last executing test programs: 5m25.155312916s ago: executing program 2 (id=185): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b870301000a001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'rdma'}, {0x2d, 'memory'}]}, 0xe) write$cgroup_pressure(r1, &(0x7f00000003c0)={'some', 0x20, 0x7, 0x20, 0x527c}, 0x2f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe9f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x172, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0xf, 0x401, 0x9c0c, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x7, @value=r1}, 0x50) 5m24.980703257s ago: executing program 2 (id=187): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x22, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa7}, @tail_call, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ldst={0x2, 0x0, 0x0, 0x0, 0x9, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000340)='syzkaller\x00', 0x3f, 0x0, &(0x7f0000000380), 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x4, 0x6, 0x3ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r2, r1, 0x38, 0x2000, 0x0, @value=r3}, 0x20) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1}, 0x48) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/222, 0xde}, 0x40000002) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000700)=@llc={0x1a, 0xfcfe, 0x8, 0x29, 0x5, 0x59}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000780)="10f6bb30f1e639e3aadff7e14291f1a2ecdb9cf1ecdb528777856f19f8aed398cf0c09fc75f81f5b413634875fcffc296ca977860b931d5c049bfa33f042b92ccb9c249dbbbf8c102660679823ae7a2c04fd81891874827828e0fa10e8166219cf9b442d5cd8fe2e4eb3c963e2a1773ae63ea4d21f04e22431d68d4f361b741a5a96", 0x82}, {&(0x7f0000000840)="d3c620ae195c6810e1424e1c4bd4f14dab9e3e4aae88a928b0eea1ce0673939226baaefd661bc164ae8f4f435fdce86f8e66e78707059a15da80e0b87d042e0a10db77c9154bf2c8696c5c8b072cad56c74bc672f67000e9", 0x58}, {&(0x7f00000008c0)="26fb3d7d899dc6e745b084b894ee9fe39223f083ec2240f28876a1a8f5bed7f895504cbfabcbfc08ee80632568a734717b87dbb2e1c8a7f5557e425f3a2697c43ebaf4c6c46ba29132675e07769473e5d35b4036cdc1e7", 0x57}], 0x3, &(0x7f0000000d00)=[{0x90, 0x29, 0x1f3, "0811f7a3d794277ed3ce69f1aa85caf9f7d890750e32283c30497bbf86b75a7c4dd65cc62c7c9be8e043de6c6ef420155ee698f36ab0fc11226563e98bb6e1bd9e059420897abc48b484ba4c03b56f28180462216cca960b5360917d52bdcffadeb4a887fbb062906823acd0536e76baf0b182ac83bc7889e69b885dafc687"}, {0xe8, 0x112, 0xffffdef9, "27d7c8e4a86dc00f0ee3f6d8152c2b23dd3091820145389eacd351a17698a844172053fc4967fd06ccd2e11fa287eac33b98d33c12997170e10ef43ee7635f40bedc6026717a090f4c92b7fd8e68ee8873c8e772c0b0936551cc8fc1e108a23d55097cb7fe910dd5357fb8418c3be25ca6ffc7f5d6082f7ff252f16d554378630e4d0bc8f0387f6363a98eca8a99e391beada3d7cf71b7a023ca290be56dab6209e1f3d24675bfda5033b7ed4cdbe267147b57941b20533aad267eccdceaf51ed33dc13affc711cb34e81351a95807c34180"}, {0x68, 0x6, 0x7, "e21b95c6404723bfaeb87012137c600367d92c2b6ca508a47ae68e2433b36f253f5b7db4a9ac6bae5f0c760423e7174125378192984785e141107da1525dff42ac067ad7c21b7b400aab6ee98d4ea15814"}], 0x1e0}, 0x20004044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@struct={0xc, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x5, 0x2, 0xfffffe00}, {0x9, 0x1, 0x7}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000b00)=""/77, 0x57, 0x4d, 0x0, 0x400}, 0x28) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f00000001c0)=""/5) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x9}, {&(0x7f00000013c0)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x57}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 5m24.826448985s ago: executing program 0 (id=190): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000380)='}3[+\'\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r0}, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@fwd={0x10}, @fwd={0xd}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x1, [{0xb, 0x1, 0x4}, {0xa, 0x5, 0x100}, {0x0, 0x2, 0x6}, {0x6, 0x5, 0xffffffff}, {0x3, 0x0, 0x4}, {0xd, 0x3, 0xff}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x49, 0x2}, @enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0x8, 0x8}, {0x9, 0x5}, {0xd, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000002c0)=""/117, 0xc5, 0x75, 0x0, 0x6}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [@call={0x85, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000", 0xcc}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f0000000500), 0x4) r10 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r10}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8936, &(0x7f0000000000)={r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'ip6tnl0\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x20, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad910000000000003701002e9059f6deaa00f8ffffffb702000008000000b703006dad000000000024090000060000005c93000000000000b5030000000000008500009c1680611c70fe618c539fa9be470076000000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m24.702496603s ago: executing program 2 (id=191): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000077f000000"], 0x48) 5m24.602590379s ago: executing program 0 (id=193): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0xae, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x8, 0x3, 0x17, 0x0, 0x0, 0x80000001, 0x10, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8b5, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x11210, 0x10001, 0x2, 0x1, 0x8, 0x4, 0x8001, 0x0, 0x6, 0x0, 0x2}, r2, 0xd, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xed, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="6cb100"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0xffffffff, 0x5, 0x1c40, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='!--}\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000500)="2afdefa46e5504136814331bc91481a875afb1afe776dfbc97b0432d8f3c176970bb89096409dce1e206d4b7d09497413e231a40307aac2003ff9562fdf557a79604ffaf48b2549ae73905d9e228715b6114324b"}, 0x20) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000004ff0000000000000000fcffff00000000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0100000002000000050000000400"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8ec6dc3f0adf33c9f7b986", 0x0, 0xe5e7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x4000000000000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7fd, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0xffffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 5m24.495079575s ago: executing program 2 (id=194): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = socket$kcm(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x43, &(0x7f00000001c0)=[{&(0x7f0000000780)="d8000000180001004e81f782db4cb904021d0800fe00ff00000055a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback=r3, r5, 0x32, 0x14, 0x0, @void, @value=r5}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, 0x0) socket$kcm(0xa, 0x2, 0x88) (async) socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x8, 0x9, 0x7, 0x8, 0x0, 0x8d, 0x881, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0x2}, 0x122, 0x7fff, 0xfa0, 0x7, 0x1000, 0x1, 0x7f, 0x0, 0x2, 0x0, 0x378}, r5, 0xa, r3, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000240), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r6, &(0x7f0000000240), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40000022) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000002c0), 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)="da5897be43fe976fa60c", 0xa}], 0x2}, 0x2604c880) (async) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)="da5897be43fe976fa60c", 0xa}], 0x2}, 0x2604c880) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x4000c01) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000006c0)=""/177, 0xb1}], 0x5}, 0x120) 5m24.255209899s ago: executing program 0 (id=197): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x134c58d86b541130) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa68297ff}, 0x0) 5m24.0549546s ago: executing program 0 (id=200): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x3, 0x9, 0x6, 0x200, 0x0, 0x1, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x28) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6010001c0005000500053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1, 0xd1, &(0x7f0000000800)=""/209, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8bf8ff00000000bfa200000000000007021000f8ffffffb703000008000000b704000002ae7e09c2b24300000003000000850000000f0000009e00"/88], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffee7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0x40, 0x9, 0x10, 0x5, 0x0, 0x300, 0x24a0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x1, 0x10000, 0x9, 0x39, 0x4, 0x1, 0x0, 0x6, 0x0, 0x1000}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x480003, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'rose0\x00', @broadcast}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002183f00648b02a00000000000000000000000050200000000007b980b659d71be00"/85], 0x0, 0x4e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x100}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) close(r6) socket$kcm(0x10, 0x3, 0x10) 5m23.698857351s ago: executing program 0 (id=204): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f3715bfa3e018840526b0dd88a28a"], 0xfdef) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x40000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e", 0x23}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000400000000000000000000001801000020690a000dfa5279fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000001000701000000feffffb702000008000000b703000000000000850000007600000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000780), 0x1}, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000000000020400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0xd, &(0x7f0000000340)='devices.list\x00'}, 0xfffffffffffffe22) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff12ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x1c}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r3}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r2, 0x20, &(0x7f00000005c0)={&(0x7f0000000580)=""/54, 0x36, 0x0, &(0x7f0000001880)=""/4096, 0x1000}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x9, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="df1419599970f039db6c0a113f9bca97e878406b884bb49ba18541b70bfb5ee04a8e97c60ecc46", 0x27}, {0x0}, {&(0x7f0000000880)="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", 0xffe}, {&(0x7f0000000480)="a71a3accfde5ab156aee674127b667cac5aa2a657926b08f58a78c1f2cc39025bc780e95da9b038943ed25e8e63b85830f32337c69375835c8a1cc260b099b5c8badc642c669460afe051472992a7e143f6bf497dcabd66602ffc444ddfcf1c726efcd9971c75f9df49238473ec38401a78eebb25f3cdb7e0877cd8f1f38546590d7f806017c662f75474744dd70dc41caf64ae167ae4095216c2b1d487371214ef593b6961db0aa93b373a2db3b485e0cb2446438c5203b39640e849430b749973c27b3917cd23a17415af730b70c", 0xcf}], 0x4, &(0x7f0000000580)}, 0x4008081) 5m23.326830013s ago: executing program 2 (id=206): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f3715bfa3e018840526b0dd88a28a"], 0xfdef) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0x40000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f93224fc60320011000a7403004700000037153e", 0x23}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000400000000000000000000001801000020690a000dfa5279fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000001000701000000feffffb702000008000000b703000000000000850000007600000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x28, 0x5, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000780), 0x1}, 0x0, 0x4, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000005000000000000020400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_bp={&(0x7f0000000700), 0x2}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0xd, &(0x7f0000000340)='devices.list\x00'}, 0xfffffffffffffe22) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff12ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x1c}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x9, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="df1419599970f039db6c0a113f9bca97e878406b884bb49ba18541b70bfb5ee04a8e97c60ecc46", 0x27}, {0x0}, {&(0x7f0000000880)="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", 0xffe}, {&(0x7f0000000480)="a71a3accfde5ab156aee674127b667cac5aa2a657926b08f58a78c1f2cc39025bc780e95da9b038943ed25e8e63b85830f32337c69375835c8a1cc260b099b5c8badc642c669460afe051472992a7e143f6bf497dcabd66602ffc444ddfcf1c726efcd9971c75f9df49238473ec38401a78eebb25f3cdb7e0877cd8f1f38546590d7f806017c662f75474744dd70dc41caf64ae167ae4095216c2b1d487371214ef593b6961db0aa93b373a2db3b485e0cb2446438c5203b39640e849430b749973c27b3917cd23a17415af730b70c", 0xcf}], 0x4, &(0x7f0000000580)}, 0x4008081) 5m23.110312246s ago: executing program 0 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000080000000000000711240000000000095000000000000004009c19ef1b99dc5792c429c0c43a4575405"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000f884000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000050000000000000000000ff", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r8}, 0x18) syz_clone(0x42001800, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c40), 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000700000000000000020000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x10, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff], 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001300)=r9, 0x4) 5m22.922753427s ago: executing program 32 (id=208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x40}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0), 0x0}, 0x20) close(0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800dac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x1f, 0x0, 0xfcd8) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x540, &(0x7f0000000a80)=""/4089}, 0x21) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xcb, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000780)={r2, &(0x7f0000000640)="498e309d2b6068845ad352079155620538206203a85e2093e9d93a4be46bafb000f3147140ae4167b02a8e19669bb65b2203092821b3d4370914c5531d1d33f5a30aa7aa109eadade8ccfeae15e545b98b2331471ad9f6ee5e284e2174f2d76b5460d24e0cf326170907241e098bdae2749ffd7dc3e34051b8c417000c5f56d94f9b5ba62a693df921842c1cd318ce94c23de05cceb1fcbc5e67441d744b0a90da7817c671842f52c5832bf1cdf3c8c79056dc897e686e7d00b26e4453728114d5ff3234fdd4917be31885937f2424583f8f61bc784145fef4fbad40f849441cea3dfbe3024ebc78efdd374dd37496", &(0x7f0000000740)}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x9, [@enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xb}, {0x1, 0x8}, {0x6, 0x7}, {0x5, 0x36}, {0x1, 0xa}, {0x8, 0xffffff9c}, {0xc, 0x4}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @struct={0x10, 0x4, 0x0, 0x4, 0x1, 0xc, [{0xa, 0x1, 0x9}, {0x0, 0x0, 0xc}, {0xb, 0x1, 0xbb}, {0xc, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x0, 0x30, 0x5f, 0x30]}}, &(0x7f0000000340)=""/66, 0xad, 0x42, 0x1, 0xc, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r7, r8, 0x5, 0x2, 0x1}, 0x50) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000740)={0x0, r6}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000800)={0x4, 0x80, 0xb, 0x7, 0x5, 0x4, 0x0, 0x80, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000007c0), 0x9}, 0x1000, 0x7, 0x6, 0x5, 0x2, 0x4, 0x8, 0x0, 0x1, 0x0, 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000880)=@raw=[@call={0x85, 0x0, 0x0, 0x3d}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x35cf}], &(0x7f00000008c0)='GPL\x00', 0x5, 0xba, &(0x7f0000000900)=""/186, 0x41100, 0x3b, '\x00', r7, 0x1a, r2, 0x8, &(0x7f00000009c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xa535, r6, 0x0, &(0x7f0000000a00)=[r0, r1, r2, r2, r0], 0x0, 0x10, 0x8bb}, 0x94) 5m22.837873562s ago: executing program 33 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$TUNGETVNETLE(r2, 0x40047452, &(0x7f0000001200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000080000000000000711240000000000095000000000000004009c19ef1b99dc5792c429c0c43a4575405"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000f884000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000050000000000000000000ff", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r8}, 0x18) syz_clone(0x42001800, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c40), 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r0, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000700000000000000020000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x10, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[0xffffffffffffffff], 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001300)=r9, 0x4) 5m22.792153925s ago: executing program 2 (id=211): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x6, 0x9, 0x1, 0x0, 0x3ff, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30c06853, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x130, 0x4, 0x3, 0xd, 0x4, 0x8, 0x80, 0x0, 0x7, 0x0, 0x2}, r2, 0x4, r0, 0x0) 5m22.724576378s ago: executing program 34 (id=211): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x6, 0x9, 0x1, 0x0, 0x3ff, 0x80, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30c06853, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x130, 0x4, 0x3, 0xd, 0x4, 0x8, 0x80, 0x0, 0x7, 0x0, 0x2}, r2, 0x4, r0, 0x0) 2m2.680715305s ago: executing program 3 (id=2443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2m2.514330074s ago: executing program 3 (id=2447): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8903, &(0x7f00000005c0)={0xffffffffffffffff, r1}) 2m2.329873525s ago: executing program 3 (id=2451): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1400000015000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) (fail_nth: 2) 2m2.018804073s ago: executing program 4 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="6efe6581460dd120a134d61e45b0effacc91748a7715ad4d18f8f3bb90e78d6a8936aa2df684af6df8c891ceae4ea8e24ed5c3e45cc9a620783d2a6a77fce591ee6dc0dac431670acfbe9f5a2fcb1f836247f5d75cff1b51f33ccf38b04ab26dcd06f50a53a8413abc48ee38c9d40e583ff74cf916cd6586192b3908b9ffc15c47365a6f3fa36010f0e31cea4103dd1297abf42f40658e75a188e3ff2520ada64d2c30f6c327319999c996e28baaa7e21cd001d9fd48237ea710ed01f8f9cba8727dc2d641a05c76376e5f8b1fba779e9acf6afb0541ca820fbb32543f61bdea37556d3ca39e032f10c88eddd8dc64c6", @ANYBLOB="00000000000000ed070778000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)="804556e03e6065e4804558874cd030635656504482550819f6db166803fb3ec34eb55d3c12ddc9463f3b525b5fe9ea1d14245d7087df9dc7111f7b2766a823371319a6c34cfaabef86277c9712ef3a83d46f935688c0c93d3c4ebd74be33456c26a133fb420d94aee5d91c33942704332e41419f05a505d97206b80806560dddda4dfdcbd8a26992e5c9c0f5f76a7cea3dd065f5", &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) 2m1.923397269s ago: executing program 4 (id=2455): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 2m1.90400442s ago: executing program 3 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2m1.367368441s ago: executing program 3 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x50880, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) 2m1.090071287s ago: executing program 4 (id=2467): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xc352, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x90, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f00000009c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000f"], 0x50) (async) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0xfe33) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x2, 0x40, 0x8, 0x26000, r2, 0xa0a9, '\x00', r3, r4, 0x2, 0x3, 0x2, 0xc}, 0x50) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x89, 0x5, 0x1, 0x6, 0xa04e}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x7a, &(0x7f00000001c0)=""/122, 0x40f00, 0x2a, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x10, 0x7ff, 0x4000000}, 0x10, 0x11a33, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000280)=[{0x4, 0x2, 0xe}, {0x5, 0x4, 0x4, 0x9}, {0x3, 0x5, 0xd}, {0x3, 0x3, 0x9, 0x6}], 0x10, 0x69}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x2b7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd0000000}}, @generic={0x6, 0x5, 0x1, 0x5, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x5}, 0x10, r11, r10, 0x9, &(0x7f0000000600)=[r9, r7, r7, r1, r2, r2, r2, r7], &(0x7f0000000700)=[{0x5, 0x5, 0xd, 0x1}, {0x4, 0x4, 0x5, 0x3}, {0x1, 0x3, 0xc, 0xc}, {0x1, 0x2, 0x7, 0x3}, {0x3, 0x1, 0x4, 0x9}, {0x2, 0x3, 0x10, 0x8}, {0x2, 0x5, 0x8, 0x7}, {0x4, 0x4, 0x7, 0x5}, {0x3, 0x4, 0x2, 0x9}], 0x10, 0x5}, 0x94) 2m1.060075759s ago: executing program 4 (id=2468): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94", 0xf}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/172, 0xac}], 0x1, &(0x7f0000000300)=""/160, 0xa0}, 0x2000) 2m0.147232072s ago: executing program 4 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 1m58.399066065s ago: executing program 4 (id=2473): r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0xff79) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x101, 0x0, 0x0, 0x1d90, r2, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7}, 0x50) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890) 1m58.201838697s ago: executing program 35 (id=2473): r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0xff79) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x101, 0x0, 0x0, 0x1d90, r2, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7}, 0x50) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="1400000033000b0f29523cbfbf2f9be00b2d3e21", 0x14}], 0x1}, 0x20000890) 1m58.180888748s ago: executing program 3 (id=2477): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 1m58.083760783s ago: executing program 36 (id=2477): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 1m31.441132163s ago: executing program 7 (id=2731): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68881ff", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m30.293357471s ago: executing program 7 (id=2739): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x8810) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042712ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000240)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)}, {0x0}, {&(0x7f00000005c0)="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", 0x72b}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1m29.378652155s ago: executing program 7 (id=2748): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x16') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) 1m27.456135378s ago: executing program 7 (id=2758): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0x7, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe0b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de10e578"}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r11 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1m26.435381668s ago: executing program 7 (id=2768): syz_clone(0x1400, 0x0, 0xf5ff, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)="bb25d48e37e701872cc228e5a0ca2a2d2b5601c23d3c8fe58efde03e15bcd273642710dba93eeee085b127aa432582c0c6bc5f093892df69c1058fc3c2fe459b49b76e6696e8c20ff10a57445d35c66dfab5f91a7bd4025cf3248216517db5a131ccbf845eeab166f1410ab92422e29829ff7f1c06a34e6e6beabff38d252ad4f3dc3294c4973134b6b0bf110652ef909e6798435a96b7c796f4546ae36b4344996a53e26e650f7648ecac2c7673a7926f16fb63e89fd425a2e18a36066eb058") 1m26.294882266s ago: executing program 7 (id=2770): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) r6 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x3, &(0x7f00000000c0)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 1m11.226394898s ago: executing program 37 (id=2770): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) r6 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x3, &(0x7f00000000c0)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 12.165525947s ago: executing program 5 (id=3447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x4023}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32, @ANYBLOB="0004000000000000000000000000001a0000006cc78dd2bc96c1692200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0x8b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000840)='cq_drain_complete\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x1000, 0x3, 0x6}, 0x0, 0xffffffffffffffff, r8, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0xfd, 0xfb, 0xbe, 0x0, 0x4, 0x2060, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000340), 0xb}, 0x8fcaf8b47d9f7c19, 0x7, 0x30ed, 0xa, 0x4, 0x0, 0xab, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r9, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 11.391369363s ago: executing program 6 (id=3455): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c00533a7451f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6e", 0x50}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 11.390367913s ago: executing program 5 (id=3456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) close(r0) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 11.215586743s ago: executing program 6 (id=3459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xb) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000060000000306000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68001, 0x0) r4 = syz_clone(0x4000000, &(0x7f0000002380)="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", 0x1000, &(0x7f0000000380), &(0x7f0000000340), &(0x7f00000003c0)="6b7887180adb2c5f2aa924ae60d25b105ae81be1e4fc1469b9e447c40900ebf250eb5c5706aac4e3d430b0c67384422d3a7186086136416dc37d51e66f8d2c60c6002db6b784b3595abf47fe") r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, r4, 0x100000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000001380)='!\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f00000004c0), &(0x7f0000000680)=""/224}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="86c6cbb9b1d65ddd774801a18bdc584b00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 10.950875858s ago: executing program 6 (id=3461): socket$kcm(0x10, 0x5, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x1, 0x4, 0xfd, 0x3, 0x0, 0x81, 0x6a10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_bp={&(0x7f0000000440)}, 0x40, 0x8, 0x0, 0x8, 0x0, 0xffff0000, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8943, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000ba76c27c85100000feffffff95000000000000007c3426327d93bf361153ca7f9355e46f1fa9f1cbfcd5ed565e0d58dc31a999f9ef3bdcdbb0841516521d396ab65b458e5b3a786e6d92391b049c2250c231d9a8b37b4e29984b07c40ed82f79feed4feefa98854e468ae9f00eb4084a1fe9c6f4e0323e342913f90a030f864216ffd4c9086a1ee0"], &(0x7f0000000140)='GPL\x00', 0x100, 0x83, &(0x7f0000000800)=""/131, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0x1, 0xfffffff6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x3, 0x5, 0x0, 0x4}, {0x1, 0x3, 0x0, 0x8}, {0x3, 0x2, 0x5}, {0x4, 0x2, 0x2, 0x5}, {0x3, 0x3, 0x0, 0x7}, {0x0, 0x2, 0x7, 0x6}]}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r8}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r9, 0x0, 0x4008001) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) 10.950045708s ago: executing program 5 (id=3462): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0x4, 0xfd, 0x0, 0xb46c, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x10911, 0xc8, 0x8, 0x0, 0xc, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008daa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 10.58193582s ago: executing program 6 (id=3465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r0) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 10.464218187s ago: executing program 5 (id=3468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, &(0x7f0000001a40), 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="68edb35e4c8f64164a936da3d784b396cf2aea26f8fcbe37503bd7cb405234824a53a0b1386f07c8ebe5b8b7fc65", @ANYRES64=r0, @ANYBLOB="00000000e48cce644b5458409202000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=""/133, 0x85, 0x0, &(0x7f0000000900)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1d, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000280)='GPL\x00', 0x25f7279b, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x1, 0xaf0, 0xfc}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@struct={0x10, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x1, 0x0, 0xed}, {0xb, 0x5, 0x400}]}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/57, 0x3f, 0x39, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x7, '\x00', 0x0, r3, 0x1, 0x2, 0x1}, 0xffffffe6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xb4}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r6) socket$kcm(0x10, 0x0, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), 0x0) r9 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x51016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f0000000540), 0x3}, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x6}, r8, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r7) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) 10.298055467s ago: executing program 6 (id=3470): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c00533a7451f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6e", 0x50}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 9.8954944s ago: executing program 5 (id=3472): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4090, 0xffa}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x6}, 0x40016002) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40) socket$kcm(0x22, 0x2, 0x21) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r4, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000a80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x134, 0x134, 0x3, [@func={0x10, 0x0, 0x0, 0xc, 0xb}, @ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x10, [{0x2, 0x5, 0x6}]}, @enum64={0xf, 0x8, 0x0, 0x13, 0x0, 0x2, [{0x10, 0x8000, 0x4}, {0xc, 0x7d6, 0x9}, {0xc, 0x1ff, 0xe}, {0x10, 0x5bb, 0xfe9}, {0xb, 0x3ff, 0x7}, {0x1, 0x7}, {0x5, 0x9, 0x6c}, {0x4, 0x101, 0x7}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5}, @enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x1, [{0x4, 0x401, 0xfffffff4}, {0x2, 0x8, 0x6}, {0x1, 0x3, 0x7}]}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}, @struct={0x6, 0x4, 0x0, 0x4, 0x1, 0xde88, [{0xf, 0x0, 0x1}, {0x2, 0x3, 0x400000}, {0x0, 0x5, 0x1}, {0x10, 0x0, 0xfffffffc}]}]}, {0x0, [0x5f]}}, &(0x7f0000001f40)=""/4096, 0x14f, 0x1000, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003080)={0x6, 0x19, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x267d}, [@ldst={0x0, 0x1, 0x4, 0x4, 0x1, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x0, 0x2, 0x8, 0x4, 0x18, 0xfffffffffffffff0}, @map_idx={0x18, 0x6}, @map_fd={0x18, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x2, 0x7, 0x2, 0x1, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x0, 0xe, 0x2, 0xb, 0x100, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xfc, &(0x7f0000000980)=""/252, 0x41100, 0x1, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000002f80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002fc0)={0x3, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003000)=[r3, r3, r3, r3, r3], &(0x7f0000003040)=[{0x0, 0x2, 0x4, 0x4}, {0x8, 0x4, 0x7, 0x8}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003200)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000003180)={0x3, 0x80, 0x5, 0x8, 0x7, 0x0, 0x0, 0x0, 0x4000, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000003140), 0x1}, 0x100060, 0x101, 0x7, 0x3, 0x2, 0x1ff, 0x7f, 0x0, 0x9, 0x0, 0x7}, r8, 0x2, r2, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_type(r9, &(0x7f0000000180), 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 9.655429814s ago: executing program 6 (id=3473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 9.444883096s ago: executing program 38 (id=3473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 9.085964258s ago: executing program 5 (id=3480): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0xb7e5, 0x1000, 0x41012, 0xffffffffffffffff, 0xad0, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=""/133, 0x85, 0x0, &(0x7f0000000900)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001000000100000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x25f7279b, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xf, 0xaf4, 0xfc}, 0xffffffffffffff55, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000002400560c8e96aa0beae20000100000000200008406ed0000000b770000050000000004000000a58aec585d848e38a4c3009807f551f0919819efdd9152ec60e1ebfd129c4415be6f22ac8541eb51eeeefcae03657bde8134c7c284c8ea6ccd8153c4b06b0010a42385edd8b484c1a8e5f0fd3c8c8b5fd8b3facd"], &(0x7f00000001c0)=""/57, 0x3f, 0x39, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000020000000100"/28], 0xffffffe6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xb4}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, @perf_config_ext={0xffff, 0x3}, 0x20, 0x0, 0x0, 0x5, 0x47, 0x2, 0xb15, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r5) socket$kcm(0x10, 0x0, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), 0x0) r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x3c, 0x0, 0x6, 0x5001e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f00000002c0), 0x3}, 0x83114, 0x3, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, r7, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x2, 0x0) 8.731930878s ago: executing program 39 (id=3480): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0xb7e5, 0x1000, 0x41012, 0xffffffffffffffff, 0xad0, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=""/133, 0x85, 0x0, &(0x7f0000000900)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001000000100000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x25f7279b, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xf, 0xaf4, 0xfc}, 0xffffffffffffff55, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000002400560c8e96aa0beae20000100000000200008406ed0000000b770000050000000004000000a58aec585d848e38a4c3009807f551f0919819efdd9152ec60e1ebfd129c4415be6f22ac8541eb51eeeefcae03657bde8134c7c284c8ea6ccd8153c4b06b0010a42385edd8b484c1a8e5f0fd3c8c8b5fd8b3facd"], &(0x7f00000001c0)=""/57, 0x3f, 0x39, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000020000000100"/28], 0xffffffe6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xb4}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, @perf_config_ext={0xffff, 0x3}, 0x20, 0x0, 0x0, 0x5, 0x47, 0x2, 0xb15, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r5) socket$kcm(0x10, 0x0, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = syz_clone(0xc0000, &(0x7f00000000c0)="cc5a553b22113d3309a5b95f1520612dceddd6d199de0768dcac9dabf224541def119b3b0d328c958e229bae9e", 0x2d, &(0x7f0000000180), &(0x7f00000001c0), 0x0) r8 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x3c, 0x0, 0x6, 0x5001e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dc, 0x0, @perf_bp={&(0x7f00000002c0), 0x3}, 0x83114, 0x3, 0xfffffffd, 0x3, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, r7, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x2, 0x0) 3.111107808s ago: executing program 1 (id=3500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x8a8}, 0x8010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001580)}], 0x5}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf2}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) socketpair(0x18, 0x4, 0x1, &(0x7f00000002c0)) 3.045253111s ago: executing program 9 (id=3501): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0x4, 0xfd, 0x0, 0xb46c, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x10911, 0xc8, 0x8, 0x0, 0xc, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008daa"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) 2.928549328s ago: executing program 1 (id=3502): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/75, 0x4b}], 0x1}, 0x12041) sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0xc0f0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000340)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)="f887da17942e840b0cbd32d5417420cd8f846bc74f4b12de595e90ea8c924d94ade6495a68bbfff13b2c23d554dc507916ca0326ebc1dd17c5b155631f08050928796dbe938df3ce23268f96f60c7ea592cf37911adf55254161c9b8c9debc25061d4513076f6bbee718d86ba30b86dd0b06f495952471e8a85954d13dc6575a12c276a17a13283b112c2ac323bc1cfa6046e0ad3754dd1ec489d232abdfd2678b8f297c28ceda7b252aa9f62a7ad4e2fb131d76", 0xb4}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="cfd3b1fdc73f56a707a2161cdeba2643c09c42e78ff8221c38175e878512d7d50a1d903734ffa27254412990626fa41fba3938871030ec1ad493c6f7760d778cbbee2b0db4533f6a74eecb352dadd135af0bbcc6c3a8098fa1cd359f4176e292cdad5f5818ff30843ff35034a7e062220dcc00", 0x73}, {&(0x7f0000000600)="174ce2021a61d01ed188309b0279a9d3bd205d500301279f546b06fb6c8602ada3634ca7d009d036d177272e36fe3b173496e54d74ec46c362c0ba5d1d0e369c1eec6b440fea65e2673e084a87b9a96d30b038da12624d6a5737fb26bb0351403f93204422ae60c7f6ef4abb0904c28f15973cf0fc9db0f6a423c7c060732c9d2b11f0e59995bc930ca5a9ad", 0x8c}, {&(0x7f0000000740)="e1ee946b0f45cd0e6391158ba73e55084d1c62adfb38ac4150a2cf9c156e80aee75234dfafb8d89bad4ee80134e0b4f450fa03b935ee61e43f8e69a88d6be467e29878aafe10eec651899cb764e5568788363b7d91642bb72c95506bb2d2698b9b2031ab51a5dc481741cf1b74a2ae48eb18d5c95fdc0cd1abc8ee832a3378a9292f10a59fac5605f706fb5358009f5d4dae912baf521a104d983bbcf180723de5ae72a6fac720ce"}], 0x5, &(0x7f0000000880)=[{0xa8, 0x0, 0x7f, "24d7deee404aef0ff68683309aeec8fc9372241a72632ea283e5371755eab82ed75812f33eab6064a47f8b2c48603f45d934ff7aa8b85e458360ed88f495083bf463f3cf6b9582dcc4888404598bff691ea13dc642d5c426ccab337f4d65a1b0330a3394fb391d2f1b85a25e5e7199228b6be8077581cff88c1daad672e8d1bbae9a4f7fb27e5300397372a80b34112c484887"}, {0xb0, 0x115, 0x7, "09c2f3c459706962ac95de303dde94ae42e5dd6f55edae9a6161aeb758490ad92bef1fec4becacacd7aeea5e6d16f2ef3f7c76ca8328bcb243a8964404a46b9723637c84c1e97e66b4f39cb7227ff6e47fc8e182484778b7431b46755040db9a0997b1784e86c742ee6a9fb5455d4336e77487faecbb41c19c9c0dd26633b550991a65fa54b674ddd7764005946758ebe0cd2bc418efab31631248e3"}, {0xb8, 0x0, 0x9, "dfb6995cb7f7d2d668824ffe5724ae2c89a4b879e375f0486876654c85e04610ca8f6d93fc5b6c5a60c7ee1b8a422ebab63c6f6f5a19c2a2801ff9e9825b33c27e869187a1b5e7c76e8681b153be174012f17f9e6584638ea4c9cec054ee301fbe40ff729b8b9b71f03caa6c54094f00afbe6afab241de391640ef9387ac0c6b5b2e4948b4e3960701e274d93e07ee80cd60a028a9ee17a20554d47f0adf731193a11925400eee02"}, {0xf8, 0x11, 0xb726, "219cac5d32edfb19e243df3b7820a1e5b8e220d88194c229758ad983757ea53a5008923d767e16eeb96bc6cc1e7806df0b559121604eacb6143a2424d23143ba72fc2e656680096f1e6e48c0ba89d29b3938f5fc8313107e4b26ca6222ead515fca727dc4665f91c999a3ffc130fdf116509d770a052a93e6d1253cb14b056138e9f472d7e80d91b1ae1eefb866123e2c5f92ee9fc04eb21c40af27529a97dcfa97be5a52229acc3efb6082269deee8d0de870fd1a3105e4e50daaa61bd80113a16fb5a0e804881eded9f09c109f4fd238cc5b7c8f218e3a53ba66f38a557fd9bd910f"}, {0x68, 0x10c, 0x0, "f94cb4329c1d067c968368244e0f56a3b95e9fbe1d5138468aa5897a6acc6d67b6c9632606791bb3209c967a43f19694c12b7b10a8020d246d406e00247538f08c719579cc7e5dc19e3bc93262010bd1c2"}, {0xe0, 0x6f448e9dde8e922a, 0x0, "126a08d7dc475227283a3addb0aeaef9c0b339b5bd11fb656da4d1e96d4a09da536cb6c57fa87f2e0cfd702f21c801a7bab936a8126247c42faa806fd2c456c78616e353595f7c0842f35bca0c456d2c0b7e2d2ad2d35b7a8cf141a3d90fa5e4a2bb21c1ea480012001fa7d30a534fb2517c68997d13b14764f2596d51442afb9551790a06127538c902bcfaf7cea3bac58d4e34095fb31f6fcc224fb7af52a014ccdb5c1cda52c3065b6ee4cd3ffecc5e546bfe99fde09e1682f2f00b369b55c36896ea9af114a99a4a2b715a"}, {0xb0, 0xff, 0x8, "cc0a53b98e26281e7bcadfc3f8d42d9cc30df0eae60afba53ba00f28cd63509392c56af8d75dd1d232dce258a210fad3773ffb775cec520918a200a732af11fb3649c5e698109eaac7db0492752ddeb3e11d4fc4aa6a010d324fdd46393bfe4dba7f1490aea5a0dff060258002c68a6826cf853ca1cf20710cdcc13a08268aa3367b3e21c1318c4fdd4b7ac7ede55ba6f6b3c4e63e26ec20232fc98683e3d41d"}, {0x60, 0x108, 0x7, "ebbb65ad8df2c2ac6ecaca0ea3ed6969a8a5441eb66888c6684ae97878a8bed5a77c49ba6b8295e568fa0b4bbc9b74641ebe5086c557226d81401307f7ecc1bc155d8e6877ec6dabfef3f0"}], 0x560}, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00', @random="0e7298f95446"}) socketpair(0x2, 0x1, 0x6, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) syz_clone(0x0, &(0x7f0000000000)="2d1558f1bc0cd8c500ae54bbb477a9334958151f50f7aa169fb505e135795401e34ef1b223b406e7343aed5c1922d81f30c8967f32b0304c4600173148adc019ca57e38050eafcae760217e26b6234e5c17d14dcd749aff3889c65cfd6cfb3f990e137b5e21c7927af2a5de3cef85b3f61bfbc2a711bd5bd9d54f94858164608134613678e91d0b789974a70acbe973091b7c830a5d471ceb7e9aafd3159d948dce0b0fb44b63f059d47ae29e5dd870918e83dd668b5f0ca4fb1f21580fe6f0b3fdeb4df5adfda8d73fb3d9745", 0xcd, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="7fb622c6a14a6fb12770f32f4f513aad3195788895d02b91847cca530460ef28b2d26d01925499d5044614bcff9c4f8acdebdffeba6f13565d6ecab47e5514d92ebeac07214915faffa86763ff9fd46eb86f6eaea4594e3f8689ee561e6f959bc890811532a0ed1d95a5e4c684078445c4012b2f7f8daf7f74dd719e2115318519e2a843840f10e7c8e1fb900ee3da0899f8a395df79ed73fb9e96e01ea5d92aab28b815dbd368f6033409db8e4d9c31d9d3ebd237fd7d466c18fb6062") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a0010400600", 0x3a}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) 2.816186285s ago: executing program 9 (id=3503): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00082025000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='THAWED\x00', 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYRES8=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) 2.691333412s ago: executing program 8 (id=3504): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/172, 0xac}], 0x1}, 0x2000) (fail_nth: 1) 2.446426517s ago: executing program 8 (id=3505): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x8, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)={'veth1_to_bond\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000002e000b0fd25a806c8c6f94f90324a260b90b201f1efb39207cc3bb47fd74fca9302a91e8cc98045849d027a9bc9f237b15b7c4f0", 0x38}], 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x4008744b, 0xf0ff1f00000000) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/172, 0xac}], 0x1}, 0x2000) 2.238826949s ago: executing program 1 (id=3506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x2, 0x88) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d080304000000e8fea4a118001e00", 0x20}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async, rerun: 64) socket$kcm(0x11, 0xa, 0x300) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044942, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff034}, {0x6, 0x0, 0x3, 0x8}]}) 2.070915249s ago: executing program 1 (id=3507): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="93b10e00003e4affb534d2dd6b3d000000000000f155de310000000000008477db60d130bc9dd4eef4f22324371f60175a7e8e507c179816657c7375b7cce2c175ca1f28909d5b4f7cc83d1b360cf781c559f8e07660", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="14000000101c3507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40) setsockopt$sock_attach_bpf(r7, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r8, 0x36, 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000900)=""/239, 0xef}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1d, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}}, 0x0, 0x25f7279b, 0x96, &(0x7f0000000600)=""/150, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x1, 0xaf0, 0xfc}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="00000000000000e4320500000800000085000000a5000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x7, &(0x7f0000000440)=""/7, 0x40f00, 0x40, '\x00', r8, @fallback=0x35, r4, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x12f, 0x48ed}, 0x10, r9, r5, 0x5, 0x0, &(0x7f0000000580)=[{0x2, 0x5, 0x9, 0x7}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x4, 0xd, 0x6}, {0x1, 0x4, 0x8, 0xa}, {0x0, 0x1, 0x9, 0x6}], 0x10, 0x3618}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x12, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9b}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000001380)='syzkaller\x00', 0x1, 0xf2, &(0x7f00000014c0)=""/242, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x32, r3, 0x8, &(0x7f00000013c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0x10, 0x8}, 0x10, r9, 0xffffffffffffffff, 0x2, &(0x7f00000015c0)=[r0], &(0x7f0000001600)=[{0x2, 0x4, 0xf, 0x4}, {0x3, 0x3, 0x0, 0xa}], 0x10, 0xfffffff7}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.945040106s ago: executing program 9 (id=3508): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003f40)={&(0x7f00000039c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x84) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) close(0x3) 1.778731496s ago: executing program 1 (id=3509): close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x16, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, &(0x7f0000000000), 0x3}, 0x28) close(0x3) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x6, 'blkio'}]}, 0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) 967.361313ms ago: executing program 8 (id=3510): syz_clone(0x1400, 0x0, 0xfbff, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000600)="bb25d48e37e701872cc228e5a0ca2a2d2b5601c23d3c8fe58efde03e15bcd273642710dba93eeee085b127aa432582c0c6bc5f093892df69c1058fc3c2fe459b49b76e6696e8c20ff10a57445d35c66dfab5f91a7bd4025cf3248216517db5a131ccbf845eeab166f1410ab92422e29829ff7f1c06a34e6e6beabff38d252ad4f3dc3294c4973134b6b0bf110652ef909e6798435a96b7c796f4546ae36b4344996a53e26e650f7648ecac2c7673a7926f16fb63e89fd425a2e18a36066eb058") 909.935166ms ago: executing program 8 (id=3511): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="195000000000000000000000000000000000000009000080"], 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0xc) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2539000029000324f8063e378e3ebb8c90f0cf02f2776c3c4368082e6806639e695cef325ee1cfed22f94feb8cd1a24c0a5c6d52fc70c2274a6d3a4c00629dd6fbc4f55e7717356e66d446f77e831a147ca13687f2b820304902764009c26e21e9a5b767512550d399e88750c9931857501a383c5bbfe037c7c14e6da6626f5a43e085ab223ce504104ff075454b72f680cfb43b1b6c56935bca955c970ec91599f9c2437106d7f1bd13067dc2eed04b13980ad1d8a3a17d2221062620f501554057101f0901bf3120babd6315cceda2"], 0x33fe0) 773.207025ms ago: executing program 9 (id=3512): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x42) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x700, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000004) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 645.879892ms ago: executing program 9 (id=3513): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a02413bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a99281000000059f425ec2f8580fe3c6f605f9a00e90ba71cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e0852c8e7536bd1f018fa6be1e4de61fdccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4065903124bff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae441e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719a"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e0000d81500010084c06fb300000000080005007a010401a80016002000034004000000035c0461c9ab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798aeaa73e2fad95667e0fcd4c306dcdf63951f215ce3bb9ad809d5e1cace81000cffece0b494566d05f3d1269f0dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x800000000000000) 643.722152ms ago: executing program 8 (id=3521): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003f40)={&(0x7f00000039c0)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x84) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) close(0x3) 535.126909ms ago: executing program 1 (id=3514): close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x16, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, &(0x7f0000000000), 0x3}, 0x28) close(0x3) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x33fe0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x2d, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x6, 'blkio'}]}, 0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000540), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) socket$kcm(0x22, 0x2, 0x21) 493.704401ms ago: executing program 9 (id=3515): sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000d10400000000000064dc6a00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1d100000120091ef"], 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='mm_lru_insertion\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000009000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r3}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400081, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 0s ago: executing program 8 (id=3516): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r4, 0x2b, 0x1, 0x9e32, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0]}, 0x40) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x40047438, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000003c0)='GPL\x00', 0xfffffefe, 0xe1, &(0x7f0000000680)=""/225, 0x41000, 0x23, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r5, r0, r1], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): xa0 [ 141.754602][ T6686] ? clear_bhb_loop+0x30/0x80 [ 141.759263][ T6686] ? clear_bhb_loop+0x30/0x80 [ 141.763928][ T6686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.769807][ T6686] RIP: 0033:0x7fb1ca6b6cb9 [ 141.774210][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.794001][ T6686] RSP: 002b:00007fb1c88f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.802602][ T6686] RAX: ffffffffffffffda RBX: 00007fb1ca932090 RCX: 00007fb1ca6b6cb9 [ 141.810683][ T6686] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 141.818649][ T6686] RBP: 00007fb1c88f1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.826714][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.834942][ T6686] R13: 00007fb1ca932128 R14: 00007fb1ca932090 R15: 00007ffd3f1e6fb8 [ 141.843132][ T6686] [ 144.890877][ T6702] netlink: 152 bytes leftover after parsing attributes in process `syz.7.635'. [ 145.298150][ T6729] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.645'. [ 145.600367][ T6737] Q±6ã×\b‹¡Y­4: renamed from lo [ 145.706548][ T6745] FAULT_INJECTION: forcing a failure. [ 145.706548][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 145.740682][ T6745] CPU: 1 PID: 6745 Comm: syz.7.649 Not tainted syzkaller #0 [ 145.748015][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.758106][ T6745] Call Trace: [ 145.761414][ T6745] [ 145.764377][ T6745] dump_stack_lvl+0x188/0x250 [ 145.769086][ T6745] ? show_regs_print_info+0x20/0x20 [ 145.774396][ T6745] ? load_image+0x400/0x400 [ 145.778926][ T6745] ? __might_sleep+0xf0/0xf0 [ 145.783543][ T6745] ? __lock_acquire+0x7d10/0x7d10 [ 145.788688][ T6745] ? netlink_insert+0xe95/0x11f0 [ 145.793757][ T6745] should_fail+0x38c/0x4c0 [ 145.798208][ T6745] should_failslab+0x5/0x20 [ 145.802736][ T6745] slab_pre_alloc_hook+0x51/0xc0 [ 145.807701][ T6745] kmem_cache_alloc_node+0x47/0x2d0 [ 145.812920][ T6745] ? __alloc_skb+0xf4/0x750 [ 145.817459][ T6745] __alloc_skb+0xf4/0x750 [ 145.822291][ T6745] netlink_sendmsg+0x654/0xbe0 [ 145.827275][ T6745] ? netlink_getsockopt+0x570/0x570 [ 145.832603][ T6745] ? aa_sock_msg_perm+0x94/0x150 [ 145.837571][ T6745] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 145.843315][ T6745] ? security_socket_sendmsg+0x7c/0xa0 [ 145.848889][ T6745] ? netlink_getsockopt+0x570/0x570 [ 145.854202][ T6745] ____sys_sendmsg+0x5b7/0x8f0 [ 145.859074][ T6745] ? __sys_sendmsg_sock+0x30/0x30 [ 145.864118][ T6745] ? import_iovec+0x6f/0xa0 [ 145.868735][ T6745] ___sys_sendmsg+0x236/0x2e0 [ 145.873425][ T6745] ? __sys_sendmsg+0x2a0/0x2a0 [ 145.878286][ T6745] ? trace_event_raw_event_lock+0x270/0x270 [ 145.884172][ T6745] ? vfs_write+0x8b2/0xd60 [ 145.888698][ T6745] __se_sys_sendmsg+0x1af/0x290 [ 145.893551][ T6745] ? __x64_sys_sendmsg+0x80/0x80 [ 145.898518][ T6745] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 145.904735][ T6745] ? lockdep_hardirqs_on+0x94/0x140 [ 145.909941][ T6745] do_syscall_64+0x4c/0xa0 [ 145.914356][ T6745] ? clear_bhb_loop+0x30/0x80 [ 145.919025][ T6745] ? clear_bhb_loop+0x30/0x80 [ 145.923783][ T6745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.929661][ T6745] RIP: 0033:0x7fdd1879acb9 [ 145.934466][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.954257][ T6745] RSP: 002b:00007fdd169f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.962685][ T6745] RAX: ffffffffffffffda RBX: 00007fdd18a15fa0 RCX: 00007fdd1879acb9 [ 145.970653][ T6745] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000004 [ 145.978787][ T6745] RBP: 00007fdd169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.987123][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.995193][ T6745] R13: 00007fdd18a16038 R14: 00007fdd18a15fa0 R15: 00007ffe4f36a0a8 [ 146.003303][ T6745] [ 146.058737][ T6754] netlink: 'syz.3.651': attribute type 10 has an invalid length. [ 146.067001][ T6754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.651'. [ 147.094618][ T6803] netlink: 'syz.7.665': attribute type 3 has an invalid length. [ 147.122074][ T6803] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.665'. [ 147.138078][ T6808] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.666'. [ 147.372434][ T6777] delete_channel: no stack [ 147.452304][ T6816] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.668'. [ 147.554076][ T6820] FAULT_INJECTION: forcing a failure. [ 147.554076][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 147.562566][ T6822] netlink: 'syz.5.671': attribute type 39 has an invalid length. [ 147.570895][ T6820] CPU: 0 PID: 6820 Comm: syz.7.670 Not tainted syzkaller #0 [ 147.582473][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.592644][ T6820] Call Trace: [ 147.595949][ T6820] [ 147.598898][ T6820] dump_stack_lvl+0x188/0x250 [ 147.603700][ T6820] ? show_regs_print_info+0x20/0x20 [ 147.609057][ T6820] ? load_image+0x400/0x400 [ 147.613591][ T6820] ? __might_sleep+0xf0/0xf0 [ 147.618207][ T6820] ? __lock_acquire+0x7d10/0x7d10 [ 147.623262][ T6820] should_fail+0x38c/0x4c0 [ 147.627720][ T6820] should_failslab+0x5/0x20 [ 147.632238][ T6820] slab_pre_alloc_hook+0x51/0xc0 [ 147.637174][ T6820] ? __d_alloc+0x2a/0x6f0 [ 147.641493][ T6820] kmem_cache_alloc+0x3d/0x290 [ 147.646254][ T6820] __d_alloc+0x2a/0x6f0 [ 147.650399][ T6820] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 147.656376][ T6820] d_alloc_pseudo+0x19/0x70 [ 147.660874][ T6820] alloc_file_pseudo+0xe0/0x200 [ 147.665718][ T6820] ? alloc_empty_file_noaccount+0x80/0x80 [ 147.671427][ T6820] ? __lock_acquire+0x7d10/0x7d10 [ 147.676450][ T6820] ? __local_bh_enable_ip+0x136/0x1c0 [ 147.681915][ T6820] ? _local_bh_enable+0xa0/0xa0 [ 147.687117][ T6820] anon_inode_getfile+0xc1/0x1a0 [ 147.692047][ T6820] bpf_link_prime+0x125/0x270 [ 147.696727][ T6820] bpf_raw_tracepoint_open+0x4f5/0x840 [ 147.702181][ T6820] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 147.707994][ T6820] ? __might_fault+0xb3/0x110 [ 147.712662][ T6820] ? bpf_lsm_bpf+0x5/0x10 [ 147.716976][ T6820] ? security_bpf+0x7a/0xa0 [ 147.721468][ T6820] __sys_bpf+0x4fb/0x6f0 [ 147.725707][ T6820] ? bpf_link_show_fdinfo+0x380/0x380 [ 147.731603][ T6820] ? vtime_user_exit+0x2c8/0x3e0 [ 147.736535][ T6820] __x64_sys_bpf+0x78/0x90 [ 147.741312][ T6820] do_syscall_64+0x4c/0xa0 [ 147.745742][ T6820] ? clear_bhb_loop+0x30/0x80 [ 147.750479][ T6820] ? clear_bhb_loop+0x30/0x80 [ 147.755170][ T6820] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.761151][ T6820] RIP: 0033:0x7fdd1879acb9 [ 147.765566][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.785363][ T6820] RSP: 002b:00007fdd169f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.793795][ T6820] RAX: ffffffffffffffda RBX: 00007fdd18a15fa0 RCX: 00007fdd1879acb9 [ 147.802138][ T6820] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000011 [ 147.810132][ T6820] RBP: 00007fdd169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.818142][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.826141][ T6820] R13: 00007fdd18a16038 R14: 00007fdd18a15fa0 R15: 00007ffe4f36a0a8 [ 147.834155][ T6820] [ 148.014696][ T6832] netlink: 2 bytes leftover after parsing attributes in process `syz.6.675'. [ 148.068463][ T6838] netlink: 132 bytes leftover after parsing attributes in process `syz.6.675'. [ 148.080778][ T6839] FAULT_INJECTION: forcing a failure. [ 148.080778][ T6839] name failslab, interval 1, probability 0, space 0, times 0 [ 148.103397][ T6839] CPU: 1 PID: 6839 Comm: syz.3.677 Not tainted syzkaller #0 [ 148.110834][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.120906][ T6839] Call Trace: [ 148.124217][ T6839] [ 148.127143][ T6839] dump_stack_lvl+0x188/0x250 [ 148.131831][ T6839] ? show_regs_print_info+0x20/0x20 [ 148.137031][ T6839] ? load_image+0x400/0x400 [ 148.141524][ T6839] ? __lock_acquire+0x7d10/0x7d10 [ 148.146546][ T6839] should_fail+0x38c/0x4c0 [ 148.151052][ T6839] should_failslab+0x5/0x20 [ 148.155658][ T6839] slab_pre_alloc_hook+0x51/0xc0 [ 148.160609][ T6839] __kmalloc+0x6b/0x330 [ 148.164777][ T6839] ? kernfs_fop_write_iter+0x155/0x4c0 [ 148.170253][ T6839] ? end_current_label_crit_section+0x14b/0x170 [ 148.176526][ T6839] kernfs_fop_write_iter+0x155/0x4c0 [ 148.181836][ T6839] ? iov_iter_init+0xb4/0x170 [ 148.186535][ T6839] vfs_write+0x745/0xd60 [ 148.190797][ T6839] ? file_end_write+0x250/0x250 [ 148.195671][ T6839] ? __fget_files+0x40f/0x480 [ 148.200380][ T6839] ? mutex_lock_nested+0x17/0x20 [ 148.205336][ T6839] ? __fdget_pos+0x2bf/0x370 [ 148.209941][ T6839] ? ksys_write+0x71/0x260 [ 148.214385][ T6839] ksys_write+0x152/0x260 [ 148.218734][ T6839] ? __ia32_sys_read+0x80/0x80 [ 148.223511][ T6839] ? lockdep_hardirqs_on+0x94/0x140 [ 148.228730][ T6839] do_syscall_64+0x4c/0xa0 [ 148.233167][ T6839] ? clear_bhb_loop+0x30/0x80 [ 148.237866][ T6839] ? clear_bhb_loop+0x30/0x80 [ 148.242555][ T6839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.248627][ T6839] RIP: 0033:0x7f5c6a92fcb9 [ 148.253040][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.272816][ T6839] RSP: 002b:00007f5c68b8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.281315][ T6839] RAX: ffffffffffffffda RBX: 00007f5c6abaafa0 RCX: 00007f5c6a92fcb9 [ 148.289289][ T6839] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 148.297341][ T6839] RBP: 00007f5c68b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.305312][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.313467][ T6839] R13: 00007f5c6abab038 R14: 00007f5c6abaafa0 R15: 00007ffda24d3fd8 [ 148.321470][ T6839] [ 148.894716][ T6866] netlink: 'syz.4.684': attribute type 10 has an invalid length. [ 149.362437][ T6844] delete_channel: no stack [ 149.372586][ T6885] netlink: 'syz.5.690': attribute type 21 has an invalid length. [ 149.815778][ T6909] netlink: 'syz.4.698': attribute type 10 has an invalid length. [ 149.847996][ T6909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'. [ 149.911224][ T6913] netlink: 'syz.3.699': attribute type 3 has an invalid length. [ 149.922309][ T6914] netlink: 144308 bytes leftover after parsing attributes in process `syz.6.701'. [ 149.962823][ T6909] device batadv0 entered promiscuous mode [ 149.967948][ T6913] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.699'. [ 149.985585][ T6909] bridge0: port 4(batadv0) entered blocking state [ 150.001146][ T6909] bridge0: port 4(batadv0) entered disabled state [ 150.022645][ T6909] bridge0: port 4(batadv0) entered blocking state [ 150.029328][ T6909] bridge0: port 4(batadv0) entered forwarding state [ 150.075279][ T6907] device wg2 entered promiscuous mode [ 150.229857][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.239691][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.866112][ T6951] netlink: 'syz.5.710': attribute type 10 has an invalid length. [ 151.845566][ T6979] netlink: 'syz.5.717': attribute type 10 has an invalid length. [ 151.870029][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.5.717'. [ 151.912104][ T6979] device batadv0 entered promiscuous mode [ 151.932203][ T6979] bridge0: port 4(batadv0) entered blocking state [ 151.968385][ T6979] bridge0: port 4(batadv0) entered disabled state [ 152.010055][ T6979] bridge0: port 4(batadv0) entered blocking state [ 152.016652][ T6979] bridge0: port 4(batadv0) entered forwarding state [ 152.289969][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 152.299419][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 153.835424][ T6923] delete_channel: no stack [ 155.379390][ T7044] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 155.419329][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 155.470591][ T7044] device batadv0 entered promiscuous mode [ 155.524570][ T7044] bridge0: port 1(batadv0) entered blocking state [ 155.637014][ T7044] bridge0: port 1(batadv0) entered disabled state [ 156.122942][ T7044] bridge0: port 1(batadv0) entered blocking state [ 156.130486][ T7044] bridge0: port 1(batadv0) entered forwarding state [ 156.236312][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.245869][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.255590][ T7050] netlink: 11562 bytes leftover after parsing attributes in process `syz.7.739'. [ 156.417141][ T7058] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 156.427198][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.734'. [ 156.692314][ T7078] netlink: 'syz.3.744': attribute type 9 has an invalid length. [ 156.751541][ T7078] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.744'. [ 156.850350][ T7087] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 156.928829][ T7085] netlink: 'syz.7.746': attribute type 3 has an invalid length. [ 156.938092][ T7085] netlink: 128 bytes leftover after parsing attributes in process `syz.7.746'. [ 156.956846][ T7097] netlink: 'syz.4.749': attribute type 9 has an invalid length. [ 156.964657][ T7097] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.749'. [ 156.999474][ T7099] netlink: 134268 bytes leftover after parsing attributes in process `syz.6.748'. [ 157.132332][ T7093] netlink: 'syz.4.749': attribute type 9 has an invalid length. [ 157.160159][ T7093] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.749'. [ 157.449768][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.458820][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.596373][ T7113] device bridge_slave_1 left promiscuous mode [ 157.604407][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.617386][ T7113] device bridge_slave_0 left promiscuous mode [ 157.623997][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.219633][ T7150] netlink: 'syz.5.767': attribute type 10 has an invalid length. [ 158.252797][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.5.767'. [ 158.293708][ T7150] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 158.307251][ T7150] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.338944][ T7150] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 158.508249][ T7152] delete_channel: no stack [ 158.621705][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.629986][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.783148][ T7169] bridge0: port 3(team0) entered disabled state [ 158.868497][ T7169] device bridge_slave_1 left promiscuous mode [ 158.888105][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.889876][ T7177] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 158.924170][ T7169] device bridge_slave_0 left promiscuous mode [ 158.928924][ T7177] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.777'. [ 158.947893][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.011005][ T7146] delete_channel: no stack [ 159.540048][ T7195] netlink: 'syz.5.784': attribute type 21 has an invalid length. [ 159.760886][ T7198] netlink: 'syz.7.782': attribute type 10 has an invalid length. [ 159.786844][ T7198] device geneve0 entered promiscuous mode [ 159.876982][ T7198] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 160.062184][ T7185] delete_channel: no stack [ 160.752673][ T7239] __nla_validate_parse: 2 callbacks suppressed [ 160.752716][ T7239] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.800'. [ 160.809580][ T7236] netlink: 'syz.7.801': attribute type 10 has an invalid length. [ 160.817366][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.7.801'. [ 161.038095][ T7247] netlink: 'syz.3.804': attribute type 21 has an invalid length. [ 161.087034][ T7247] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.148965][ T7247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.156703][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 161.164328][ T7247] IPv6: NLM_F_CREATE should be set when creating new route [ 163.957908][ T7257] netlink: 'syz.6.806': attribute type 10 has an invalid length. [ 163.965968][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.067828][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.355160][ T7277] netlink: 143108 bytes leftover after parsing attributes in process `syz.6.812'. [ 164.402839][ T7277] netlink: 'syz.6.812': attribute type 1 has an invalid length. [ 164.538177][ T7284] netlink: 132 bytes leftover after parsing attributes in process `syz.7.813'. [ 164.602544][ T7290] netlink: 'syz.5.814': attribute type 4 has an invalid length. [ 164.699515][ T7290] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.814'. [ 164.781148][ T7295] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.816'. [ 165.182798][ T7308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.823'. [ 165.318059][ T7314] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.825'. [ 165.814585][ T7323] netlink: 'syz.3.827': attribute type 29 has an invalid length. [ 165.858762][ T7323] netlink: 'syz.3.827': attribute type 29 has an invalid length. [ 165.938561][ T7327] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.828'. [ 165.954092][ T7323] netlink: 'syz.3.827': attribute type 3 has an invalid length. [ 165.977884][ T7323] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.827'. [ 166.154738][ T7336] netlink: 152 bytes leftover after parsing attributes in process `syz.6.831'. [ 166.310912][ T7330] netlink: 'syz.7.829': attribute type 4 has an invalid length. [ 166.332948][ T7330] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.829'. [ 167.365408][ T7393] netlink: 'syz.4.849': attribute type 4 has an invalid length. [ 167.381462][ T7389] netlink: 'syz.3.852': attribute type 10 has an invalid length. [ 167.401500][ T7389] netlink: 55 bytes leftover after parsing attributes in process `syz.3.852'. [ 167.447857][ T7393] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.849'. [ 167.495852][ T7394] device sit0 entered promiscuous mode [ 167.833078][ T7405] netlink: 'syz.7.858': attribute type 46 has an invalid length. [ 168.750073][ T7444] netlink: 132 bytes leftover after parsing attributes in process `syz.7.868'. [ 169.385502][ T7466] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.877'. [ 171.109079][ T7510] validate_nla: 1 callbacks suppressed [ 171.109103][ T7510] netlink: 'syz.7.893': attribute type 7 has an invalid length. [ 171.191121][ T7519] netlink: 'syz.6.897': attribute type 21 has an invalid length. [ 171.268697][ T7519] netlink: 132 bytes leftover after parsing attributes in process `syz.6.897'. [ 171.304154][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.897'. [ 171.606121][ T7534] netlink: 'syz.6.903': attribute type 21 has an invalid length. [ 171.724670][ T7534] netlink: 128 bytes leftover after parsing attributes in process `syz.6.903'. [ 171.750035][ T7540] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 171.789071][ T7534] netlink: 3 bytes leftover after parsing attributes in process `syz.6.903'. [ 171.864363][ T7540] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 171.879388][ T7545] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 171.955922][ T7543] netlink: 'syz.4.905': attribute type 3 has an invalid length. [ 171.969823][ T7543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.905'. [ 172.026319][ T7534] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0 [ 172.082858][ T7540] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 172.222586][ T7545] netlink: 'syz.4.905': attribute type 29 has an invalid length. [ 172.696951][ T7571] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.915'. [ 173.358340][ T7589] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 173.366218][ T7589] netlink: 55 bytes leftover after parsing attributes in process `syz.3.921'. [ 173.575825][ T7589] batman_adv: batadv0: Interface deactivated: vlan1 [ 174.233695][ T7589] batman_adv: batadv0: Removing interface: vlan1 [ 175.490876][ T7641] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.936'. [ 175.641046][ T7645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.937'. [ 175.706993][ T7645] batman_adv: batadv0: Adding interface: virt_wifi0 [ 175.757631][ T7645] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.787712][ T4826] Bluetooth: hci3: command 0x0406 tx timeout [ 175.796071][ T4300] Bluetooth: hci4: command 0x0406 tx timeout [ 175.805207][ T7656] FAULT_INJECTION: forcing a failure. [ 175.805207][ T7656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.868840][ T7656] CPU: 0 PID: 7656 Comm: syz.5.940 Not tainted syzkaller #0 [ 175.876264][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.886335][ T7656] Call Trace: [ 175.889639][ T7656] [ 175.892590][ T7656] dump_stack_lvl+0x188/0x250 [ 175.897285][ T7656] ? show_regs_print_info+0x20/0x20 [ 175.902513][ T7656] ? load_image+0x400/0x400 [ 175.907035][ T7656] ? __lock_acquire+0x7d10/0x7d10 [ 175.912090][ T7656] should_fail+0x38c/0x4c0 [ 175.916542][ T7656] strncpy_from_user+0x32/0x360 [ 175.921417][ T7656] bpf_raw_tracepoint_open+0x372/0x840 [ 175.926901][ T7656] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 175.932654][ T7656] ? __might_fault+0xb3/0x110 [ 175.936169][ T7645] batman_adv: batadv0: Interface activated: virt_wifi0 [ 175.937347][ T7656] ? bpf_lsm_bpf+0x5/0x10 [ 175.937373][ T7656] ? security_bpf+0x7a/0xa0 [ 175.953134][ T7656] __sys_bpf+0x4fb/0x6f0 [ 175.957414][ T7656] ? bpf_link_show_fdinfo+0x380/0x380 [ 175.962828][ T7656] ? vtime_user_exit+0x2c8/0x3e0 [ 175.967805][ T7656] __x64_sys_bpf+0x78/0x90 [ 175.972254][ T7656] do_syscall_64+0x4c/0xa0 [ 175.976684][ T7656] ? clear_bhb_loop+0x30/0x80 [ 175.981380][ T7656] ? clear_bhb_loop+0x30/0x80 [ 175.986075][ T7656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.992079][ T7656] RIP: 0033:0x7fb1ca6b6cb9 [ 175.996509][ T7656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.016216][ T7656] RSP: 002b:00007fb1c88f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.024655][ T7656] RAX: ffffffffffffffda RBX: 00007fb1ca932090 RCX: 00007fb1ca6b6cb9 [ 176.032653][ T7656] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 176.040642][ T7656] RBP: 00007fb1c88f1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.048717][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.056702][ T7656] R13: 00007fb1ca932128 R14: 00007fb1ca932090 R15: 00007ffd3f1e6fb8 [ 176.064717][ T7656] [ 178.866447][ T7670] validate_nla: 4 callbacks suppressed [ 178.866466][ T7670] netlink: 'syz.5.948': attribute type 7 has an invalid length. [ 179.061728][ T7675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.949'. [ 179.126376][ T7680] netlink: 'syz.4.950': attribute type 3 has an invalid length. [ 179.214789][ T7680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.950'. [ 179.906004][ T7714] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.963'. [ 179.908823][ T7716] netlink: 'syz.6.964': attribute type 7 has an invalid length. [ 179.955836][ T7711] netlink: 'syz.7.962': attribute type 10 has an invalid length. [ 179.985711][ T7711] bond0: (slave bond_slave_0): Releasing backup interface [ 180.382807][ T7724] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.967'. [ 180.729247][ T7748] netlink: 'syz.3.978': attribute type 17 has an invalid length. [ 182.080635][ T7784] netlink: 'syz.4.993': attribute type 7 has an invalid length. [ 183.423239][ T7848] netlink: 'syz.3.1012': attribute type 3 has an invalid length. [ 183.460868][ T7848] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1012'. [ 183.650361][ T7854] netlink: 'syz.5.1015': attribute type 27 has an invalid length. [ 183.696868][ T7854] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1015'. [ 183.790377][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.893575][ T7860] netlink: 192436 bytes leftover after parsing attributes in process `syz.7.1018'. [ 183.960194][ T7860] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 184.202465][ T7876] device wlan0 entered promiscuous mode [ 184.259990][ T7876] netlink: 'syz.7.1025': attribute type 9 has an invalid length. [ 184.297782][ T7876] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.1025'. [ 184.523129][ T7889] netlink: 'syz.6.1032': attribute type 10 has an invalid length. [ 184.577668][ T7889] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1032'. [ 184.866204][ T7899] can: request_module (can-proto-4) failed. [ 185.947404][ T7947] netlink: 'syz.5.1051': attribute type 9 has an invalid length. [ 186.022596][ T7946] netlink: 'syz.3.1053': attribute type 21 has an invalid length. [ 186.036349][ T7947] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1051'. [ 186.076838][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 186.222831][ T7943] device wlan0 entered promiscuous mode [ 186.435278][ T7964] netlink: 'syz.3.1059': attribute type 7 has an invalid length. [ 186.495203][ T7966] netlink: 'syz.7.1060': attribute type 10 has an invalid length. [ 186.543711][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1060'. [ 186.582581][ T7966] device caif0 entered promiscuous mode [ 187.010054][ T7990] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1071'. [ 187.053517][ T7990] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1071'. [ 187.139021][ T7998] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 187.175778][ T7998] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1071'. [ 187.267818][ T8002] netlink: 'syz.6.1072': attribute type 9 has an invalid length. [ 187.286436][ T8002] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1072'. [ 187.435091][ T8000] device wlan0 entered promiscuous mode [ 187.580966][ T8017] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1078'. [ 187.788549][ T8018] netlink: 'syz.7.1079': attribute type 12 has an invalid length. [ 187.887191][ T8030] netlink: 'syz.3.1084': attribute type 7 has an invalid length. [ 188.761075][ T8058] FAULT_INJECTION: forcing a failure. [ 188.761075][ T8058] name failslab, interval 1, probability 0, space 0, times 0 [ 188.796890][ T8058] CPU: 0 PID: 8058 Comm: syz.7.1096 Not tainted syzkaller #0 [ 188.804313][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.814615][ T8058] Call Trace: [ 188.817911][ T8058] [ 188.820851][ T8058] dump_stack_lvl+0x188/0x250 [ 188.825555][ T8058] ? show_regs_print_info+0x20/0x20 [ 188.830775][ T8058] ? load_image+0x400/0x400 [ 188.835306][ T8058] ? __might_sleep+0xf0/0xf0 [ 188.839919][ T8058] ? __lock_acquire+0x7d10/0x7d10 [ 188.845058][ T8058] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 188.851063][ T8058] should_fail+0x38c/0x4c0 [ 188.855510][ T8058] should_failslab+0x5/0x20 [ 188.860119][ T8058] slab_pre_alloc_hook+0x51/0xc0 [ 188.865070][ T8058] __kmalloc+0x6b/0x330 [ 188.869585][ T8058] ? bpf_test_init+0xf8/0x1b0 [ 188.874290][ T8058] bpf_test_init+0xf8/0x1b0 [ 188.878817][ T8058] bpf_prog_test_run_xdp+0x1cb/0x920 [ 188.884134][ T8058] ? dev_put+0x70/0x70 [ 188.888245][ T8058] ? dev_put+0x70/0x70 [ 188.892331][ T8058] bpf_prog_test_run+0x31e/0x390 [ 188.897292][ T8058] __sys_bpf+0x5a5/0x6f0 [ 188.901659][ T8058] ? bpf_link_show_fdinfo+0x380/0x380 [ 188.907338][ T8058] __x64_sys_bpf+0x78/0x90 [ 188.911867][ T8058] do_syscall_64+0x4c/0xa0 [ 188.916337][ T8058] ? clear_bhb_loop+0x30/0x80 [ 188.921032][ T8058] ? clear_bhb_loop+0x30/0x80 [ 188.925741][ T8058] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.931656][ T8058] RIP: 0033:0x7fdd1879acb9 [ 188.936095][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.955898][ T8058] RSP: 002b:00007fdd169f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.964393][ T8058] RAX: ffffffffffffffda RBX: 00007fdd18a15fa0 RCX: 00007fdd1879acb9 [ 188.972383][ T8058] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 188.980373][ T8058] RBP: 00007fdd169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.988424][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.996426][ T8058] R13: 00007fdd18a16038 R14: 00007fdd18a15fa0 R15: 00007ffe4f36a0a8 [ 189.004467][ T8058] [ 189.526310][ T8069] device wlan0 entered promiscuous mode [ 189.606237][ T8079] __nla_validate_parse: 3 callbacks suppressed [ 189.606258][ T8079] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1103'. [ 190.316815][ T8087] validate_nla: 2 callbacks suppressed [ 190.316840][ T8087] netlink: 'syz.6.1106': attribute type 12 has an invalid length. [ 190.362094][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1106'. [ 190.685760][ T8120] netlink: 160444 bytes leftover after parsing attributes in process `syz.3.1115'. [ 190.737507][ T8119] netlink: 'syz.7.1120': attribute type 7 has an invalid length. [ 190.820632][ T8124] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.1118'. [ 191.402289][ T8139] device wlan0 entered promiscuous mode [ 192.013626][ T8165] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1134'. [ 192.047817][ T8165] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1134'. [ 192.127850][ T8171] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1134'. [ 192.425891][ T8178] delete_channel: no stack [ 192.441409][ T8178] delete_channel: no stack [ 193.405307][ T8228] netlink: 'syz.6.1160': attribute type 3 has an invalid length. [ 193.427322][ T8228] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1160'. [ 193.822594][ T8243] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1166'. [ 194.134846][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.180223][ T8243] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 194.200534][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206988][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260095][ T8243] bond0 (unregistering): Released all slaves [ 194.309523][ T8262] netlink: 'syz.4.1173': attribute type 7 has an invalid length. [ 194.895749][ T8279] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1179'. [ 195.205539][ T8286] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1183'. [ 195.301631][ T8292] Q±6ã×\b‹¡Y­4: renamed from lo [ 195.506430][ T8302] netlink: 'syz.7.1188': attribute type 46 has an invalid length. [ 195.514729][ T8302] netlink: 'syz.7.1188': attribute type 46 has an invalid length. [ 196.076499][ T8320] netlink: 'syz.5.1195': attribute type 7 has an invalid length. [ 197.191952][ T8362] netlink: 'syz.6.1212': attribute type 10 has an invalid length. [ 197.491673][ T8370] netlink: 'syz.3.1217': attribute type 4 has an invalid length. [ 197.568659][ T8370] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1217'. [ 197.624304][ T8368] delete_channel: no stack [ 198.471259][ T8405] netlink: 'syz.6.1234': attribute type 4 has an invalid length. [ 198.545482][ T8405] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1234'. [ 198.631294][ T8404] delete_channel: no stack [ 199.154782][ T8424] netlink: 'syz.5.1240': attribute type 2 has an invalid length. [ 199.200035][ T8424] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1240'. [ 199.547419][ T8423] delete_channel: no stack [ 199.557775][ T8423] delete_channel: no stack [ 199.696558][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1246'. [ 199.744988][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.924933][ T8442] device bridge_slave_0 left promiscuous mode [ 199.952767][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.246355][ T8456] netlink: 'syz.7.1249': attribute type 4 has an invalid length. [ 200.296782][ T8456] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1249'. [ 200.475154][ T8452] delete_channel: no stack [ 201.271828][ T8500] FAULT_INJECTION: forcing a failure. [ 201.271828][ T8500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.300048][ T8500] CPU: 0 PID: 8500 Comm: syz.6.1267 Not tainted syzkaller #0 [ 201.307477][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.317723][ T8500] Call Trace: [ 201.321020][ T8500] [ 201.323959][ T8500] dump_stack_lvl+0x188/0x250 [ 201.328664][ T8500] ? show_regs_print_info+0x20/0x20 [ 201.333896][ T8500] ? load_image+0x400/0x400 [ 201.338416][ T8500] ? __lock_acquire+0x7d10/0x7d10 [ 201.343891][ T8500] should_fail+0x38c/0x4c0 [ 201.348334][ T8500] _copy_from_user+0x2e/0x170 [ 201.353038][ T8500] bpf_test_init+0x136/0x1b0 [ 201.357654][ T8500] bpf_prog_test_run_skb+0x181/0x1180 [ 201.363049][ T8500] ? __fget_files+0x40f/0x480 [ 201.367762][ T8500] ? cpu_online+0x60/0x60 [ 201.372107][ T8500] bpf_prog_test_run+0x31e/0x390 [ 201.377155][ T8500] __sys_bpf+0x5a5/0x6f0 [ 201.381431][ T8500] ? bpf_link_show_fdinfo+0x380/0x380 [ 201.386928][ T8500] ? vtime_user_exit+0x2c8/0x3e0 [ 201.391905][ T8500] __x64_sys_bpf+0x78/0x90 [ 201.396347][ T8500] do_syscall_64+0x4c/0xa0 [ 201.400783][ T8500] ? clear_bhb_loop+0x30/0x80 [ 201.405485][ T8500] ? clear_bhb_loop+0x30/0x80 [ 201.410183][ T8500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.416111][ T8500] RIP: 0033:0x7faa85efbcb9 [ 201.420551][ T8500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.440186][ T8500] RSP: 002b:00007faa84157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.448634][ T8500] RAX: ffffffffffffffda RBX: 00007faa86176fa0 RCX: 00007faa85efbcb9 [ 201.456717][ T8500] RDX: 0000000000000015 RSI: 0000200000000080 RDI: 000000000000000a [ 201.464804][ T8500] RBP: 00007faa84157090 R08: 0000000000000000 R09: 0000000000000000 [ 201.472790][ T8500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.480775][ T8500] R13: 00007faa86177038 R14: 00007faa86176fa0 R15: 00007fffd2421dd8 [ 201.488879][ T8500] [ 201.913366][ T8519] netlink: 'syz.4.1277': attribute type 7 has an invalid length. [ 202.361622][ T8538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.423206][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.475259][ T8538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.496394][ T8538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.569201][ T8538] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 202.591770][ T8538] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 202.684124][ T8538] bridge0: port 4(batadv0) entered disabled state [ 202.733201][ T8538] bridge0: port 4(batadv0) entered disabled state [ 202.914267][ T8537] netlink: 'syz.3.1285': attribute type 29 has an invalid length. [ 203.504454][ T8571] netlink: 'syz.5.1299': attribute type 7 has an invalid length. [ 203.531370][ T8572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1298'. [ 203.611431][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.745612][ T8572] device bridge_slave_0 left promiscuous mode [ 203.764452][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.778896][ T8627] FAULT_INJECTION: forcing a failure. [ 204.778896][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.783172][ T8623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1318'. [ 204.810795][ T8627] CPU: 0 PID: 8627 Comm: syz.4.1320 Not tainted syzkaller #0 [ 204.818665][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.828891][ T8627] Call Trace: [ 204.832273][ T8627] [ 204.835217][ T8627] dump_stack_lvl+0x188/0x250 [ 204.839915][ T8627] ? show_regs_print_info+0x20/0x20 [ 204.845155][ T8627] ? load_image+0x400/0x400 [ 204.849692][ T8627] ? __lock_acquire+0x7d10/0x7d10 [ 204.854749][ T8627] should_fail+0x38c/0x4c0 [ 204.859207][ T8627] _copy_from_user+0x2e/0x170 [ 204.863919][ T8627] __copy_msghdr_from_user+0xc9/0x630 [ 204.869316][ T8627] ? verify_lock_unused+0x140/0x140 [ 204.874543][ T8627] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 204.879875][ T8627] ___sys_sendmsg+0x19a/0x2e0 [ 204.884584][ T8627] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.889382][ T8627] ? vfs_write+0x8b2/0xd60 [ 204.893841][ T8627] __se_sys_sendmsg+0x1af/0x290 [ 204.898732][ T8627] ? __x64_sys_sendmsg+0x80/0x80 [ 204.903697][ T8627] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 204.909729][ T8627] ? lockdep_hardirqs_on+0x94/0x140 [ 204.914963][ T8627] do_syscall_64+0x4c/0xa0 [ 204.919498][ T8627] ? clear_bhb_loop+0x30/0x80 [ 204.924188][ T8627] ? clear_bhb_loop+0x30/0x80 [ 204.928888][ T8627] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.934784][ T8627] RIP: 0033:0x7f52cdf46cb9 [ 204.939209][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.958847][ T8627] RSP: 002b:00007f52cc1a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.967287][ T8627] RAX: ffffffffffffffda RBX: 00007f52ce1c1fa0 RCX: 00007f52cdf46cb9 [ 204.975276][ T8627] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 204.983252][ T8627] RBP: 00007f52cc1a2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.991218][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.999265][ T8627] R13: 00007f52ce1c2038 R14: 00007f52ce1c1fa0 R15: 00007ffc3510e408 [ 205.007240][ T8627] [ 205.034852][ T8632] netlink: 'syz.7.1323': attribute type 7 has an invalid length. [ 205.063869][ T8634] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1321'. [ 205.494956][ T8650] netlink: 'syz.4.1330': attribute type 21 has an invalid length. [ 205.595437][ T8659] netlink: 'syz.5.1334': attribute type 7 has an invalid length. [ 205.603395][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 205.663206][ T8659] netlink: 'syz.5.1334': attribute type 1 has an invalid length. [ 205.692062][ T8659] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1334'. [ 205.717240][ T8666] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1336'. [ 205.860397][ T8668] netlink: 'syz.5.1337': attribute type 21 has an invalid length. [ 206.183721][ T8690] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1348'. [ 206.422663][ T8700] netlink: 'syz.4.1350': attribute type 7 has an invalid length. [ 206.656964][ T8708] tap0: tun_chr_ioctl cmd 1074025675 [ 206.683062][ T8708] tap0: persist enabled [ 207.286060][ T8730] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1362'. [ 207.425982][ T8738] netlink: 'syz.3.1366': attribute type 7 has an invalid length. [ 207.821535][ T8755] netlink: 'syz.5.1372': attribute type 21 has an invalid length. [ 207.868824][ T8755] netlink: 'syz.5.1372': attribute type 1 has an invalid length. [ 210.568129][ T8764] netlink: 'syz.4.1375': attribute type 7 has an invalid length. [ 210.765010][ T8778] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.1381'. [ 210.827920][ T8778] openvswitch: netlink: IP tunnel dst address not specified [ 210.996217][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.015604][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.055962][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.064380][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.092919][ T8787] batman_adv: batadv0: Removing interface: netdevsim0 [ 211.129426][ T8787] bridge0: port 1(batadv0) entered disabled state [ 211.150803][ T8787] bridge0: port 1(batadv0) entered disabled state [ 211.164477][ T8791] netlink: 'syz.5.1387': attribute type 7 has an invalid length. [ 211.627852][ T4300] Bluetooth: hci1: command 0x0406 tx timeout [ 211.634249][ T4300] Bluetooth: hci2: command 0x0406 tx timeout [ 211.644040][ T4300] Bluetooth: hci0: command 0x0406 tx timeout [ 214.435946][ T8813] netlink: 'syz.3.1394': attribute type 7 has an invalid length. [ 214.625632][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1401'. [ 214.797239][ T8821] netlink: 'syz.7.1401': attribute type 39 has an invalid length. [ 215.004774][ T8836] netlink: 'syz.6.1405': attribute type 7 has an invalid length. [ 215.061901][ T8840] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1407'. [ 215.082596][ T8840] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 215.321353][ T8848] netlink: 'syz.4.1410': attribute type 46 has an invalid length. [ 215.330378][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1410'. [ 215.712036][ T8852] netlink: 'syz.5.1411': attribute type 10 has an invalid length. [ 215.914560][ T8865] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1417'. [ 215.941895][ T8873] netlink: 192436 bytes leftover after parsing attributes in process `syz.7.1420'. [ 216.038415][ T8873] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 216.050320][ T8871] FAULT_INJECTION: forcing a failure. [ 216.050320][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 216.141957][ T8871] CPU: 0 PID: 8871 Comm: syz.5.1421 Not tainted syzkaller #0 [ 216.149393][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.159470][ T8871] Call Trace: [ 216.162764][ T8871] [ 216.165717][ T8871] dump_stack_lvl+0x188/0x250 [ 216.170422][ T8871] ? show_regs_print_info+0x20/0x20 [ 216.175729][ T8871] ? load_image+0x400/0x400 [ 216.180289][ T8871] ? __might_sleep+0xf0/0xf0 [ 216.184903][ T8871] ? __lock_acquire+0x7d10/0x7d10 [ 216.189947][ T8871] should_fail+0x38c/0x4c0 [ 216.194404][ T8871] should_failslab+0x5/0x20 [ 216.198919][ T8871] slab_pre_alloc_hook+0x51/0xc0 [ 216.203876][ T8871] ? __alloc_file+0x25/0x240 [ 216.208475][ T8871] kmem_cache_alloc+0x3d/0x290 [ 216.213268][ T8871] __alloc_file+0x25/0x240 [ 216.218006][ T8871] alloc_empty_file+0x90/0x180 [ 216.222794][ T8871] alloc_file+0x5b/0x4f0 [ 216.227040][ T8871] ? do_raw_spin_unlock+0x11d/0x230 [ 216.232247][ T8871] alloc_file_pseudo+0x180/0x200 [ 216.237198][ T8871] ? alloc_empty_file_noaccount+0x80/0x80 [ 216.242983][ T8871] ? __lock_acquire+0x7d10/0x7d10 [ 216.248025][ T8871] ? __local_bh_enable_ip+0x136/0x1c0 [ 216.253416][ T8871] ? _local_bh_enable+0xa0/0xa0 [ 216.258280][ T8871] anon_inode_getfile+0xc1/0x1a0 [ 216.263330][ T8871] bpf_link_prime+0x125/0x270 [ 216.268020][ T8871] bpf_raw_tracepoint_open+0x4f5/0x840 [ 216.273488][ T8871] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 216.279215][ T8871] ? __might_fault+0xb3/0x110 [ 216.283985][ T8871] ? bpf_lsm_bpf+0x5/0x10 [ 216.288302][ T8871] ? security_bpf+0x7a/0xa0 [ 216.292797][ T8871] __sys_bpf+0x4fb/0x6f0 [ 216.297026][ T8871] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 216.303350][ T8871] ? bpf_link_show_fdinfo+0x380/0x380 [ 216.308705][ T8871] ? rcu_nmi_exit+0x6f/0xf0 [ 216.313209][ T8871] ? vtime_user_exit+0x2c8/0x3e0 [ 216.318228][ T8871] __x64_sys_bpf+0x78/0x90 [ 216.322636][ T8871] do_syscall_64+0x4c/0xa0 [ 216.327035][ T8871] ? clear_bhb_loop+0x30/0x80 [ 216.331790][ T8871] ? clear_bhb_loop+0x30/0x80 [ 216.336452][ T8871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.342327][ T8871] RIP: 0033:0x7fb1ca6b6cb9 [ 216.346731][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.366410][ T8871] RSP: 002b:00007fb1c8912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.374816][ T8871] RAX: ffffffffffffffda RBX: 00007fb1ca931fa0 RCX: 00007fb1ca6b6cb9 [ 216.382772][ T8871] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000011 [ 216.390814][ T8871] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 216.398854][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.406806][ T8871] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 216.414783][ T8871] [ 216.436632][ T8880] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1423'. [ 216.516532][ T8883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1426'. [ 216.586011][ T8887] netlink: 'syz.6.1424': attribute type 7 has an invalid length. [ 216.615562][ T8883] netlink: 'syz.3.1426': attribute type 39 has an invalid length. [ 216.700675][ T8890] netlink: 'syz.7.1428': attribute type 16 has an invalid length. [ 216.731140][ T8890] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1428'. [ 217.084307][ T8909] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1434'. [ 217.266633][ T8916] FAULT_INJECTION: forcing a failure. [ 217.266633][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.288141][ T8916] CPU: 0 PID: 8916 Comm: syz.5.1436 Not tainted syzkaller #0 [ 217.295655][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.305756][ T8916] Call Trace: [ 217.309063][ T8916] [ 217.312188][ T8916] dump_stack_lvl+0x188/0x250 [ 217.316880][ T8916] ? show_regs_print_info+0x20/0x20 [ 217.322090][ T8916] ? load_image+0x400/0x400 [ 217.326606][ T8916] ? __kasan_kmalloc+0xcc/0xf0 [ 217.331380][ T8916] ? __lock_acquire+0x7d10/0x7d10 [ 217.336496][ T8916] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.342666][ T8916] should_fail+0x38c/0x4c0 [ 217.347094][ T8916] _copy_from_iter+0x22e/0x1170 [ 217.351946][ T8916] ? __lock_acquire+0x7d10/0x7d10 [ 217.356982][ T8916] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 217.362364][ T8916] ? __virt_addr_valid+0x3c6/0x470 [ 217.367474][ T8916] ? __phys_addr_symbol+0x2b/0x70 [ 217.372636][ T8916] ? __check_object_size+0x30c/0x410 [ 217.377927][ T8916] kernfs_fop_write_iter+0x1a4/0x4c0 [ 217.383297][ T8916] ? iov_iter_init+0xb4/0x170 [ 217.387978][ T8916] vfs_write+0x745/0xd60 [ 217.392225][ T8916] ? file_end_write+0x250/0x250 [ 217.397076][ T8916] ? __fget_files+0x40f/0x480 [ 217.401752][ T8916] ? mutex_lock_nested+0x17/0x20 [ 217.406729][ T8916] ? __fdget_pos+0x2bf/0x370 [ 217.411397][ T8916] ? ksys_write+0x71/0x260 [ 217.415872][ T8916] ksys_write+0x152/0x260 [ 217.420201][ T8916] ? __ia32_sys_read+0x80/0x80 [ 217.424962][ T8916] ? lockdep_hardirqs_on+0x94/0x140 [ 217.430175][ T8916] do_syscall_64+0x4c/0xa0 [ 217.434581][ T8916] ? clear_bhb_loop+0x30/0x80 [ 217.439246][ T8916] ? clear_bhb_loop+0x30/0x80 [ 217.444089][ T8916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.449991][ T8916] RIP: 0033:0x7fb1ca6b6cb9 [ 217.454405][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.474032][ T8916] RSP: 002b:00007fb1c8912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.482468][ T8916] RAX: ffffffffffffffda RBX: 00007fb1ca931fa0 RCX: 00007fb1ca6b6cb9 [ 217.490436][ T8916] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000004 [ 217.498416][ T8916] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 217.506382][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.514353][ T8916] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 217.522340][ T8916] [ 217.950577][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 217.985502][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 218.038391][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 218.128519][ T8946] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1449'. [ 218.317754][ T8952] netlink: 'syz.4.1450': attribute type 39 has an invalid length. [ 218.427297][ T8962] netlink: 'syz.6.1455': attribute type 3 has an invalid length. [ 219.676151][ T8993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.698218][ T8993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.832834][ T8993] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 219.840926][ T8993] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 220.083113][ T9017] validate_nla: 3 callbacks suppressed [ 220.083131][ T9017] netlink: 'syz.3.1476': attribute type 7 has an invalid length. [ 220.364625][ T9033] netlink: 'syz.4.1483': attribute type 3 has an invalid length. [ 220.915428][ T9053] netlink: 'syz.4.1490': attribute type 7 has an invalid length. [ 220.997352][ T9059] delete_channel: no stack [ 221.015854][ T9059] delete_channel: no stack [ 221.462007][ T9073] __nla_validate_parse: 5 callbacks suppressed [ 221.462027][ T9073] netlink: 195280 bytes leftover after parsing attributes in process `syz.7.1499'. [ 221.482238][ T9073] netlink: zone id is out of range [ 221.487390][ T9073] netlink: zone id is out of range [ 221.493219][ T9073] netlink: zone id is out of range [ 221.501133][ T9073] netlink: zone id is out of range [ 221.507258][ T9073] netlink: zone id is out of range [ 221.514704][ T9073] netlink: zone id is out of range [ 221.552826][ T9073] netlink: zone id is out of range [ 221.587752][ T9073] netlink: zone id is out of range [ 221.613642][ T9073] netlink: zone id is out of range [ 221.635298][ T9073] netlink: zone id is out of range [ 221.717122][ T9068] tun0: tun_chr_ioctl cmd 1074025677 [ 221.775094][ T9068] tun0: linktype set to 768 [ 221.925766][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1504'. [ 221.958758][ T9091] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 222.065019][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.098523][ T9091] device bond0 entered promiscuous mode [ 222.125205][ T9091] device bond_slave_0 entered promiscuous mode [ 222.158145][ T9091] device bond_slave_1 entered promiscuous mode [ 222.227041][ T9091] team0: Port device bond0 added [ 222.371372][ T9104] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1511'. [ 222.981848][ T9135] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1525'. [ 223.043995][ T9137] netlink: 'syz.5.1526': attribute type 10 has an invalid length. [ 223.183643][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.210819][ T9137] device bond0 entered promiscuous mode [ 223.217190][ T9137] device bond_slave_0 entered promiscuous mode [ 223.232844][ T9137] device bond_slave_1 entered promiscuous mode [ 223.271861][ T9137] team0: Port device bond0 added [ 223.285322][ T9135] netlink: 'syz.6.1525': attribute type 39 has an invalid length. [ 223.368349][ T9145] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1528'. [ 223.882700][ T9176] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 223.978920][ T9179] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1541'. [ 224.246771][ T9185] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1544'. [ 224.311250][ T9185] netlink: 'syz.7.1544': attribute type 39 has an invalid length. [ 224.713834][ T9217] netlink: 'syz.6.1558': attribute type 10 has an invalid length. [ 224.955546][ T9227] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1563'. [ 224.970230][ T9227] netlink: 'syz.7.1563': attribute type 39 has an invalid length. [ 225.701968][ T9266] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1579'. [ 225.711905][ T9265] netlink: 'syz.7.1577': attribute type 21 has an invalid length. [ 225.726087][ T9265] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1577'. [ 225.737285][ T9265] netlink: 'syz.7.1577': attribute type 5 has an invalid length. [ 225.841848][ T9266] netlink: 'syz.6.1579': attribute type 39 has an invalid length. [ 226.047702][ T9270] delete_channel: no stack [ 226.874363][ T9312] tun0: tun_chr_ioctl cmd 1074025677 [ 226.879989][ T9312] tun0: linktype set to 768 [ 227.113218][ T9343] __nla_validate_parse: 1 callbacks suppressed [ 227.113340][ T9343] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1610'. [ 227.182879][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1611'. [ 227.523628][ T9359] netlink: 'syz.6.1614': attribute type 13 has an invalid length. [ 227.597873][ T9359] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1614'. [ 227.656517][ T9364] delete_channel: no stack [ 227.671903][ T9364] delete_channel: no stack [ 227.680122][ T9359] erspan0: refused to change device tx_queue_len [ 227.707247][ T9359] net_ratelimit: 178 callbacks suppressed [ 227.707265][ T9359] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 228.497185][ T9384] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1626'. [ 228.628028][ T9381] delete_channel: no stack [ 228.810639][ T9392] delete_channel: no stack [ 228.825632][ T9392] delete_channel: no stack [ 228.925760][ T9399] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 229.069500][ T9399] device geneve1 entered promiscuous mode [ 229.129290][ T9399] team0: Port device geneve1 added [ 229.361238][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1638'. [ 229.578056][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1640'. [ 229.613349][ T9416] netlink: 'syz.3.1638': attribute type 39 has an invalid length. [ 229.673347][ T9424] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1641'. [ 229.686334][ T9429] FAULT_INJECTION: forcing a failure. [ 229.686334][ T9429] name failslab, interval 1, probability 0, space 0, times 0 [ 229.726570][ T9429] CPU: 0 PID: 9429 Comm: syz.6.1642 Not tainted syzkaller #0 [ 229.733999][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.744072][ T9429] Call Trace: [ 229.747366][ T9429] [ 229.750311][ T9429] dump_stack_lvl+0x188/0x250 [ 229.755008][ T9429] ? stack_trace_snprint+0xf0/0xf0 [ 229.760144][ T9429] ? show_regs_print_info+0x20/0x20 [ 229.765360][ T9429] ? load_image+0x400/0x400 [ 229.769894][ T9429] ? __kasan_kmalloc+0xcc/0xf0 [ 229.774683][ T9429] ? __alloc_skb+0x22c/0x750 [ 229.779363][ T9429] ? netlink_dump+0x1e8/0xcf0 [ 229.784163][ T9429] ? __netlink_dump_start+0x523/0x700 [ 229.789560][ T9429] should_fail+0x38c/0x4c0 [ 229.793994][ T9429] should_failslab+0x5/0x20 [ 229.798594][ T9429] slab_pre_alloc_hook+0x51/0xc0 [ 229.803551][ T9429] ? skb_clone+0x1bd/0x350 [ 229.807973][ T9429] kmem_cache_alloc+0x3d/0x290 [ 229.813080][ T9429] skb_clone+0x1bd/0x350 [ 229.817398][ T9429] __netlink_deliver_tap+0x3cd/0x7c0 [ 229.822679][ T9429] netlink_deliver_tap+0x16c/0x180 [ 229.827795][ T9429] __netlink_sendskb+0x4b/0x90 [ 229.832543][ T9429] netlink_dump+0x945/0xcf0 [ 229.837044][ T9429] ? netlink_lookup+0x1d0/0x1d0 [ 229.842172][ T9429] __netlink_dump_start+0x523/0x700 [ 229.847453][ T9429] unix_diag_handler_dump+0x1d5/0x8d0 [ 229.852833][ T9429] ? __mutex_trylock_common+0x155/0x260 [ 229.858476][ T9429] ? mutex_lock_io_nested+0x60/0x60 [ 229.863660][ T9429] ? rcu_lock_release+0x20/0x20 [ 229.868578][ T9429] ? unix_diag_handler_dump+0x8d0/0x8d0 [ 229.874138][ T9429] ? rcu_lock_release+0x20/0x20 [ 229.878968][ T9429] sock_diag_rcv_msg+0x164/0x3e0 [ 229.884625][ T9429] netlink_rcv_skb+0x1f5/0x440 [ 229.889391][ T9429] ? sock_diag_bind+0xa0/0xa0 [ 229.894138][ T9429] ? netlink_ack+0xb50/0xb50 [ 229.899151][ T9429] ? __lock_acquire+0x7d10/0x7d10 [ 229.904171][ T9429] sock_diag_rcv+0x26/0x40 [ 229.909123][ T9429] netlink_unicast+0x774/0x920 [ 229.913880][ T9429] netlink_sendmsg+0x8ba/0xbe0 [ 229.918676][ T9429] ? netlink_getsockopt+0x570/0x570 [ 229.923950][ T9429] ? aa_sock_msg_perm+0x94/0x150 [ 229.928891][ T9429] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 229.934165][ T9429] ? security_socket_sendmsg+0x7c/0xa0 [ 229.939607][ T9429] ? netlink_getsockopt+0x570/0x570 [ 229.944813][ T9429] ____sys_sendmsg+0x5b7/0x8f0 [ 229.949606][ T9429] ? __sys_sendmsg_sock+0x30/0x30 [ 229.954636][ T9429] ? import_iovec+0x6f/0xa0 [ 229.959143][ T9429] ___sys_sendmsg+0x236/0x2e0 [ 229.964000][ T9429] ? __sys_sendmsg+0x2a0/0x2a0 [ 229.968781][ T9429] __se_sys_sendmsg+0x1af/0x290 [ 229.973623][ T9429] ? __x64_sys_sendmsg+0x80/0x80 [ 229.978579][ T9429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 229.984599][ T9429] ? lockdep_hardirqs_on+0x94/0x140 [ 229.989817][ T9429] do_syscall_64+0x4c/0xa0 [ 229.994218][ T9429] ? clear_bhb_loop+0x30/0x80 [ 229.998881][ T9429] ? clear_bhb_loop+0x30/0x80 [ 230.003546][ T9429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.009512][ T9429] RIP: 0033:0x7faa85efbcb9 [ 230.014005][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.033779][ T9429] RSP: 002b:00007faa84157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.042214][ T9429] RAX: ffffffffffffffda RBX: 00007faa86176fa0 RCX: 00007faa85efbcb9 [ 230.050187][ T9429] RDX: 0000000000000000 RSI: 00002000000039c0 RDI: 0000000000000007 [ 230.058447][ T9429] RBP: 00007faa84157090 R08: 0000000000000000 R09: 0000000000000000 [ 230.066425][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.075541][ T9429] R13: 00007faa86177038 R14: 00007faa86176fa0 R15: 00007fffd2421dd8 [ 230.084591][ T9429] [ 230.227114][ T9443] delete_channel: no stack [ 230.241429][ T9443] delete_channel: no stack [ 230.551383][ T9460] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1655'. [ 230.664528][ T9463] netlink: 'syz.6.1656': attribute type 10 has an invalid length. [ 230.792107][ T9474] netlink: 'syz.3.1661': attribute type 11 has an invalid length. [ 230.888801][ T9478] delete_channel: no stack [ 230.903000][ T9478] delete_channel: no stack [ 231.130852][ T9490] netlink: 'syz.7.1666': attribute type 4 has an invalid length. [ 231.187840][ T9490] netlink: 'syz.7.1666': attribute type 1 has an invalid length. [ 231.212966][ T9490] netlink: 181400 bytes leftover after parsing attributes in process `syz.7.1666'. [ 231.261746][ T9498] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1669'. [ 231.320645][ T9490] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.827225][ T9519] delete_channel: no stack [ 231.862256][ T9519] delete_channel: no stack [ 232.131263][ T9529] netlink: 'syz.7.1683': attribute type 10 has an invalid length. [ 232.224018][ T9533] netlink: 'syz.7.1683': attribute type 10 has an invalid length. [ 232.370513][ T9533] device wlan1 entered promiscuous mode [ 232.390929][ T9533] team0: Port device wlan1 added [ 232.471491][ T9541] __nla_validate_parse: 1 callbacks suppressed [ 232.471511][ T9541] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1696'. [ 232.680046][ T9547] netlink: 'syz.4.1688': attribute type 21 has an invalid length. [ 232.706151][ T9547] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1688'. [ 232.727160][ T9554] delete_channel: no stack [ 232.742121][ T9547] netlink: 'syz.4.1688': attribute type 4 has an invalid length. [ 232.763981][ T9554] delete_channel: no stack [ 233.261080][ T9574] netlink: 'syz.6.1699': attribute type 10 has an invalid length. [ 233.375815][ T9578] netlink: 143108 bytes leftover after parsing attributes in process `syz.6.1699'. [ 233.385790][ T9578] netlink: 'syz.6.1699': attribute type 1 has an invalid length. [ 233.546764][ T9585] delete_channel: no stack [ 233.565812][ T9583] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1702'. [ 233.589514][ T9585] delete_channel: no stack [ 233.874425][ T9596] netlink: 'syz.7.1708': attribute type 21 has an invalid length. [ 233.884812][ T9596] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1708'. [ 236.024986][ T9624] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1717'. [ 236.044919][ T9625] delete_channel: no stack [ 236.071385][ T9625] delete_channel: no stack [ 236.098599][ T9630] validate_nla: 1 callbacks suppressed [ 236.098617][ T9630] netlink: 'syz.7.1720': attribute type 21 has an invalid length. [ 236.147755][ T9630] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1720'. [ 236.211252][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1720'. [ 236.700638][ T9649] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 236.780460][ T9645] netlink: 'syz.3.1724': attribute type 21 has an invalid length. [ 236.792319][ T9645] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1724'. [ 236.803925][ T9645] netlink: 'syz.3.1724': attribute type 4 has an invalid length. [ 239.760729][ T9668] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1731'. [ 239.780564][ T9662] delete_channel: no stack [ 239.802155][ T9662] delete_channel: no stack [ 239.843190][ T9668] netlink: 'syz.6.1731': attribute type 39 has an invalid length. [ 240.523410][ T9695] netlink: 'syz.5.1741': attribute type 21 has an invalid length. [ 240.560329][ T9695] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1741'. [ 240.603415][ T9695] netlink: 'syz.5.1741': attribute type 4 has an invalid length. [ 243.497699][ T9705] netlink: 'syz.4.1746': attribute type 20 has an invalid length. [ 243.597548][ T9708] delete_channel: no stack [ 243.621542][ T9708] delete_channel: no stack [ 243.725234][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1750'. [ 243.743698][ T9720] netlink: 'syz.5.1751': attribute type 21 has an invalid length. [ 243.752858][ T9720] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1751'. [ 243.764672][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1751'. [ 243.800694][ T9718] netlink: 'syz.3.1750': attribute type 39 has an invalid length. [ 243.907848][ T9728] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1755'. [ 246.979369][ T9754] delete_channel: no stack [ 246.983937][ T9754] delete_channel: no stack [ 247.055464][ T9757] netlink: 'syz.3.1764': attribute type 10 has an invalid length. [ 247.112889][ T9757] bridge0: port 3(team0) entered disabled state [ 247.119754][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.188374][ T9757] team0: Device bridge0 is already an upper device of the team interface [ 247.203799][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1765'. [ 247.258774][ T9767] netlink: 'syz.5.1765': attribute type 39 has an invalid length. [ 247.513721][ T9776] netlink: 'syz.7.1771': attribute type 41 has an invalid length. [ 247.538077][ T9776] netlink: 'syz.7.1771': attribute type 4 has an invalid length. [ 247.546306][ T9776] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1771'. [ 247.661317][ T9776] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 247.779632][ T9788] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1775'. [ 247.924012][ T9795] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1777'. [ 248.409329][ T9808] netlink: 'syz.7.1781': attribute type 10 has an invalid length. [ 249.216296][ T9831] delete_channel: no stack [ 249.246261][ T9831] delete_channel: no stack [ 249.844026][ T9855] netlink: 'syz.5.1798': attribute type 10 has an invalid length. [ 249.872771][ T9855] bridge0: port 3(team0) entered disabled state [ 249.879533][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.931964][ T9855] team0: Device bridge0 is already an upper device of the team interface [ 250.441542][ T9884] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1814'. [ 250.483047][ T9884] netlink: 'syz.7.1814': attribute type 39 has an invalid length. [ 251.148829][ T9921] netlink: 'syz.6.1826': attribute type 29 has an invalid length. [ 251.381034][ T9921] netlink: 'syz.6.1826': attribute type 29 has an invalid length. [ 251.480591][ T9930] delete_channel: no stack [ 251.485163][ T9930] delete_channel: no stack [ 251.599517][ T9938] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.1834'. [ 251.987879][ T9951] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1839'. [ 252.271399][ T9967] netlink: 'syz.4.1843': attribute type 21 has an invalid length. [ 252.308336][ T9967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1843'. [ 252.338984][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1843'. [ 252.571918][ T9982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1850'. [ 252.662081][ T9982] netlink: 'syz.4.1850': attribute type 39 has an invalid length. [ 253.110702][T10008] netlink: 'syz.6.1861': attribute type 2 has an invalid length. [ 253.125053][T10008] netlink: 12374 bytes leftover after parsing attributes in process `syz.6.1861'. [ 253.838360][T10048] netlink: 'syz.5.1877': attribute type 3 has an invalid length. [ 253.863029][T10048] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1877'. [ 254.062903][T10057] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.1881'. [ 254.851580][T10095] delete_channel: no stack [ 254.878056][T10095] delete_channel: no stack [ 255.106350][T10112] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1903'. [ 255.224618][T10114] netlink: 'syz.7.1904': attribute type 10 has an invalid length. [ 255.243515][T10114] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1904'. [ 255.640070][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.646517][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.242669][T10156] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1919'. [ 256.335119][T10156] netlink: 'syz.7.1919': attribute type 39 has an invalid length. [ 257.041674][T10189] delete_channel: no stack [ 257.056573][T10189] delete_channel: no stack [ 257.472664][T10171] delete_channel: no stack [ 257.657188][T10210] netlink: 'syz.4.1940': attribute type 3 has an invalid length. [ 257.676958][T10210] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1940'. [ 257.854977][T10222] delete_channel: no stack [ 257.881570][T10222] delete_channel: no stack [ 257.926740][T10224] delete_channel: no stack [ 258.222401][T10240] netlink: 'syz.6.1950': attribute type 10 has an invalid length. [ 258.232612][T10240] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1950'. [ 258.373467][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1956'. [ 258.433052][T10249] netlink: 'syz.6.1956': attribute type 39 has an invalid length. [ 258.513624][T10258] netlink: 'syz.7.1957': attribute type 3 has an invalid length. [ 258.525131][T10260] delete_channel: no stack [ 258.529868][T10258] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.1957'. [ 258.531137][T10260] delete_channel: no stack [ 258.943735][T10277] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1975'. [ 259.100604][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1971'. [ 259.116918][T10289] netlink: 'syz.4.1971': attribute type 39 has an invalid length. [ 259.192324][T10292] netlink: 'syz.3.1973': attribute type 3 has an invalid length. [ 259.236102][T10292] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1973'. [ 259.432077][T10313] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1981'. [ 259.538864][T10319] netlink: 'syz.7.1984': attribute type 21 has an invalid length. [ 259.562870][T10319] netlink: 'syz.7.1984': attribute type 6 has an invalid length. [ 259.574907][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1984'. [ 259.585607][T10317] IPv6: Can't replace route, no match found [ 259.606006][T10317] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.681455][T10325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1987'. [ 261.599290][T10378] tc_dump_action: action bad kind [ 262.117927][T10401] delete_channel: no stack [ 262.122566][T10401] delete_channel: no stack [ 262.229022][T10403] validate_nla: 3 callbacks suppressed [ 262.229042][T10403] netlink: 'syz.6.2021': attribute type 9 has an invalid length. [ 262.713932][T10423] __nla_validate_parse: 7 callbacks suppressed [ 262.713970][T10423] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2029'. [ 263.009193][T10436] netlink: 192436 bytes leftover after parsing attributes in process `syz.6.2034'. [ 263.018765][T10436] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 263.569318][T10457] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2042'. [ 263.792010][T10462] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2043'. [ 263.922620][T10462] netlink: 'syz.7.2043': attribute type 39 has an invalid length. [ 264.048485][T10439] delete_channel: no stack [ 264.076760][T10439] delete_channel: no stack [ 264.503570][T10487] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2054'. [ 264.629109][T10494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2057'. [ 264.663765][T10494] netlink: 'syz.3.2057': attribute type 39 has an invalid length. [ 264.748121][T10500] netlink: 'syz.7.2059': attribute type 10 has an invalid length. [ 264.786657][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2059'. [ 264.817283][T10500] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.832699][T10502] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2061'. [ 264.851189][T10503] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2059'. [ 264.853925][T10505] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.2062'. [ 264.871235][T10500] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 264.888089][T10505] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 265.010181][T10513] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 265.410817][T10534] netlink: 'syz.4.2072': attribute type 39 has an invalid length. [ 266.003182][T10573] FAULT_INJECTION: forcing a failure. [ 266.003182][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 266.017218][T10573] CPU: 0 PID: 10573 Comm: syz.5.2090 Not tainted syzkaller #0 [ 266.024724][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.034810][T10573] Call Trace: [ 266.038110][T10573] [ 266.041060][T10573] dump_stack_lvl+0x188/0x250 [ 266.045769][T10573] ? show_regs_print_info+0x20/0x20 [ 266.050993][T10573] ? load_image+0x400/0x400 [ 266.055621][T10573] ? __might_sleep+0xf0/0xf0 [ 266.060249][T10573] ? __lock_acquire+0x7d10/0x7d10 [ 266.065317][T10573] should_fail+0x38c/0x4c0 [ 266.069817][T10573] should_failslab+0x5/0x20 [ 266.074341][T10573] slab_pre_alloc_hook+0x51/0xc0 [ 266.079291][T10573] kmem_cache_alloc_node_trace+0x4a/0x300 [ 266.085009][T10573] ? __get_vm_area_node+0x119/0x2d0 [ 266.090212][T10573] __get_vm_area_node+0x119/0x2d0 [ 266.095251][T10573] __vmalloc_node_range+0xef/0x8b0 [ 266.100440][T10573] ? sock_hash_alloc+0x2bc/0x530 [ 266.105475][T10573] bpf_map_area_alloc+0xd4/0xe0 [ 266.110356][T10573] ? sock_hash_alloc+0x2bc/0x530 [ 266.115298][T10573] sock_hash_alloc+0x2bc/0x530 [ 266.120085][T10573] map_create+0x485/0x2350 [ 266.124510][T10573] __sys_bpf+0x30a/0x6f0 [ 266.128772][T10573] ? bpf_link_show_fdinfo+0x380/0x380 [ 266.134307][T10573] ? vtime_user_exit+0x2c8/0x3e0 [ 266.139347][T10573] __x64_sys_bpf+0x78/0x90 [ 266.143772][T10573] do_syscall_64+0x4c/0xa0 [ 266.148187][T10573] ? clear_bhb_loop+0x30/0x80 [ 266.152854][T10573] ? clear_bhb_loop+0x30/0x80 [ 266.158922][T10573] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.164940][T10573] RIP: 0033:0x7fb1ca6b6cb9 [ 266.169374][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.189210][T10573] RSP: 002b:00007fb1c8912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.198532][T10573] RAX: ffffffffffffffda RBX: 00007fb1ca931fa0 RCX: 00007fb1ca6b6cb9 [ 266.206734][T10573] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 266.214935][T10573] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 266.222925][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.230895][T10573] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 266.238906][T10573] [ 266.837052][T10612] netlink: 'syz.4.2105': attribute type 39 has an invalid length. [ 267.024902][T10629] delete_channel: no stack [ 267.033042][T10629] delete_channel: no stack [ 267.752999][T10650] netlink: 'syz.3.2120': attribute type 21 has an invalid length. [ 267.761239][T10650] __nla_validate_parse: 6 callbacks suppressed [ 267.761255][T10650] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2120'. [ 267.921439][T10665] delete_channel: no stack [ 267.940118][T10659] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2122'. [ 267.947773][T10665] delete_channel: no stack [ 268.003079][T10659] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 268.007797][T10667] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2127'. [ 268.021854][T10659] openvswitch: netlink: Message has 1 unknown bytes. [ 268.097110][T10676] netlink: 'syz.3.2130': attribute type 29 has an invalid length. [ 268.149815][T10676] netlink: 'syz.3.2130': attribute type 29 has an invalid length. [ 268.161967][T10678] netlink: 'syz.3.2130': attribute type 29 has an invalid length. [ 268.171361][T10676] netlink: 'syz.3.2130': attribute type 29 has an invalid length. [ 268.180287][T10676] netlink: 'syz.3.2130': attribute type 29 has an invalid length. [ 268.198467][T10680] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2131'. [ 268.323155][T10684] device wlan0 left promiscuous mode [ 268.382602][T10684] device wlan0 entered promiscuous mode [ 268.433092][T10684] netlink: 'syz.3.2133': attribute type 9 has an invalid length. [ 268.455071][T10695] netlink: 'syz.4.2137': attribute type 3 has an invalid length. [ 268.463609][T10684] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2133'. [ 268.473538][T10695] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2137'. [ 268.562079][T10699] FAULT_INJECTION: forcing a failure. [ 268.562079][T10699] name failslab, interval 1, probability 0, space 0, times 0 [ 268.593738][T10699] CPU: 1 PID: 10699 Comm: syz.7.2138 Not tainted syzkaller #0 [ 268.601249][T10699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.611467][T10699] Call Trace: [ 268.614755][T10699] [ 268.617696][T10699] dump_stack_lvl+0x188/0x250 [ 268.622397][T10699] ? show_regs_print_info+0x20/0x20 [ 268.627810][T10699] ? load_image+0x400/0x400 [ 268.632346][T10699] ? __might_sleep+0xf0/0xf0 [ 268.636960][T10699] ? __lock_acquire+0x7d10/0x7d10 [ 268.641983][T10699] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 268.648483][T10699] should_fail+0x38c/0x4c0 [ 268.652894][T10699] should_failslab+0x5/0x20 [ 268.657380][T10699] slab_pre_alloc_hook+0x51/0xc0 [ 268.662306][T10699] __kmalloc+0x6b/0x330 [ 268.666546][T10699] ? tomoyo_encode+0x27e/0x540 [ 268.671326][T10699] tomoyo_encode+0x27e/0x540 [ 268.675921][T10699] tomoyo_realpath_from_path+0x5cd/0x610 [ 268.681652][T10699] tomoyo_path_number_perm+0x242/0x660 [ 268.687286][T10699] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 268.692736][T10699] ? perf_trace_lock+0xe4/0x390 [ 268.697757][T10699] ? perf_trace_lock+0xe4/0x390 [ 268.702650][T10699] security_file_ioctl+0x6c/0xa0 [ 268.707665][T10699] __se_sys_ioctl+0x48/0x170 [ 268.712250][T10699] do_syscall_64+0x4c/0xa0 [ 268.716831][T10699] ? clear_bhb_loop+0x30/0x80 [ 268.721584][T10699] ? clear_bhb_loop+0x30/0x80 [ 268.726250][T10699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.732213][T10699] RIP: 0033:0x7fdd1879acb9 [ 268.736622][T10699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.756479][T10699] RSP: 002b:00007fdd169f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.764903][T10699] RAX: ffffffffffffffda RBX: 00007fdd18a15fa0 RCX: 00007fdd1879acb9 [ 268.772953][T10699] RDX: 0000200000000680 RSI: 000000004030582b RDI: 0000000000000003 [ 268.780909][T10699] RBP: 00007fdd169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 268.788871][T10699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.796850][T10699] R13: 00007fdd18a16038 R14: 00007fdd18a15fa0 R15: 00007ffe4f36a0a8 [ 268.804930][T10699] [ 268.857746][T10699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.996015][T10706] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2142'. [ 269.697445][T10750] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2156'. [ 269.859257][T10768] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2159'. [ 269.901530][T10768] netlink: 'syz.5.2159': attribute type 39 has an invalid length. [ 270.249760][T10782] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2165'. [ 270.632592][T10802] delete_channel: no stack [ 270.638958][T10802] delete_channel: no stack [ 270.693781][T10804] netlink: 'syz.6.2175': attribute type 39 has an invalid length. [ 271.285025][T10829] delete_channel: no stack [ 271.298757][T10829] delete_channel: no stack [ 271.789777][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 271.997199][T10860] delete_channel: no stack [ 272.009810][T10860] delete_channel: no stack [ 272.077119][T10861] delete_channel: no stack [ 272.100179][T10861] delete_channel: no stack [ 273.009438][T10916] __nla_validate_parse: 9 callbacks suppressed [ 273.009456][T10916] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2220'. [ 273.273873][T10919] device syzkaller0 entered promiscuous mode [ 273.354568][T10928] bridge0: port 3(team0) entered blocking state [ 273.361278][T10928] bridge0: port 3(team0) entered forwarding state [ 273.369990][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.377291][T10928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.447190][T10928] device bridge0 entered promiscuous mode [ 273.618177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.459449][T10991] validate_nla: 2 callbacks suppressed [ 274.459487][T10991] netlink: 'syz.3.2248': attribute type 9 has an invalid length. [ 274.485447][T10991] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2248'. [ 274.830338][ T4521] wlan1: Trigger new scan to find an IBSS to join [ 275.670806][T11081] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2278'. [ 275.767253][ T4521] wlan1: Creating new IBSS network, BSSID 82:f6:29:cd:bf:09 [ 275.834046][T11090] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.2283'. [ 275.860603][T11090] netlink: 'syz.5.2283': attribute type 2 has an invalid length. [ 276.572973][T11114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.891591][T11126] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2294'. [ 277.263896][T11142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2301'. [ 277.334098][T11142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2301'. [ 277.373853][T11150] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2301'. [ 277.384086][T11144] netlink: 'syz.4.2303': attribute type 21 has an invalid length. [ 277.394818][T11144] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.417543][T11144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.425030][T11144] IPv6: NLM_F_CREATE should be set when creating new route [ 277.433292][T11144] IPv6: NLM_F_CREATE should be set when creating new route [ 277.441118][T11144] IPv6: NLM_F_CREATE should be set when creating new route [ 277.470094][T11147] delete_channel: no stack [ 277.494186][T11147] delete_channel: no stack [ 277.515215][T11155] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 277.536522][T11160] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 277.560178][T11158] netlink: 'syz.3.2306': attribute type 28 has an invalid length. [ 277.594039][T11158] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2306'. [ 277.916498][T11178] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.2315'. [ 278.445716][T11201] netlink: 'syz.6.2326': attribute type 4 has an invalid length. [ 278.457676][T11199] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2324'. [ 278.526777][T11204] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2327'. [ 278.595710][T11204] netlink: 'syz.5.2327': attribute type 39 has an invalid length. [ 278.700253][T11213] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.2330'. [ 278.900555][T11223] netlink: 'syz.4.2333': attribute type 9 has an invalid length. [ 278.908928][T11223] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2333'. [ 278.969471][T11225] netlink: 'syz.4.2334': attribute type 3 has an invalid length. [ 278.980721][T11225] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2334'. [ 278.996981][T11227] netlink: 'syz.3.2335': attribute type 3 has an invalid length. [ 279.010484][T11227] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2335'. [ 279.244390][T11243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2343'. [ 279.271103][T11243] netlink: 'syz.3.2343': attribute type 39 has an invalid length. [ 279.294593][T11241] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2342'. [ 279.323676][T11241] device bond0 left promiscuous mode [ 279.333795][T11241] device bond_slave_0 left promiscuous mode [ 279.341077][T11241] device bond_slave_1 left promiscuous mode [ 279.344665][T11245] FAULT_INJECTION: forcing a failure. [ 279.344665][T11245] name failslab, interval 1, probability 0, space 0, times 0 [ 279.362504][T11245] CPU: 0 PID: 11245 Comm: syz.7.2345 Not tainted syzkaller #0 [ 279.370117][T11245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.380167][T11245] Call Trace: [ 279.383532][T11245] [ 279.386460][T11245] dump_stack_lvl+0x188/0x250 [ 279.391135][T11245] ? show_regs_print_info+0x20/0x20 [ 279.396334][T11245] ? load_image+0x400/0x400 [ 279.400946][T11245] should_fail+0x38c/0x4c0 [ 279.405407][T11245] ? bpf_clone_redirect+0x10f/0x390 [ 279.410614][T11245] should_failslab+0x5/0x20 [ 279.415123][T11245] slab_pre_alloc_hook+0x51/0xc0 [ 279.420344][T11245] ? bpf_clone_redirect+0x10f/0x390 [ 279.425560][T11245] __kmalloc_node_track_caller+0x68/0x3a0 [ 279.431826][T11245] ? bpf_clone_redirect+0x10f/0x390 [ 279.437287][T11245] ? bpf_clone_redirect+0x10f/0x390 [ 279.442500][T11245] pskb_expand_head+0x127/0x10f0 [ 279.447454][T11245] bpf_clone_redirect+0x10f/0x390 [ 279.452492][T11245] bpf_prog_e97454e6a39c6b06+0x59/0xad0 [ 279.458046][T11245] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.464146][T11245] ? lock_chain_count+0x20/0x20 [ 279.469025][T11245] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 279.475216][T11245] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 279.481476][T11245] ? lockdep_hardirqs_on+0x94/0x140 [ 279.486670][T11245] ? ktime_get+0x7b/0x270 [ 279.491019][T11245] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 279.497763][T11245] ? ktime_get_real_ts64+0x440/0x440 [ 279.503081][T11245] ? read_lock_is_recursive+0x10/0x10 [ 279.508520][T11245] bpf_test_run+0x4ae/0x800 [ 279.513073][T11245] ? convert___skb_to_skb+0x4c0/0x4c0 [ 279.518476][T11245] ? eth_get_headlen+0x200/0x200 [ 279.523454][T11245] ? __build_skb+0x1e2/0x2e0 [ 279.528166][T11245] ? convert___skb_to_skb+0x3d/0x4c0 [ 279.533481][T11245] bpf_prog_test_run_skb+0x9cc/0x1180 [ 279.538900][T11245] ? cpu_online+0x60/0x60 [ 279.543240][T11245] bpf_prog_test_run+0x31e/0x390 [ 279.548337][T11245] __sys_bpf+0x5a5/0x6f0 [ 279.552613][T11245] ? bpf_link_show_fdinfo+0x380/0x380 [ 279.558107][T11245] __x64_sys_bpf+0x78/0x90 [ 279.563087][T11245] do_syscall_64+0x4c/0xa0 [ 279.567746][T11245] ? clear_bhb_loop+0x30/0x80 [ 279.572517][T11245] ? clear_bhb_loop+0x30/0x80 [ 279.577291][T11245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.583403][T11245] RIP: 0033:0x7fdd1879acb9 [ 279.587852][T11245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.607485][T11245] RSP: 002b:00007fdd169f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.616051][T11245] RAX: ffffffffffffffda RBX: 00007fdd18a15fa0 RCX: 00007fdd1879acb9 [ 279.624044][T11245] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 279.632485][T11245] RBP: 00007fdd169f6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.640482][T11245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.648472][T11245] R13: 00007fdd18a16038 R14: 00007fdd18a15fa0 R15: 00007ffe4f36a0a8 [ 279.656657][T11245] [ 280.181503][T11241] team0: Port device bond0 removed [ 280.216471][T11241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.275004][T11241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.289771][T11241] bond0 (unregistering): Released all slaves [ 280.689741][T11286] netlink: 'syz.6.2358': attribute type 10 has an invalid length. [ 280.714691][T11286] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2358'. [ 280.746216][T11289] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.2359'. [ 280.963686][T11303] netlink: 'syz.6.2362': attribute type 10 has an invalid length. [ 281.351785][ T3560] udevd[3560]: worker [4177] terminated by signal 33 (Unknown signal 33) [ 281.366024][ T3560] udevd[3560]: worker [4177] failed while handling '/devices/virtual/block/loop4' [ 281.583409][T11331] netlink: 'syz.5.2373': attribute type 4 has an invalid length. [ 281.624749][T11330] delete_channel: no stack [ 282.632984][T11371] delete_channel: no stack [ 282.640483][T11371] delete_channel: no stack [ 283.114005][T11405] Q±6ã×\b‹¡Y­4: renamed from lo [ 283.474785][T11428] netlink: 'syz.7.2409': attribute type 29 has an invalid length. [ 283.583254][T11432] FAULT_INJECTION: forcing a failure. [ 283.583254][T11432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.624321][T11432] CPU: 1 PID: 11432 Comm: syz.4.2410 Not tainted syzkaller #0 [ 283.632180][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.642427][T11432] Call Trace: [ 283.645713][T11432] [ 283.648742][T11432] dump_stack_lvl+0x188/0x250 [ 283.653430][T11432] ? show_regs_print_info+0x20/0x20 [ 283.658754][T11432] ? load_image+0x400/0x400 [ 283.663367][T11432] ? __lock_acquire+0x7d10/0x7d10 [ 283.668531][T11432] ? __lock_acquire+0x7d10/0x7d10 [ 283.673587][T11432] should_fail+0x38c/0x4c0 [ 283.678121][T11432] _copy_from_user+0x2e/0x170 [ 283.682823][T11432] ____sys_sendmsg+0x30a/0x8f0 [ 283.687712][T11432] ? __sys_sendmsg_sock+0x30/0x30 [ 283.692855][T11432] ? import_iovec+0x6f/0xa0 [ 283.697391][T11432] ___sys_sendmsg+0x236/0x2e0 [ 283.702106][T11432] ? __sys_sendmsg+0x2a0/0x2a0 [ 283.707016][T11432] ? trace_event_raw_event_lock+0x270/0x270 [ 283.712937][T11432] ? vfs_write+0x8b2/0xd60 [ 283.717409][T11432] __se_sys_sendmsg+0x1af/0x290 [ 283.722270][T11432] ? __x64_sys_sendmsg+0x80/0x80 [ 283.727212][T11432] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 283.733307][T11432] ? lockdep_hardirqs_on+0x94/0x140 [ 283.738609][T11432] do_syscall_64+0x4c/0xa0 [ 283.743035][T11432] ? clear_bhb_loop+0x30/0x80 [ 283.747740][T11432] ? clear_bhb_loop+0x30/0x80 [ 283.752515][T11432] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 283.758625][T11432] RIP: 0033:0x7f52cdf46cb9 [ 283.763069][T11432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.782789][T11432] RSP: 002b:00007f52cc181028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.791230][T11432] RAX: ffffffffffffffda RBX: 00007f52ce1c2090 RCX: 00007f52cdf46cb9 [ 283.799220][T11432] RDX: 0000000000040052 RSI: 00002000000002c0 RDI: 0000000000000005 [ 283.807207][T11432] RBP: 00007f52cc181090 R08: 0000000000000000 R09: 0000000000000000 [ 283.815259][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.823328][T11432] R13: 00007f52ce1c2128 R14: 00007f52ce1c2090 R15: 00007ffc3510e408 [ 283.831341][T11432] [ 283.855226][T11428] netlink: 'syz.7.2409': attribute type 29 has an invalid length. [ 283.867317][T11430] netlink: 'syz.7.2409': attribute type 10 has an invalid length. [ 285.319758][T11467] __nla_validate_parse: 5 callbacks suppressed [ 285.319776][T11467] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2421'. [ 285.492482][T11465] netlink: 'syz.7.2421': attribute type 39 has an invalid length. [ 286.443261][T11513] netlink: 'syz.3.2437': attribute type 10 has an invalid length. [ 287.096466][T11546] FAULT_INJECTION: forcing a failure. [ 287.096466][T11546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.104523][T11544] netlink: 'syz.6.2448': attribute type 10 has an invalid length. [ 287.142469][T11546] CPU: 1 PID: 11546 Comm: syz.3.2451 Not tainted syzkaller #0 [ 287.149990][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.160148][T11546] Call Trace: [ 287.163614][T11546] [ 287.166564][T11546] dump_stack_lvl+0x188/0x250 [ 287.171421][T11546] ? show_regs_print_info+0x20/0x20 [ 287.176841][T11546] ? load_image+0x400/0x400 [ 287.181375][T11546] ? __lock_acquire+0x7d10/0x7d10 [ 287.186450][T11546] should_fail+0x38c/0x4c0 [ 287.190915][T11546] _copy_from_user+0x2e/0x170 [ 287.195628][T11546] iovec_from_user+0x142/0x370 [ 287.200525][T11546] __import_iovec+0x70/0x490 [ 287.205175][T11546] import_iovec+0x6f/0xa0 [ 287.209685][T11546] ___sys_sendmsg+0x1fd/0x2e0 [ 287.214493][T11546] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.220321][T11546] ? trace_event_raw_event_lock+0x270/0x270 [ 287.226370][T11546] ? vfs_write+0x8b2/0xd60 [ 287.230853][T11546] __se_sys_sendmsg+0x1af/0x290 [ 287.235745][T11546] ? __x64_sys_sendmsg+0x80/0x80 [ 287.240838][T11546] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 287.246861][T11546] ? lockdep_hardirqs_on+0x94/0x140 [ 287.252098][T11546] do_syscall_64+0x4c/0xa0 [ 287.256585][T11546] ? clear_bhb_loop+0x30/0x80 [ 287.261377][T11546] ? clear_bhb_loop+0x30/0x80 [ 287.266161][T11546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.272330][T11546] RIP: 0033:0x7f5c6a92fcb9 [ 287.276778][T11546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.297518][T11546] RSP: 002b:00007f5c68b8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.306146][T11546] RAX: ffffffffffffffda RBX: 00007f5c6abaafa0 RCX: 00007f5c6a92fcb9 [ 287.314263][T11546] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 287.322275][T11546] RBP: 00007f5c68b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 287.330937][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.338896][T11546] R13: 00007f5c6abab038 R14: 00007f5c6abaafa0 R15: 00007ffda24d3fd8 [ 287.346877][T11546] [ 288.034397][T11587] tap0: tun_chr_ioctl cmd 1074025675 [ 288.042928][T11587] tap0: persist enabled [ 291.093082][T11603] netlink: 'syz.5.2474': attribute type 3 has an invalid length. [ 291.101078][T11603] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2474'. [ 291.127341][ T4212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.146383][T11603] bridge0: port 1(hsr_slave_1) entered blocking state [ 291.154908][T11603] bridge0: port 1(hsr_slave_1) entered disabled state [ 291.203688][ T4212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.305534][ T4212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.502893][ T4212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.774709][T11613] chnl_net:caif_netlink_parms(): no params data found [ 291.858626][T11625] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.2482'. [ 291.937839][T11625] openvswitch: netlink: IP tunnel dst address not specified [ 292.175114][T11613] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.184840][T11613] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.185892][T11648] netlink: 'syz.6.2490': attribute type 1 has an invalid length. [ 292.193375][T11648] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.2490'. [ 292.204064][T11613] device bridge_slave_0 entered promiscuous mode [ 292.221881][T11613] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.230730][T11613] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.239386][T11613] device bridge_slave_1 entered promiscuous mode [ 292.296516][T11613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.397700][T11613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.540889][T11613] team0: Port device team_slave_0 added [ 292.598426][T11613] team0: Port device team_slave_1 added [ 292.658435][T11613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.666553][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.701439][T11613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.736523][T11626] chnl_net:caif_netlink_parms(): no params data found [ 292.746878][T11613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.755331][T11613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.783136][T11613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.900787][T11613] device hsr_slave_0 entered promiscuous mode [ 292.908467][T11613] device hsr_slave_1 entered promiscuous mode [ 293.021606][T11626] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.029313][T11626] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.038278][T11626] device bridge_slave_0 entered promiscuous mode [ 293.065173][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.075401][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.087342][T11626] device bridge_slave_1 entered promiscuous mode [ 293.202838][T11626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.251016][T11682] netlink: 212912 bytes leftover after parsing attributes in process `syz.6.2503'. [ 293.283843][T11682] openvswitch: netlink: IP tunnel dst address not specified [ 293.285625][T11626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.360179][T11626] team0: Port device team_slave_0 added [ 293.469616][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 293.947617][T10769] Bluetooth: hci4: command 0x0409 tx timeout [ 295.547722][T10770] Bluetooth: hci3: command 0x041b tx timeout [ 295.595359][T11626] team0: Port device team_slave_1 added [ 295.691874][T11613] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.770399][T11613] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.783191][T11613] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.794760][T11626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.827035][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.861298][T11626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.898298][T11613] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.926677][T11696] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2508'. [ 295.949430][T11696] netlink: 'syz.7.2508': attribute type 3 has an invalid length. [ 295.957308][T11696] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2508'. [ 295.983345][T11626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.993340][T11626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.038453][ T4173] Bluetooth: hci4: command 0x041b tx timeout [ 296.045212][T11626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.116870][ T4212] device hsr_slave_0 left promiscuous mode [ 296.125960][ T4212] device hsr_slave_1 left promiscuous mode [ 296.142387][ T4212] bridge0: port 3(team0) entered disabled state [ 296.156954][ T4212] device bridge_slave_1 left promiscuous mode [ 296.163660][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.480689][ T4212] device team_slave_1 left promiscuous mode [ 296.501244][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 296.540080][ T4212] device team_slave_0 left promiscuous mode [ 296.555974][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 296.582327][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.593741][ T4212] device bond_slave_1 left promiscuous mode [ 296.611425][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.621952][ T4212] device bond_slave_0 left promiscuous mode [ 296.732704][ T4212] device bond0 left promiscuous mode [ 296.747123][ T4212] team0 (unregistering): Port device bond0 removed [ 296.773294][ T4212] bond0 (unregistering): Released all slaves [ 296.896370][T11711] netlink: 'syz.7.2510': attribute type 10 has an invalid length. [ 296.918319][T11711] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2510'. [ 297.015672][T11626] device hsr_slave_0 entered promiscuous mode [ 297.068726][T11626] device hsr_slave_1 entered promiscuous mode [ 297.145090][T11626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.167702][T11626] Cannot create hsr debugfs directory [ 297.235849][T11720] netlink: 'syz.7.2512': attribute type 3 has an invalid length. [ 297.262583][T11720] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2512'. [ 297.625925][T11613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.637765][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 297.826115][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.844241][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.864479][T11626] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 297.880488][T11626] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 297.925740][T11626] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 297.954297][T11613] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.986359][T11626] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 298.006409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.028817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.038026][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.045765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.077994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 298.102128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 298.117735][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 298.161551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.188780][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.196083][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.257251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.397315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.407271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 298.430117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.460413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.504487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 298.545678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.593091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 298.613756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.632091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 298.671990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.673994][T11769] netlink: 'syz.6.2525': attribute type 3 has an invalid length. [ 298.706046][T11769] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2525'. [ 298.729322][T11613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.894379][T11626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.943784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.972305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.007908][T11626] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.034502][T11781] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2529'. [ 299.060116][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.093093][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.139842][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.147029][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.166805][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.176414][T11779] netlink: 'syz.5.2529': attribute type 39 has an invalid length. [ 299.193487][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.215733][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.231595][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.238783][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.262367][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.351614][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.370809][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.407992][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.431236][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.449974][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.463179][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.476793][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.495303][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.506816][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.522128][T11626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.544012][T11626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.560967][T11613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.575770][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2532'. [ 299.604338][T11793] netlink: 'syz.5.2532': attribute type 3 has an invalid length. [ 299.627946][T11793] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2532'. [ 299.646091][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.664168][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.679475][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.707901][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 299.968361][T11816] netlink: 'syz.7.2538': attribute type 3 has an invalid length. [ 299.999206][T11816] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2538'. [ 300.034076][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.065305][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.166657][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.186553][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.195186][ T4300] Bluetooth: hci4: command 0x0419 tx timeout [ 300.226190][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.269546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.305377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.333774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.346818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.372896][T11828] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2541'. [ 300.395117][T11613] device veth0_vlan entered promiscuous mode [ 300.430428][T11828] netlink: 'syz.6.2541': attribute type 39 has an invalid length. [ 300.481397][T11613] device veth1_vlan entered promiscuous mode [ 300.579998][T11613] device veth0_macvtap entered promiscuous mode [ 300.593406][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.602391][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.626442][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.689110][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.703444][T11613] device veth1_macvtap entered promiscuous mode [ 300.720691][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.733069][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.771641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.782847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.816990][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.828490][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.839389][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.855265][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.866591][T11849] FAULT_INJECTION: forcing a failure. [ 300.866591][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 300.870154][T11613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.888268][T11849] CPU: 1 PID: 11849 Comm: syz.6.2548 Not tainted syzkaller #0 [ 300.895758][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.897233][T11626] device veth0_vlan entered promiscuous mode [ 300.905832][T11849] Call Trace: [ 300.905851][T11849] [ 300.905861][T11849] dump_stack_lvl+0x188/0x250 [ 300.905891][T11849] ? show_regs_print_info+0x20/0x20 [ 300.905906][T11849] ? load_image+0x400/0x400 [ 300.905923][T11849] ? __might_sleep+0xf0/0xf0 [ 300.905939][T11849] ? __lock_acquire+0x7d10/0x7d10 [ 300.931357][T11626] device veth1_vlan entered promiscuous mode [ 300.932510][T11849] should_fail+0x38c/0x4c0 [ 300.952572][T11849] should_failslab+0x5/0x20 [ 300.957108][T11849] slab_pre_alloc_hook+0x51/0xc0 [ 300.959330][T11626] device veth0_macvtap entered promiscuous mode [ 300.962180][T11849] ? security_file_alloc+0x30/0x110 [ 300.973605][T11849] kmem_cache_alloc+0x3d/0x290 [ 300.978390][T11849] ? rcu_is_watching+0x11/0xa0 [ 300.983164][T11849] security_file_alloc+0x30/0x110 [ 300.988215][T11849] __alloc_file+0xc2/0x240 [ 300.989139][T11626] device veth1_macvtap entered promiscuous mode [ 300.992646][T11849] alloc_empty_file+0x90/0x180 [ 300.992673][T11849] alloc_file+0x5b/0x4f0 [ 300.992687][T11849] ? do_raw_spin_unlock+0x11d/0x230 [ 301.012950][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.013084][T11849] alloc_file_pseudo+0x180/0x200 [ 301.024825][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.028497][T11849] ? alloc_empty_file_noaccount+0x80/0x80 [ 301.028529][T11849] ? __lock_acquire+0x7d10/0x7d10 [ 301.028546][T11849] ? __local_bh_enable_ip+0x136/0x1c0 [ 301.028562][T11849] ? _local_bh_enable+0xa0/0xa0 [ 301.028580][T11849] anon_inode_getfile+0xc1/0x1a0 [ 301.028598][T11849] bpf_link_prime+0x125/0x270 [ 301.038659][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.044094][T11849] bpf_raw_tracepoint_open+0x4f5/0x840 [ 301.044130][T11849] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 301.049375][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.054666][T11849] ? __might_fault+0xb3/0x110 [ 301.054691][T11849] ? bpf_lsm_bpf+0x5/0x10 [ 301.059813][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.064449][T11849] ? security_bpf+0x7a/0xa0 [ 301.064475][T11849] __sys_bpf+0x4fb/0x6f0 [ 301.074833][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.079545][T11849] ? bpf_link_show_fdinfo+0x380/0x380 [ 301.079586][T11849] ? vtime_user_exit+0x2c8/0x3e0 [ 301.079610][T11849] __x64_sys_bpf+0x78/0x90 [ 301.079626][T11849] do_syscall_64+0x4c/0xa0 [ 301.079642][T11849] ? clear_bhb_loop+0x30/0x80 [ 301.087117][T11626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.090973][T11849] ? clear_bhb_loop+0x30/0x80 [ 301.091003][T11849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.091018][T11849] RIP: 0033:0x7faa85efbcb9 [ 301.091037][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.091049][T11849] RSP: 002b:00007faa84157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.091067][T11849] RAX: ffffffffffffffda RBX: 00007faa86176fa0 RCX: 00007faa85efbcb9 [ 301.091078][T11849] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000011 [ 301.091088][T11849] RBP: 00007faa84157090 R08: 0000000000000000 R09: 0000000000000000 [ 301.091098][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.091107][T11849] R13: 00007faa86177038 R14: 00007faa86176fa0 R15: 00007fffd2421dd8 [ 301.091135][T11849] [ 301.296549][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.308785][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.322560][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 301.331622][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.346559][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.355454][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 301.373571][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 301.385632][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.401215][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 301.413266][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.445018][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.474616][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.493394][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.504192][T11613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.523319][T11613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.537339][T11613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.552069][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.566294][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.582317][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.596189][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.631568][T11626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.644423][T11626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.660976][T11626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.671698][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.698830][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.707081][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 301.722425][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.734198][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.745100][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 301.763489][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 301.780631][T11613] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.790604][T11613] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.799663][T11613] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.810848][T11613] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.835876][T11865] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2555'. [ 301.869124][T11626] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.894308][T11626] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.908418][T11626] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.931614][T11626] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.971504][T11876] netlink: 'syz.5.2557': attribute type 10 has an invalid length. [ 301.993383][T11876] device geneve0 entered promiscuous mode [ 302.040332][T11876] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 302.162529][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.179311][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.217200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.253163][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.270602][T11884] netlink: 'syz.7.2559': attribute type 10 has an invalid length. [ 302.270688][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.290495][T11884] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2559'. [ 302.312782][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.323345][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.323582][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.363892][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.393164][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.418937][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.449665][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 302.615466][T11898] device bridge0 entered promiscuous mode [ 302.640065][T11904] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2566'. [ 302.978651][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2568'. [ 303.005093][T11912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2568'. [ 303.024985][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2568'. [ 303.037937][T11915] netlink: 'syz.9.2571': attribute type 39 has an invalid length. [ 303.522537][T11919] can: request_module (can-proto-0) failed. [ 303.583577][T11935] netlink: 'syz.8.2579': attribute type 10 has an invalid length. [ 303.594193][T11935] device geneve0 entered promiscuous mode [ 303.762098][T11935] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 303.786864][T11940] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2580'. [ 304.252229][T11963] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2598'. [ 304.298262][T11963] netlink: 'syz.6.2598': attribute type 39 has an invalid length. [ 304.452374][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.759747][T11992] device bridge0 entered promiscuous mode [ 305.020345][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2606'. [ 305.083139][T12002] netlink: 'syz.8.2606': attribute type 39 has an invalid length. [ 305.125871][T12012] netlink: 38831 bytes leftover after parsing attributes in process `syz.9.2608'. [ 305.343605][T12015] delete_channel: no stack [ 305.694979][T12038] syz.8.2619[12038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.695091][T12038] syz.8.2619[12038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.747723][T12040] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2615'. [ 306.822007][T12075] netlink: 'syz.5.2631': attribute type 46 has an invalid length. [ 308.108211][ T4212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.306345][T12135] __nla_validate_parse: 1 callbacks suppressed [ 311.306367][T12135] netlink: 65055 bytes leftover after parsing attributes in process `syz.8.2654'. [ 311.891245][T12151] device syzkaller0 entered promiscuous mode [ 312.183698][T12168] netlink: 'syz.6.2666': attribute type 9 has an invalid length. [ 312.196776][T12168] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2666'. [ 312.208799][T12163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.217062][T12163] IPv6: NLM_F_CREATE should be set when creating new route [ 312.224750][T12163] IPv6: NLM_F_CREATE should be set when creating new route [ 312.469937][T12177] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2668'. [ 312.904466][T12187] netlink: 'syz.9.2671': attribute type 10 has an invalid length. [ 312.952915][T12187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.967223][T12187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.079046][T12198] netlink: 'syz.8.2675': attribute type 9 has an invalid length. [ 313.086842][T12198] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2675'. [ 313.247031][T12203] netlink: 'syz.8.2675': attribute type 9 has an invalid length. [ 313.339215][T12203] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2675'. [ 313.826379][T12218] FAULT_INJECTION: forcing a failure. [ 313.826379][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 313.946061][T12218] CPU: 0 PID: 12218 Comm: syz.9.2685 Not tainted syzkaller #0 [ 313.953588][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.963860][T12218] Call Trace: [ 313.967145][T12218] [ 313.970085][T12218] dump_stack_lvl+0x188/0x250 [ 313.974778][T12218] ? show_regs_print_info+0x20/0x20 [ 313.979979][T12218] ? load_image+0x400/0x400 [ 313.984489][T12218] ? perf_trace_lock+0xe4/0x390 [ 313.989348][T12218] ? __kasan_kmalloc+0xcc/0xf0 [ 313.994137][T12218] should_fail+0x38c/0x4c0 [ 313.998569][T12218] should_failslab+0x5/0x20 [ 314.003081][T12218] slab_pre_alloc_hook+0x51/0xc0 [ 314.008025][T12218] ? skb_clone+0x1bd/0x350 [ 314.012452][T12218] kmem_cache_alloc+0x3d/0x290 [ 314.017233][T12218] skb_clone+0x1bd/0x350 [ 314.021659][T12218] __netlink_deliver_tap+0x3cd/0x7c0 [ 314.026969][T12218] netlink_deliver_tap+0x16c/0x180 [ 314.032080][T12218] __netlink_sendskb+0x4b/0x90 [ 314.036831][T12218] netlink_dump+0x945/0xcf0 [ 314.041423][T12218] ? netlink_lookup+0x1d0/0x1d0 [ 314.046280][T12218] __netlink_dump_start+0x523/0x700 [ 314.051503][T12218] unix_diag_handler_dump+0x1d5/0x8d0 [ 314.056878][T12218] ? __mutex_trylock_common+0x155/0x260 [ 314.062419][T12218] ? mutex_lock_io_nested+0x60/0x60 [ 314.067779][T12218] ? rcu_lock_release+0x20/0x20 [ 314.073487][T12218] ? unix_diag_handler_dump+0x8d0/0x8d0 [ 314.079062][T12218] ? rcu_lock_release+0x20/0x20 [ 314.084016][T12218] sock_diag_rcv_msg+0x164/0x3e0 [ 314.088946][T12218] netlink_rcv_skb+0x1f5/0x440 [ 314.093705][T12218] ? sock_diag_bind+0xa0/0xa0 [ 314.098369][T12218] ? netlink_ack+0xb50/0xb50 [ 314.102943][T12218] ? __lock_acquire+0x7d10/0x7d10 [ 314.107971][T12218] sock_diag_rcv+0x26/0x40 [ 314.112550][T12218] netlink_unicast+0x774/0x920 [ 314.117337][T12218] netlink_sendmsg+0x8ba/0xbe0 [ 314.122124][T12218] ? netlink_getsockopt+0x570/0x570 [ 314.127417][T12218] ? aa_sock_msg_perm+0x94/0x150 [ 314.132348][T12218] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 314.137622][T12218] ? security_socket_sendmsg+0x7c/0xa0 [ 314.143185][T12218] ? netlink_getsockopt+0x570/0x570 [ 314.148453][T12218] ____sys_sendmsg+0x5b7/0x8f0 [ 314.153208][T12218] ? __sys_sendmsg_sock+0x30/0x30 [ 314.158306][T12218] ? import_iovec+0x6f/0xa0 [ 314.162802][T12218] ___sys_sendmsg+0x236/0x2e0 [ 314.167467][T12218] ? __sys_sendmsg+0x2a0/0x2a0 [ 314.172223][T12218] ? trace_event_raw_event_lock+0x270/0x270 [ 314.178100][T12218] ? vfs_write+0x8b2/0xd60 [ 314.182564][T12218] __se_sys_sendmsg+0x1af/0x290 [ 314.187397][T12218] ? __x64_sys_sendmsg+0x80/0x80 [ 314.192398][T12218] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 314.198467][T12218] ? lockdep_hardirqs_on+0x94/0x140 [ 314.203772][T12218] do_syscall_64+0x4c/0xa0 [ 314.208207][T12218] ? clear_bhb_loop+0x30/0x80 [ 314.212874][T12218] ? clear_bhb_loop+0x30/0x80 [ 314.217650][T12218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.223548][T12218] RIP: 0033:0x7f3f9df40cb9 [ 314.228060][T12218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.247837][T12218] RSP: 002b:00007f3f9c19c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.256270][T12218] RAX: ffffffffffffffda RBX: 00007f3f9e1bbfa0 RCX: 00007f3f9df40cb9 [ 314.264321][T12218] RDX: 0000000000000000 RSI: 00002000000039c0 RDI: 0000000000000007 [ 314.272335][T12218] RBP: 00007f3f9c19c090 R08: 0000000000000000 R09: 0000000000000000 [ 314.280301][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.288344][T12218] R13: 00007f3f9e1bc038 R14: 00007f3f9e1bbfa0 R15: 00007ffdfc103e28 [ 314.296404][T12218] [ 314.541572][T12229] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2690'. [ 314.599008][T12229] netlink: 'syz.9.2690': attribute type 39 has an invalid length. [ 314.786590][ T4524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.925692][ T4524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.088543][ T4524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.468026][T12254] netlink: 'syz.9.2697': attribute type 19 has an invalid length. [ 315.475905][T12254] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2697'. [ 315.614945][ T4524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.843144][T12263] netlink: 'syz.8.2701': attribute type 29 has an invalid length. [ 315.902248][T12263] netlink: 'syz.8.2701': attribute type 29 has an invalid length. [ 315.961400][T12263] netlink: 'syz.8.2701': attribute type 29 has an invalid length. [ 315.993979][T12275] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2705'. [ 316.021587][T12263] netlink: 'syz.8.2701': attribute type 29 has an invalid length. [ 316.856201][T12302] netlink: 143108 bytes leftover after parsing attributes in process `syz.7.2716'. [ 317.081006][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.087423][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.213665][T12302] validate_nla: 2 callbacks suppressed [ 317.213688][T12302] netlink: 'syz.7.2716': attribute type 1 has an invalid length. [ 317.475237][T12323] netlink: 'syz.7.2722': attribute type 27 has an invalid length. [ 317.503736][T12323] netlink: 'syz.7.2722': attribute type 4 has an invalid length. [ 317.534247][T12323] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2722'. [ 317.584628][T12330] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2725'. [ 318.235717][T12353] netlink: 'syz.6.2732': attribute type 3 has an invalid length. [ 318.263532][T12353] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2732'. [ 319.334459][ T4524] device wlan1 left promiscuous mode [ 319.391699][ T4524] team0: Port device wlan1 removed [ 319.496860][T12374] netlink: 'syz.5.2740': attribute type 1 has an invalid length. [ 319.945601][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.962458][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.027064][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.066030][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.856604][ T4524] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 320.871003][ T4524] batman_adv: batadv0: Removing interface: virt_wifi0 [ 321.141433][ T4524] bridge0: port 4(batadv0) entered disabled state [ 321.196102][ T4524] bridge0: port 3(team0) entered disabled state [ 321.215833][ T4524] device bridge_slave_1 left promiscuous mode [ 321.232175][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.293743][ T4524] device veth1_macvtap left promiscuous mode [ 321.307654][ T4524] device veth0_macvtap left promiscuous mode [ 321.319608][ T4524] device veth1_vlan left promiscuous mode [ 321.325385][ T4524] device veth0_vlan left promiscuous mode [ 321.499224][ T4524] device geneve1 left promiscuous mode [ 321.511820][ T4524] team0 (unregistering): Port device geneve1 removed [ 321.653831][ T4524] device team_slave_1 left promiscuous mode [ 321.666291][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 321.684700][ T4524] device team_slave_0 left promiscuous mode [ 321.692219][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 322.468424][T12439] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2759'. [ 322.537698][T12440] netlink: 'syz.8.2759': attribute type 39 has an invalid length. [ 322.901918][T12455] netlink: 15998 bytes leftover after parsing attributes in process `syz.6.2764'. [ 323.978785][T12488] netlink: 'syz.6.2777': attribute type 3 has an invalid length. [ 324.028071][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2777'. [ 324.241331][T12490] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2778'. [ 325.031472][T12490] netlink: 'syz.9.2778': attribute type 39 has an invalid length. [ 325.074436][T12502] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.2783'. [ 326.908560][T12553] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2798'. [ 327.457784][T12548] netlink: 'syz.6.2798': attribute type 39 has an invalid length. [ 327.557028][T12561] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.865773][T12566] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2803'. [ 329.156815][T12592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 329.382406][T12598] netlink: 'syz.5.2815': attribute type 39 has an invalid length. [ 329.644566][T12608] netlink: 'syz.5.2820': attribute type 3 has an invalid length. [ 329.663898][T12606] netlink: 'syz.8.2819': attribute type 29 has an invalid length. [ 329.699611][T12606] netlink: 'syz.8.2819': attribute type 29 has an invalid length. [ 329.708651][T12608] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2820'. [ 331.238546][T12641] netlink: 'syz.5.2831': attribute type 39 has an invalid length. [ 331.983522][T12654] device wlan0 left promiscuous mode [ 332.002268][T12658] netlink: 'syz.8.2839': attribute type 3 has an invalid length. [ 332.052109][T12658] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.2839'. [ 332.736872][T12675] netlink: 'syz.5.2846': attribute type 39 has an invalid length. [ 333.146866][T12691] sctp: [Deprecated]: syz.6.2851 (pid 12691) Use of int in maxseg socket option. [ 333.146866][T12691] Use struct sctp_assoc_value instead [ 334.400638][T12717] netlink: 'syz.9.2860': attribute type 39 has an invalid length. [ 334.564298][T12725] FAULT_INJECTION: forcing a failure. [ 334.564298][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 334.627381][T12725] CPU: 1 PID: 12725 Comm: syz.5.2862 Not tainted syzkaller #0 [ 334.634920][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.645008][T12725] Call Trace: [ 334.648301][T12725] [ 334.651237][T12725] dump_stack_lvl+0x188/0x250 [ 334.656029][T12725] ? show_regs_print_info+0x20/0x20 [ 334.661233][T12725] ? load_image+0x400/0x400 [ 334.665740][T12725] ? __might_sleep+0xf0/0xf0 [ 334.670343][T12725] ? __lock_acquire+0x7d10/0x7d10 [ 334.675464][T12725] ? perf_trace_lock+0xe4/0x390 [ 334.680333][T12725] should_fail+0x38c/0x4c0 [ 334.685192][T12725] should_failslab+0x5/0x20 [ 334.689744][T12725] slab_pre_alloc_hook+0x51/0xc0 [ 334.694805][T12725] ? __d_alloc+0x2a/0x6f0 [ 334.699158][T12725] kmem_cache_alloc+0x3d/0x290 [ 334.704107][T12725] ? trace_event_raw_event_lock+0x270/0x270 [ 334.710104][T12725] __d_alloc+0x2a/0x6f0 [ 334.714274][T12725] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 334.720457][T12725] d_alloc_pseudo+0x19/0x70 [ 334.724967][T12725] alloc_file_pseudo+0xe0/0x200 [ 334.729835][T12725] ? alloc_empty_file_noaccount+0x80/0x80 [ 334.735571][T12725] ? __lock_acquire+0x7d10/0x7d10 [ 334.740694][T12725] ? __local_bh_enable_ip+0x136/0x1c0 [ 334.746104][T12725] ? _local_bh_enable+0xa0/0xa0 [ 334.750980][T12725] anon_inode_getfile+0xc1/0x1a0 [ 334.755938][T12725] bpf_link_prime+0x125/0x270 [ 334.760722][T12725] bpf_raw_tracepoint_open+0x4f5/0x840 [ 334.766250][T12725] ? bpf_obj_get_info_by_fd+0x2dc0/0x2dc0 [ 334.771985][T12725] ? __might_fault+0xb3/0x110 [ 334.776683][T12725] ? bpf_lsm_bpf+0x5/0x10 [ 334.781046][T12725] ? security_bpf+0x7a/0xa0 [ 334.785561][T12725] __sys_bpf+0x4fb/0x6f0 [ 334.789841][T12725] ? bpf_link_show_fdinfo+0x380/0x380 [ 334.795343][T12725] ? rcu_nmi_exit+0x6f/0xf0 [ 334.799901][T12725] ? vtime_user_exit+0x2c8/0x3e0 [ 334.804882][T12725] __x64_sys_bpf+0x78/0x90 [ 334.809307][T12725] do_syscall_64+0x4c/0xa0 [ 334.813737][T12725] ? clear_bhb_loop+0x30/0x80 [ 334.818415][T12725] ? clear_bhb_loop+0x30/0x80 [ 334.823100][T12725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.829083][T12725] RIP: 0033:0x7fb1ca6b6cb9 [ 334.833510][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.853130][T12725] RSP: 002b:00007fb1c8912028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.861567][T12725] RAX: ffffffffffffffda RBX: 00007fb1ca931fa0 RCX: 00007fb1ca6b6cb9 [ 334.869553][T12725] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 334.877525][T12725] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 334.885593][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.893865][T12725] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 334.902127][T12725] [ 334.991602][T12730] netlink: 'syz.9.2864': attribute type 21 has an invalid length. [ 335.057673][T12730] netlink: 'syz.9.2864': attribute type 6 has an invalid length. [ 335.109545][T12730] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2864'. [ 335.679161][T12743] sctp: [Deprecated]: syz.5.2869 (pid 12743) Use of int in maxseg socket option. [ 335.679161][T12743] Use struct sctp_assoc_value instead [ 335.930473][T12751] FAULT_INJECTION: forcing a failure. [ 335.930473][T12751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.100703][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2879'. [ 336.100807][T12751] CPU: 0 PID: 12751 Comm: syz.9.2871 Not tainted syzkaller #0 [ 336.100829][T12751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.100840][T12751] Call Trace: [ 336.100847][T12751] [ 336.100855][T12751] dump_stack_lvl+0x188/0x250 [ 336.100884][T12751] ? show_regs_print_info+0x20/0x20 [ 336.100902][T12751] ? load_image+0x400/0x400 [ 336.100924][T12751] ? __lock_acquire+0x7d10/0x7d10 [ 336.100944][T12751] ? vfs_write+0x8b2/0xd60 [ 336.100967][T12751] should_fail+0x38c/0x4c0 [ 336.162711][T12751] _copy_from_user+0x2e/0x170 [ 336.167427][T12751] __sys_bpf+0x26d/0x6f0 [ 336.171700][T12751] ? bpf_link_show_fdinfo+0x380/0x380 [ 336.177112][T12751] __x64_sys_bpf+0x78/0x90 [ 336.181568][T12751] do_syscall_64+0x4c/0xa0 [ 336.186008][T12751] ? clear_bhb_loop+0x30/0x80 [ 336.190717][T12751] ? clear_bhb_loop+0x30/0x80 [ 336.195506][T12751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.201591][T12751] RIP: 0033:0x7f3f9df40cb9 [ 336.206024][T12751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.225726][T12751] RSP: 002b:00007f3f9c19c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.234277][T12751] RAX: ffffffffffffffda RBX: 00007f3f9e1bbfa0 RCX: 00007f3f9df40cb9 [ 336.242285][T12751] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 336.250720][T12751] RBP: 00007f3f9c19c090 R08: 0000000000000000 R09: 0000000000000000 [ 336.258805][T12751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.266890][T12751] R13: 00007f3f9e1bc038 R14: 00007f3f9e1bbfa0 R15: 00007ffdfc103e28 [ 336.274907][T12751] [ 336.751125][T12764] netlink: 'syz.5.2875': attribute type 39 has an invalid length. [ 337.161516][T12774] FAULT_INJECTION: forcing a failure. [ 337.161516][T12774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.177279][T12775] netlink: 'syz.9.2877': attribute type 17 has an invalid length. [ 337.202811][T12774] CPU: 1 PID: 12774 Comm: syz.5.2880 Not tainted syzkaller #0 [ 337.210333][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.220772][T12774] Call Trace: [ 337.224074][T12774] [ 337.227023][T12774] dump_stack_lvl+0x188/0x250 [ 337.231811][T12774] ? show_regs_print_info+0x20/0x20 [ 337.237131][T12774] ? load_image+0x400/0x400 [ 337.241672][T12774] ? __lock_acquire+0x7d10/0x7d10 [ 337.246727][T12774] should_fail+0x38c/0x4c0 [ 337.251679][T12774] _copy_to_user+0x2e/0x130 [ 337.256826][T12774] simple_read_from_buffer+0xe3/0x150 [ 337.262494][T12774] proc_fail_nth_read+0x1a6/0x220 [ 337.267541][T12774] ? proc_fault_inject_write+0x310/0x310 [ 337.273180][T12774] ? fsnotify_perm+0x254/0x560 [ 337.277980][T12774] ? proc_fault_inject_write+0x310/0x310 [ 337.283718][T12774] vfs_read+0x301/0xd60 [ 337.288381][T12774] ? kernel_read+0x1e0/0x1e0 [ 337.293144][T12774] ? __fget_files+0x40f/0x480 [ 337.297865][T12774] ? mutex_lock_nested+0x17/0x20 [ 337.302828][T12774] ? __fdget_pos+0x2bf/0x370 [ 337.307491][T12774] ? ksys_read+0x71/0x260 [ 337.311939][T12774] ksys_read+0x152/0x260 [ 337.316216][T12774] ? vfs_write+0xd60/0xd60 [ 337.320649][T12774] ? lockdep_hardirqs_on+0x94/0x140 [ 337.325884][T12774] do_syscall_64+0x4c/0xa0 [ 337.330500][T12774] ? clear_bhb_loop+0x30/0x80 [ 337.335290][T12774] ? clear_bhb_loop+0x30/0x80 [ 337.340256][T12774] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.346202][T12774] RIP: 0033:0x7fb1ca67758e [ 337.350657][T12774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.370370][T12774] RSP: 002b:00007fb1c8911fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.378810][T12774] RAX: ffffffffffffffda RBX: 00007fb1c89126c0 RCX: 00007fb1ca67758e [ 337.386805][T12774] RDX: 000000000000000f RSI: 00007fb1c89120a0 RDI: 0000000000000004 [ 337.394885][T12774] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 337.402974][T12774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.410976][T12774] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 337.418986][T12774] [ 337.525062][T12778] netlink: 'syz.6.2881': attribute type 10 has an invalid length. [ 337.587793][T12778] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2881'. [ 337.617366][T12778] device dummy0 entered promiscuous mode [ 337.629612][T12778] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 337.816186][T12785] sctp: [Deprecated]: syz.8.2884 (pid 12785) Use of int in maxseg socket option. [ 337.816186][T12785] Use struct sctp_assoc_value instead [ 338.278140][T12798] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2889'. [ 339.635089][T12811] chnl_net:caif_netlink_parms(): no params data found [ 339.725818][T12832] netlink: 212824 bytes leftover after parsing attributes in process `syz.9.2902'. [ 340.214318][T12844] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2905'. [ 340.196530][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.297922][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.365049][T12811] device bridge_slave_0 entered promiscuous mode [ 340.413942][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.463744][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.540341][T12811] device bridge_slave_1 entered promiscuous mode [ 340.750383][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.893844][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.987627][ T4300] Bluetooth: hci5: command 0x0409 tx timeout [ 341.098809][T12811] team0: Port device team_slave_0 added [ 341.142324][T12811] team0: Port device team_slave_1 added [ 341.232795][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.276039][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.446848][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.523671][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.561964][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.637964][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.686284][T12879] netlink: 'syz.5.2914': attribute type 39 has an invalid length. [ 341.920430][T12811] device hsr_slave_0 entered promiscuous mode [ 341.938408][T12811] device hsr_slave_1 entered promiscuous mode [ 341.958539][T12811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.966146][T12811] Cannot create hsr debugfs directory [ 343.077665][ T4300] Bluetooth: hci5: command 0x041b tx timeout [ 343.282762][T12896] netlink: 'syz.9.2922': attribute type 10 has an invalid length. [ 343.301217][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2922'. [ 343.322511][T12896] device team0 entered promiscuous mode [ 343.337222][T12896] device team_slave_0 entered promiscuous mode [ 343.352280][T12896] device team_slave_1 entered promiscuous mode [ 343.370528][T12896] bridge0: port 3(team0) entered blocking state [ 343.384077][T12896] bridge0: port 3(team0) entered disabled state [ 343.400946][T12896] bridge0: port 3(team0) entered blocking state [ 343.407408][T12896] bridge0: port 3(team0) entered forwarding state [ 343.825310][ T245] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.897366][ T245] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.943356][T12916] FAULT_INJECTION: forcing a failure. [ 343.943356][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 343.970189][T12916] CPU: 1 PID: 12916 Comm: syz.8.2930 Not tainted syzkaller #0 [ 343.977703][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.987884][T12916] Call Trace: [ 343.991181][T12916] [ 343.994295][T12916] dump_stack_lvl+0x188/0x250 [ 343.999002][T12916] ? show_regs_print_info+0x20/0x20 [ 344.004314][T12916] ? load_image+0x400/0x400 [ 344.008842][T12916] ? __might_sleep+0xf0/0xf0 [ 344.013538][T12916] ? __lock_acquire+0x7d10/0x7d10 [ 344.018774][T12916] should_fail+0x38c/0x4c0 [ 344.023220][T12916] should_failslab+0x5/0x20 [ 344.027742][T12916] slab_pre_alloc_hook+0x51/0xc0 [ 344.032839][T12916] kmem_cache_alloc_node+0x47/0x2d0 [ 344.038068][T12916] ? alloc_vmap_area+0x1a2/0x1a10 [ 344.043210][T12916] alloc_vmap_area+0x1a2/0x1a10 [ 344.048117][T12916] ? vm_map_ram+0xba0/0xba0 [ 344.052742][T12916] __get_vm_area_node+0x14f/0x2d0 [ 344.057802][T12916] __vmalloc_node_range+0xef/0x8b0 [ 344.062937][T12916] ? sock_hash_alloc+0x2bc/0x530 [ 344.068044][T12916] bpf_map_area_alloc+0xd4/0xe0 [ 344.073113][T12916] ? sock_hash_alloc+0x2bc/0x530 [ 344.078338][T12916] sock_hash_alloc+0x2bc/0x530 [ 344.083137][T12916] map_create+0x485/0x2350 [ 344.087586][T12916] __sys_bpf+0x30a/0x6f0 [ 344.091950][T12916] ? bpf_link_show_fdinfo+0x380/0x380 [ 344.097456][T12916] ? vtime_user_exit+0x2c8/0x3e0 [ 344.102533][T12916] __x64_sys_bpf+0x78/0x90 [ 344.107068][T12916] do_syscall_64+0x4c/0xa0 [ 344.111505][T12916] ? clear_bhb_loop+0x30/0x80 [ 344.116211][T12916] ? clear_bhb_loop+0x30/0x80 [ 344.120917][T12916] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.126863][T12916] RIP: 0033:0x7fead3c00cb9 [ 344.131388][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.151678][T12916] RSP: 002b:00007fead1e5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.160299][T12916] RAX: ffffffffffffffda RBX: 00007fead3e7bfa0 RCX: 00007fead3c00cb9 [ 344.168537][T12916] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 344.176540][T12916] RBP: 00007fead1e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.184561][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.192661][T12916] R13: 00007fead3e7c038 R14: 00007fead3e7bfa0 R15: 00007ffc4d31d418 [ 344.200850][T12916] [ 344.220392][ T245] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.252438][T12918] netlink: 'syz.5.2927': attribute type 39 has an invalid length. [ 344.339955][ T245] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.496181][T12929] FAULT_INJECTION: forcing a failure. [ 344.496181][T12929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.532507][T12929] CPU: 1 PID: 12929 Comm: syz.5.2933 Not tainted syzkaller #0 [ 344.540194][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.550267][T12929] Call Trace: [ 344.553569][T12929] [ 344.556529][T12929] dump_stack_lvl+0x188/0x250 [ 344.561239][T12929] ? show_regs_print_info+0x20/0x20 [ 344.566478][T12929] ? load_image+0x400/0x400 [ 344.571035][T12929] ? __lock_acquire+0x7d10/0x7d10 [ 344.576098][T12929] ? perf_trace_lock_acquire+0xed/0x3e0 [ 344.581944][T12929] should_fail+0x38c/0x4c0 [ 344.586613][T12929] _copy_from_user+0x2e/0x170 [ 344.591326][T12929] __copy_msghdr_from_user+0xc9/0x630 [ 344.596739][T12929] ? verify_lock_unused+0x140/0x140 [ 344.602004][T12929] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 344.607422][T12929] ___sys_sendmsg+0x19a/0x2e0 [ 344.612311][T12929] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.617139][T12929] ? vfs_write+0x8b2/0xd60 [ 344.621615][T12929] __se_sys_sendmsg+0x1af/0x290 [ 344.626511][T12929] ? __x64_sys_sendmsg+0x80/0x80 [ 344.631569][T12929] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 344.637679][T12929] ? lockdep_hardirqs_on+0x94/0x140 [ 344.643015][T12929] do_syscall_64+0x4c/0xa0 [ 344.647457][T12929] ? clear_bhb_loop+0x30/0x80 [ 344.652747][T12929] ? clear_bhb_loop+0x30/0x80 [ 344.657458][T12929] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.663388][T12929] RIP: 0033:0x7fb1ca6b6cb9 [ 344.668014][T12929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.688043][T12929] RSP: 002b:00007fb1c8912028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.696695][T12929] RAX: ffffffffffffffda RBX: 00007fb1ca931fa0 RCX: 00007fb1ca6b6cb9 [ 344.704710][T12929] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000006 [ 344.712719][T12929] RBP: 00007fb1c8912090 R08: 0000000000000000 R09: 0000000000000000 [ 344.718291][T12811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.720957][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.720974][T12929] R13: 00007fb1ca932038 R14: 00007fb1ca931fa0 R15: 00007ffd3f1e6fb8 [ 344.720998][T12929] [ 344.843393][T12811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.922813][T12811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.075424][T12811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.147698][ T4300] Bluetooth: hci5: command 0x040f tx timeout [ 345.424227][T12961] netlink: 'syz.8.2942': attribute type 39 has an invalid length. [ 345.590140][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.682434][T12970] netlink: 'syz.6.2946': attribute type 10 has an invalid length. [ 345.721077][T12970] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2946'. [ 345.767436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.797145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.958290][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.976019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.993413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.003218][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.010479][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.065293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.080342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.119347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.168173][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.175434][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.210356][T12991] netlink: 191416 bytes leftover after parsing attributes in process `syz.6.2963'. [ 346.216724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.265085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.289634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.347957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.423036][T12991] netlink: 16770 bytes leftover after parsing attributes in process `syz.6.2963'. [ 346.517811][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2963'. [ 346.543300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.558863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.623023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.646818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.683962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.720885][T12811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.768334][T12811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.812674][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.844189][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.875192][T13008] netlink: 'syz.6.2958': attribute type 39 has an invalid length. [ 347.228209][ T4300] Bluetooth: hci5: command 0x0419 tx timeout [ 347.590415][T13023] netlink: 'syz.8.2964': attribute type 29 has an invalid length. [ 347.693092][ T245] device wlan1 left promiscuous mode [ 347.728675][T13031] netlink: 'syz.6.2966': attribute type 3 has an invalid length. [ 347.748697][ T245] team0: Port device wlan1 removed [ 347.764777][T13031] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2966'. [ 347.789215][T13023] netlink: 'syz.8.2964': attribute type 29 has an invalid length. [ 347.815009][T13027] netlink: 'syz.8.2964': attribute type 29 has an invalid length. [ 347.825331][T13028] netlink: 'syz.8.2964': attribute type 29 has an invalid length. [ 347.835996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 347.850230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 347.885820][T13037] netlink: 'syz.8.2964': attribute type 29 has an invalid length. [ 347.922818][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.020479][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.040141][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.107593][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.118587][ T245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.131333][ T245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.141594][ T245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.150918][ T245] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 348.177074][ T245] batman_adv: batadv0: Removing interface: virt_wifi0 [ 348.195707][ T245] device veth1_macvtap left promiscuous mode [ 348.205661][ T245] device veth0_macvtap left promiscuous mode [ 348.420535][ T245] device team_slave_1 left promiscuous mode [ 348.431637][ T245] team0 (unregistering): Port device team_slave_1 removed [ 348.449328][ T245] device team_slave_0 left promiscuous mode [ 348.458232][ T245] team0 (unregistering): Port device team_slave_0 removed [ 348.582697][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.593319][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.605364][T12811] device veth0_vlan entered promiscuous mode [ 348.662239][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.671986][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.685020][T12811] device veth1_vlan entered promiscuous mode [ 348.837011][T12811] device veth0_macvtap entered promiscuous mode [ 348.862599][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 348.872459][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 348.886539][T12811] device veth1_macvtap entered promiscuous mode [ 348.913359][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 348.924266][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 348.952743][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.964906][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.994413][T12811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.030688][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.057401][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.102890][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.137605][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.157798][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.174937][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.190957][T12811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.205990][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.224164][T13069] netlink: 'syz.6.2984': attribute type 1 has an invalid length. [ 349.239408][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.252334][T13069] netlink: 154788 bytes leftover after parsing attributes in process `syz.6.2984'. [ 349.271770][T12811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.297777][T12811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.325184][T12811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.343920][T13069] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.2984'. [ 349.352749][T12811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.376031][T13074] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2978'. [ 349.401310][T13074] netlink: 6328 bytes leftover after parsing attributes in process `syz.5.2978'. [ 349.445614][T13074] tc_dump_action: action bad kind [ 349.464279][T13069] netlink: 6324 bytes leftover after parsing attributes in process `syz.6.2984'. [ 349.619310][T13080] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 349.620786][T13080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.682860][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.701657][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.721188][T13084] device wlan0 entered promiscuous mode [ 349.754119][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.781702][T13084] netlink: 'syz.5.2981': attribute type 9 has an invalid length. [ 349.794299][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.819598][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.881471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 350.295559][T13099] netlink: 'syz.6.2989': attribute type 39 has an invalid length. [ 351.031258][T13123] device wlan0 entered promiscuous mode [ 351.067319][T13123] __nla_validate_parse: 1 callbacks suppressed [ 351.067359][T13123] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2998'. [ 351.653544][T13148] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.3006'. [ 351.745731][T13148] netlink: zone id is out of range [ 351.764802][T13148] netlink: zone id is out of range [ 351.784206][T13148] netlink: del zone limit has 8 unknown bytes [ 351.878704][T13147] delete_channel: no stack [ 351.884003][T13147] delete_channel: no stack [ 352.800920][T13189] device wlan0 entered promiscuous mode [ 352.838598][T13185] validate_nla: 1 callbacks suppressed [ 352.838636][T13185] netlink: 'syz.8.3021': attribute type 9 has an invalid length. [ 352.876467][T13185] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.3021'. [ 352.963940][T13193] netlink: 'syz.6.3023': attribute type 39 has an invalid length. [ 352.996439][T13196] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3025'. [ 353.593566][T13213] netlink: 'syz.8.3033': attribute type 10 has an invalid length. [ 353.603181][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3033'. [ 353.613095][T13213] device caif0 entered promiscuous mode [ 353.619425][T13213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.990367][T13222] tun0: tun_chr_ioctl cmd 1074025677 [ 354.042707][T13222] tun0: linktype set to 768 [ 354.132584][T13229] delete_channel: no stack [ 354.155034][T13229] delete_channel: no stack [ 354.384714][T13235] netlink: 'syz.5.3040': attribute type 39 has an invalid length. [ 355.040853][T13247] netlink: 'syz.9.3046': attribute type 1 has an invalid length. [ 355.077891][T13247] netlink: 199820 bytes leftover after parsing attributes in process `syz.9.3046'. [ 355.635869][T13275] netlink: 'syz.1.3054': attribute type 39 has an invalid length. [ 356.327310][T13306] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.3067'. [ 356.341634][T13306] netlink: 'syz.5.3067': attribute type 9 has an invalid length. [ 356.357258][T13306] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3067'. [ 356.822051][T13326] device syzkaller0 entered promiscuous mode [ 356.930546][T13330] netlink: 'syz.5.3076': attribute type 39 has an invalid length. [ 356.995944][T13325] tun0: tun_chr_ioctl cmd 1074025677 [ 357.008416][T13325] tun0: linktype set to 768 [ 357.657405][T13359] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.3087'. [ 357.826062][T13365] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.3089'. [ 357.907440][T13372] netlink: 'syz.9.3090': attribute type 39 has an invalid length. [ 358.566894][T13395] netlink: 'syz.6.3098': attribute type 29 has an invalid length. [ 358.598303][T13395] netlink: 'syz.6.3098': attribute type 29 has an invalid length. [ 358.662750][T13395] netlink: 'syz.6.3098': attribute type 29 has an invalid length. [ 358.735069][T13395] netlink: 'syz.6.3098': attribute type 3 has an invalid length. [ 358.768149][T13395] netlink: 'syz.6.3098': attribute type 4 has an invalid length. [ 358.787839][T13395] netlink: 9067 bytes leftover after parsing attributes in process `syz.6.3098'. [ 359.123735][T13422] netlink: 'syz.5.3109': attribute type 39 has an invalid length. [ 359.651124][T13455] netlink: 105116 bytes leftover after parsing attributes in process `syz.8.3124'. [ 359.651847][T13453] Ÿë: port 1(gretap0) entered blocking state [ 359.687302][T13453] Ÿë: port 1(gretap0) entered disabled state [ 359.738802][T13453] device gretap0 entered promiscuous mode [ 359.998834][T13469] netlink: 'syz.1.3128': attribute type 3 has an invalid length. [ 360.006784][T13469] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3128'. [ 360.302461][T13489] netlink: 'syz.9.3135': attribute type 3 has an invalid length. [ 360.314454][T13490] netlink: 'syz.5.3136': attribute type 29 has an invalid length. [ 360.314557][T13489] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.3135'. [ 360.531434][T13497] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.487734][T13539] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3154'. [ 361.673164][T13532] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.698086][T13532] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.761188][T13532] device bridge0 left promiscuous mode [ 362.165113][T13532] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.172375][T13532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.179856][T13532] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.186957][T13532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.205913][T13532] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 362.632437][T13541] chnl_net:caif_netlink_parms(): no params data found [ 362.785936][T13570] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3166'. [ 362.828489][ T461] wlan1: Trigger new scan to find an IBSS to join [ 362.845239][T13569] delete_channel: no stack [ 362.996223][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.074761][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.084588][T13541] device bridge_slave_0 entered promiscuous mode [ 363.113567][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.121445][T13572] delete_channel: no stack [ 363.126710][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.186615][T13541] device bridge_slave_1 entered promiscuous mode [ 363.305987][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.336595][T13593] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3172'. [ 363.367024][T13589] validate_nla: 8 callbacks suppressed [ 363.367047][T13589] netlink: 'syz.9.3168': attribute type 11 has an invalid length. [ 363.382101][T13589] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3168'. [ 363.401151][T13586] netlink: 'syz.1.3171': attribute type 10 has an invalid length. [ 363.419010][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.429110][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.485396][T13586] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.493049][T13586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.503056][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.510369][T13586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.534125][T13586] team0: Port device bridge0 added [ 363.549975][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.628902][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 363.649885][T13541] team0: Port device team_slave_0 added [ 363.659778][T13541] team0: Port device team_slave_1 added [ 363.693118][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.703564][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.735899][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.769571][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.789279][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.901285][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.013193][T13541] device hsr_slave_0 entered promiscuous mode [ 364.041491][T13541] device hsr_slave_1 entered promiscuous mode [ 364.056095][T13541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.074959][T13541] Cannot create hsr debugfs directory [ 364.163232][T13618] Ÿë: port 1(gretap0) entered blocking state [ 364.173445][T13618] Ÿë: port 1(gretap0) entered disabled state [ 364.181825][T13618] device gretap0 entered promiscuous mode [ 364.199955][ T245] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.234126][T13620] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3180'. [ 364.351907][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.451165][T13620] device bridge_slave_0 left promiscuous mode [ 364.463037][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.566804][ T245] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.600534][T13636] FAULT_INJECTION: forcing a failure. [ 364.600534][T13636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.614144][T13636] CPU: 1 PID: 13636 Comm: syz.1.3185 Not tainted syzkaller #0 [ 364.621634][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.631707][T13636] Call Trace: [ 364.635007][T13636] [ 364.637946][T13636] dump_stack_lvl+0x188/0x250 [ 364.642646][T13636] ? show_regs_print_info+0x20/0x20 [ 364.647944][T13636] ? load_image+0x400/0x400 [ 364.652462][T13636] ? __lock_acquire+0x7d10/0x7d10 [ 364.657658][T13636] should_fail+0x38c/0x4c0 [ 364.662109][T13636] _copy_from_iter+0x22e/0x1170 [ 364.666975][T13636] ? __lock_acquire+0x7d10/0x7d10 [ 364.672002][T13636] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 364.677375][T13636] ? __virt_addr_valid+0x3c6/0x470 [ 364.682472][T13636] ? __phys_addr_symbol+0x2b/0x70 [ 364.687482][T13636] ? __check_object_size+0x30c/0x410 [ 364.692775][T13636] tcp_sendmsg_locked+0x1468/0x35f0 [ 364.697974][T13636] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.703956][T13636] ? tcp_free_fastopen_req+0x70/0x70 [ 364.709256][T13636] tcp_sendmsg+0x2b/0x40 [ 364.713565][T13636] ? inet_send_prepare+0x260/0x260 [ 364.718759][T13636] ____sys_sendmsg+0x5b7/0x8f0 [ 364.723512][T13636] ? __sys_sendmsg_sock+0x30/0x30 [ 364.728525][T13636] ? import_iovec+0x6f/0xa0 [ 364.733119][T13636] ___sys_sendmsg+0x236/0x2e0 [ 364.737807][T13636] ? __sys_sendmsg+0x2a0/0x2a0 [ 364.742849][T13636] ? trace_event_raw_event_lock+0x270/0x270 [ 364.748743][T13636] ? vfs_write+0x8b2/0xd60 [ 364.753197][T13636] __se_sys_sendmsg+0x1af/0x290 [ 364.758128][T13636] ? __x64_sys_sendmsg+0x80/0x80 [ 364.763071][T13636] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 364.769131][T13636] ? lockdep_hardirqs_on+0x94/0x140 [ 364.774320][T13636] do_syscall_64+0x4c/0xa0 [ 364.778716][T13636] ? clear_bhb_loop+0x30/0x80 [ 364.783385][T13636] ? clear_bhb_loop+0x30/0x80 [ 364.788045][T13636] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.793924][T13636] RIP: 0033:0x7fef4c848cb9 [ 364.798371][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.818063][T13636] RSP: 002b:00007fef4aaa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.826567][T13636] RAX: ffffffffffffffda RBX: 00007fef4cac3fa0 RCX: 00007fef4c848cb9 [ 364.834627][T13636] RDX: 0000000000040052 RSI: 00002000000002c0 RDI: 0000000000000005 [ 364.842702][T13636] RBP: 00007fef4aaa4090 R08: 0000000000000000 R09: 0000000000000000 [ 364.850844][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.858831][T13636] R13: 00007fef4cac4038 R14: 00007fef4cac3fa0 R15: 00007ffdb10a3718 [ 364.867041][T13636] [ 364.978808][ T245] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.023713][T13638] netlink: 'syz.1.3186': attribute type 33 has an invalid length. [ 365.032929][T13638] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3186'. [ 365.114793][ T245] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.251006][T13648] netlink: 'syz.1.3190': attribute type 11 has an invalid length. [ 365.290414][T13648] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.3190'. [ 365.372878][T13648] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 365.709483][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 366.418090][T13674] netlink: 'syz.5.3196': attribute type 21 has an invalid length. [ 366.483090][T13674] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.569544][T13679] delete_channel: no stack [ 366.584513][T13679] delete_channel: no stack [ 366.595089][T13674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.602914][T13674] IPv6: NLM_F_CREATE should be set when creating new route [ 366.612143][T13674] IPv6: NLM_F_CREATE should be set when creating new route [ 366.619886][T13674] IPv6: NLM_F_CREATE should be set when creating new route [ 366.825751][ T245] device gretap0 left promiscuous mode [ 366.842501][ T245] Ÿë: port 1(gretap0) entered disabled state [ 367.176701][T13691] netlink: 'syz.1.3203': attribute type 39 has an invalid length. [ 367.596816][T13704] netlink: 'syz.1.3208': attribute type 10 has an invalid length. [ 367.611684][T13704] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3208'. [ 367.686114][T13704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.705573][T13704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.760670][T13704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.779820][T13704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.788117][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 367.794528][ T4524] wlan1: Trigger new scan to find an IBSS to join [ 367.972408][T13541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 368.154850][T13541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 368.218268][ T245] device hsr_slave_0 left promiscuous mode [ 368.227397][ T245] device hsr_slave_1 left promiscuous mode [ 368.376876][ T245] device veth1_macvtap left promiscuous mode [ 368.396074][ T245] device veth0_macvtap left promiscuous mode [ 368.868680][ T9] wlan1: Creating new IBSS network, BSSID a2:0d:23:82:1b:23 [ 369.221658][T13541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.244542][T13731] netlink: 'syz.8.3217': attribute type 39 has an invalid length. [ 369.257844][T13541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.414794][T13746] netlink: 'syz.1.3221': attribute type 2 has an invalid length. [ 369.695470][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.733035][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.749245][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.781637][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.822388][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.836000][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.861127][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.868342][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.876793][ T4242] Bluetooth: hci1: command 0x0419 tx timeout [ 369.914060][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.974464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.996279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.016894][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.024472][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.058086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.085006][T13766] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3227'. [ 370.155059][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.194409][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 370.236845][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.286726][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.326136][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 370.396284][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.419637][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 370.459460][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.494566][T13770] netlink: 'syz.8.3229': attribute type 39 has an invalid length. [ 370.570272][T13541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.622485][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.659618][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.682368][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.719504][T13776] tap0: tun_chr_ioctl cmd 1074025675 [ 370.728950][T13778] netlink: 'syz.1.3232': attribute type 3 has an invalid length. [ 370.742087][T13776] tap0: persist enabled [ 370.764174][T13778] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3232'. [ 371.421171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.433576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.482668][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.615547][T13806] netlink: 212912 bytes leftover after parsing attributes in process `syz.9.3240'. [ 371.637592][T13806] openvswitch: netlink: IP tunnel dst address not specified [ 371.802264][T13812] netlink: 'syz.9.3242': attribute type 39 has an invalid length. [ 372.216473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 372.227294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.295291][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.330684][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.392280][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.441217][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.463085][T13541] device veth0_vlan entered promiscuous mode [ 372.522122][T13541] device veth1_vlan entered promiscuous mode [ 372.547391][T13850] FAULT_INJECTION: forcing a failure. [ 372.547391][T13850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.565761][T13850] CPU: 0 PID: 13850 Comm: syz.1.3256 Not tainted syzkaller #0 [ 372.573270][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.583360][T13850] Call Trace: [ 372.586653][T13850] [ 372.589590][T13850] dump_stack_lvl+0x188/0x250 [ 372.594279][T13850] ? show_regs_print_info+0x20/0x20 [ 372.599487][T13850] ? load_image+0x400/0x400 [ 372.603993][T13850] ? __lock_acquire+0x7d10/0x7d10 [ 372.609028][T13850] ? lockdep_hardirqs_on+0x94/0x140 [ 372.614233][T13850] should_fail+0x38c/0x4c0 [ 372.618748][T13850] _copy_from_user+0x2e/0x170 [ 372.623438][T13850] perf_copy_attr+0x167/0x840 [ 372.628158][T13850] __se_sys_perf_event_open+0xf5/0x1bb0 [ 372.633735][T13850] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 372.639395][T13850] ? lockdep_hardirqs_on+0x94/0x140 [ 372.644612][T13850] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 372.650267][T13850] do_syscall_64+0x4c/0xa0 [ 372.654892][T13850] ? clear_bhb_loop+0x30/0x80 [ 372.659675][T13850] ? clear_bhb_loop+0x30/0x80 [ 372.664374][T13850] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 372.670386][T13850] RIP: 0033:0x7fef4c848cb9 [ 372.674826][T13850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.694646][T13850] RSP: 002b:00007fef4aaa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 372.703113][T13850] RAX: ffffffffffffffda RBX: 00007fef4cac3fa0 RCX: 00007fef4c848cb9 [ 372.711102][T13850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 372.719166][T13850] RBP: 00007fef4aaa4090 R08: 0000000000000001 R09: 0000000000000000 [ 372.727268][T13850] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 372.735445][T13850] R13: 00007fef4cac4038 R14: 00007fef4cac3fa0 R15: 00007ffdb10a3718 [ 372.743543][T13850] [ 372.838952][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.864141][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.879206][T13856] netlink: 'syz.8.3257': attribute type 12 has an invalid length. [ 372.892904][T13856] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3257'. [ 372.912081][T13541] device veth0_macvtap entered promiscuous mode [ 372.925109][T13859] netlink: 'syz.1.3258': attribute type 39 has an invalid length. [ 372.955712][T13855] delete_channel: no stack [ 372.957967][T13541] device veth1_macvtap entered promiscuous mode [ 373.041577][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.052861][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.065032][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.085589][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 373.104440][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 373.117230][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.131261][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 373.143138][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.182554][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.193342][T13541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.206411][T13541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.221826][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.258139][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.267284][ T461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.333606][T13541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.348011][T13541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.356971][T13541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.369496][T13541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.949736][ T4212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.306169][T13879] netlink: 'syz.1.3265': attribute type 39 has an invalid length. [ 376.495115][T13889] netlink: 'syz.8.3270': attribute type 39 has an invalid length. [ 376.544145][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.553642][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.578687][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.609004][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.644995][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.684845][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 376.691942][T13895] netlink: 198364 bytes leftover after parsing attributes in process `syz.9.3272'. [ 376.716383][T13894] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.3273'. [ 376.752223][T13894] openvswitch: netlink: IP tunnel dst address not specified [ 376.760253][T13896] netlink: 198364 bytes leftover after parsing attributes in process `syz.9.3272'. [ 376.842374][T13901] netlink: 'syz.6.3149': attribute type 41 has an invalid length. [ 376.870801][T13901] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3149'. [ 376.937280][T13901] netlink: 'syz.6.3149': attribute type 10 has an invalid length. [ 376.954382][T13901] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3149'. [ 376.996681][T13901] device ipvlan1 entered promiscuous mode [ 377.063147][T13901] bridge0: port 3(ipvlan1) entered blocking state [ 377.092098][T13901] bridge0: port 3(ipvlan1) entered disabled state [ 377.138155][T13901] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 377.451428][T13925] netlink: 'syz.9.3284': attribute type 39 has an invalid length. [ 377.498126][ T461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.568900][T13910] chnl_net:caif_netlink_parms(): no params data found [ 377.601330][ T461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.700607][ T461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.795805][ T461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.886054][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.908138][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.919207][T13910] device bridge_slave_0 entered promiscuous mode [ 377.929718][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.937182][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.946907][T13910] device bridge_slave_1 entered promiscuous mode [ 377.983440][T13938] netlink: 'syz.1.3288': attribute type 3 has an invalid length. [ 377.987289][T13910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.993699][T13938] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3288'. [ 378.023359][T13910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.187304][T13910] team0: Port device team_slave_0 added [ 378.226053][T13910] team0: Port device team_slave_1 added [ 378.342333][T13965] netlink: 'syz.6.3296': attribute type 39 has an invalid length. [ 378.438031][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.445128][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.479447][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.603471][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610152][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727291][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.746087][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.781501][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.885026][T13910] device hsr_slave_0 entered promiscuous mode [ 378.903211][T13910] device hsr_slave_1 entered promiscuous mode [ 378.913191][T13910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.921947][T13910] Cannot create hsr debugfs directory [ 378.976633][T13979] device syzkaller0 entered promiscuous mode [ 379.187073][T13989] netlink: 'syz.9.3306': attribute type 29 has an invalid length. [ 379.225506][T13989] netlink: 'syz.9.3306': attribute type 29 has an invalid length. [ 379.237607][ T4173] Bluetooth: hci2: command 0x0409 tx timeout [ 379.243349][T13994] netlink: 'syz.9.3306': attribute type 29 has an invalid length. [ 379.520389][T13998] netlink: zone id is out of range [ 379.525997][T13998] netlink: set zone limit has 8 unknown bytes [ 380.324631][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3312'. [ 380.473432][T13910] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.500993][T13910] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.586724][T13910] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.632513][T14023] netlink: 192436 bytes leftover after parsing attributes in process `syz.8.3318'. [ 380.656209][T13910] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.674145][T14023] openvswitch: netlink: Key type 4112 is out of range max 29 [ 380.693903][T14025] netlink: 198364 bytes leftover after parsing attributes in process `syz.1.3317'. [ 380.917633][T14033] netlink: 24643 bytes leftover after parsing attributes in process `syz.8.3319'. [ 381.312509][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 381.602716][ T461] device hsr_slave_0 left promiscuous mode [ 381.618447][ T461] device hsr_slave_1 left promiscuous mode [ 381.630062][ T461] bridge0: port 3(team0) entered disabled state [ 381.644554][ T461] device bridge_slave_1 left promiscuous mode [ 381.658508][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.690764][ T461] device veth1_macvtap left promiscuous mode [ 381.702694][ T461] device veth0_macvtap left promiscuous mode [ 381.726756][T14065] FAULT_INJECTION: forcing a failure. [ 381.726756][T14065] name failslab, interval 1, probability 0, space 0, times 0 [ 381.754526][T14065] CPU: 0 PID: 14065 Comm: syz.6.3331 Not tainted syzkaller #0 [ 381.762054][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.772132][T14065] Call Trace: [ 381.775443][T14065] [ 381.778499][T14065] dump_stack_lvl+0x188/0x250 [ 381.783210][T14065] ? show_regs_print_info+0x20/0x20 [ 381.788448][T14065] ? load_image+0x400/0x400 [ 381.792999][T14065] ? __lock_acquire+0x7d10/0x7d10 [ 381.798240][T14065] should_fail+0x38c/0x4c0 [ 381.802792][T14065] should_failslab+0x5/0x20 [ 381.807319][T14065] slab_pre_alloc_hook+0x51/0xc0 [ 381.812376][T14065] __kmalloc+0x6b/0x330 [ 381.816578][T14065] ? bpf_prog_test_run_flow_dissector+0x29f/0x630 [ 381.823034][T14065] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 381.828617][T14065] bpf_prog_test_run_flow_dissector+0x29f/0x630 [ 381.834889][T14065] ? __lock_acquire+0x7d10/0x7d10 [ 381.839952][T14065] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 381.845532][T14065] ? __fget_files+0x40f/0x480 [ 381.850347][T14065] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 381.856013][T14065] bpf_prog_test_run+0x31e/0x390 [ 381.861168][T14065] __sys_bpf+0x5a5/0x6f0 [ 381.865516][T14065] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 381.871780][T14065] ? bpf_link_show_fdinfo+0x380/0x380 [ 381.877283][T14065] ? rcu_nmi_exit+0x6f/0xf0 [ 381.881827][T14065] ? vtime_user_exit+0x2c8/0x3e0 [ 381.886785][T14065] __x64_sys_bpf+0x78/0x90 [ 381.891226][T14065] do_syscall_64+0x4c/0xa0 [ 381.895672][T14065] ? clear_bhb_loop+0x30/0x80 [ 381.900371][T14065] ? clear_bhb_loop+0x30/0x80 [ 381.905078][T14065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 381.910995][T14065] RIP: 0033:0x7f7aadcaccb9 [ 381.915436][T14065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.935047][T14065] RSP: 002b:00007f7aabf08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.943456][T14065] RAX: ffffffffffffffda RBX: 00007f7aadf27fa0 RCX: 00007f7aadcaccb9 [ 381.951429][T14065] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 381.959389][T14065] RBP: 00007f7aabf08090 R08: 0000000000000000 R09: 0000000000000000 [ 381.967439][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.975495][T14065] R13: 00007f7aadf28038 R14: 00007f7aadf27fa0 R15: 00007ffd10e87cd8 [ 381.983640][T14065] [ 382.143465][ T461] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 382.266755][ T461] device team_slave_1 left promiscuous mode [ 382.287387][ T461] team0 (unregistering): Port device team_slave_1 removed [ 382.313901][ T461] device team_slave_0 left promiscuous mode [ 382.332547][ T461] team0 (unregistering): Port device team_slave_0 removed [ 382.368625][ T461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.378134][ T461] device bond_slave_1 left promiscuous mode [ 382.393943][ T461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.405382][ T461] device bond_slave_0 left promiscuous mode [ 382.452796][ T461] device bond0 left promiscuous mode [ 382.463553][ T461] team0 (unregistering): Port device bond0 removed [ 382.484013][ T461] bond0 (unregistering): Released all slaves [ 382.543653][T14054] validate_nla: 7 callbacks suppressed [ 382.543672][T14054] netlink: 'syz.8.3326': attribute type 39 has an invalid length. [ 382.565449][T13910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.640357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.674394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.690928][T13910] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.745714][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.766821][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.825517][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.832658][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.840732][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.859571][T14079] netlink: 'syz.1.3337': attribute type 10 has an invalid length. [ 382.917941][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.968450][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.982934][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.990078][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.014735][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.085384][T14090] netlink: 'syz.6.3339': attribute type 3 has an invalid length. [ 383.166921][T14090] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3339'. [ 383.218553][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.238924][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.256129][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.274576][T14102] netlink: 'syz.9.3343': attribute type 9 has an invalid length. [ 383.282867][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.297829][T14102] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.3343'. [ 383.299577][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.320913][T14104] netlink: 'syz.9.3343': attribute type 3 has an invalid length. [ 383.338187][T14104] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.3343'. [ 383.370475][T14098] netlink: 'syz.8.3344': attribute type 39 has an invalid length. [ 383.387997][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 383.517429][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.532663][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.562521][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.573996][T14107] netlink: zone id is out of range [ 383.584530][T14107] netlink: set zone limit has 8 unknown bytes [ 383.603734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.632997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.789575][T14107] netlink: 'syz.8.3345': attribute type 10 has an invalid length. [ 384.505706][T14135] FAULT_INJECTION: forcing a failure. [ 384.505706][T14135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.553429][T14135] CPU: 0 PID: 14135 Comm: syz.6.3352 Not tainted syzkaller #0 [ 384.560945][T14135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.571029][T14135] Call Trace: [ 384.574410][T14135] [ 384.577365][T14135] dump_stack_lvl+0x188/0x250 [ 384.582094][T14135] ? show_regs_print_info+0x20/0x20 [ 384.587327][T14135] ? load_image+0x400/0x400 [ 384.591858][T14135] ? __lock_acquire+0x7d10/0x7d10 [ 384.597010][T14135] should_fail+0x38c/0x4c0 [ 384.601447][T14135] _copy_from_user+0x2e/0x170 [ 384.606132][T14135] __sys_bpf+0x26d/0x6f0 [ 384.610400][T14135] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 384.616674][T14135] ? bpf_link_show_fdinfo+0x380/0x380 [ 384.622088][T14135] ? rcu_nmi_exit+0x6f/0xf0 [ 384.626629][T14135] ? vtime_user_exit+0x2c8/0x3e0 [ 384.631607][T14135] __x64_sys_bpf+0x78/0x90 [ 384.636058][T14135] do_syscall_64+0x4c/0xa0 [ 384.640509][T14135] ? clear_bhb_loop+0x30/0x80 [ 384.645302][T14135] ? clear_bhb_loop+0x30/0x80 [ 384.650012][T14135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.655927][T14135] RIP: 0033:0x7f7aadcaccb9 [ 384.660360][T14135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.680038][T14135] RSP: 002b:00007f7aabf08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.688565][T14135] RAX: ffffffffffffffda RBX: 00007f7aadf27fa0 RCX: 00007f7aadcaccb9 [ 384.696612][T14135] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000005 [ 384.704607][T14135] RBP: 00007f7aabf08090 R08: 0000000000000000 R09: 0000000000000000 [ 384.712927][T14135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.720923][T14135] R13: 00007f7aadf28038 R14: 00007f7aadf27fa0 R15: 00007ffd10e87cd8 [ 384.729036][T14135] [ 385.098351][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.106031][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.180402][T13910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.467690][ T4242] Bluetooth: hci2: command 0x0419 tx timeout [ 386.196633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.214295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.335332][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.356706][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.396096][T13910] device veth0_vlan entered promiscuous mode [ 386.406145][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.420321][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.473366][T13910] device veth1_vlan entered promiscuous mode [ 386.610315][T14184] netlink: 'syz.6.3365': attribute type 9 has an invalid length. [ 386.655495][T14184] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3365'. [ 386.670912][T14188] netlink: 'syz.6.3365': attribute type 3 has an invalid length. [ 386.754873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.768419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.808648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.830259][T14188] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3365'. [ 386.848944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.878019][T13910] device veth0_macvtap entered promiscuous mode [ 387.142012][T13910] device veth1_macvtap entered promiscuous mode [ 387.196650][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.212769][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.229594][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.251065][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.295755][T13910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.308115][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.326699][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.353352][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.417120][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.453835][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.486499][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.517621][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.556544][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.582389][T13910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.603360][T13910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.611349][T14207] netlink: 'syz.6.3372': attribute type 3 has an invalid length. [ 387.631360][T14207] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.3372'. [ 387.640152][T13910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.693550][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.721268][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.757430][T13910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.789272][T13910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.865256][T13910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.886503][T13910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.922492][T14199] netlink: 'syz.8.3370': attribute type 39 has an invalid length. [ 388.341904][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.358990][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.396807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.458695][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.496698][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.512289][T14234] netlink: 'syz.6.3382': attribute type 21 has an invalid length. [ 388.552739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.063671][T14257] netlink: 'syz.1.3389': attribute type 3 has an invalid length. [ 389.130933][T14257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3389'. [ 389.251471][T14260] netlink: 'syz.1.3389': attribute type 39 has an invalid length. [ 389.632731][T14273] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3395'. [ 389.726473][T14276] delete_channel: no stack [ 394.000699][T14316] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3408'. [ 394.054062][T14324] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 394.067389][T14328] netlink: 'syz.5.3415': attribute type 10 has an invalid length. [ 394.084516][T14324] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 394.152903][T14324] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 394.184792][T14328] device macvlan0 entered promiscuous mode [ 394.515815][T14328] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 394.684535][T14337] netlink: 'syz.8.3418': attribute type 39 has an invalid length. [ 395.068732][T14342] delete_channel: no stack [ 396.113825][T14377] netlink: 'syz.5.3433': attribute type 39 has an invalid length. [ 396.909962][T14405] sctp: [Deprecated]: syz.5.3444 (pid 14405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.909962][T14405] Use struct sctp_sack_info instead [ 397.762768][T14420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3447'. [ 397.842252][T14430] netlink: 'syz.6.3453': attribute type 1 has an invalid length. [ 397.873890][T14430] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3453'. [ 398.097958][T14441] netlink: 'syz.6.3455': attribute type 39 has an invalid length. [ 399.844111][ T461] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.005348][ T461] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.146073][T14494] netlink: 207508 bytes leftover after parsing attributes in process `syz.8.3478'. [ 400.172404][ T461] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.292805][ T461] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.570999][T14502] netlink: 'syz.8.3482': attribute type 19 has an invalid length. [ 400.607392][T14502] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3482'. [ 400.783647][T14502] device wg2 entered promiscuous mode [ 400.867875][T14507] netlink: 'syz.1.3484': attribute type 10 has an invalid length. [ 400.910576][ T4212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.930499][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.986974][T14507] device bridge_slave_1 left promiscuous mode [ 401.043946][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.155250][T14507] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 401.252581][T14516] netlink: 'syz.9.3485': attribute type 12 has an invalid length. [ 401.323654][T14516] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3485'. [ 401.900840][T14497] chnl_net:caif_netlink_parms(): no params data found [ 402.187566][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.267588][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.275869][T14497] device bridge_slave_0 entered promiscuous mode [ 402.321908][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.363107][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.391124][T14497] device bridge_slave_1 entered promiscuous mode [ 402.408612][T14534] netlink: 'syz.9.3489': attribute type 25 has an invalid length. [ 402.427623][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 402.428656][T14534] netlink: 'syz.9.3489': attribute type 28 has an invalid length. [ 402.467907][T14533] netlink: 'syz.8.3488': attribute type 12 has an invalid length. [ 402.502325][T14533] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3488'. [ 402.523363][T14532] delete_channel: no stack [ 402.544078][T14530] delete_channel: no stack [ 402.550886][T14512] chnl_net:caif_netlink_parms(): no params data found [ 402.582204][T14497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.641758][T14497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.791163][T14552] netlink: 'syz.9.3492': attribute type 10 has an invalid length. [ 402.809171][T14552] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3492'. [ 402.849936][T14552] batman_adv: batadv0: Adding interface: virt_wifi0 [ 402.856599][T14552] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.928445][T14552] batman_adv: batadv0: Interface activated: virt_wifi0 [ 402.988079][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 403.028962][T14497] team0: Port device team_slave_0 added [ 403.099530][T14497] team0: Port device team_slave_1 added [ 403.120107][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.130997][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.143360][T14512] device bridge_slave_0 entered promiscuous mode [ 404.507760][T14226] Bluetooth: hci0: command 0x041b tx timeout [ 405.067852][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 405.650288][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.664420][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.685396][T14512] device bridge_slave_1 entered promiscuous mode [ 405.744056][T14497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.757688][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.837939][T14497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.905898][T14565] netlink: 'syz.8.3496': attribute type 10 has an invalid length. [ 405.939575][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.951903][T14565] device bridge_slave_1 left promiscuous mode [ 405.961854][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.974547][T14565] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 405.992035][T14497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.007033][T14497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.043179][T14497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.085377][T14564] netlink: 'syz.9.3497': attribute type 12 has an invalid length. [ 406.094110][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3497'. [ 406.120779][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.168272][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.212625][T14497] device hsr_slave_0 entered promiscuous mode [ 406.219936][T14497] device hsr_slave_1 entered promiscuous mode [ 406.237604][T14497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.254862][T14497] Cannot create hsr debugfs directory [ 406.470358][T14512] team0: Port device team_slave_0 added [ 406.520677][T14579] netlink: 'syz.1.3502': attribute type 19 has an invalid length. [ 406.534762][T14579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3502'. [ 406.563998][T14512] team0: Port device team_slave_1 added [ 406.586714][T14573] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.3499'. [ 406.596899][T14227] Bluetooth: hci0: command 0x040f tx timeout [ 406.648737][T14584] FAULT_INJECTION: forcing a failure. [ 406.648737][T14584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.662159][T14584] CPU: 0 PID: 14584 Comm: syz.8.3504 Not tainted syzkaller #0 [ 406.669633][T14584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.679692][T14584] Call Trace: [ 406.682968][T14584] [ 406.685910][T14584] dump_stack_lvl+0x188/0x250 [ 406.690580][T14584] ? show_regs_print_info+0x20/0x20 [ 406.695786][T14584] ? load_image+0x400/0x400 [ 406.700455][T14584] ? __lock_acquire+0x7d10/0x7d10 [ 406.705485][T14584] ? perf_trace_lock+0xe4/0x390 [ 406.710344][T14584] should_fail+0x38c/0x4c0 [ 406.714790][T14584] _copy_from_user+0x2e/0x170 [ 406.719483][T14584] ___sys_recvmsg+0x173/0x5c0 [ 406.724187][T14584] ? __sys_recvmsg+0x280/0x280 [ 406.729020][T14584] ? trace_event_raw_event_lock+0x270/0x270 [ 406.734922][T14584] __x64_sys_recvmsg+0x1f9/0x2c0 [ 406.739850][T14584] ? ___sys_recvmsg+0x5c0/0x5c0 [ 406.744686][T14584] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 406.750663][T14584] ? lockdep_hardirqs_on+0x94/0x140 [ 406.755856][T14584] do_syscall_64+0x4c/0xa0 [ 406.760263][T14584] ? clear_bhb_loop+0x30/0x80 [ 406.764947][T14584] ? clear_bhb_loop+0x30/0x80 [ 406.769621][T14584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 406.775539][T14584] RIP: 0033:0x7fead3c00cb9 [ 406.779962][T14584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.799946][T14584] RSP: 002b:00007fead1e5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 406.808508][T14584] RAX: ffffffffffffffda RBX: 00007fead3e7bfa0 RCX: 00007fead3c00cb9 [ 406.816469][T14584] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 406.824524][T14584] RBP: 00007fead1e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.832504][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.840560][T14584] R13: 00007fead3e7c038 R14: 00007fead3e7bfa0 R15: 00007ffc4d31d418 [ 406.848642][T14584] [ 406.937190][T14579] device wg2 entered promiscuous mode [ 406.968062][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.982532][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.022078][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.112579][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.122764][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.157844][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.163418][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 407.510709][ T461] device hsr_slave_0 left promiscuous mode [ 407.525536][ T461] device hsr_slave_1 left promiscuous mode [ 407.533729][ T461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.543797][ T461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.564144][ T461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.576129][ T461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.589194][ T461] device bridge_slave_1 left promiscuous mode [ 407.625635][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.642012][ T461] device bridge_slave_0 left promiscuous mode [ 407.657817][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.674336][ T461] device veth1_macvtap left promiscuous mode [ 407.687876][ T461] device veth0_macvtap left promiscuous mode [ 407.694097][ T461] device veth1_vlan left promiscuous mode [ 407.707326][ T461] device veth0_vlan left promiscuous mode [ 408.092907][ T461] team0 (unregistering): Port device team_slave_1 removed [ 408.124351][ T461] team0 (unregistering): Port device team_slave_0 removed [ 408.140238][ T461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.160866][ T461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.263689][ T461] bond0 (unregistering): Released all slaves [ 408.320108][T14512] device hsr_slave_0 entered promiscuous mode [ 408.344888][T14512] device hsr_slave_1 entered promiscuous mode [ 408.386593][T14512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.402542][T14512] Cannot create hsr debugfs directory [ 408.445069][T14607] netlink: 'syz.1.3509': attribute type 12 has an invalid length. [ 408.467887][T14607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3509'. [ 408.560102][T14613] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.3511'. [ 408.677680][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 408.734114][T14617] netlink: 'syz.9.3513': attribute type 3 has an invalid length. [ 408.749034][T14617] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3513'. [ 408.920429][T14624] netlink: 4093 bytes leftover after parsing attributes in process `syz.9.3515'. [ 409.108979][ T3560] udevd[3560]: worker [5023] terminated by signal 33 (Unknown signal 33) [ 409.145166][ T3560] udevd[3560]: worker [5023] failed while handling '/devices/virtual/net/bpq15' [ 409.182949][T14624] netlink: 4093 bytes leftover after parsing attributes in process `syz.9.3515'. [ 409.213981][T14622] netlink: 'syz.1.3514': attribute type 12 has an invalid length. [ 409.238772][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 409.246604][T14622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3514'. [ 409.280249][T14621] delete_channel: no stack [ 409.421772][ T3560] udevd[3560]: worker [4176] terminated by signal 33 (Unknown signal 33) [ 409.453993][ T3560] udevd[3560]: worker [4176] failed while handling '/devices/virtual/block/loop8' [ 411.215032][ T461] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.273364][ T461] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.322298][ T461] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.403766][ T461] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.485538][ T461] device hsr_slave_0 left promiscuous mode [ 412.492211][ T461] device hsr_slave_1 left promiscuous mode [ 412.499559][ T461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.507215][ T461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.515876][ T461] device bridge_slave_1 left promiscuous mode [ 412.522258][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.531040][ T461] device bridge_slave_0 left promiscuous mode [ 412.537405][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.549294][ T461] device hsr_slave_0 left promiscuous mode [ 412.556039][ T461] device hsr_slave_1 left promiscuous mode [ 412.563181][ T461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.571263][ T461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.582095][ T461] device bridge_slave_1 left promiscuous mode [ 412.588430][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.596755][ T461] device bridge_slave_0 left promiscuous mode [ 412.603799][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.615192][ T461] device hsr_slave_0 left promiscuous mode [ 412.621647][ T461] device hsr_slave_1 left promiscuous mode [ 412.628453][ T461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.636089][ T461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.644687][ T461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.652574][ T461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.664155][ T461] device veth1_vlan left promiscuous mode [ 412.670286][ T461] device veth0_vlan left promiscuous mode [ 412.800949][ T461] team0 (unregistering): Port device team_slave_1 removed [ 412.813207][ T461] team0 (unregistering): Port device team_slave_0 removed [ 412.826991][ T461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.843936][ T461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.900560][ T461] bond0 (unregistering): Released all slaves [ 413.027350][ T461] team0 (unregistering): Port device team_slave_1 removed [ 413.043690][ T461] team0 (unregistering): Port device team_slave_0 removed [ 413.057127][ T461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.072154][ T461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.127028][ T461] bond0 (unregistering): Released all slaves [ 413.174676][ T461] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 413.230154][ T461] team0 (unregistering): Port device team_slave_1 removed [ 413.248683][ T461] team0 (unregistering): Port device team_slave_0 removed [ 413.265967][ T461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.281672][ T461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.295284][ T461] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 413.346616][ T461] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 413.355716][ T461] bond0 (unregistering): Released all slaves