474.071756][ T3490] bond0 (unregistering): Released all slaves [ 474.107906][T13521] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 474.116402][T13521] veth0_vlan: left promiscuous mode [ 474.122250][T13521] veth0_vlan: entered promiscuous mode [ 474.131012][T13521] team0: Device veth0_vlan failed to register rx_handler [ 474.308201][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.372554][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.421294][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.428494][ T8752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.530370][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.537582][ T8753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.712827][T13533] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2512'. [ 474.735336][T13533] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 474.815223][T13457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.838083][T13457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.229105][T13543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.236040][ T5778] Bluetooth: hci2: command tx timeout [ 475.330835][T13549] netlink: 'syz.2.2513': attribute type 9 has an invalid length. [ 475.355252][T13549] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2513'. [ 475.377859][T13548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.828178][T13551] netlink: 'syz.2.2513': attribute type 9 has an invalid length. [ 475.888409][T13457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.905938][T13551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2513'. [ 476.236798][T13457] veth0_vlan: entered promiscuous mode [ 476.276338][T13457] veth1_vlan: entered promiscuous mode [ 476.323634][T13550] netlink: 'syz.3.2514': attribute type 9 has an invalid length. [ 476.331448][T13550] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2514'. [ 476.434182][T13553] netlink: 'syz.3.2514': attribute type 9 has an invalid length. [ 476.448373][T13553] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2514'. [ 476.451602][T13457] veth0_macvtap: entered promiscuous mode [ 476.482610][T13457] veth1_macvtap: entered promiscuous mode [ 476.550269][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.562019][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.578364][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.604901][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.615757][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.626641][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.638881][T13457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.658338][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.679740][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.701146][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.733891][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.748361][T13457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.759207][T13457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.776401][T13457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.797961][T13563] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2515'. [ 476.826366][T13457] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.836496][T13457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.850195][T13457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.860258][T13457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.992587][T13567] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 477.010878][T13567] veth0_vlan: left promiscuous mode [ 477.030413][T13567] veth0_vlan: entered promiscuous mode [ 477.049291][T13567] team0: Device veth0_vlan failed to register rx_handler [ 477.304582][ T5778] Bluetooth: hci2: command tx timeout [ 477.351804][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.412475][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.449629][ T4116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.501786][ T4116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.138517][T13589] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2522'. [ 478.280913][T13592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.288447][T13592] IPv6: NLM_F_CREATE should be set when creating new route [ 478.295986][T13592] IPv6: NLM_F_CREATE should be set when creating new route [ 478.303453][T13592] IPv6: NLM_F_CREATE should be set when creating new route [ 478.388591][T13595] netlink: 'syz.1.2523': attribute type 9 has an invalid length. [ 478.412961][T13594] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.433649][T13595] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2523'. [ 478.750101][T13596] netlink: 'syz.1.2523': attribute type 9 has an invalid length. [ 478.821028][T13596] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2523'. [ 478.892969][T13605] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2526'. [ 479.132664][T13597] netlink: 'syz.3.2524': attribute type 9 has an invalid length. [ 479.182391][T13597] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2524'. [ 479.342444][T13600] netlink: 'syz.3.2524': attribute type 9 has an invalid length. [ 479.358011][T13600] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2524'. [ 479.419404][T13614] netlink: 'syz.2.2527': attribute type 10 has an invalid length. [ 479.436420][T13614] veth0_vlan: left promiscuous mode [ 479.449014][T13614] veth0_vlan: entered promiscuous mode [ 479.459201][T13614] team0: Device veth0_vlan failed to register rx_handler [ 479.513946][T13612] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2536'. [ 480.467757][T13629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2533'. [ 480.666240][T13637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.779986][T13639] netlink: 'syz.1.2537': attribute type 9 has an invalid length. [ 480.907577][T13639] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2537'. [ 480.929642][T13642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.071485][T13644] netlink: 'syz.0.2538': attribute type 10 has an invalid length. [ 481.131890][T13644] veth0_vlan: left promiscuous mode [ 481.163986][T13644] veth0_vlan: entered promiscuous mode [ 481.210898][T13644] team0: Device veth0_vlan failed to register rx_handler [ 481.912469][T13643] netlink: 'syz.1.2537': attribute type 9 has an invalid length. [ 481.958974][T13643] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2537'. [ 482.273237][T13646] netlink: 'syz.3.2539': attribute type 9 has an invalid length. [ 482.357497][T13647] netlink: 'syz.3.2539': attribute type 9 has an invalid length. [ 482.683057][T13658] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 485.492797][T13687] netlink: 'syz.0.2551': attribute type 10 has an invalid length. [ 485.526244][T13687] veth0_vlan: left promiscuous mode [ 485.532513][T13687] veth0_vlan: entered promiscuous mode [ 485.540640][T13687] team0: Device veth0_vlan failed to register rx_handler [ 486.011814][T13693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.135463][T13694] netlink: 'syz.0.2552': attribute type 9 has an invalid length. [ 486.149679][T13694] __nla_validate_parse: 6 callbacks suppressed [ 486.149728][T13694] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2552'. [ 486.301299][T13699] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.2553'. [ 486.421128][T13697] netlink: 'syz.0.2552': attribute type 9 has an invalid length. [ 486.483779][T13697] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2552'. [ 487.355635][T13710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2558'. [ 487.590050][T13715] netlink: 'syz.3.2560': attribute type 10 has an invalid length. [ 487.628844][T13715] veth0_vlan: left promiscuous mode [ 487.649519][T13715] veth0_vlan: entered promiscuous mode [ 487.702657][T13715] team0: Device veth0_vlan failed to register rx_handler [ 488.130115][T13725] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.2563'. [ 488.653006][T13732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.697345][T13733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.750501][T13734] netlink: 'syz.0.2566': attribute type 9 has an invalid length. [ 488.884200][T13734] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2566'. [ 489.094238][T13740] netlink: 'syz.3.2567': attribute type 10 has an invalid length. [ 489.174929][T13740] team0: Device hsr_slave_0 failed to register rx_handler [ 489.473579][T13735] netlink: 'syz.1.2565': attribute type 9 has an invalid length. [ 489.561604][T13735] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2565'. [ 489.687990][T13737] netlink: 'syz.0.2566': attribute type 9 has an invalid length. [ 489.703855][T13737] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2566'. [ 489.830659][T13739] netlink: 'syz.1.2565': attribute type 9 has an invalid length. [ 489.843588][T13739] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2565'. [ 490.157489][T13756] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2569'. [ 490.360698][T13770] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 490.426017][T13770] veth0_vlan: left promiscuous mode [ 490.448520][T13770] veth0_vlan: entered promiscuous mode [ 490.482496][T13770] team0: Device veth0_vlan failed to register rx_handler [ 490.819272][T13781] netlink: 'syz.2.2577': attribute type 3 has an invalid length. [ 490.858669][T13783] veth0_vlan: left promiscuous mode [ 490.865977][T13783] veth0_vlan: entered promiscuous mode [ 490.876497][T13783] team0: Device veth0_vlan failed to register rx_handler [ 490.969909][T13782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.985959][T13784] veth0_vlan: left promiscuous mode [ 490.994378][T13784] veth0_vlan: entered promiscuous mode [ 491.001095][T13784] team0: Device veth0_vlan failed to register rx_handler [ 491.159243][T13782] validate_nla: 3 callbacks suppressed [ 491.159276][T13782] netlink: 'syz.3.2578': attribute type 9 has an invalid length. [ 491.183237][T13782] __nla_validate_parse: 3 callbacks suppressed [ 491.183284][T13782] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2578'. [ 492.052425][T13796] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2582'. [ 492.169999][T13803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.272722][T13805] netlink: 'syz.3.2585': attribute type 9 has an invalid length. [ 492.340437][T13805] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2585'. [ 492.566656][T13812] netlink: 'syz.3.2585': attribute type 9 has an invalid length. [ 492.622023][T13807] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2586'. [ 492.666122][T13812] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2585'. [ 493.194321][T13822] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 493.207160][T13822] veth0_vlan: left promiscuous mode [ 493.212959][T13822] veth0_vlan: entered promiscuous mode [ 493.236152][T13822] team0: Device veth0_vlan failed to register rx_handler [ 493.363629][T13830] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2592'. [ 493.399556][T13830] openvswitch: netlink: IP tunnel dst address not specified [ 493.521318][T13834] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2594'. [ 493.583105][T13836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.690265][T13837] netlink: 'syz.0.2595': attribute type 9 has an invalid length. [ 493.778639][T13837] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2595'. [ 494.133201][T13842] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.2597'. [ 494.368862][T13844] netlink: 'syz.0.2595': attribute type 9 has an invalid length. [ 494.535388][T13844] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2595'. [ 494.552802][T13853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.966681][T13853] netlink: 'syz.3.2599': attribute type 9 has an invalid length. [ 495.083245][T13856] netlink: 'syz.3.2599': attribute type 9 has an invalid length. [ 495.785275][T13869] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 495.805603][T13869] veth0_vlan: left promiscuous mode [ 495.848909][T13869] veth0_vlan: entered promiscuous mode [ 495.878304][T13869] team0: Device veth0_vlan failed to register rx_handler [ 496.624110][T13887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.754924][T13887] netlink: 'syz.2.2610': attribute type 9 has an invalid length. [ 496.817190][T13887] __nla_validate_parse: 3 callbacks suppressed [ 496.817228][T13887] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2610'. [ 497.148304][T13896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.457816][T13890] netlink: 'syz.2.2610': attribute type 9 has an invalid length. [ 497.502872][T13890] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2610'. [ 497.906040][T13897] netlink: 'syz.3.2611': attribute type 9 has an invalid length. [ 497.926105][T13897] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2611'. [ 498.058459][T13898] netlink: 'syz.3.2611': attribute type 9 has an invalid length. [ 498.083832][T13898] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2611'. [ 498.208010][T13903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2612'. [ 498.383937][T13923] netlink: 'syz.0.2616': attribute type 10 has an invalid length. [ 498.392099][T13923] veth0_vlan: left promiscuous mode [ 498.446297][T13922] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2619'. [ 498.456526][T13923] veth0_vlan: entered promiscuous mode [ 498.465395][T13922] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 498.490750][T13923] team0: Device veth0_vlan failed to register rx_handler [ 498.923050][T13932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.013240][T13932] netlink: 'syz.0.2623': attribute type 9 has an invalid length. [ 499.038386][T13932] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2623'. [ 499.745819][T13933] netlink: 'syz.0.2623': attribute type 9 has an invalid length. [ 499.785013][T13933] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2623'. [ 499.970793][T13946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.081640][T13946] netlink: 'syz.1.2626': attribute type 9 has an invalid length. [ 500.109501][T13946] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2626'. [ 640.257881][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.1.2626:13946] [ 640.266314][ C0] Modules linked in: [ 640.270242][ C0] irq event stamp: 11349171 [ 640.274758][ C0] hardirqs last enabled at (11349170): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.285982][ C0] hardirqs last disabled at (11349171): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 640.296724][ C0] softirqs last enabled at (7672576): [] __irq_exit_rcu+0xd3/0x190 [ 640.306341][ C0] softirqs last disabled at (7672579): [] __irq_exit_rcu+0xd3/0x190 [ 640.315913][ C0] CPU: 0 PID: 13946 Comm: syz.1.2626 Not tainted syzkaller #0 [ 640.323389][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 640.333460][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x60 [ 640.339690][ C0] Code: 48 8b 3d ec 07 05 0d 48 89 de 5b e9 23 a7 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 65 48 8b 0d c0 52 7c 7e 65 8b 15 c1 52 7c 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 640.345074][ C1] ------------[ cut here ]------------ [ 640.359308][ C0] RSP: 0018:ffffc90000006f90 EFLAGS: 00000292 [ 640.359334][ C0] RAX: ffffffff813ba3f7 RBX: ffffc90000007120 RCX: ffff88802ceb5a00 [ 640.359346][ C0] RDX: 0000000000000502 RSI: ffffffff88babc40 RDI: ffffc90000007068 [ 640.359357][ C0] RBP: ffffc900000070f0 R08: ffffc90000007130 R09: 0000000000000030 [ 640.359368][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff88babc40 [ 640.359377][ C0] R13: ffffc90000007068 R14: ffffffff81760be0 R15: dffffc0000000000 [ 640.359389][ C0] FS: 00007fab8ef0d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 640.359402][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.359413][ C0] CR2: 0000000100000000 CR3: 0000000063273000 CR4: 00000000003506f0 [ 640.359427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.359437][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 640.359447][ C0] Call Trace: [ 640.359455][ C0] [ 640.359462][ C0] unwind_next_frame+0x27/0x2990 [ 640.359525][ C0] ? netlink_sendmsg+0x8d0/0xbf0 [ 640.365360][ C1] WARNING: CPU: 1 PID: 13961 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 640.371406][ C0] ? __kernel_text_address+0xd/0x30 [ 640.379365][ C1] Modules linked in: [ 640.387323][ C0] ? netlink_sendmsg+0x8d0/0xbf0 [ 640.395279][ C1] CPU: 1 PID: 13961 Comm: syz.2.2630 Not tainted syzkaller #0 [ 640.403231][ C0] ? stack_trace_save+0x100/0x100 [ 640.411186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 640.420109][ C0] arch_stack_walk+0x144/0x190 [ 640.426712][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 640.434690][ C0] ? netlink_sendmsg+0x8d0/0xbf0 [ 640.442635][ C1] Code: ff ff ff 48 c7 c7 a0 14 33 97 be 04 00 00 00 e8 0a 11 6e 00 48 89 df b8 01 00 00 00 87 05 6c 46 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 [ 640.450600][ C0] stack_trace_save+0xaa/0x100 [ 640.453862][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 640.456696][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 640.461610][ C1] [ 640.466526][ C0] ? mark_lock+0x94/0x320 [ 640.477082][ C1] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171ce26 [ 640.482273][ C0] kasan_set_track+0x4e/0x70 [ 640.486132][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 640.491049][ C0] ? kasan_set_track+0x4e/0x70 [ 640.498482][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 640.503480][ C0] ? kasan_save_free_info+0x28/0x40 [ 640.513517][ C1] R10: dffffc0000000000 R11: fffffbfff2e66294 R12: 0000000000002904 [ 640.518257][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 640.524567][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 640.529492][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 640.549078][ C1] FS: 00007fb68d9e56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 640.553822][ C0] ? kmem_cache_free+0xf8/0x290 [ 640.559863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.564951][ C0] ? packet_rcv+0x15b/0x1420 [ 640.567263][ C1] CR2: 000055dcbb488e88 CR3: 0000000062e5e000 CR4: 00000000003506e0 [ 640.571578][ C0] ? dev_queue_xmit_nit+0xb0c/0xba0 [ 640.579532][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.584099][ C0] ? dev_hard_start_xmit+0x150/0x790 [ 640.592053][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 640.596794][ C0] ? __dev_queue_xmit+0x198c/0x3630 [ 640.604773][ C1] Call Trace: [ 640.609983][ C0] ? hsr_forward_skb+0x12a9/0x20b0 [ 640.617943][ C1] [ 640.623205][ C0] ? send_hsr_supervision_frame+0x5fb/0xb90 [ 640.631169][ C1] rcu_core+0x5ec/0x17f0 [ 640.636771][ C0] ? hsr_announce+0x198/0x350 [ 640.645694][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 640.650515][ C0] ? call_timer_fn+0x189/0x540 [ 640.657081][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 640.661646][ C0] ? __run_timers+0x570/0x810 [ 640.669605][ C1] ? lock_chain_count+0x20/0x20 [ 640.674778][ C0] ? run_timer_softirq+0x67/0xf0 [ 640.682747][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 640.688000][ C0] ? handle_softirqs+0x27d/0x820 [ 640.695965][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 640.701142][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 640.704424][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.709510][ C0] ? irq_exit_rcu+0x9/0x20 [ 640.712362][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 640.718212][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 640.722438][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 640.727091][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.733051][ C1] ? _raw_spin_unlock+0x40/0x40 [ 640.737791][ C0] ? kasan_check_range+0x8f/0x290 [ 640.744982][ C1] handle_softirqs+0x27d/0x820 [ 640.749620][ C0] ? __asan_memset+0x22/0x40 [ 640.754453][ C1] ? read_tsc+0x9/0x20 [ 640.759367][ C0] ? trace_call_bpf+0x1ea/0x6c0 [ 640.764547][ C1] ? ktime_get+0x24b/0x280 [ 640.769468][ C0] ? perf_trace_run_bpf_submit+0x7a/0x1c0 [ 640.774653][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 640.779386][ C0] ? perf_trace_lock+0x303/0x3b0 [ 640.785525][ C1] ? do_softirq+0x1a0/0x1a0 [ 640.789910][ C0] ? lock_release+0x866/0x8c0 [ 640.795791][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 640.801563][ C0] ? is_bpf_text_address+0x28f/0x2a0 [ 640.807442][ C1] __irq_exit_rcu+0xd3/0x190 [ 640.813565][ C0] ? kernel_text_address+0xa0/0xd0 [ 640.818409][ C1] ? irq_exit_rcu+0x20/0x20 [ 640.823410][ C0] ? __kernel_text_address+0xd/0x30 [ 640.828172][ C1] irq_exit_rcu+0x9/0x20 [ 640.832724][ C0] ? unwind_get_return_address+0x5d/0xc0 [ 640.836774][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 640.841602][ C0] ? arch_stack_walk+0x11d/0x190 [ 640.846003][ C1] [ 640.851704][ C0] ? stack_trace_save+0xaa/0x100 [ 640.856449][ C1] [ 640.861365][ C0] ? kasan_set_track+0x4e/0x70 [ 640.865850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.870522][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 640.875700][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 640.880960][ C0] ? get_device_parent+0x255/0x390 [ 640.885527][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 640.890617][ C0] ? device_add+0x2d4/0xc40 [ 640.895099][ C1] RSP: 0018:ffffc9000d13f300 EFLAGS: 00000206 [ 640.900273][ C0] ? netdev_register_kobject+0x188/0x320 [ 640.904532][ C1] [ 640.910152][ C0] ? register_netdevice+0x12aa/0x1ba0 [ 640.915816][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3ad00a2e385eb700 [ 640.920731][ C0] ? cfg80211_register_netdevice+0x159/0x2f0 [ 640.923648][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1cfaa0 [ 640.928568][ C0] ? ieee80211_if_add+0x9e8/0x1490 [ 640.931487][ C1] RBP: ffffc9000d13f408 R08: dffffc0000000000 R09: 1ffffffff223d0a0 [ 640.936227][ C0] ? ieee80211_register_hw+0x2f11/0x3b30 [ 640.942195][ C1] R10: dffffc0000000000 R11: fffffbfff223d0a1 R12: 1ffff92001a27e6c [ 640.946937][ C0] ? mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 640.952200][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 640.957289][ C0] ? hwsim_new_radio_nl+0xdad/0x1a70 [ 640.976910][ C1] ? perf_tp_event+0x13f5/0x1550 [ 640.981356][ C0] ? genl_family_rcv_msg_doit+0x21a/0x310 [ 640.987408][ C1] ? read_lock_is_recursive+0x20/0x20 [ 640.993011][ C0] ? genl_rcv_msg+0x611/0x7a0 [ 640.995332][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 641.000678][ C0] ? netlink_rcv_skb+0x235/0x4c0 [ 641.008640][ C1] ? perf_tp_event+0x13f5/0x1550 [ 641.014599][ C0] ? genl_rcv+0x28/0x40 [ 641.022567][ C1] trace_call_bpf+0xe4/0x6c0 [ 641.027645][ C0] ? netlink_unicast+0x7b1/0x930 [ 641.035601][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.041211][ C0] ? netlink_sendmsg+0x8d0/0xbf0 [ 641.049175][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.055062][ C0] ? kmem_cache_free+0xf8/0x290 [ 641.063009][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 641.068263][ C0] kasan_save_free_info+0x28/0x40 [ 641.073206][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 641.078891][ C0] ____kasan_slab_free+0x126/0x1f0 [ 641.084250][ C1] perf_trace_lock+0x303/0x3b0 [ 641.088904][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 641.094697][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 641.099614][ C0] ? packet_rcv+0x15b/0x1420 [ 641.104539][ C1] ? mark_lock+0x94/0x320 [ 641.108681][ C0] kmem_cache_free+0xf8/0x290 [ 641.113257][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.118176][ C0] packet_rcv+0x15b/0x1420 [ 641.122915][ C1] ? __text_poke+0x907/0xb40 [ 641.127845][ C0] ? packet_sock_destruct+0x160/0x160 [ 641.132581][ C1] ? __text_poke+0x907/0xb40 [ 641.137415][ C0] dev_queue_xmit_nit+0xb0c/0xba0 [ 641.143490][ C1] lock_release+0x866/0x8c0 [ 641.148493][ C0] ? dev_queue_xmit_nit+0x2d/0xba0 [ 641.154037][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.159131][ C0] dev_hard_start_xmit+0x150/0x790 [ 641.163864][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 641.169319][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 641.175177][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.179744][ C0] __dev_queue_xmit+0x198c/0x3630 [ 641.184055][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.188718][ C0] ? lock_chain_count+0x20/0x20 [ 641.194683][ C1] ? __text_poke+0x8f9/0xb40 [ 641.199074][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 641.203641][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.208999][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.213566][ C1] _raw_spin_unlock+0x16/0x40 [ 641.218565][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 641.223047][ C1] __text_poke+0x907/0xb40 [ 641.228137][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.234273][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.239368][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 641.244366][ C1] ? __text_poke+0xb40/0xb40 [ 641.249456][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 641.255617][ C1] ? text_poke+0xc0/0xc0 [ 641.260634][ C0] ? __asan_memcpy+0x40/0x70 [ 641.265117][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 641.269960][ C0] ? __skb_clone+0x5c/0x6c0 [ 641.274531][ C1] ? text_poke_loc_init+0x50f/0x7c0 [ 641.279628][ C0] ? __skb_clone+0x446/0x6c0 [ 641.284121][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.290232][ C0] ? hsr_addr_subst_dest+0x313/0x7d0 [ 641.294886][ C1] text_poke_bp_batch+0x249/0x980 [ 641.300073][ C0] ? skb_clone+0x21f/0x370 [ 641.304473][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 641.310609][ C0] hsr_forward_skb+0x12a9/0x20b0 [ 641.315093][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 641.320366][ C0] ? hsr_forward_skb+0xb1/0x20b0 [ 641.324925][ C1] ? text_poke_bp+0x6c/0x100 [ 641.329957][ C0] ? prp_fill_frame_info+0x760/0x760 [ 641.334182][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 641.338792][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 641.344939][ C1] text_poke_finish+0x30/0x50 [ 641.349422][ C0] ? __skb_pad+0x3f3/0x5f0 [ 641.354592][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 641.359166][ C0] send_hsr_supervision_frame+0x5fb/0xb90 [ 641.363643][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 641.368923][ C0] hsr_announce+0x198/0x350 [ 641.373916][ C1] static_key_enable+0x1a/0x20 [ 641.378307][ C0] ? read_lock_is_recursive+0x20/0x20 [ 641.384438][ C1] tracepoint_add_func+0x985/0xa10 [ 641.389349][ C0] ? hsr_announce+0x84/0x350 [ 641.394539][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.399441][ C0] ? hsr_dev_finalize+0x800/0x800 [ 641.404010][ C1] tracepoint_probe_register+0x5e/0x90 [ 641.409270][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.415487][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.420506][ C0] call_timer_fn+0x189/0x540 [ 641.425160][ C1] perf_trace_event_init+0x4d4/0x9b0 [ 641.429560][ C0] ? hsr_dev_finalize+0x800/0x800 [ 641.435531][ C1] perf_trace_init+0x238/0x2d0 [ 641.441228][ C0] ? call_timer_fn+0xd2/0x540 [ 641.447123][ C1] perf_tp_event_init+0x8d/0x110 [ 641.451601][ C0] ? __run_timers+0x810/0x810 [ 641.456351][ C1] perf_try_init_event+0x12b/0x3c0 [ 641.461719][ C0] ? hsr_dev_finalize+0x800/0x800 [ 641.466802][ C1] ? perf_event_alloc+0xb23/0x2150 [ 641.471378][ C0] __run_timers+0x570/0x810 [ 641.477686][ C1] perf_event_alloc+0xed4/0x2150 [ 641.482711][ C0] ? detach_timer+0x2b0/0x2b0 [ 641.488137][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.494111][ C0] run_timer_softirq+0x67/0xf0 [ 641.500385][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.504959][ C0] handle_softirqs+0x27d/0x820 [ 641.510228][ C1] __se_sys_perf_event_open+0x740/0x1c60 [ 641.515222][ C0] ? read_tsc+0x9/0x20 [ 641.519980][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 641.524620][ C0] ? ktime_get+0x24b/0x280 [ 641.529561][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 641.534221][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 641.539329][ C1] ? lock_chain_count+0x20/0x20 [ 641.544317][ C0] ? do_softirq+0x1a0/0x1a0 [ 641.549398][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.553889][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 641.558811][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 641.563461][ C0] __irq_exit_rcu+0xd3/0x190 [ 641.569067][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 641.573818][ C0] ? irq_exit_rcu+0x20/0x20 [ 641.579436][ C1] do_syscall_64+0x55/0xb0 [ 641.584183][ C0] irq_exit_rcu+0x9/0x20 [ 641.589781][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.593828][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 641.599525][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.603924][ C0] [ 641.609536][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.614273][ C0] [ 641.614285][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.619108][ C1] RIP: 0033:0x7fb68cb9de99 [ 641.623588][ C0] RIP: 0010:kasan_check_range+0x8f/0x290 [ 641.629548][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.634725][ C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 8d 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 641.639904][ C1] RSP: 002b:00007fb68d9e5028 EFLAGS: 00000246 [ 641.644474][ C0] RSP: 0018:ffffc900046de328 EFLAGS: 00000246 [ 641.650088][ C1] ORIG_RAX: 000000000000012a [ 641.654568][ C0] [ 641.654575][ C0] RAX: dffffc0000000001 RBX: ffffffffffffffff RCX: ffffffff81914b8a [ 641.658977][ C1] RAX: ffffffffffffffda RBX: 00007fb68ce25fa0 RCX: 00007fb68cb9de99 [ 641.663197][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900046de400 [ 641.667856][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 641.673463][ C0] RBP: 0000000000000000 R08: ffffc900046de40f R09: 1ffff920008dbc81 [ 641.678115][ C1] RBP: 00007fb68cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 641.681032][ C0] R10: dffffc0000000000 R11: fffff520008dbc81 R12: 0000000000000002 [ 641.686899][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 641.689816][ C0] R13: 1ffff920008dbc7c R14: fffff520008dbc82 R15: 1ffff920008dbc80 [ 641.695772][ C1] R13: 00007fb68ce26038 R14: 00007fb68ce25fa0 R15: 00007fff50ce4068 [ 641.700181][ C0] ? trace_call_bpf+0x1ea/0x6c0 [ 641.705801][ C1] [ 641.725382][ C0] __asan_memset+0x22/0x40 [ 641.744963][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 641.744975][ C1] CPU: 1 PID: 13961 Comm: syz.2.2630 Not tainted syzkaller #0 [ 641.744995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 641.745007][ C1] Call Trace: [ 641.745017][ C1] [ 641.745025][ C1] dump_stack_lvl+0x18c/0x250 [ 641.745053][ C1] ? show_regs_print_info+0x20/0x20 [ 641.745073][ C1] ? load_image+0x420/0x420 [ 641.745170][ C1] panic+0x2ca/0x720 [ 641.745206][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 641.745256][ C1] __warn+0x2e0/0x470 [ 641.745279][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.745314][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.745344][ C1] report_bug+0x2be/0x4f0 [ 641.745371][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.745403][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.745433][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 641.745462][ C1] handle_bug+0xcf/0x120 [ 641.745483][ C1] exc_invalid_op+0x1a/0x50 [ 641.745505][ C1] asm_exc_invalid_op+0x1a/0x20 [ 641.745533][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 641.745564][ C1] Code: ff ff ff 48 c7 c7 a0 14 33 97 be 04 00 00 00 e8 0a 11 6e 00 48 89 df b8 01 00 00 00 87 05 6c 46 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 [ 641.745587][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 641.745606][ C1] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171ce26 [ 641.745621][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 641.745634][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 641.745647][ C1] R10: dffffc0000000000 R11: fffffbfff2e66294 R12: 0000000000002904 [ 641.745662][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 641.745689][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 641.745727][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 641.745760][ C1] rcu_core+0x5ec/0x17f0 [ 641.745785][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.745810][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 641.745842][ C1] ? lock_chain_count+0x20/0x20 [ 641.745876][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 641.745896][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 641.745923][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.745961][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 641.745990][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 641.746017][ C1] ? _raw_spin_unlock+0x40/0x40 [ 641.746059][ C1] handle_softirqs+0x27d/0x820 [ 641.746079][ C1] ? read_tsc+0x9/0x20 [ 641.746099][ C1] ? ktime_get+0x24b/0x280 [ 641.746128][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 641.746157][ C1] ? do_softirq+0x1a0/0x1a0 [ 641.746185][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 641.746217][ C1] __irq_exit_rcu+0xd3/0x190 [ 641.746238][ C1] ? irq_exit_rcu+0x20/0x20 [ 641.746273][ C1] irq_exit_rcu+0x9/0x20 [ 641.746291][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 641.746315][ C1] [ 641.746322][ C1] [ 641.746331][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.746351][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 641.746373][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 641.746389][ C1] RSP: 0018:ffffc9000d13f300 EFLAGS: 00000206 [ 641.746405][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3ad00a2e385eb700 [ 641.746419][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1cfaa0 [ 641.746433][ C1] RBP: ffffc9000d13f408 R08: dffffc0000000000 R09: 1ffffffff223d0a0 [ 641.746449][ C1] R10: dffffc0000000000 R11: fffffbfff223d0a1 R12: 1ffff92001a27e6c [ 641.746464][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 641.746509][ C1] ? perf_tp_event+0x13f5/0x1550 [ 641.746538][ C1] ? read_lock_is_recursive+0x20/0x20 [ 641.746563][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 641.746595][ C1] ? perf_tp_event+0x13f5/0x1550 [ 641.746627][ C1] trace_call_bpf+0xe4/0x6c0 [ 641.746645][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.746669][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.746698][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 641.746735][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 641.746768][ C1] perf_trace_lock+0x303/0x3b0 [ 641.746800][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 641.746822][ C1] ? mark_lock+0x94/0x320 [ 641.746851][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.746876][ C1] ? __text_poke+0x907/0xb40 [ 641.746897][ C1] ? __text_poke+0x907/0xb40 [ 641.746918][ C1] lock_release+0x866/0x8c0 [ 641.746951][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.746974][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 641.746998][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.747021][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.747053][ C1] ? __text_poke+0x8f9/0xb40 [ 641.747075][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.747104][ C1] _raw_spin_unlock+0x16/0x40 [ 641.747129][ C1] __text_poke+0x907/0xb40 [ 641.747156][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.747187][ C1] ? __text_poke+0xb40/0xb40 [ 641.747213][ C1] ? text_poke+0xc0/0xc0 [ 641.747235][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 641.747255][ C1] ? text_poke_loc_init+0x50f/0x7c0 [ 641.747295][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.747321][ C1] text_poke_bp_batch+0x249/0x980 [ 641.747352][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 641.747386][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 641.747408][ C1] ? text_poke_bp+0x6c/0x100 [ 641.747438][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 641.747480][ C1] text_poke_finish+0x30/0x50 [ 641.747501][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 641.747530][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 641.747558][ C1] static_key_enable+0x1a/0x20 [ 641.747587][ C1] tracepoint_add_func+0x985/0xa10 [ 641.747620][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.747649][ C1] tracepoint_probe_register+0x5e/0x90 [ 641.747668][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.747701][ C1] perf_trace_event_init+0x4d4/0x9b0 [ 641.747738][ C1] perf_trace_init+0x238/0x2d0 [ 641.747768][ C1] perf_tp_event_init+0x8d/0x110 [ 641.747798][ C1] perf_try_init_event+0x12b/0x3c0 [ 641.747828][ C1] ? perf_event_alloc+0xb23/0x2150 [ 641.747854][ C1] perf_event_alloc+0xed4/0x2150 [ 641.747894][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.747919][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.747956][ C1] __se_sys_perf_event_open+0x740/0x1c60 [ 641.747993][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 641.748024][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 641.748068][ C1] ? lock_chain_count+0x20/0x20 [ 641.748088][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.748123][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 641.748144][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 641.748174][ C1] do_syscall_64+0x55/0xb0 [ 641.748191][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.748209][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.748231][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.748259][ C1] RIP: 0033:0x7fb68cb9de99 [ 641.748278][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.748293][ C1] RSP: 002b:00007fb68d9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 641.748313][ C1] RAX: ffffffffffffffda RBX: 00007fb68ce25fa0 RCX: 00007fb68cb9de99 [ 641.748329][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 641.748342][ C1] RBP: 00007fb68cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 641.748354][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 641.748367][ C1] R13: 00007fb68ce26038 R14: 00007fb68ce25fa0 R15: 00007fff50ce4068 [ 641.748405][ C1] [ 641.751014][ C0] trace_call_bpf+0x1ea/0x6c0 [ 641.751032][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 641.751055][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 641.751091][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 641.751116][ C0] perf_trace_lock+0x303/0x3b0 [ 641.751141][ C0] ? trace_event_raw_event_lock+0x240/0x240 [ 641.751155][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.751173][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 641.751196][ C0] ? lock_chain_count+0x20/0x20 [ 641.751218][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 641.751235][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 641.751252][ C0] lock_release+0x866/0x8c0 [ 641.751281][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 641.751300][ C0] ? __read_once_word_nocheck+0x9/0x10 [ 641.751331][ C0] is_bpf_text_address+0x28f/0x2a0 [ 641.751349][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 641.751365][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.751389][ C0] kernel_text_address+0xa0/0xd0 [ 641.751412][ C0] __kernel_text_address+0xd/0x30 [ 641.751431][ C0] unwind_get_return_address+0x5d/0xc0 [ 641.751447][ C0] ? stack_trace_save+0x100/0x100 [ 641.751465][ C0] arch_stack_walk+0x11d/0x190 [ 641.751498][ C0] stack_trace_save+0xaa/0x100 [ 641.751516][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 641.751543][ C0] ? trace_event_raw_event_lock+0x240/0x240 [ 641.751563][ C0] kasan_set_track+0x4e/0x70 [ 641.751579][ C0] ? kasan_set_track+0x4e/0x70 [ 641.751593][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 641.751609][ C0] ? get_device_parent+0x255/0x390 [ 641.751624][ C0] ? device_add+0x2d4/0xc40 [ 641.751638][ C0] ? netdev_register_kobject+0x188/0x320 [ 641.751653][ C0] ? register_netdevice+0x12aa/0x1ba0 [ 641.751673][ C0] ? cfg80211_register_netdevice+0x159/0x2f0 [ 641.751690][ C0] ? ieee80211_if_add+0x9e8/0x1490 [ 641.751705][ C0] ? ieee80211_register_hw+0x2f11/0x3b30 [ 641.751720][ C0] ? mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 641.751741][ C0] ? hwsim_new_radio_nl+0xdad/0x1a70 [ 641.751761][ C0] ? genl_family_rcv_msg_doit+0x21a/0x310 [ 641.751775][ C0] ? genl_rcv_msg+0x611/0x7a0 [ 641.751788][ C0] ? netlink_rcv_skb+0x235/0x4c0 [ 641.751806][ C0] ? genl_rcv+0x28/0x40 [ 641.751818][ C0] ? netlink_unicast+0x7b1/0x930 [ 641.751834][ C0] ? netlink_sendmsg+0x8d0/0xbf0 [ 641.751852][ C0] ? ____sys_sendmsg+0x61b/0x980 [ 641.751970][ C0] ? ___sys_sendmsg+0x2a6/0x360 [ 641.751982][ C0] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 641.751995][ C0] ? do_syscall_64+0x55/0xb0 [ 641.752008][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.752082][ C0] __kasan_kmalloc+0x8f/0xa0 [ 641.752102][ C0] get_device_parent+0x255/0x390 [ 641.752126][ C0] device_add+0x2d4/0xc40 [ 641.752147][ C0] netdev_register_kobject+0x188/0x320 [ 641.752170][ C0] register_netdevice+0x12aa/0x1ba0 [ 641.752212][ C0] ? netif_stacked_transfer_operstate+0x210/0x210 [ 641.752240][ C0] ? ieee80211_debugfs_add_netdev+0xe75/0xf90 [ 641.752339][ C0] cfg80211_register_netdevice+0x159/0x2f0 [ 641.752364][ C0] ieee80211_if_add+0x9e8/0x1490 [ 641.752397][ C0] ieee80211_register_hw+0x2f11/0x3b30 [ 641.752428][ C0] ? ieee80211_register_hw+0xef1/0x3b30 [ 641.752455][ C0] ? ieee80211_tasklet_handler+0x20/0x20 [ 641.752469][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 641.752493][ C0] ? __debug_object_init+0xec/0x450 [ 641.752539][ C0] ? __asan_memset+0x22/0x40 [ 641.752559][ C0] ? __hrtimer_init+0x189/0x270 [ 641.752582][ C0] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 641.752633][ C0] ? mac80211_hwsim_free+0x220/0x220 [ 641.752653][ C0] ? rcu_is_watching+0x15/0xb0 [ 641.752672][ C0] ? kstrndup+0xbd/0x140 [ 641.752703][ C0] hwsim_new_radio_nl+0xdad/0x1a70 [ 641.752733][ C0] ? __nla_validate+0x50/0x50 [ 641.752772][ C0] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 641.752812][ C0] ? __nla_parse+0x40/0x50 [ 641.752836][ C0] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 641.752862][ C0] genl_family_rcv_msg_doit+0x21a/0x310 [ 641.752887][ C0] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 641.752915][ C0] ? bpf_lsm_capable+0x9/0x10 [ 641.752934][ C0] ? security_capable+0x89/0xb0 [ 641.752979][ C0] genl_rcv_msg+0x611/0x7a0 [ 641.753003][ C0] ? genl_bind+0x360/0x360 [ 641.753016][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.753033][ C0] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 641.753058][ C0] ? ref_tracker_free+0x686/0x830 [ 641.753091][ C0] netlink_rcv_skb+0x235/0x4c0 [ 641.753114][ C0] ? genl_bind+0x360/0x360 [ 641.753132][ C0] ? netlink_ack+0x1160/0x1160 [ 641.753168][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 641.753196][ C0] ? down_read+0x1ac/0x2e0 [ 641.753218][ C0] genl_rcv+0x28/0x40 [ 641.753232][ C0] netlink_unicast+0x7b1/0x930 [ 641.753266][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 641.753299][ C0] ? netlink_getsockopt+0x590/0x590 [ 641.753323][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 641.753348][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 641.753365][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 641.753385][ C0] ? netlink_getsockopt+0x590/0x590 [ 641.753408][ C0] ____sys_sendmsg+0x61b/0x980 [ 641.753433][ C0] ? __asan_memset+0x22/0x40 [ 641.753452][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 641.753465][ C0] ? __import_iovec+0x5f2/0x850 [ 641.753496][ C0] ? import_iovec+0x73/0xa0 [ 641.753520][ C0] ___sys_sendmsg+0x2a6/0x360 [ 641.753543][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 641.753624][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 641.753643][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 641.753680][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 641.753704][ C0] do_syscall_64+0x55/0xb0 [ 641.753717][ C0] ? clear_bhb_loop+0x40/0x90 [ 641.753730][ C0] ? clear_bhb_loop+0x40/0x90 [ 641.753748][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.753768][ C0] RIP: 0033:0x7fab8df9de99 [ 641.753783][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.753795][ C0] RSP: 002b:00007fab8ef0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.753810][ C0] RAX: ffffffffffffffda RBX: 00007fab8e225fa0 RCX: 00007fab8df9de99 [ 641.753821][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 641.753831][ C0] RBP: 00007fab8e033eaf R08: 0000000000000000 R09: 0000000000000000 [ 641.753840][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.753849][ C0] R13: 00007fab8e226038 R14: 00007fab8e225fa0 R15: 00007fffd07d7708 [ 641.753880][ C0] [ 641.753890][ C0] Sending NMI from CPU 0 to CPUs 1: [ 641.753915][ C1] NMI backtrace for cpu 1 [ 641.753923][ C1] CPU: 1 PID: 13961 Comm: syz.2.2630 Not tainted syzkaller #0 [ 641.753937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 641.753944][ C1] RIP: 0010:preempt_count_add+0x0/0x1a0 [ 641.753967][ C1] Code: ff ff ff 49 8d 8e 58 0d 00 00 80 e1 07 80 c1 03 38 c1 7c 8b 49 8d be 58 0d 00 00 e8 6a f5 82 00 e9 7a ff ff ff e9 f9 fe ff ff 0f 1e fa 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 [ 641.753979][ C1] RSP: 0018:ffffc900001f07f0 EFLAGS: 00000006 [ 641.753990][ C1] RAX: 0000000000000105 RBX: 0000000000000899 RCX: ffffffff972ef403 [ 641.754000][ C1] RDX: 000000000000014b RSI: ffffffff8b1cfa80 RDI: 0000000000000001 [ 641.754010][ C1] RBP: 0000000000000001 R08: ffffffff900c72a7 R09: 1ffffffff2018e54 [ 641.754020][ C1] R10: dffffc0000000000 R11: fffffbfff2018e55 R12: dffffc0000000000 [ 641.754030][ C1] R13: 1ffff9200003e108 R14: 0000014b4568f62a R15: 00000000000002b6 [ 641.754040][ C1] FS: 00007fb68d9e56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 641.754054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.754064][ C1] CR2: 000055dcbb488e88 CR3: 0000000062e5e000 CR4: 00000000003506e0 [ 641.754077][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.754086][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 641.754095][ C1] Call Trace: [ 641.754100][ C1] [ 641.754104][ C1] delay_tsc+0x65/0xc0 [ 641.754123][ C1] native_stop_other_cpus+0x24d/0x6a0 [ 641.754144][ C1] ? fred_sysvec_call_function_single+0x110/0x110 [ 641.754176][ C1] panic+0x330/0x720 [ 641.754199][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 641.754233][ C1] __warn+0x2e0/0x470 [ 641.754248][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.754271][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.754292][ C1] report_bug+0x2be/0x4f0 [ 641.754306][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.754326][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 641.754347][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 641.754367][ C1] handle_bug+0xcf/0x120 [ 641.754383][ C1] exc_invalid_op+0x1a/0x50 [ 641.754397][ C1] asm_exc_invalid_op+0x1a/0x20 [ 641.754415][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 641.754436][ C1] Code: ff ff ff 48 c7 c7 a0 14 33 97 be 04 00 00 00 e8 0a 11 6e 00 48 89 df b8 01 00 00 00 87 05 6c 46 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 dc 9f 8c 8e 48 c1 e8 03 [ 641.754447][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 641.754458][ C1] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171ce26 [ 641.754468][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 641.754477][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 641.754486][ C1] R10: dffffc0000000000 R11: fffffbfff2e66294 R12: 0000000000002904 [ 641.754496][ C1] R13: 1ffff9200003e194 R14: 0000000000000a02 R15: dffffc0000000000 [ 641.754515][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 641.754541][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 641.754563][ C1] rcu_core+0x5ec/0x17f0 [ 641.754587][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.754604][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 641.754627][ C1] ? lock_chain_count+0x20/0x20 [ 641.754650][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 641.754665][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 641.754683][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.754710][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 641.754730][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 641.754749][ C1] ? _raw_spin_unlock+0x40/0x40 [ 641.754778][ C1] handle_softirqs+0x27d/0x820 [ 641.754793][ C1] ? read_tsc+0x9/0x20 [ 641.754807][ C1] ? ktime_get+0x24b/0x280 [ 641.754827][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 641.754847][ C1] ? do_softirq+0x1a0/0x1a0 [ 641.754868][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 641.754890][ C1] __irq_exit_rcu+0xd3/0x190 [ 641.754906][ C1] ? irq_exit_rcu+0x20/0x20 [ 641.754930][ C1] irq_exit_rcu+0x9/0x20 [ 641.754943][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 641.754961][ C1] [ 641.754965][ C1] [ 641.754971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.754985][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 641.755001][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 641.755012][ C1] RSP: 0018:ffffc9000d13f300 EFLAGS: 00000206 [ 641.755024][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3ad00a2e385eb700 [ 641.755033][ C1] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1cfaa0 [ 641.755043][ C1] RBP: ffffc9000d13f408 R08: dffffc0000000000 R09: 1ffffffff223d0a0 [ 641.755054][ C1] R10: dffffc0000000000 R11: fffffbfff223d0a1 R12: 1ffff92001a27e6c [ 641.755064][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 641.755097][ C1] ? perf_tp_event+0x13f5/0x1550 [ 641.755117][ C1] ? read_lock_is_recursive+0x20/0x20 [ 641.755135][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 641.755155][ C1] ? perf_tp_event+0x13f5/0x1550 [ 641.755177][ C1] trace_call_bpf+0xe4/0x6c0 [ 641.755190][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.755203][ C1] ? trace_call_bpf+0xc3/0x6c0 [ 641.755223][ C1] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 641.755249][ C1] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 641.755272][ C1] perf_trace_lock+0x303/0x3b0 [ 641.755293][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 641.755310][ C1] ? mark_lock+0x94/0x320 [ 641.755329][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.755347][ C1] ? __text_poke+0x907/0xb40 [ 641.755361][ C1] ? __text_poke+0x907/0xb40 [ 641.755376][ C1] lock_release+0x866/0x8c0 [ 641.755399][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.755415][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 641.755432][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.755448][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.755470][ C1] ? __text_poke+0x8f9/0xb40 [ 641.755486][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.755506][ C1] _raw_spin_unlock+0x16/0x40 [ 641.755524][ C1] __text_poke+0x907/0xb40 [ 641.755542][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.755563][ C1] ? __text_poke+0xb40/0xb40 [ 641.755586][ C1] ? text_poke+0xc0/0xc0 [ 641.755601][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 641.755616][ C1] ? text_poke_loc_init+0x50f/0x7c0 [ 641.755643][ C1] ? hva_to_pfn+0x337/0xc20 [ 641.755661][ C1] text_poke_bp_batch+0x249/0x980 [ 641.755684][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 641.755707][ C1] ? text_poke_loc_init+0x7c0/0x7c0 [ 641.755722][ C1] ? text_poke_bp+0x6c/0x100 [ 641.755744][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 641.755774][ C1] text_poke_finish+0x30/0x50 [ 641.755790][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 641.755810][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 641.755831][ C1] static_key_enable+0x1a/0x20 [ 641.755849][ C1] tracepoint_add_func+0x985/0xa10 [ 641.755873][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.755893][ C1] tracepoint_probe_register+0x5e/0x90 [ 641.755908][ C1] ? trace_event_raw_event_mmap_lock+0x2a0/0x2a0 [ 641.755931][ C1] perf_trace_event_init+0x4d4/0x9b0 [ 641.755957][ C1] perf_trace_init+0x238/0x2d0 [ 641.755978][ C1] perf_tp_event_init+0x8d/0x110 [ 641.755999][ C1] perf_try_init_event+0x12b/0x3c0 [ 641.756020][ C1] ? perf_event_alloc+0xb23/0x2150 [ 641.756039][ C1] perf_event_alloc+0xed4/0x2150 [ 641.756064][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.756084][ C1] ? find_lively_task_by_vpid+0x19/0x290 [ 641.756108][ C1] __se_sys_perf_event_open+0x740/0x1c60 [ 641.756134][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 641.756155][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 641.756187][ C1] ? lock_chain_count+0x20/0x20 [ 641.756201][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 641.756226][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 641.756241][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 641.756262][ C1] do_syscall_64+0x55/0xb0 [ 641.756275][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.756288][ C1] ? clear_bhb_loop+0x40/0x90 [ 641.756305][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.756324][ C1] RIP: 0033:0x7fb68cb9de99 [ 641.756337][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.756347][ C1] RSP: 002b:00007fb68d9e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 641.756361][ C1] RAX: ffffffffffffffda RBX: 00007fb68ce25fa0 RCX: 00007fb68cb9de99 [ 641.756372][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 641.756380][ C1] RBP: 00007fb68cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 641.756389][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 641.756398][ C1] R13: 00007fb68ce26038 R14: 00007fb68ce25fa0 R15: 00007fff50ce4068 [ 641.756425][ C1] [ 642.839106][ C1] Shutting down cpus with NMI [ 645.231037][ C1] Kernel Offset: disabled [ 645.235774][ C1] Rebooting in 86400 seconds..