last executing test programs: 7m46.319729299s ago: executing program 3 (id=1107): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x18}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x2, 0x3, 0x2}, 0x50) 7m45.320912078s ago: executing program 3 (id=1112): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000ff5fcd81488e4a732ef462e76918384eb16524d25d9bb031047edb467d7df54077f89e90dcb5b79fe18dc6be646cefd18675718b28e5de9451ab5a3a91848c38b55cc3788d2847a2a77b69083af0d71646844a75daa3e33471120864c6060f25c811d56eb9eef6faa930cd4f615dfa7d6d0f0e173a77311b47c24879608f00"/150], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r4}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x25, &(0x7f0000000240)=ANY=[@ANYBLOB="183f8d29", @ANYRES32=r2, @ANYBLOB="0000000002000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd98c) (async) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r8, &(0x7f0000000580)="1aaad292561179d8eda971ed5f0e04a2c2c3059d8ffddae08856eb4ea51570beb429d1cf22cd59e99e321e5d93b87fb67c6cb3d3af6dca11b03666f133170075dd7a0c0609", &(0x7f0000000680)=""/253}, 0x20) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100) 7m44.980343258s ago: executing program 3 (id=1114): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000280)=@ethernet={0x7, @link_local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)="5425b30927a792b404a6ce58cc21323091a7683d6703b18082f7277d010ad8ab5ef5309a50f04ecff44c1a246fabd229387af3fcc6dcfb3ab8b095d9648693c2d97276378a980cb4a8a9f3b772fede41b9b3c7d13b3dd08f4d99dfeff8c8d80aeb3cd4ec4a650bd03ee9b4570fd1cbaaf005ccad6f689422a0e83678a2db34d988dc2e001b385fefb357ffa089923d8775052e06c1a17bfe3d940c9c09d07976ec116b8716e67a5fec208de7c4f73fd6451a5a1b59faf8d0e1bfa081b20ee216dac655a2e9de35b80b1d654e25723ac5683a041cce6bc171d619e2e3ac025a529e03203e03e703d6ff4092421906", 0xee}, {&(0x7f0000000600)="45dd34d92e5f65f32a88d71ce025cc7a835e884876a5220d98b72fbc21ba3f11aece6553b3bbd86749404779997e28713bdf6be8076fff05c8b45e46e14c8f94b12fda05f83c7959d766b242306acadcca8835a9ee755a458d23d1f60207de9e862dd12c254eb0611224887e96fec07b4deaf06ddd1c83ead6fa2585317e6dde4a8a9e2780fbfea46ca136d648cd42961deaa218373d5a5470cf1f0e3957c27a5c771b74546677e2e3baeb2b1f9aadbf35582bea66f4d6bd224f", 0xba}, {&(0x7f00000006c0)="4cfb9b066eed36a097146493b45ccc7639549d7b33a16df334d095241239bac4bff71f2d7db6ad28255c0fb42763861dece556ad2b743c8d877ed9b90a4b271df277a64b4256068f92710fc66144f0582b561e37486a6592fc680adff8eeae4a90c87e14c74f49e2435b60b6fc0d1403c1e22b9fc4a5e34c91c5ac291e052caa39a6cd565a5859a3666ba72ed9de4793b7bcbf72ec153f5eac805b1246638c3490326a410073786fe02cf1eede19408df15c03528f5479bfda52572f6af1a9b0c79068e38b51f41e5d9e7b1254fb305ddcdc620fe5db8f764fef4bbf9110e1a87206bc8a1ab07e1372f60be94934a5a1fb3034f19301b481090e21d69b", 0xfd}, {&(0x7f0000000100)="60546187069469bbf6", 0x9}, {&(0x7f00000007c0)="1248bc5a0837386ff3b8534271d5fe19eac42d982029596929a20a0216d4b9cb9cb515ef9e47d34e2e98ee0c18d9b40e55b1f6c4a561ea84b4ed16b88bc512e656131ba094df8811d2593c81ef7e919dad263c2f2e70717852a2655d63de28aa60aafd91606b8ed3b7b02e7f9b4f79c605217f4ec8291c2fbc9210a5be68df8f0dca0787fdd7a9ee945e405c7966ac3970f2e4718c72019ca6c6439ec3", 0x9d}, {&(0x7f0000000880)="ea6343b2000ab5c9ca49ea1e91edc4a81d9a3afacc030bd2b7e3083497419c9777e48b27d939cc474e7458641e62662f709bdc7cec718e92e9ead3ccf0a8c7b171d3414c734ed045bfc39ff46db7842ebb3f37ad809ab762c3c02702326a20455f1ac4e9cadca24c777371853ee01869c297793bc7e782c20e1b384e4016429f50c10dfbdbb747440b41d9485d6a4588ebaaee6cb119a44b69a3ec5483fbbd6ffa80d19172659743b09e540b8e48e862dad711679b2fe6f6fe09f9d495541146f97a9d7684cceca41ac095992df8023ae41a6fbc8880990b8a64d954dcaa04a0298b3f6b", 0xe4}, {&(0x7f0000000980)="48a4f92098239721e9da34e8fafea323ec449bedd2cd892c0e7e604b10c8aaa949070c594007cd7fa3d299add37a7f1f7d18132b2d7af2a4c1b6329efcddf8a2cf779b2f99fa446bba9da38ec4cda68f26a0a717bfcfc591400db72f9438ace37ba728487f4c4bbb0e14fe08d17ede8fd0b938327f215fa56247fbcd280a84ec47b63c7f0155899a8b3708cb8b7932bf2d9d6b92cf24b9f36d65f2f556182af6679d9d91873e8bd5d3b031697f02984162f48a544c3e68538ebc904be99de60a384c1e24f663a5d1599ce58a32e5d3ec9dd81a594a4dfd", 0xd7}, {&(0x7f0000000a80)="9732199fd39edaaf514b6ba9936dfc0b2713bd9fde35154724c2ab6ee6c39eeff90a0d045ccec7a37870f12d90b959521f4fe4cd1ea38b36bbb1ab5d367e77fdf6d47cda87b5f645811cdc515f26d934ba9079803922fbec6c69bc1f2f78df4dd02a0e3e0853d62e4692c77df3b8a9e235806626fa285f628840ed01d9d37885a52a8b9c77952484e10490257bff0233f228bb063a488a41ebc70c1ff72fa57158b009dc34a75919a356", 0xaa}], 0x8, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xfffffff5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xa8}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES16=r2], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 7m43.611385818s ago: executing program 3 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x64}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x700, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) 7m43.243451059s ago: executing program 3 (id=1123): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 7m43.211202251s ago: executing program 3 (id=1124): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) syz_clone(0x42882600, &(0x7f00000000c0)="a9c0bfe27789097bac60a9fedfa3e98d7ef6452ade8204b3a7d2109d17d3fc5029f3d5e5588e31b9dc4b944e00d4a086207b26114ec8c1df3160e0824decfed0d6d308e8a106a27fa41f422ab2bb06d4185e8055f154a28769b7bca48bb0b1e8e2c67247e7a201d03524f8ea364041d7", 0x70, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) (async) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) (async) syz_clone(0x42882600, &(0x7f00000000c0)="a9c0bfe27789097bac60a9fedfa3e98d7ef6452ade8204b3a7d2109d17d3fc5029f3d5e5588e31b9dc4b944e00d4a086207b26114ec8c1df3160e0824decfed0d6d308e8a106a27fa41f422ab2bb06d4185e8055f154a28769b7bca48bb0b1e8e2c67247e7a201d03524f8ea364041d7", 0x70, &(0x7f0000000140), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x15, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) (async) 7m27.743881447s ago: executing program 32 (id=1124): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) syz_clone(0x42882600, &(0x7f00000000c0)="a9c0bfe27789097bac60a9fedfa3e98d7ef6452ade8204b3a7d2109d17d3fc5029f3d5e5588e31b9dc4b944e00d4a086207b26114ec8c1df3160e0824decfed0d6d308e8a106a27fa41f422ab2bb06d4185e8055f154a28769b7bca48bb0b1e8e2c67247e7a201d03524f8ea364041d7", 0x70, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) (async) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xc) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) (async) syz_clone(0x42882600, &(0x7f00000000c0)="a9c0bfe27789097bac60a9fedfa3e98d7ef6452ade8204b3a7d2109d17d3fc5029f3d5e5588e31b9dc4b944e00d4a086207b26114ec8c1df3160e0824decfed0d6d308e8a106a27fa41f422ab2bb06d4185e8055f154a28769b7bca48bb0b1e8e2c67247e7a201d03524f8ea364041d7", 0x70, &(0x7f0000000140), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x821, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x15, 0x5, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) (async) 17.951192339s ago: executing program 2 (id=3723): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0xdc0, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) r2 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x113, 0x3, 0x0, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) 17.838330685s ago: executing program 2 (id=3725): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x108030, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffbfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004c2c37e1ef2363936dc963db9cc6ac0da48c395e342816596cb708c511af9634188b22f7199be8635341876da6614ae577cc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x29, 0x0, 0x40000) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, &(0x7f0000000440)="5cadf2b3f1", &(0x7f0000000500)=""/243}, 0x20) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000800) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) 17.742625511s ago: executing program 1 (id=3728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 17.644899826s ago: executing program 1 (id=3731): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31116b876c1d0000f07ea60864160af36514001ac00800020007000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.563193251s ago: executing program 0 (id=3732): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xf) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x101809, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7b7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus/file0\x00') r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000000177fbac141416e000000107079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc2", 0x0, 0xfe, 0x60000000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYBLOB="1c00000000000300000000000000010045", @ANYRES32=r4], 0x0}, 0x94) socketpair(0x21, 0x2, 0xed, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) 17.554712622s ago: executing program 2 (id=3733): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fed007907001175f37500"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000040000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) (fail_nth: 3) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x5, 0x1, 0xffffffffffffffff, 0x427, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x1}, 0x50) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)) 17.487269536s ago: executing program 1 (id=3734): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7829abbb904021d0803", 0x14}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fed007907001175f37500"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000040000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0xb}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x8, 0x7ff, 0x5, 0x1, 0xffffffffffffffff, 0x427, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2, 0x1}, 0x50) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)) 17.470195637s ago: executing program 4 (id=3735): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x0) 17.442554658s ago: executing program 2 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000004f720000000000"], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20008810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x16, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 17.287247408s ago: executing program 0 (id=3737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x3000000}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000000100000001000009"], 0x48) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100"], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x26}, 0x28) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) close(r0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x3, 0x0, {0xa, 0x4e23, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0x2000f765) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x41) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xffffffffffffffff) 17.286884728s ago: executing program 1 (id=3738): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x12, 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="090038cb978e4b000024000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r4], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000020000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/136}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x80044944, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3, 0x9, 0x9, 0x5, 0x0, 0x0, 0x82048, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x22, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}, 0x12043, 0x0, 0xfffff21a, 0x8, 0x6bf, 0x100, 0x3, 0x0, 0x4e88, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ffa0000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.272958748s ago: executing program 4 (id=3739): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000005c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60064160af36508001ac00800020009600c00050004c00364bc24eab556a717251e6182f27f0051f60a84c9f46b5caf2fb5fd90fd6fc513d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.095869359s ago: executing program 0 (id=3740): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3", 0x46e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x35}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x101, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000b00)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0x9, &(0x7f0000000180)=""/9, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x3, 0x5, 0x1ff}, 0x10, 0x1d598, r2, 0xb, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x5, 0x1, 0x3, 0x1}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x1, 0xa, 0x7}, {0x5, 0x4, 0xd, 0x9}, {0x3, 0x1, 0x6, 0x2}, {0x5, 0x3, 0x4, 0xc}, {0x0, 0x1, 0xb, 0xb}, {0x3, 0x4, 0x5, 0x6}, {0x1, 0x5, 0x5, 0x5}, {0x0, 0x3, 0x8, 0xa}, {0x4, 0x3, 0x2, 0xc}], 0x10, 0x80006}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x21, &(0x7f0000000200)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, 0x0, &(0x7f0000000240)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 16.941305608s ago: executing program 4 (id=3741): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000008c0)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="3524400006ffffff"], &(0x7f0000000980)='syzkaller\x00', 0x40, 0xf7, &(0x7f00000009c0)=""/247, 0x41100, 0xc52fdb9b042b27fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0x4, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x0, 0x3, 0x6, 0x8}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0x3}, 0x94) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000c80), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000600)="7712a711310030ba3304fc722fc5353f7c13c17136060892970fdb75398e35c3db3e2b996271e608fd7e2cf6eec2431503197fc875d1a99df47679f0ce555a3b895bd97a610b1522e074bcf8e9f2538b4f962a1e04637563e19fb7aac90f375ae356a2c170cf8fc94013a5d75700cf45d0812f975a0c9b6958569e32fbdcfbe6a3c5800082079f5992cc26cf4778cbe5d089999afd6dbcd5ca88d416eebfe46a491370626c2aa33889ce65762a2be16609293efad3608563bd889086b6282b2d", 0xc0}, {&(0x7f00000006c0)="f7e353315662511e3f80f857c4cf8de3e4ff6438e0f2058a460ec503c01fc7436de0d4cb07c3c86b2aa6c2e2eade0785f5092eb6123adc0d835c43d509f8bf51a4cc41f1e4eb8af34872606c22dd8ef5a87baa1d042cf9e1062291d5c72dcf7ea8b92f5a6a8216ef602aa8612cc055c57c7a7236fee3ec5705364ef0838af78dec5dee6ea6d185b4939696f021932faacdcc646fdbe5a42df08f8bfdf3a4ec970f92c2a59af5420a2ddf2e97d0eac32eff020feea1021c6e536886028acc695258ddd7ed58d9398b52387ee42799e6", 0xcf}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000d00000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x24000000}, 0xc000) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8028, 0x4, 0x0, 0x1, 0x2000000000, 0x3, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x32, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x27c1c1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f00000002c0)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64038, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x8, 0x0, 0x2009}, 0x0, 0x800000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, 0x0, 0x0) r12 = openat$cgroup_ro(r7, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r12, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 16.8994799s ago: executing program 0 (id=3742): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x300060c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) close(r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xe, 0x0, 0x0, 0x2, 0x1000400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x80, &(0x7f00000001c0)=""/128, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x5, 0x400}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0), &(0x7f0000000380)=[{0x3, 0x1, 0x3, 0x5}, {0x1, 0x4, 0x5, 0xc}, {0x2, 0x3, 0x7}, {0x0, 0x3, 0x7, 0xb}, {0x1, 0x3, 0x10, 0x5}, {0x4, 0x3, 0x10}], 0x10, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.714217601s ago: executing program 2 (id=3743): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8028, 0x4, 0x0, 0x1, 0x2000000000, 0x3, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x32, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x27c1c1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64038, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x7, 0x0, 0x0, 0x2, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081044e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500384006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) r9 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 16.548778681s ago: executing program 0 (id=3744): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0x591, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402", @ANYRES16=r0], 0x0, 0x4e}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000007c0)="10c46de6ca57460438cd729a7e953aa50503789d589bd68927bd9d43be1d70484c8d6c2ce3d8413797b98f9dbad19596fc8224aa2cd6f29ea041c50e6f4b686cebac0c7a0b30e244d073ba621ac898b8952bb1465e629150fe93dc8ba23ab8cb2b", 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000050000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r6, 0x0, 0x0}, 0x10) sendmsg$inet(r1, 0x0, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x4, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x78, 0x0, 0x6, 0x2}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @datasec={0x8, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x10, 0x98}, {0x5, 0x7, 0xe4a}, {0x2, 0x24c, 0x8}], ' '}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000017c0)=""/4096, 0x94, 0x1000, 0x0, 0x7}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@hci={0x1f, 0x3, 0x1}, 0x80, 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000009846b2ca7bad6bc9b4c9f3138e0f60253c37eec2079427d4c4fec3cf1857598d145ab201c789d8c5b734aa0beb61cdf791c5cc661743a67a6546c2939467b9783a6e4c7220"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) socketpair(0x22, 0x2, 0x25, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a", 0x5b}], 0x1, 0x0, 0x0, 0x7}, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) 16.411255129s ago: executing program 4 (id=3745): perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a2caa2bfe", 0x14}], 0x1}, 0x0) 16.315016314s ago: executing program 1 (id=3746): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5a}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ldst={0x2, 0x2, 0x6, 0x4, 0xa, 0xc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfc, &(0x7f0000000280)=""/252, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x4, 0x1, 0xcef5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x1, 0x1, 0xd, 0x6}, {0x5, 0x1, 0x0, 0xa}, {0x4, 0x4, 0xf}, {0x4, 0x1, 0x0, 0x4}, {0x3ff, 0x1, 0xb, 0x7}, {0x5, 0x1, 0xc, 0x6}, {0x2, 0x4, 0xa, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000f00)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040004}, 0x4040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x8000) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='#', 0x1}], 0x1}, 0x400c804) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="43ba2a56fe5998b3678c606f499cc8711103f1da4a901556ef9bc05b806565f68e9565c6155c75e001bd51144814b05bdef0e890e729df27ad50a8322996", 0x3e}, {&(0x7f0000003440)="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", 0x461}], 0x3, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) 16.247326328s ago: executing program 4 (id=3747): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48283, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x0) 16.246539598s ago: executing program 2 (id=3748): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680), &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0xa, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x200, [{0x7, 0x5, 0x9}, {0x8, 0x2}]}, @enum64={0x5, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x6, 0x5}, {0x5, 0x6, 0xfdf}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @float={0x6}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0x8}, {0xf, 0xfffffff8}, {}, {0xb, 0xffff0001}, {0xf, 0xb2d}, {0xd, 0xc000000}]}]}, {0x0, [0x61, 0x30, 0x4f, 0x30, 0x2e, 0x30, 0x30, 0x61]}}, &(0x7f0000000d00)=""/149, 0xde, 0x95, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r7, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000f40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x1c, 0x9, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@generic={0x3, 0xa, 0x8, 0x488, 0xfc49}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000001200)='GPL\x00', 0xfff, 0x65, &(0x7f0000001240)=""/101, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0x2, 0x0, 0xffffff00}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000023c0)=[r6, r6], &(0x7f0000002400)=[{0x4, 0x2, 0x5}, {0x1, 0x3, 0xa, 0xc}, {0x5, 0x4, 0x4, 0x1}, {0x2, 0x3, 0x8, 0x8}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x3, 0xe, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x82}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000540)='GPL\x00', 0x5, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x5, '\x00', r9, @fallback=0x3, r10, 0x8, &(0x7f0000000e00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0xb, 0xbd94, 0x8}, 0x10, r11, r12, 0x6, 0x0, &(0x7f0000002500)=[{0x0, 0x5, 0x1, 0x4}, {0x0, 0x4, 0x9, 0x3}, {0x5, 0x5, 0x10, 0xa}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x4, 0xb, 0x1}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200fffffffc00000000000000000085000000530000008500200050002b13714fbc00009520000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r14) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r15, &(0x7f0000000000), 0x2a979d) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r15}, 0x8) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x5, 0xe6, 0xfe, 0x9, 0x0, 0x3, 0x1100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0xc}, 0x80, 0x9, 0x7, 0x2, 0x5800000000000000, 0x5, 0x3, 0x0, 0x9, 0x0, 0x5}, r15, 0x9, r16, 0x0) 16.198762671s ago: executing program 0 (id=3749): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000010000000002000000000cc11dd091d8d0e2d230b28a90831c43938a1d30b9d51a56cc40d41d861416be2daf5d72021ecbb6a87cb709c153b686e73baa587ecc985386b395a16b9c69f69fcc58e3b28e062aa9d54e924e3564f560d12c828f1ea111ebd2e6e4c51658ad6fb9360913b0792ecb9745c0d66905fb24b19dcc08dea6a8cd2beafa5d67776a7e1231260e396818cb3533a514b56b599cd8326b1f81cb79ead98a2ccd2ffdc2dcb35f2e8683cc06128da027218a3a9d92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200)}, 0x11efa, 0x7, 0x98, 0x3, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES16=r3], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x10}, 0x8020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0x0, 0x6, 0x7, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 16.194402971s ago: executing program 1 (id=3750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0b812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae7e0e306fdb4bab0a4331a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c15d4441f412e134809c1ea2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07464d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c60900000000000000e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c63737039350db59e25c796b7ee6c76f75dcd63809b03b2fbb0e3449c546835d1680b7ea28389898a39d63079906bcb011cfab4d68eaa57b87f80e27154fdf8f0f672f064d3b5f877f0c680b9b86bb4c6e1adeb237d6466685105f6a960a3800a0728815d4f0a25e865f0b4543c3af317a49c72b3d62e9ee12db4ed573692b31259b6430e1e02afc14696aabf8d98bc417e74c91e86eb8b43d6693f12f5f609bd24ed1fb10f7b70794a7aba2ab321a7743ca93d64af001aad4a48cf3fc02ea0115f19d8886c9451ce876b66a1fc09705148e0c6b00d4d79bb9db9f8ef3fa5065b7eb78c7f432eced38777ed438e296a62b5d5252577a1e96879d21d4caac371f0ee30ac7207faa4cd4dcfc091407be0d4aafca6bbdb", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x3}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x8020440, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000060000000800915b2827ec64e5d401a18524432709dc000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="00a4f75500000000003a83d8e9191c1a89007994678700000000000000002cbfca1961b637c6f20684", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r8, 0x0, 0xfffffffffffffffd}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7f, 0x20, 0x3, 0x6e, 0x0, 0x8, 0x14841, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x25c0, 0x1, 0x3, 0x6, 0x9, 0x3, 0x7, 0x0, 0xf5a, 0x0, 0x5}, r2, 0x1, r8, 0x7) r9 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0000000c0000000c00010000000000000000000d00000c01000000002e2e00"], 0x0, 0x28, 0x0, 0x1, 0x7}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f010081b801a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000000c0)="54f6d4d87e06f140c5f0cc61f6ab659b0a3fabaa55153b05509ba735eb7a985d8caeeac70478239588ef6fc9faf9f3787be64ab2656caec0675ebf087a0075984e4c9d9b070a0bf82bc087529f7de2b7a310faca4944ec", 0x57}], 0x2, 0x0, 0x0, 0x7400}, 0x10) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018f7ff00000000000cb6c8bcb000e000020000000300000000000085e9fe00000000"], 0x0, 0x26, 0x0, 0x8, 0xdd6}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 16.163843633s ago: executing program 4 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000004f720000000000"], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20008810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x16, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 399.226286ms ago: executing program 33 (id=3749): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305828, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000060000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000000000010000000002000000000cc11dd091d8d0e2d230b28a90831c43938a1d30b9d51a56cc40d41d861416be2daf5d72021ecbb6a87cb709c153b686e73baa587ecc985386b395a16b9c69f69fcc58e3b28e062aa9d54e924e3564f560d12c828f1ea111ebd2e6e4c51658ad6fb9360913b0792ecb9745c0d66905fb24b19dcc08dea6a8cd2beafa5d67776a7e1231260e396818cb3533a514b56b599cd8326b1f81cb79ead98a2ccd2ffdc2dcb35f2e8683cc06128da027218a3a9d92", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x4001000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200)}, 0x11efa, 0x7, 0x98, 0x3, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRES16=r3], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x10}, 0x8020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0x0, 0x6, 0x7, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') 212.269617ms ago: executing program 34 (id=3750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x3, 0x1000000, 0x0, 0x3}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x8020440, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000060000000800915b2827ec64e5d401a18524432709dc000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r4, @ANYBLOB="00a4f75500000000003a83d8e9191c1a89007994678700000000000000002cbfca1961b637c6f20684", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r8, 0x0, 0xfffffffffffffffd}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7f, 0x20, 0x3, 0x6e, 0x0, 0x8, 0x14841, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x25c0, 0x1, 0x3, 0x6, 0x9, 0x3, 0x7, 0x0, 0xf5a, 0x0, 0x5}, r2, 0x1, r8, 0x7) r9 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0000000c0000000c00010000000000000000000d00000c01000000002e2e00"], 0x0, 0x28, 0x0, 0x1, 0x7}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f010081b801a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000000c0)="54f6d4d87e06f140c5f0cc61f6ab659b0a3fabaa55153b05509ba735eb7a985d8caeeac70478239588ef6fc9faf9f3787be64ab2656caec0675ebf087a0075984e4c9d9b070a0bf82bc087529f7de2b7a310faca4944ec", 0x57}], 0x2, 0x0, 0x0, 0x7400}, 0x10) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018f7ff00000000000cb6c8bcb000e000020000000300000000000085e9fe00000000"], 0x0, 0x26, 0x0, 0x8, 0xdd6}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) 94.069874ms ago: executing program 35 (id=3748): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680), &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0xa, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x200, [{0x7, 0x5, 0x9}, {0x8, 0x2}]}, @enum64={0x5, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x6, 0x5}, {0x5, 0x6, 0xfdf}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x5}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @float={0x6}, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0x8}, {0xf, 0xfffffff8}, {}, {0xb, 0xffff0001}, {0xf, 0xb2d}, {0xd, 0xc000000}]}]}, {0x0, [0x61, 0x30, 0x4f, 0x30, 0x2e, 0x30, 0x30, 0x61]}}, &(0x7f0000000d00)=""/149, 0xde, 0x95, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r7, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000f40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x1c, 0x9, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@generic={0x3, 0xa, 0x8, 0x488, 0xfc49}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000001200)='GPL\x00', 0xfff, 0x65, &(0x7f0000001240)=""/101, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000002380)={0x5, 0x2, 0x0, 0xffffff00}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000023c0)=[r6, r6], &(0x7f0000002400)=[{0x4, 0x2, 0x5}, {0x1, 0x3, 0xa, 0xc}, {0x5, 0x4, 0x4, 0x1}, {0x2, 0x3, 0x8, 0x8}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x3, 0xe, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x82}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x1, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffffc}], &(0x7f0000000540)='GPL\x00', 0x5, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x5, '\x00', r9, @fallback=0x3, r10, 0x8, &(0x7f0000000e00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0xb, 0xbd94, 0x8}, 0x10, r11, r12, 0x6, 0x0, &(0x7f0000002500)=[{0x0, 0x5, 0x1, 0x4}, {0x0, 0x4, 0x9, 0x3}, {0x5, 0x5, 0x10, 0xa}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x4, 0xb, 0x1}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200fffffffc00000000000000000085000000530000008500200050002b13714fbc00009520000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r14) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r15, &(0x7f0000000000), 0x2a979d) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r15}, 0x8) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x5, 0xe6, 0xfe, 0x9, 0x0, 0x3, 0x1100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0xc}, 0x80, 0x9, 0x7, 0x2, 0x5800000000000000, 0x5, 0x3, 0x0, 0x9, 0x0, 0x5}, r15, 0x9, r16, 0x0) 0s ago: executing program 36 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000004f720000000000"], 0x0, 0x1a}, 0x28) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20008810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x16, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) kernel console output (not intermixed with test programs): rom_ep+0xa5/0x1a0 [ 561.023619][T14548] sctp_connect_new_asoc+0x2f9/0x6a0 [ 561.028961][T14548] ? __sctp_connect+0xd80/0xd80 [ 561.033953][T14548] ? __local_bh_enable_ip+0x13a/0x1c0 [ 561.039361][T14548] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 561.044947][T14548] ? security_sctp_bind_connect+0x89/0xb0 [ 561.050717][T14548] sctp_sendmsg+0x1575/0x28c0 [ 561.055461][T14548] ? sctp_getsockopt+0xb60/0xb60 [ 561.060457][T14548] ? aa_sk_perm+0x83c/0x970 [ 561.065008][T14548] ? aa_af_perm+0x330/0x330 [ 561.069554][T14548] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 561.076002][T14548] ? sock_rps_record_flow+0x19/0x3f0 [ 561.081323][T14548] ? inet_sendmsg+0xe9/0x2f0 [ 561.085938][T14548] ? inet_send_prepare+0x260/0x260 [ 561.091077][T14548] ____sys_sendmsg+0x5ba/0x960 [ 561.095883][T14548] ? __asan_memset+0x22/0x40 [ 561.100507][T14548] ? __sys_sendmsg_sock+0x30/0x30 [ 561.105562][T14548] ? __import_iovec+0x3fa/0x850 [ 561.110453][T14548] ? import_iovec+0x73/0xa0 [ 561.114996][T14548] ___sys_sendmsg+0x2a6/0x360 [ 561.119697][T14548] ? get_pid_task+0x20/0x1e0 [ 561.124328][T14548] ? __sys_sendmsg+0x2a0/0x2a0 [ 561.129143][T14548] ? __lock_acquire+0x7d40/0x7d40 [ 561.134217][T14548] __se_sys_sendmsg+0x1c2/0x2b0 [ 561.139093][T14548] ? __x64_sys_sendmsg+0x80/0x80 [ 561.144065][T14548] ? lockdep_hardirqs_on+0x98/0x150 [ 561.149297][T14548] do_syscall_64+0x55/0xa0 [ 561.153745][T14548] ? clear_bhb_loop+0x40/0x90 [ 561.158453][T14548] ? clear_bhb_loop+0x40/0x90 [ 561.163157][T14548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.169088][T14548] RIP: 0033:0x7fdfa599af79 [ 561.173534][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.193165][T14548] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.201609][T14548] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 561.209609][T14548] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 561.217637][T14548] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 561.225645][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 561.233639][T14548] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 561.241736][T14548] [ 561.648698][T14560] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 561.738567][T14560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2645'. [ 561.755890][T14560] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 561.766429][T14560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.918054][T14569] FAULT_INJECTION: forcing a failure. [ 561.918054][T14569] name failslab, interval 1, probability 0, space 0, times 0 [ 561.968708][T14569] CPU: 0 PID: 14569 Comm: syz.1.2656 Not tainted syzkaller #0 [ 561.976412][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 561.986583][T14569] Call Trace: [ 561.989985][T14569] [ 561.993041][T14569] dump_stack_lvl+0x18c/0x250 [ 561.997885][T14569] ? show_regs_print_info+0x20/0x20 [ 562.003211][T14569] ? load_image+0x400/0x400 [ 562.007855][T14569] ? verify_lock_unused+0x140/0x140 [ 562.013181][T14569] ? perf_trace_lock_acquire+0x34f/0x410 [ 562.019024][T14569] should_fail_ex+0x39d/0x4d0 [ 562.023869][T14569] should_failslab+0x9/0x20 [ 562.028482][T14569] slab_pre_alloc_hook+0x59/0x310 [ 562.033679][T14569] kmem_cache_alloc+0x5a/0x2d0 [ 562.038566][T14569] ? skb_clone+0x1eb/0x370 [ 562.043159][T14569] skb_clone+0x1eb/0x370 [ 562.047547][T14569] __netlink_deliver_tap+0x41c/0x830 [ 562.053041][T14569] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.058381][T14569] netlink_deliver_tap+0x19c/0x1b0 [ 562.063633][T14569] netlink_unicast+0x72c/0x8d0 [ 562.068597][T14569] netlink_sendmsg+0x8d0/0xbf0 [ 562.073519][T14569] ? perf_trace_lock+0x304/0x3b0 [ 562.078631][T14569] ? netlink_getsockopt+0x590/0x590 [ 562.083991][T14569] ? aa_sock_msg_perm+0x94/0x150 [ 562.089067][T14569] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 562.094474][T14569] ? security_socket_sendmsg+0x80/0xa0 [ 562.100052][T14569] ? netlink_getsockopt+0x590/0x590 [ 562.105387][T14569] ____sys_sendmsg+0x5ba/0x960 [ 562.110337][T14569] ? __asan_memset+0x22/0x40 [ 562.115057][T14569] ? __sys_sendmsg_sock+0x30/0x30 [ 562.120210][T14569] ? __import_iovec+0x5f2/0x850 [ 562.125262][T14569] ? import_iovec+0x73/0xa0 [ 562.130022][T14569] ___sys_sendmsg+0x2a6/0x360 [ 562.134848][T14569] ? __sys_sendmsg+0x2a0/0x2a0 [ 562.139897][T14569] ? __lock_acquire+0x7d40/0x7d40 [ 562.145209][T14569] __se_sys_sendmsg+0x1c2/0x2b0 [ 562.150204][T14569] ? __x64_sys_sendmsg+0x80/0x80 [ 562.155376][T14569] ? lockdep_hardirqs_on+0x98/0x150 [ 562.160729][T14569] do_syscall_64+0x55/0xa0 [ 562.165253][T14569] ? clear_bhb_loop+0x40/0x90 [ 562.170038][T14569] ? clear_bhb_loop+0x40/0x90 [ 562.174847][T14569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.180858][T14569] RIP: 0033:0x7f8ee899af79 [ 562.185386][T14569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.205148][T14569] RSP: 002b:00007f8ee98c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.213793][T14569] RAX: ffffffffffffffda RBX: 00007f8ee8c16090 RCX: 00007f8ee899af79 [ 562.221879][T14569] RDX: 0000000004000004 RSI: 0000200000000300 RDI: 000000000000000c [ 562.229976][T14569] RBP: 00007f8ee98c6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.238053][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.246140][T14569] R13: 00007f8ee8c16128 R14: 00007f8ee8c16090 R15: 00007ffe355c2ab8 [ 562.254333][T14569] [ 562.618876][T14574] netlink: 'syz.2.2648': attribute type 10 has an invalid length. [ 562.897265][T14578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2651'. [ 562.911952][T14578] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 562.923730][T14578] CPU: 1 PID: 14578 Comm: syz.1.2651 Not tainted syzkaller #0 [ 562.931349][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 562.941454][T14578] Call Trace: [ 562.944779][T14578] [ 562.947758][T14578] dump_stack_lvl+0x18c/0x250 [ 562.952535][T14578] ? show_regs_print_info+0x20/0x20 [ 562.957814][T14578] ? load_image+0x400/0x400 [ 562.962402][T14578] sysfs_warn_dup+0x8e/0xa0 [ 562.966961][T14578] sysfs_do_create_link_sd+0xc0/0x110 [ 562.972397][T14578] device_add_class_symlinks+0x1cf/0x240 [ 562.978105][T14578] device_add+0x507/0xc20 [ 562.982507][T14578] wiphy_register+0x1dad/0x2ae0 [ 562.987458][T14578] ? cfg80211_event_work+0x40/0x40 [ 562.992630][T14578] ? minstrel_ht_alloc+0x88a/0x990 [ 562.997811][T14578] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 563.003947][T14578] ieee80211_register_hw+0x3464/0x4250 [ 563.009515][T14578] ? ieee80211_tasklet_handler+0x20/0x20 [ 563.015257][T14578] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 563.021222][T14578] ? __debug_object_init+0xec/0x450 [ 563.026496][T14578] ? __asan_memset+0x22/0x40 [ 563.031168][T14578] ? __hrtimer_init+0x186/0x270 [ 563.036059][T14578] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 563.041939][T14578] ? mac80211_hwsim_free+0x220/0x220 [ 563.047273][T14578] ? rcu_is_watching+0x15/0xb0 [ 563.052079][T14578] ? kstrndup+0xbd/0x140 [ 563.056384][T14578] hwsim_new_radio_nl+0xdc9/0x1a90 [ 563.061542][T14578] ? __nla_validate+0x50/0x50 [ 563.066382][T14578] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 563.072759][T14578] ? __nla_parse+0x40/0x50 [ 563.077350][T14578] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 563.083732][T14578] genl_family_rcv_msg_doit+0x211/0x310 [ 563.089323][T14578] ? end_current_label_crit_section+0x170/0x170 [ 563.095690][T14578] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 563.101716][T14578] ? bpf_lsm_capable+0x9/0x10 [ 563.106429][T14578] ? security_capable+0x89/0xb0 [ 563.111329][T14578] genl_rcv_msg+0x619/0x7a0 [ 563.115899][T14578] ? genl_bind+0x360/0x360 [ 563.120359][T14578] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 563.126742][T14578] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 563.133378][T14578] ? perf_trace_lock+0xfc/0x3b0 [ 563.138303][T14578] netlink_rcv_skb+0x241/0x4d0 [ 563.143129][T14578] ? genl_bind+0x360/0x360 [ 563.147601][T14578] ? netlink_ack+0x1180/0x1180 [ 563.152422][T14578] ? __lock_acquire+0x7d40/0x7d40 [ 563.157507][T14578] ? down_read+0x1ac/0x2e0 [ 563.162109][T14578] genl_rcv+0x28/0x40 [ 563.166172][T14578] netlink_unicast+0x751/0x8d0 [ 563.170997][T14578] netlink_sendmsg+0x8d0/0xbf0 [ 563.175817][T14578] ? netlink_getsockopt+0x590/0x590 [ 563.181059][T14578] ? aa_sock_msg_perm+0x94/0x150 [ 563.186034][T14578] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 563.191360][T14578] ? security_socket_sendmsg+0x80/0xa0 [ 563.196849][T14578] ? netlink_getsockopt+0x590/0x590 [ 563.202108][T14578] ____sys_sendmsg+0x5ba/0x960 [ 563.206930][T14578] ? __asan_memset+0x22/0x40 [ 563.211595][T14578] ? __sys_sendmsg_sock+0x30/0x30 [ 563.216678][T14578] ? __import_iovec+0x5f2/0x850 [ 563.221621][T14578] ? import_iovec+0x73/0xa0 [ 563.226178][T14578] ___sys_sendmsg+0x2a6/0x360 [ 563.230901][T14578] ? __sys_sendmsg+0x2a0/0x2a0 [ 563.235795][T14578] __se_sys_sendmsg+0x1c2/0x2b0 [ 563.240683][T14578] ? __x64_sys_sendmsg+0x80/0x80 [ 563.245672][T14578] ? lockdep_hardirqs_on+0x98/0x150 [ 563.250934][T14578] do_syscall_64+0x55/0xa0 [ 563.255388][T14578] ? clear_bhb_loop+0x40/0x90 [ 563.260111][T14578] ? clear_bhb_loop+0x40/0x90 [ 563.264829][T14578] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.270757][T14578] RIP: 0033:0x7f8ee899af79 [ 563.275201][T14578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.294939][T14578] RSP: 002b:00007f8ee98e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.303392][T14578] RAX: ffffffffffffffda RBX: 00007f8ee8c15fa0 RCX: 00007f8ee899af79 [ 563.311393][T14578] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 563.319391][T14578] RBP: 00007f8ee8a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 563.327394][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.335394][T14578] R13: 00007f8ee8c16038 R14: 00007f8ee8c15fa0 R15: 00007ffe355c2ab8 [ 563.343414][T14578] [ 563.537384][T13752] tipc: Subscription rejected, illegal request [ 564.281113][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.287510][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.285782][T14597] IPv6: Can't replace route, no match found [ 565.714368][T14607] netlink: 'syz.4.2663': attribute type 10 has an invalid length. [ 566.501006][T14626] FAULT_INJECTION: forcing a failure. [ 566.501006][T14626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.533594][T14626] CPU: 0 PID: 14626 Comm: syz.4.2668 Not tainted syzkaller #0 [ 566.541158][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 566.551308][T14626] Call Trace: [ 566.554630][T14626] [ 566.557609][T14626] dump_stack_lvl+0x18c/0x250 [ 566.562367][T14626] ? show_regs_print_info+0x20/0x20 [ 566.567641][T14626] ? load_image+0x400/0x400 [ 566.572208][T14626] ? __lock_acquire+0x7d40/0x7d40 [ 566.577288][T14626] ? snprintf+0xe9/0x140 [ 566.581599][T14626] should_fail_ex+0x39d/0x4d0 [ 566.586346][T14626] _copy_to_user+0x2f/0xa0 [ 566.590824][T14626] simple_read_from_buffer+0xe7/0x150 [ 566.596271][T14626] proc_fail_nth_read+0x1e8/0x260 [ 566.601369][T14626] ? proc_fault_inject_write+0x360/0x360 [ 566.607057][T14626] ? fsnotify_perm+0x271/0x5e0 [ 566.611871][T14626] ? proc_fault_inject_write+0x360/0x360 [ 566.617555][T14626] vfs_read+0x28b/0x970 [ 566.621754][T14626] ? kernel_read+0x1e0/0x1e0 [ 566.626372][T14626] ? __fget_files+0x28/0x4b0 [ 566.630996][T14626] ? __fget_files+0x28/0x4b0 [ 566.635626][T14626] ? __fget_files+0x43d/0x4b0 [ 566.640343][T14626] ? __fdget_pos+0x2a3/0x330 [ 566.644987][T14626] ? ksys_read+0x75/0x260 [ 566.649382][T14626] ksys_read+0x150/0x260 [ 566.653683][T14626] ? vfs_write+0x990/0x990 [ 566.658157][T14626] ? lockdep_hardirqs_on+0x98/0x150 [ 566.663484][T14626] do_syscall_64+0x55/0xa0 [ 566.667936][T14626] ? clear_bhb_loop+0x40/0x90 [ 566.672647][T14626] ? clear_bhb_loop+0x40/0x90 [ 566.677363][T14626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.683293][T14626] RIP: 0033:0x7ff6c175b84e [ 566.687735][T14626] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 566.707383][T14626] RSP: 002b:00007ff6c2580fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 566.715852][T14626] RAX: ffffffffffffffda RBX: 00007ff6c25816c0 RCX: 00007ff6c175b84e [ 566.723957][T14626] RDX: 000000000000000f RSI: 00007ff6c25810a0 RDI: 0000000000000006 [ 566.731968][T14626] RBP: 00007ff6c2581090 R08: 0000000000000000 R09: 0000000000000000 [ 566.739968][T14626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.748013][T14626] R13: 00007ff6c1a16038 R14: 00007ff6c1a15fa0 R15: 00007ffda8187f08 [ 566.756046][T14626] [ 567.154981][T14646] netlink: 'syz.4.2675': attribute type 21 has an invalid length. [ 567.214295][T14651] FAULT_INJECTION: forcing a failure. [ 567.214295][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 567.227345][T14651] CPU: 0 PID: 14651 Comm: syz.0.2676 Not tainted syzkaller #0 [ 567.234860][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 567.244968][T14651] Call Trace: [ 567.248299][T14651] [ 567.251285][T14651] dump_stack_lvl+0x18c/0x250 [ 567.256037][T14651] ? lock_chain_count+0x20/0x20 [ 567.260951][T14651] ? show_regs_print_info+0x20/0x20 [ 567.266206][T14651] ? load_image+0x400/0x400 [ 567.270750][T14651] ? lockdep_hardirqs_on+0x98/0x150 [ 567.275988][T14651] should_fail_ex+0x39d/0x4d0 [ 567.280708][T14651] should_failslab+0x9/0x20 [ 567.285245][T14651] slab_pre_alloc_hook+0x59/0x310 [ 567.290317][T14651] kmem_cache_alloc+0x5a/0x2d0 [ 567.295115][T14651] ? skb_clone+0x1eb/0x370 [ 567.299572][T14651] skb_clone+0x1eb/0x370 [ 567.303852][T14651] ? dev_queue_xmit_nit+0x212/0xbb0 [ 567.309089][T14651] dev_queue_xmit_nit+0x24d/0xbb0 [ 567.314144][T14651] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 567.319290][T14651] ? validate_xmit_skb+0x949/0xf60 [ 567.324441][T14651] dev_hard_start_xmit+0x148/0x740 [ 567.329596][T14651] __dev_queue_xmit+0x1ac2/0x36b0 [ 567.334656][T14651] ? __dev_queue_xmit+0x26b/0x36b0 [ 567.339818][T14651] ? netdev_core_pick_tx+0x340/0x340 [ 567.345132][T14651] ? __copy_skb_header+0xa3/0x4a0 [ 567.350183][T14651] ? __asan_memcpy+0x40/0x70 [ 567.354809][T14651] ? __skb_clone+0x63/0x790 [ 567.359347][T14651] ? __skb_clone+0x480/0x790 [ 567.364101][T14651] ? skb_clone+0x21f/0x370 [ 567.368558][T14651] __netlink_deliver_tap+0x5ab/0x830 [ 567.373907][T14651] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.379142][T14651] netlink_deliver_tap+0x19c/0x1b0 [ 567.384294][T14651] netlink_unicast+0x72c/0x8d0 [ 567.389100][T14651] netlink_sendmsg+0x8d0/0xbf0 [ 567.393903][T14651] ? lockdep_hardirqs_on+0x98/0x150 [ 567.399134][T14651] ? netlink_getsockopt+0x590/0x590 [ 567.404372][T14651] ? netlink_getsockopt+0x590/0x590 [ 567.409636][T14651] ____sys_sendmsg+0x5ba/0x960 [ 567.414440][T14651] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.420744][T14651] ? __asan_memset+0x22/0x40 [ 567.425391][T14651] ? __sys_sendmsg_sock+0x30/0x30 [ 567.430473][T14651] ? __import_iovec+0x5f2/0x850 [ 567.435403][T14651] ? import_iovec+0x73/0xa0 [ 567.439987][T14651] ___sys_sendmsg+0x2a6/0x360 [ 567.444714][T14651] ? __sys_sendmsg+0x2a0/0x2a0 [ 567.449539][T14651] ? __fget_files+0x3bf/0x4b0 [ 567.454303][T14651] __se_sys_sendmsg+0x1c2/0x2b0 [ 567.459215][T14651] ? __x64_sys_sendmsg+0x80/0x80 [ 567.464205][T14651] ? lockdep_hardirqs_on+0x98/0x150 [ 567.469442][T14651] do_syscall_64+0x55/0xa0 [ 567.473920][T14651] ? clear_bhb_loop+0x40/0x90 [ 567.478637][T14651] ? clear_bhb_loop+0x40/0x90 [ 567.483344][T14651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.489271][T14651] RIP: 0033:0x7fdfa599af79 [ 567.493712][T14651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.513358][T14651] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.521815][T14651] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 567.529821][T14651] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 567.537816][T14651] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 567.546077][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.554074][T14651] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 567.562094][T14651] [ 567.578493][T14644] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2674'. [ 568.682468][T14685] netlink: 'syz.0.2685': attribute type 39 has an invalid length. [ 568.973334][T14685] hsr_slave_1 (unregistering): left promiscuous mode [ 569.182721][T14683] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2686'. [ 569.329107][T14709] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2694'. [ 569.721247][T14724] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 569.729134][T14724] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2699'. [ 569.767452][T14724] netlink: 'syz.2.2699': attribute type 1 has an invalid length. [ 569.777650][T14724] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2699'. [ 569.941010][T14729] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2701'. [ 569.962439][T14729] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 570.053064][T14729] netlink: 'syz.2.2701': attribute type 10 has an invalid length. [ 570.107733][T14729] team0: Port device dummy0 added [ 570.128639][T14731] netlink: 'syz.2.2701': attribute type 10 has an invalid length. [ 570.438431][T14731] team0: Port device dummy0 removed [ 570.616653][T14731] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 570.638846][T14729] netlink: 'syz.2.2701': attribute type 4 has an invalid length. [ 570.674109][T14729] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2701'. [ 570.728927][T14729] .`: renamed from bond0 (while UP) [ 570.841385][T14735] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2703'. [ 570.856966][T14741] IPv6: Can't replace route, no match found [ 570.895596][T14744] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 570.961807][T14744] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 571.386507][T14753] netlink: 'syz.2.2706': attribute type 39 has an invalid length. [ 571.396230][T14756] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2708'. [ 571.606334][T14753] hsr_slave_1 (unregistering): left promiscuous mode [ 571.866452][T14751] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2714'. [ 572.749407][T14785] netlink: 'syz.1.2720': attribute type 10 has an invalid length. [ 572.824140][T14785] __nla_validate_parse: 3 callbacks suppressed [ 572.824159][T14785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2720'. [ 572.942375][T14785] dummy0: entered promiscuous mode [ 573.017615][T14785] dummy0: entered allmulticast mode [ 573.136432][T14785] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 573.298948][T14783] IPv6: Can't replace route, no match found [ 575.927783][T14821] netlink: 'syz.0.2730': attribute type 10 has an invalid length. [ 575.953311][T14821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2730'. [ 575.964310][T14821] dummy0: entered promiscuous mode [ 575.969877][T14821] dummy0: entered allmulticast mode [ 575.981948][T14821] bridge0: port 3(dummy0) entered blocking state [ 575.988799][T14821] bridge0: port 3(dummy0) entered disabled state [ 576.001966][T14821] bridge0: port 3(dummy0) entered blocking state [ 576.008622][T14821] bridge0: port 3(dummy0) entered forwarding state [ 576.188376][T14829] netlink: 'syz.0.2734': attribute type 3 has an invalid length. [ 576.196885][T14829] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 576.208636][T14829] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2734'. [ 576.931572][T14835] netlink: 'syz.4.2736': attribute type 2 has an invalid length. [ 576.950967][T14835] netlink: 'syz.4.2736': attribute type 8 has an invalid length. [ 576.972477][T14835] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2736'. [ 584.018293][T14871] netlink: 'syz.2.2742': attribute type 10 has an invalid length. [ 584.043770][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2742'. [ 584.072378][T14871] dummy0: entered promiscuous mode [ 584.088835][T14871] dummy0: entered allmulticast mode [ 584.130007][T14871] .`: (slave dummy0): Releasing backup interface [ 584.150464][T14877] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2743'. [ 584.224613][T14871] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 585.641990][T14913] netlink: 'syz.4.2758': attribute type 29 has an invalid length. [ 585.658534][T14913] netlink: 'syz.4.2758': attribute type 3 has an invalid length. [ 585.677410][T14911] syz.0.2757[14911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.677557][T14911] syz.0.2757[14911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.689486][T14913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2758'. [ 586.475236][T14940] syz.4.2766[14940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.475381][T14940] syz.4.2766[14940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 586.525240][T14943] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2767'. [ 586.572639][T14943] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2767'. [ 586.592521][T14943] tipc: Started in network mode [ 586.618870][T14943] tipc: Node identity b, cluster identity 73 [ 586.638670][T14943] tipc: Node number set to 11 [ 586.803899][T14949] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 586.812904][T14949] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2770'. [ 586.836642][T14951] FAULT_INJECTION: forcing a failure. [ 586.836642][T14951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.861873][T14953] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.2771'. [ 586.917691][T14951] CPU: 0 PID: 14951 Comm: syz.0.2772 Not tainted syzkaller #0 [ 586.925257][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 586.935371][T14951] Call Trace: [ 586.938702][T14951] [ 586.941684][T14951] dump_stack_lvl+0x18c/0x250 [ 586.946439][T14951] ? show_regs_print_info+0x20/0x20 [ 586.951707][T14951] ? load_image+0x400/0x400 [ 586.956279][T14951] ? __lock_acquire+0x7d40/0x7d40 [ 586.961364][T14951] ? snprintf+0xe9/0x140 [ 586.965664][T14951] should_fail_ex+0x39d/0x4d0 [ 586.970400][T14951] _copy_to_user+0x2f/0xa0 [ 586.974864][T14951] simple_read_from_buffer+0xe7/0x150 [ 586.980284][T14951] proc_fail_nth_read+0x1e8/0x260 [ 586.985351][T14951] ? proc_fault_inject_write+0x360/0x360 [ 586.991021][T14951] ? fsnotify_perm+0x271/0x5e0 [ 586.995817][T14951] ? proc_fault_inject_write+0x360/0x360 [ 587.001522][T14951] vfs_read+0x28b/0x970 [ 587.005726][T14951] ? kernel_read+0x1e0/0x1e0 [ 587.010352][T14951] ? __fget_files+0x28/0x4b0 [ 587.014972][T14951] ? __fget_files+0x28/0x4b0 [ 587.019597][T14951] ? __fget_files+0x43d/0x4b0 [ 587.024313][T14951] ? __fdget_pos+0x2a3/0x330 [ 587.028936][T14951] ? ksys_read+0x75/0x260 [ 587.033300][T14951] ksys_read+0x150/0x260 [ 587.037579][T14951] ? vfs_write+0x990/0x990 [ 587.042043][T14951] ? lockdep_hardirqs_on+0x98/0x150 [ 587.047283][T14951] do_syscall_64+0x55/0xa0 [ 587.051749][T14951] ? clear_bhb_loop+0x40/0x90 [ 587.056456][T14951] ? clear_bhb_loop+0x40/0x90 [ 587.061167][T14951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.067086][T14951] RIP: 0033:0x7fdfa595b84e [ 587.071537][T14951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.091181][T14951] RSP: 002b:00007fdfa6833fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.099632][T14951] RAX: ffffffffffffffda RBX: 00007fdfa68346c0 RCX: 00007fdfa595b84e [ 587.107695][T14951] RDX: 000000000000000f RSI: 00007fdfa68340a0 RDI: 0000000000000004 [ 587.115879][T14951] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 587.123885][T14951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.131913][T14951] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 587.140019][T14951] [ 587.207364][T14960] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2774'. [ 587.336170][ T5082] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 587.801217][T14975] netlink: 'syz.1.2779': attribute type 10 has an invalid length. [ 588.787330][T14987] delete_channel: no stack [ 589.260041][T15001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2787'. [ 589.272528][T15001] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 589.280949][T15001] CPU: 0 PID: 15001 Comm: syz.1.2787 Not tainted syzkaller #0 [ 589.288514][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 589.298796][T15001] Call Trace: [ 589.302129][T15001] [ 589.305109][T15001] dump_stack_lvl+0x18c/0x250 [ 589.309867][T15001] ? show_regs_print_info+0x20/0x20 [ 589.315131][T15001] ? load_image+0x400/0x400 [ 589.319709][T15001] sysfs_warn_dup+0x8e/0xa0 [ 589.324264][T15001] sysfs_do_create_link_sd+0xc0/0x110 [ 589.329696][T15001] device_add_class_symlinks+0x1cf/0x240 [ 589.335413][T15001] device_add+0x507/0xc20 [ 589.339820][T15001] wiphy_register+0x1dad/0x2ae0 [ 589.344776][T15001] ? cfg80211_event_work+0x40/0x40 [ 589.349967][T15001] ? minstrel_ht_alloc+0x88a/0x990 [ 589.355156][T15001] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 589.361286][T15001] ieee80211_register_hw+0x3464/0x4250 [ 589.366843][T15001] ? ieee80211_tasklet_handler+0x20/0x20 [ 589.372538][T15001] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 589.378495][T15001] ? __debug_object_init+0xec/0x450 [ 589.383866][T15001] ? __asan_memset+0x22/0x40 [ 589.388518][T15001] ? __hrtimer_init+0x186/0x270 [ 589.393418][T15001] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 589.399205][T15001] ? mac80211_hwsim_free+0x220/0x220 [ 589.404533][T15001] ? rcu_is_watching+0x15/0xb0 [ 589.409340][T15001] ? kstrndup+0xbd/0x140 [ 589.413622][T15001] hwsim_new_radio_nl+0xdc9/0x1a90 [ 589.418782][T15001] ? __nla_validate+0x50/0x50 [ 589.423609][T15001] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 589.429994][T15001] ? __nla_parse+0x40/0x50 [ 589.434499][T15001] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 589.440910][T15001] genl_family_rcv_msg_doit+0x211/0x310 [ 589.446612][T15001] ? end_current_label_crit_section+0x170/0x170 [ 589.452907][T15001] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 589.458866][T15001] ? bpf_lsm_capable+0x9/0x10 [ 589.463583][T15001] ? security_capable+0x89/0xb0 [ 589.468478][T15001] genl_rcv_msg+0x619/0x7a0 [ 589.473047][T15001] ? genl_bind+0x360/0x360 [ 589.477519][T15001] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 589.483898][T15001] ? ref_tracker_free+0x690/0x840 [ 589.488967][T15001] netlink_rcv_skb+0x241/0x4d0 [ 589.493857][T15001] ? genl_bind+0x360/0x360 [ 589.498310][T15001] ? netlink_ack+0x1180/0x1180 [ 589.503132][T15001] ? __lock_acquire+0x7d40/0x7d40 [ 589.508213][T15001] ? down_read+0x1ac/0x2e0 [ 589.512764][T15001] genl_rcv+0x28/0x40 [ 589.516794][T15001] netlink_unicast+0x751/0x8d0 [ 589.521620][T15001] netlink_sendmsg+0x8d0/0xbf0 [ 589.526437][T15001] ? netlink_getsockopt+0x590/0x590 [ 589.531697][T15001] ? aa_sock_msg_perm+0x94/0x150 [ 589.536677][T15001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 589.542001][T15001] ? security_socket_sendmsg+0x80/0xa0 [ 589.547488][T15001] ? netlink_getsockopt+0x590/0x590 [ 589.552743][T15001] ____sys_sendmsg+0x5ba/0x960 [ 589.557558][T15001] ? __asan_memset+0x22/0x40 [ 589.562180][T15001] ? __sys_sendmsg_sock+0x30/0x30 [ 589.567240][T15001] ? __import_iovec+0x5f2/0x850 [ 589.572137][T15001] ? import_iovec+0x73/0xa0 [ 589.576721][T15001] ___sys_sendmsg+0x2a6/0x360 [ 589.581452][T15001] ? __sys_sendmsg+0x2a0/0x2a0 [ 589.586307][T15001] __se_sys_sendmsg+0x1c2/0x2b0 [ 589.591187][T15001] ? __x64_sys_sendmsg+0x80/0x80 [ 589.596202][T15001] ? lockdep_hardirqs_on+0x98/0x150 [ 589.601449][T15001] do_syscall_64+0x55/0xa0 [ 589.605903][T15001] ? clear_bhb_loop+0x40/0x90 [ 589.610646][T15001] ? clear_bhb_loop+0x40/0x90 [ 589.615361][T15001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.621282][T15001] RIP: 0033:0x7f8ee899af79 [ 589.625962][T15001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.645801][T15001] RSP: 002b:00007f8ee98e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.654265][T15001] RAX: ffffffffffffffda RBX: 00007f8ee8c15fa0 RCX: 00007f8ee899af79 [ 589.662273][T15001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 589.670284][T15001] RBP: 00007f8ee8a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 589.678278][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.686293][T15001] R13: 00007f8ee8c16038 R14: 00007f8ee8c15fa0 R15: 00007ffe355c2ab8 [ 589.694314][T15001] [ 589.857191][T15006] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2789'. [ 589.872887][T15006] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 589.881669][T15006] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 589.995318][T15011] netlink: 'syz.4.2790': attribute type 10 has an invalid length. [ 590.027444][T15001] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 590.042091][T15001] dummy0: left promiscuous mode [ 590.047713][T15001] dummy0: left allmulticast mode [ 590.293418][T15001] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 590.336313][T15001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2787'. [ 590.402690][T15015] bridge_slave_0: entered promiscuous mode [ 590.409089][T15015] bridge_slave_0: entered allmulticast mode [ 590.426180][T15001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2787'. [ 590.530970][T15014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2787'. [ 590.549244][T15007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2787'. [ 591.088543][T15040] syz.4.2798[15040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.088700][T15040] syz.4.2798[15040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.114544][T15035] syzkaller0: entered promiscuous mode [ 591.146753][T15035] syzkaller0: entered allmulticast mode [ 593.895720][T15043] netlink: 'syz.4.2801': attribute type 10 has an invalid length. [ 594.297205][T15067] netlink: 209340 bytes leftover after parsing attributes in process `syz.1.2809'. [ 594.866072][T15079] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2813'. [ 595.078708][T15088] netlink: 'syz.0.2816': attribute type 10 has an invalid length. [ 596.437131][T15128] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2825'. [ 596.508040][T15137] netlink: 'syz.2.2830': attribute type 10 has an invalid length. [ 597.148664][T15164] netlink: 'syz.2.2840': attribute type 10 has an invalid length. [ 597.559087][T15169] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2841'. [ 597.731106][T15174] netlink: 'syz.4.2844': attribute type 13 has an invalid length. [ 597.742080][T15174] netlink: 'syz.4.2844': attribute type 58 has an invalid length. [ 597.760432][T15174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2844'. [ 599.892095][T15181] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 600.017769][T15187] netlink: 'syz.2.2849': attribute type 10 has an invalid length. [ 600.329314][T15195] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2851'. [ 601.107215][T15220] netlink: 'syz.4.2860': attribute type 10 has an invalid length. [ 603.851782][T15249] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 604.751951][T15276] netlink: 'syz.4.2879': attribute type 2 has an invalid length. [ 604.775011][T15276] netlink: 'syz.4.2879': attribute type 8 has an invalid length. [ 604.795517][T15276] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2879'. [ 604.882317][T15278] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 605.234611][T15296] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 605.643073][T15311] netlink: 'syz.2.2894': attribute type 10 has an invalid length. [ 606.211012][T15331] FAULT_INJECTION: forcing a failure. [ 606.211012][T15331] name failslab, interval 1, probability 0, space 0, times 0 [ 606.224542][T15331] CPU: 1 PID: 15331 Comm: syz.1.2900 Not tainted syzkaller #0 [ 606.232062][T15331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 606.242159][T15331] Call Trace: [ 606.245484][T15331] [ 606.248464][T15331] dump_stack_lvl+0x18c/0x250 [ 606.253209][T15331] ? show_regs_print_info+0x20/0x20 [ 606.258468][T15331] ? load_image+0x400/0x400 [ 606.263037][T15331] ? __might_sleep+0xe0/0xe0 [ 606.267673][T15331] ? __lock_acquire+0x7d40/0x7d40 [ 606.272746][T15331] ? _copy_from_iter+0x1f1/0x12e0 [ 606.277834][T15331] should_fail_ex+0x39d/0x4d0 [ 606.282571][T15331] should_failslab+0x9/0x20 [ 606.287131][T15331] slab_pre_alloc_hook+0x59/0x310 [ 606.292217][T15331] kmem_cache_alloc_node+0x60/0x320 [ 606.297474][T15331] ? __alloc_skb+0x103/0x2c0 [ 606.302130][T15331] __alloc_skb+0x103/0x2c0 [ 606.306608][T15331] tipc_buf_acquire+0x2b/0xe0 [ 606.311334][T15331] tipc_msg_build+0x8c3/0xee0 [ 606.316075][T15331] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 606.322190][T15331] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 606.328488][T15331] __tipc_sendmsg+0x1c70/0x2bb0 [ 606.333408][T15331] ? rht_unlock+0x1d0/0x1d0 [ 606.337994][T15331] ? __lock_acquire+0x1273/0x7d40 [ 606.343078][T15331] ? register_lock_class+0xc4/0x8a0 [ 606.348326][T15331] ? wait_woken+0x180/0x180 [ 606.352878][T15331] ? is_dynamic_key+0x260/0x260 [ 606.357800][T15331] ? mark_lock+0x94/0x320 [ 606.362182][T15331] ? __lock_acquire+0x1347/0x7d40 [ 606.367287][T15331] ? verify_lock_unused+0x140/0x140 [ 606.372537][T15331] ? verify_lock_unused+0x140/0x140 [ 606.377794][T15331] __tipc_sendstream+0x1039/0x1270 [ 606.382983][T15331] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 606.389016][T15331] ? lock_chain_count+0x20/0x20 [ 606.393963][T15331] ? tsk_advance_rx_queue+0x310/0x310 [ 606.399385][T15331] ? __local_bh_enable_ip+0x13a/0x1c0 [ 606.404811][T15331] ? _local_bh_enable+0xa0/0xa0 [ 606.409717][T15331] tipc_sendstream+0x55/0x70 [ 606.414348][T15331] ? tipc_getsockopt+0x5a0/0x5a0 [ 606.419331][T15331] ____sys_sendmsg+0x5ba/0x960 [ 606.424156][T15331] ? __lock_acquire+0x7d40/0x7d40 [ 606.429234][T15331] ? __asan_memset+0x22/0x40 [ 606.433879][T15331] ? __sys_sendmsg_sock+0x30/0x30 [ 606.438954][T15331] ? __import_iovec+0x5f2/0x850 [ 606.443873][T15331] ? import_iovec+0x73/0xa0 [ 606.448435][T15331] ___sys_sendmsg+0x2a6/0x360 [ 606.453161][T15331] ? get_pid_task+0x20/0x1e0 [ 606.457824][T15331] ? __sys_sendmsg+0x2a0/0x2a0 [ 606.462681][T15331] ? __lock_acquire+0x7d40/0x7d40 [ 606.467822][T15331] __se_sys_sendmsg+0x1c2/0x2b0 [ 606.472720][T15331] ? __x64_sys_sendmsg+0x80/0x80 [ 606.477825][T15331] ? lockdep_hardirqs_on+0x98/0x150 [ 606.483070][T15331] do_syscall_64+0x55/0xa0 [ 606.487537][T15331] ? clear_bhb_loop+0x40/0x90 [ 606.492262][T15331] ? clear_bhb_loop+0x40/0x90 [ 606.496991][T15331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.502932][T15331] RIP: 0033:0x7f8ee899af79 [ 606.507397][T15331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.527063][T15331] RSP: 002b:00007f8ee98c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.535574][T15331] RAX: ffffffffffffffda RBX: 00007f8ee8c16090 RCX: 00007f8ee899af79 [ 606.543588][T15331] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 606.551616][T15331] RBP: 00007f8ee98c6090 R08: 0000000000000000 R09: 0000000000000000 [ 606.559632][T15331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.567645][T15331] R13: 00007f8ee8c16128 R14: 00007f8ee8c16090 R15: 00007ffe355c2ab8 [ 606.575679][T15331] [ 608.557882][T15343] netlink: 'syz.1.2904': attribute type 10 has an invalid length. [ 608.717018][T15350] netlink: 'syz.4.2905': attribute type 10 has an invalid length. [ 608.776157][T15348] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2906'. [ 608.797864][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2908'. [ 608.823171][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2908'. [ 608.856507][T15354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2908'. [ 608.867647][T15352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2908'. [ 609.235022][T15367] netlink: 'syz.0.2913': attribute type 21 has an invalid length. [ 609.243140][T15367] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.259126][T15367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.266442][T15367] IPv6: NLM_F_CREATE should be set when creating new route [ 609.273834][T15367] IPv6: NLM_F_CREATE should be set when creating new route [ 609.281142][T15367] IPv6: NLM_F_CREATE should be set when creating new route [ 609.425837][T15375] netlink: 'syz.2.2916': attribute type 10 has an invalid length. [ 609.563137][T15377] FAULT_INJECTION: forcing a failure. [ 609.563137][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.581876][T15377] CPU: 0 PID: 15377 Comm: syz.2.2918 Not tainted syzkaller #0 [ 609.589437][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 609.599548][T15377] Call Trace: [ 609.602883][T15377] [ 609.605866][T15377] dump_stack_lvl+0x18c/0x250 [ 609.610686][T15377] ? show_regs_print_info+0x20/0x20 [ 609.615950][T15377] ? load_image+0x400/0x400 [ 609.620509][T15377] ? __might_fault+0xaa/0x120 [ 609.625245][T15377] ? __lock_acquire+0x7d40/0x7d40 [ 609.630329][T15377] should_fail_ex+0x39d/0x4d0 [ 609.635076][T15377] _copy_to_user+0x2f/0xa0 [ 609.639547][T15377] generic_map_lookup_batch+0x8bd/0xc60 [ 609.645185][T15377] ? bpf_map_update_value+0x720/0x720 [ 609.650593][T15377] ? __fdget+0x180/0x210 [ 609.654870][T15377] ? bpf_map_update_value+0x720/0x720 [ 609.660387][T15377] bpf_map_do_batch+0x2cb/0x610 [ 609.665285][T15377] ? bpf_lsm_bpf+0x9/0x10 [ 609.669664][T15377] ? security_bpf+0x7e/0xa0 [ 609.674296][T15377] __sys_bpf+0x7d7/0x890 [ 609.678582][T15377] ? bpf_link_show_fdinfo+0x390/0x390 [ 609.684005][T15377] ? lock_chain_count+0x20/0x20 [ 609.688896][T15377] __x64_sys_bpf+0x7c/0x90 [ 609.693346][T15377] do_syscall_64+0x55/0xa0 [ 609.697863][T15377] ? clear_bhb_loop+0x40/0x90 [ 609.702573][T15377] ? clear_bhb_loop+0x40/0x90 [ 609.707283][T15377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.713205][T15377] RIP: 0033:0x7ff70019af79 [ 609.717649][T15377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.737280][T15377] RSP: 002b:00007ff70114c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.745724][T15377] RAX: ffffffffffffffda RBX: 00007ff700415fa0 RCX: 00007ff70019af79 [ 609.753808][T15377] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 609.761893][T15377] RBP: 00007ff70114c090 R08: 0000000000000000 R09: 0000000000000000 [ 609.769892][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.777884][T15377] R13: 00007ff700416038 R14: 00007ff700415fa0 R15: 00007ffdb1d1d998 [ 609.785903][T15377] [ 609.805144][T15379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2917'. [ 609.814543][T15379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2917'. [ 609.840953][T15379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2917'. [ 609.861026][T15379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2917'. [ 610.093506][T15381] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2919'. [ 610.677918][T15392] netlink: 'syz.0.2921': attribute type 4 has an invalid length. [ 612.705988][T15405] netlink: 'syz.2.2927': attribute type 10 has an invalid length. [ 613.344200][T15421] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 613.525683][T15427] netlink: 'syz.4.2936': attribute type 10 has an invalid length. [ 613.841718][T15437] __nla_validate_parse: 3 callbacks suppressed [ 613.841740][T15437] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2941'. [ 614.045413][T15444] netlink: 'syz.2.2943': attribute type 153 has an invalid length. [ 614.081430][T15444] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2943'. [ 614.296229][T15450] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2944'. [ 614.670720][T15458] netlink: 'syz.0.2947': attribute type 10 has an invalid length. [ 614.683538][T15461] netlink: 'syz.2.2948': attribute type 11 has an invalid length. [ 614.695710][T15461] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2948'. [ 615.946242][T15482] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2955'. [ 616.142212][T15491] netlink: 'syz.2.2959': attribute type 29 has an invalid length. [ 616.160816][T15491] netlink: 'syz.2.2959': attribute type 29 has an invalid length. [ 616.176399][T15491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 616.329569][T15495] IPv6: Can't replace route, no match found [ 616.435492][T15495] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2961'. [ 616.754780][T15515] netlink: 'syz.0.2969': attribute type 29 has an invalid length. [ 616.764174][T15515] netlink: 'syz.0.2969': attribute type 3 has an invalid length. [ 616.774274][T15515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2969'. [ 616.922585][T15518] netlink: 'syz.0.2969': attribute type 10 has an invalid length. [ 617.373734][T15523] netlink: 'syz.4.2972': attribute type 29 has an invalid length. [ 617.403276][T15523] netlink: 'syz.4.2972': attribute type 29 has an invalid length. [ 617.443832][T15523] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 617.511655][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 617.980193][T15530] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2974'. [ 618.411051][T15540] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2978'. [ 618.914561][T15551] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 619.447451][T15567] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2986'. [ 620.095747][T15582] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.2993'. [ 620.310666][T15588] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2995'. [ 620.333766][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 620.347194][T15590] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2997'. [ 620.469734][T15592] validate_nla: 5 callbacks suppressed [ 620.469754][T15592] netlink: 'syz.4.2998': attribute type 10 has an invalid length. [ 620.917279][T15601] IPv6: Can't replace route, no match found [ 621.106896][T15601] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3001'. [ 621.143962][T15605] FAULT_INJECTION: forcing a failure. [ 621.143962][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 621.168042][T15605] CPU: 0 PID: 15605 Comm: syz.0.3002 Not tainted syzkaller #0 [ 621.175610][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 621.185731][T15605] Call Trace: [ 621.189087][T15605] [ 621.192081][T15605] dump_stack_lvl+0x18c/0x250 [ 621.196842][T15605] ? show_regs_print_info+0x20/0x20 [ 621.202118][T15605] ? load_image+0x400/0x400 [ 621.206702][T15605] ? __might_sleep+0xe0/0xe0 [ 621.211366][T15605] ? __lock_acquire+0x7d40/0x7d40 [ 621.216448][T15605] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 621.222671][T15605] should_fail_ex+0x39d/0x4d0 [ 621.227429][T15605] should_failslab+0x9/0x20 [ 621.231989][T15605] slab_pre_alloc_hook+0x59/0x310 [ 621.237089][T15605] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 621.242447][T15605] __kmem_cache_alloc_node+0x53/0x250 [ 621.247907][T15605] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 621.253292][T15605] kmalloc_trace+0x2a/0xe0 [ 621.257772][T15605] inet6_rtm_newroute+0xa0d/0x1c90 [ 621.263053][T15605] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 621.269037][T15605] ? rcu_is_watching+0x15/0xb0 [ 621.273953][T15605] ? trace_contention_end+0x39/0xe0 [ 621.279249][T15605] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 621.284420][T15605] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 621.289586][T15605] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 621.295543][T15605] rtnetlink_rcv_msg+0x869/0xfa0 [ 621.300555][T15605] ? rtnetlink_bind+0x80/0x80 [ 621.305285][T15605] ? mark_lock+0x94/0x320 [ 621.309672][T15605] ? __lock_acquire+0x1273/0x7d40 [ 621.314744][T15605] ? __kernel_text_address+0xd/0x30 [ 621.320023][T15605] ? mark_lock+0x94/0x320 [ 621.324388][T15605] ? mark_lock+0x94/0x320 [ 621.328754][T15605] ? __lock_acquire+0x1273/0x7d40 [ 621.333828][T15605] ? kmalloc_reserve+0x95/0x240 [ 621.338719][T15605] ? verify_lock_unused+0x140/0x140 [ 621.343955][T15605] ? verify_lock_unused+0x140/0x140 [ 621.349238][T15605] netlink_rcv_skb+0x241/0x4d0 [ 621.354051][T15605] ? rtnetlink_bind+0x80/0x80 [ 621.358759][T15605] ? netlink_ack+0x1180/0x1180 [ 621.363571][T15605] ? __lock_acquire+0x7d40/0x7d40 [ 621.368632][T15605] ? net_generic+0x1e/0x240 [ 621.373175][T15605] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.378426][T15605] netlink_unicast+0x751/0x8d0 [ 621.383264][T15605] netlink_sendmsg+0x8d0/0xbf0 [ 621.388093][T15605] ? lockdep_hardirqs_on+0x98/0x150 [ 621.393419][T15605] ? netlink_getsockopt+0x590/0x590 [ 621.398757][T15605] ? security_socket_sendmsg+0x45/0xa0 [ 621.404252][T15605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 621.409583][T15605] ? security_socket_sendmsg+0x80/0xa0 [ 621.415070][T15605] ? netlink_getsockopt+0x590/0x590 [ 621.420311][T15605] ____sys_sendmsg+0x5ba/0x960 [ 621.425116][T15605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.431312][T15605] ? __asan_memset+0x22/0x40 [ 621.435938][T15605] ? __sys_sendmsg_sock+0x30/0x30 [ 621.441008][T15605] ? __import_iovec+0x5f2/0x850 [ 621.445998][T15605] ? import_iovec+0x73/0xa0 [ 621.450563][T15605] ___sys_sendmsg+0x2a6/0x360 [ 621.455362][T15605] ? __sys_sendmsg+0x2a0/0x2a0 [ 621.460175][T15605] ? perf_trace_preemptirq_template+0xac/0x330 [ 621.466399][T15605] __se_sys_sendmsg+0x1c2/0x2b0 [ 621.471285][T15605] ? __x64_sys_sendmsg+0x80/0x80 [ 621.476263][T15605] ? trace_sys_enter+0x1f/0x80 [ 621.481076][T15605] do_syscall_64+0x55/0xa0 [ 621.485539][T15605] ? clear_bhb_loop+0x40/0x90 [ 621.490338][T15605] ? clear_bhb_loop+0x40/0x90 [ 621.495046][T15605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.501057][T15605] RIP: 0033:0x7fdfa599af79 [ 621.505502][T15605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.525184][T15605] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.533628][T15605] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 621.541723][T15605] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 621.549722][T15605] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 621.557802][T15605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.565833][T15605] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 621.573850][T15605] [ 621.656939][T15607] netlink: 'syz.1.3003': attribute type 39 has an invalid length. [ 621.725366][T15612] FAULT_INJECTION: forcing a failure. [ 621.725366][T15612] name failslab, interval 1, probability 0, space 0, times 0 [ 621.746465][T15612] CPU: 0 PID: 15612 Comm: syz.4.3005 Not tainted syzkaller #0 [ 621.754033][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 621.764159][T15612] Call Trace: [ 621.767488][T15612] [ 621.770460][T15612] dump_stack_lvl+0x18c/0x250 [ 621.775205][T15612] ? show_regs_print_info+0x20/0x20 [ 621.780467][T15612] ? load_image+0x400/0x400 [ 621.785039][T15612] should_fail_ex+0x39d/0x4d0 [ 621.789780][T15612] should_failslab+0x9/0x20 [ 621.794349][T15612] slab_pre_alloc_hook+0x59/0x310 [ 621.799446][T15612] kmem_cache_alloc+0x5a/0x2d0 [ 621.804266][T15612] ? __nf_conntrack_alloc+0x99/0x380 [ 621.809673][T15612] __nf_conntrack_alloc+0x99/0x380 [ 621.814844][T15612] init_conntrack+0x177/0xf10 [ 621.819573][T15612] ? early_drop+0x7f0/0x7f0 [ 621.824133][T15612] ? nf_conntrack_find_get+0x650/0x650 [ 621.829648][T15612] ? __local_bh_enable_ip+0x13a/0x1c0 [ 621.835075][T15612] ? __siphash_unaligned+0x22e/0x3a0 [ 621.840419][T15612] nf_conntrack_in+0xc06/0x15c0 [ 621.845345][T15612] ? nf_ct_pernet+0x270/0x270 [ 621.850084][T15612] ? ipt_do_table+0x2c1/0x15e0 [ 621.854906][T15612] ? sctp_packet_singleton+0x235/0x340 [ 621.860427][T15612] ? sctp_outq_flush+0x50e/0x3120 [ 621.865518][T15612] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 621.871027][T15612] ? do_syscall_64+0x55/0xa0 [ 621.875674][T15612] ? ipv4_conntrack_local+0x123/0x200 [ 621.881107][T15612] ? ipv4_conntrack_in+0x20/0x20 [ 621.886101][T15612] nf_hook_slow+0xbd/0x200 [ 621.890573][T15612] ? nf_hook+0x390/0x390 [ 621.894876][T15612] nf_hook+0x228/0x390 [ 621.899013][T15612] ? nf_hook+0xa2/0x390 [ 621.903231][T15612] ? __ip_local_out+0x5f0/0x5f0 [ 621.908165][T15612] ? nf_hook+0x390/0x390 [ 621.912468][T15612] ? __lock_acquire+0x7d40/0x7d40 [ 621.917560][T15612] ? ip_fast_csum+0x1ee/0x2b0 [ 621.922290][T15612] __ip_local_out+0x4db/0x5f0 [ 621.927048][T15612] ? nf_hook+0x390/0x390 [ 621.931355][T15612] ? __ip_queue_xmit+0x5d/0x1950 [ 621.936343][T15612] __ip_queue_xmit+0xf7c/0x1950 [ 621.941263][T15612] ? __ip_queue_xmit+0x5d/0x1950 [ 621.946286][T15612] sctp_packet_transmit+0x247d/0x2a30 [ 621.951753][T15612] sctp_packet_singleton+0x235/0x340 [ 621.957121][T15612] ? sctp_outq_select_transport+0x570/0x570 [ 621.963089][T15612] ? sctp_outq_select_transport+0x45d/0x570 [ 621.969059][T15612] ? sctp_transport_burst_limited+0x197/0x280 [ 621.975187][T15612] sctp_outq_flush+0x50e/0x3120 [ 621.980095][T15612] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 621.986043][T15612] ? _raw_spin_unlock+0x40/0x40 [ 621.990949][T15612] ? rcu_is_watching+0x15/0xb0 [ 621.995770][T15612] ? enqueue_timer+0x23d/0x550 [ 622.000594][T15612] ? sctp_outq_tail+0x8a0/0x8a0 [ 622.005533][T15612] ? sctp_outq_tail+0x604/0x8a0 [ 622.010443][T15612] ? sctp_outq_uncork+0x4d/0xa0 [ 622.015380][T15612] sctp_do_sm+0x533b/0x5a60 [ 622.019984][T15612] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 622.025945][T15612] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 622.031054][T15612] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 622.036896][T15612] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 622.042336][T15612] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 622.047759][T15612] ? __asan_memcpy+0x40/0x70 [ 622.052381][T15612] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 622.057790][T15612] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 622.063627][T15612] ? __sctp_connect+0xd80/0xd80 [ 622.068511][T15612] ? __local_bh_enable_ip+0x13a/0x1c0 [ 622.074012][T15612] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 622.079596][T15612] ? security_sctp_bind_connect+0x89/0xb0 [ 622.085384][T15612] sctp_sendmsg+0x1b83/0x28c0 [ 622.090214][T15612] ? sctp_getsockopt+0xb60/0xb60 [ 622.095178][T15612] ? aa_sk_perm+0x83c/0x970 [ 622.099714][T15612] ? aa_af_perm+0x330/0x330 [ 622.104245][T15612] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 622.110698][T15612] ? sock_rps_record_flow+0x19/0x3f0 [ 622.116020][T15612] ? inet_sendmsg+0xe9/0x2f0 [ 622.120647][T15612] ? inet_send_prepare+0x260/0x260 [ 622.125778][T15612] ____sys_sendmsg+0x5ba/0x960 [ 622.130575][T15612] ? __asan_memset+0x22/0x40 [ 622.135189][T15612] ? __sys_sendmsg_sock+0x30/0x30 [ 622.140240][T15612] ? __import_iovec+0x3fa/0x850 [ 622.145122][T15612] ? import_iovec+0x73/0xa0 [ 622.149677][T15612] ___sys_sendmsg+0x2a6/0x360 [ 622.154369][T15612] ? get_pid_task+0x20/0x1e0 [ 622.159013][T15612] ? __sys_sendmsg+0x2a0/0x2a0 [ 622.163848][T15612] ? __lock_acquire+0x7d40/0x7d40 [ 622.168956][T15612] __se_sys_sendmsg+0x1c2/0x2b0 [ 622.173834][T15612] ? __x64_sys_sendmsg+0x80/0x80 [ 622.178804][T15612] ? trace_sys_enter+0x1f/0x80 [ 622.183607][T15612] do_syscall_64+0x55/0xa0 [ 622.188135][T15612] ? clear_bhb_loop+0x40/0x90 [ 622.192875][T15612] ? clear_bhb_loop+0x40/0x90 [ 622.197611][T15612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.203548][T15612] RIP: 0033:0x7ff6c179af79 [ 622.208009][T15612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.227652][T15612] RSP: 002b:00007ff6c2581028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.236090][T15612] RAX: ffffffffffffffda RBX: 00007ff6c1a15fa0 RCX: 00007ff6c179af79 [ 622.244083][T15612] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 622.252077][T15612] RBP: 00007ff6c2581090 R08: 0000000000000000 R09: 0000000000000000 [ 622.260079][T15612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.268110][T15612] R13: 00007ff6c1a16038 R14: 00007ff6c1a15fa0 R15: 00007ffda8187f08 [ 622.276131][T15612] [ 622.373861][T15607] hsr_slave_1 (unregistering): left promiscuous mode [ 622.460707][T15618] netlink: 'syz.4.3007': attribute type 11 has an invalid length. [ 622.482023][T15618] netlink: 211440 bytes leftover after parsing attributes in process `syz.4.3007'. [ 622.522155][T15618] netlink: 'syz.4.3007': attribute type 33 has an invalid length. [ 622.573442][T15618] IPv6: Can't replace route, no match found [ 622.804551][T15624] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3009'. [ 623.460841][T15642] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3014'. [ 623.491313][T15642] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 623.516560][T15642] CPU: 0 PID: 15642 Comm: syz.2.3014 Not tainted syzkaller #0 [ 623.524128][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 623.534251][T15642] Call Trace: [ 623.537585][T15642] [ 623.540580][T15642] dump_stack_lvl+0x18c/0x250 [ 623.545350][T15642] ? show_regs_print_info+0x20/0x20 [ 623.550629][T15642] ? load_image+0x400/0x400 [ 623.555221][T15642] sysfs_warn_dup+0x8e/0xa0 [ 623.559882][T15642] sysfs_do_create_link_sd+0xc0/0x110 [ 623.565321][T15642] device_add_class_symlinks+0x1cf/0x240 [ 623.571045][T15642] device_add+0x507/0xc20 [ 623.575448][T15642] wiphy_register+0x1dad/0x2ae0 [ 623.580390][T15642] ? cfg80211_event_work+0x40/0x40 [ 623.585573][T15642] ? minstrel_ht_alloc+0x88a/0x990 [ 623.590769][T15642] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 623.596953][T15642] ieee80211_register_hw+0x3464/0x4250 [ 623.602519][T15642] ? ieee80211_tasklet_handler+0x20/0x20 [ 623.608327][T15642] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 623.614284][T15642] ? __debug_object_init+0xec/0x450 [ 623.619556][T15642] ? __asan_memset+0x22/0x40 [ 623.624217][T15642] ? __hrtimer_init+0x186/0x270 [ 623.629131][T15642] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 623.634966][T15642] ? mac80211_hwsim_free+0x220/0x220 [ 623.640327][T15642] ? rcu_is_watching+0x15/0xb0 [ 623.645245][T15642] ? kstrndup+0xbd/0x140 [ 623.649563][T15642] hwsim_new_radio_nl+0xdc9/0x1a90 [ 623.654783][T15642] ? __nla_validate+0x50/0x50 [ 623.659569][T15642] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 623.665983][T15642] ? __nla_parse+0x40/0x50 [ 623.670484][T15642] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 623.676909][T15642] genl_family_rcv_msg_doit+0x211/0x310 [ 623.682533][T15642] ? end_current_label_crit_section+0x170/0x170 [ 623.688856][T15642] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 623.694840][T15642] ? bpf_lsm_capable+0x9/0x10 [ 623.699619][T15642] ? security_capable+0x89/0xb0 [ 623.704555][T15642] genl_rcv_msg+0x619/0x7a0 [ 623.709142][T15642] ? genl_bind+0x360/0x360 [ 623.713626][T15642] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 623.720160][T15642] ? perf_trace_lock+0xfc/0x3b0 [ 623.725108][T15642] netlink_rcv_skb+0x241/0x4d0 [ 623.730021][T15642] ? genl_bind+0x360/0x360 [ 623.734526][T15642] ? netlink_ack+0x1180/0x1180 [ 623.739394][T15642] ? __lock_acquire+0x7d40/0x7d40 [ 623.744525][T15642] ? down_read+0x1ac/0x2e0 [ 623.749055][T15642] genl_rcv+0x28/0x40 [ 623.753106][T15642] netlink_unicast+0x751/0x8d0 [ 623.757950][T15642] netlink_sendmsg+0x8d0/0xbf0 [ 623.762800][T15642] ? netlink_getsockopt+0x590/0x590 [ 623.768078][T15642] ? aa_sock_msg_perm+0x94/0x150 [ 623.773089][T15642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 623.778435][T15642] ? security_socket_sendmsg+0x80/0xa0 [ 623.783964][T15642] ? netlink_getsockopt+0x590/0x590 [ 623.789244][T15642] ____sys_sendmsg+0x5ba/0x960 [ 623.794096][T15642] ? __asan_memset+0x22/0x40 [ 623.798751][T15642] ? __sys_sendmsg_sock+0x30/0x30 [ 623.803850][T15642] ? __import_iovec+0x5f2/0x850 [ 623.808963][T15642] ? import_iovec+0x73/0xa0 [ 623.813548][T15642] ___sys_sendmsg+0x2a6/0x360 [ 623.818294][T15642] ? __sys_sendmsg+0x2a0/0x2a0 [ 623.823236][T15642] __se_sys_sendmsg+0x1c2/0x2b0 [ 623.828158][T15642] ? __x64_sys_sendmsg+0x80/0x80 [ 623.833192][T15642] ? lockdep_hardirqs_on+0x98/0x150 [ 623.838492][T15642] do_syscall_64+0x55/0xa0 [ 623.842973][T15642] ? clear_bhb_loop+0x40/0x90 [ 623.847714][T15642] ? clear_bhb_loop+0x40/0x90 [ 623.852468][T15642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.858420][T15642] RIP: 0033:0x7ff70019af79 [ 623.862900][T15642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.882556][T15642] RSP: 002b:00007ff70114c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.891007][T15642] RAX: ffffffffffffffda RBX: 00007ff700415fa0 RCX: 00007ff70019af79 [ 623.899026][T15642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 623.907068][T15642] RBP: 00007ff7002316e0 R08: 0000000000000000 R09: 0000000000000000 [ 623.915084][T15642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.923158][T15642] R13: 00007ff700416038 R14: 00007ff700415fa0 R15: 00007ffdb1d1d998 [ 623.931181][T15642] [ 624.323446][T15657] netlink: 'syz.0.3019': attribute type 2 has an invalid length. [ 624.344286][T15657] netlink: 'syz.0.3019': attribute type 4 has an invalid length. [ 624.374594][T15657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3019'. [ 624.755065][T15665] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3022'. [ 625.686191][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.696853][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.037273][T15677] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3027'. [ 628.949885][T15698] tap0: tun_chr_ioctl cmd 1074025677 [ 628.969624][T15698] tap0: linktype set to 778 [ 629.046658][T15698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3034'. [ 629.173631][T15704] netlink: 'syz.4.3037': attribute type 1 has an invalid length. [ 629.189031][T15704] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3037'. [ 629.462316][T15717] : renamed from pim6reg1 [ 629.589258][T15721] netlink: 'syz.2.3041': attribute type 11 has an invalid length. [ 629.598092][T15721] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3041'. [ 630.455881][T15743] tap0: tun_chr_ioctl cmd 1074025677 [ 630.495921][T15743] tap0: linktype set to 778 [ 630.535159][T15747] netlink: 'syz.0.3051': attribute type 10 has an invalid length. [ 630.543704][T15750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3049'. [ 630.556411][T15753] netlink: 'syz.2.3052': attribute type 10 has an invalid length. [ 630.994091][T15758] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3055'. [ 631.557994][T15780] netlink: 'syz.1.3062': attribute type 10 has an invalid length. [ 631.806303][T15788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 631.816498][T15788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 631.833473][T15788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 631.853336][T15788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3074'. [ 631.879184][T15789] netlink: 'syz.0.3073': attribute type 10 has an invalid length. [ 632.097483][T15791] tap0: tun_chr_ioctl cmd 1074025677 [ 632.154369][T15791] tap0: linktype set to 778 [ 632.291268][T15792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3065'. [ 632.810136][T15806] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3069'. [ 633.148842][T15815] netlink: 'syz.2.3072': attribute type 10 has an invalid length. [ 633.171206][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3072'. [ 633.195684][T15815] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 633.359195][T15820] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3077'. [ 637.990261][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 638.145632][T15878] __nla_validate_parse: 1 callbacks suppressed [ 638.145654][T15878] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3096'. [ 638.208032][T15878] netlink: 3464 bytes leftover after parsing attributes in process `syz.1.3096'. [ 638.536038][T15896] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 638.550847][T15896] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3102'. [ 638.660015][T15904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3102'. [ 639.315474][T15915] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3108'. [ 639.343488][T15915] openvswitch: netlink: Key type 29 is not supported [ 642.380697][T15947] netlink: 'syz.0.3117': attribute type 29 has an invalid length. [ 642.394344][T15947] netlink: 'syz.0.3117': attribute type 3 has an invalid length. [ 642.417375][T15947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3117'. [ 642.627343][T15954] netlink: 'syz.2.3121': attribute type 27 has an invalid length. [ 642.641972][T15954] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3121'. [ 642.693244][T15949] netlink: 'syz.4.3118': attribute type 10 has an invalid length. [ 642.736295][T15949] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3118'. [ 642.759642][T15949] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 642.781519][T15949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.697043][T15977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.739775][T15974] netlink: 'syz.0.3126': attribute type 2 has an invalid length. [ 643.747646][T15974] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 643.808799][T15974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3126'. [ 644.017865][T15988] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3130'. [ 644.055307][T15991] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3129'. [ 644.184108][T15990] tap0: tun_chr_ioctl cmd 1074025677 [ 644.256103][T15990] tap0: linktype set to 778 [ 644.267601][T15997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3131'. [ 644.814452][T16009] netlink: 'syz.1.3135': attribute type 10 has an invalid length. [ 644.896445][T16009] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3135'. [ 644.936111][T16009] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 644.997219][T16009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.093879][T16016] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3139'. [ 645.861408][T16034] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 646.769634][T16060] netlink: 'syz.0.3154': attribute type 10 has an invalid length. [ 646.828295][T16060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3154'. [ 646.967450][T16060] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 647.024337][T16060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.089246][T16073] netlink: 'syz.1.3153': attribute type 4 has an invalid length. [ 647.097155][T16073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3153'. [ 647.147370][T16072] bridge_slave_0: left promiscuous mode [ 647.163975][T16072] bridge_slave_0: left allmulticast mode [ 647.223738][T16074] bridge_slave_0: entered promiscuous mode [ 647.238840][T16074] bridge_slave_0: entered allmulticast mode [ 647.415090][T16077] netlink: 'syz.0.3157': attribute type 10 has an invalid length. [ 647.612536][T16084] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3162'. [ 648.589327][T16112] FAULT_INJECTION: forcing a failure. [ 648.589327][T16112] name failslab, interval 1, probability 0, space 0, times 0 [ 648.628169][T16112] CPU: 1 PID: 16112 Comm: syz.4.3170 Not tainted syzkaller #0 [ 648.635743][T16112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 648.645850][T16112] Call Trace: [ 648.649176][T16112] [ 648.652149][T16112] dump_stack_lvl+0x18c/0x250 [ 648.656899][T16112] ? show_regs_print_info+0x20/0x20 [ 648.662250][T16112] ? load_image+0x400/0x400 [ 648.666815][T16112] ? __might_sleep+0xe0/0xe0 [ 648.671479][T16112] ? __lock_acquire+0x7d40/0x7d40 [ 648.676575][T16112] should_fail_ex+0x39d/0x4d0 [ 648.681441][T16112] should_failslab+0x9/0x20 [ 648.686011][T16112] slab_pre_alloc_hook+0x59/0x310 [ 648.691103][T16112] ? __request_module+0x2ed/0x600 [ 648.696181][T16112] ? __request_module+0x2ed/0x600 [ 648.701256][T16112] __kmem_cache_alloc_node+0x53/0x250 [ 648.706695][T16112] ? __request_module+0x2ed/0x600 [ 648.711875][T16112] __kmalloc_node_track_caller+0xa2/0x230 [ 648.717659][T16112] kstrdup+0x3b/0x80 [ 648.721643][T16112] __request_module+0x2ed/0x600 [ 648.726543][T16112] ? end_current_label_crit_section+0x170/0x170 [ 648.732945][T16112] ? module_enforce_rwx_sections+0x150/0x150 [ 648.738981][T16112] ? apparmor_capable+0x137/0x1a0 [ 648.744061][T16112] ? capable+0x88/0xe0 [ 648.748181][T16112] ? dev_load+0x21/0x1f0 [ 648.752577][T16112] devinet_ioctl+0x133/0x1c40 [ 648.757313][T16112] ? __might_fault+0xc6/0x120 [ 648.762036][T16112] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 648.767212][T16112] ? _copy_from_user+0xa5/0xe0 [ 648.772041][T16112] ? get_user_ifreq+0x12b/0x180 [ 648.776943][T16112] inet_ioctl+0x42b/0x560 [ 648.781330][T16112] ? tomoyo_path_number_perm+0x217/0x620 [ 648.787019][T16112] ? inet_shutdown+0x370/0x370 [ 648.791918][T16112] ? slab_free_freelist_hook+0x130/0x1a0 [ 648.797606][T16112] ? tomoyo_path_number_perm+0x500/0x620 [ 648.803296][T16112] ? __kmem_cache_free+0xba/0x1e0 [ 648.808394][T16112] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 648.814027][T16112] ? packet_ioctl+0x254/0x340 [ 648.818765][T16112] sock_do_ioctl+0xfc/0x310 [ 648.823330][T16112] ? sock_show_fdinfo+0xb0/0xb0 [ 648.828263][T16112] sock_ioctl+0x5ba/0x7e0 [ 648.832649][T16112] ? sock_poll+0x3e0/0x3e0 [ 648.837124][T16112] ? bpf_lsm_file_ioctl+0x9/0x10 [ 648.842106][T16112] ? security_file_ioctl+0x80/0xa0 [ 648.847276][T16112] ? sock_poll+0x3e0/0x3e0 [ 648.851866][T16112] __se_sys_ioctl+0xfd/0x170 [ 648.856514][T16112] do_syscall_64+0x55/0xa0 [ 648.860999][T16112] ? clear_bhb_loop+0x40/0x90 [ 648.865729][T16112] ? clear_bhb_loop+0x40/0x90 [ 648.870454][T16112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.876390][T16112] RIP: 0033:0x7ff6c179af79 [ 648.880858][T16112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.900600][T16112] RSP: 002b:00007ff6bf9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.909067][T16112] RAX: ffffffffffffffda RBX: 00007ff6c1a16180 RCX: 00007ff6c179af79 [ 648.917086][T16112] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 648.925102][T16112] RBP: 00007ff6bf9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 648.933116][T16112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.941211][T16112] R13: 00007ff6c1a16218 R14: 00007ff6c1a16180 R15: 00007ffda8187f08 [ 648.949248][T16112] [ 649.118299][T16102] netlink: 'syz.2.3167': attribute type 10 has an invalid length. [ 649.133812][T16102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3167'. [ 649.143612][T16102] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 649.155684][T16102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.363566][T16120] netlink: 'syz.2.3172': attribute type 10 has an invalid length. [ 650.023995][T16144] netlink: 'syz.4.3181': attribute type 3 has an invalid length. [ 650.035902][T16144] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3181'. [ 652.823645][T16153] netlink: 'syz.1.3185': attribute type 10 has an invalid length. [ 653.268944][T16162] netlink: 'syz.2.3188': attribute type 2 has an invalid length. [ 653.276777][T16162] netlink: 'syz.2.3188': attribute type 8 has an invalid length. [ 653.304255][T16162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3188'. [ 653.331086][T16166] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3190'. [ 653.356989][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 653.649834][T16173] netlink: 'syz.1.3192': attribute type 10 has an invalid length. [ 653.828753][T16175] tap0: tun_chr_ioctl cmd 1074025677 [ 653.834348][T16175] tap0: linktype set to 778 [ 653.970380][T16183] syzkaller0: entered promiscuous mode [ 653.975983][T16183] syzkaller0: entered allmulticast mode [ 653.987283][T16175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3194'. [ 654.624142][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3199'. [ 656.612393][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3199'. [ 656.621668][T16198] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3199'. [ 656.634950][T16200] netlink: 'syz.1.3201': attribute type 10 has an invalid length. [ 656.648052][T16200] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.666025][T16200] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.675121][T16200] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.684316][T16200] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.731227][T16200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.764596][T16200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.785699][T16200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.790245][T16209] FAULT_INJECTION: forcing a failure. [ 656.790245][T16209] name failslab, interval 1, probability 0, space 0, times 0 [ 656.794781][T16200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.807141][T16209] CPU: 1 PID: 16209 Comm: syz.0.3202 Not tainted syzkaller #0 [ 656.807176][T16209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 656.807191][T16209] Call Trace: [ 656.807202][T16209] [ 656.807212][T16209] dump_stack_lvl+0x18c/0x250 [ 656.807259][T16209] ? show_regs_print_info+0x20/0x20 [ 656.807290][T16209] ? load_image+0x400/0x400 [ 656.807324][T16209] ? netdev_core_pick_tx+0x340/0x340 [ 656.807355][T16209] should_fail_ex+0x39d/0x4d0 [ 656.807391][T16209] should_failslab+0x9/0x20 [ 656.807423][T16209] slab_pre_alloc_hook+0x59/0x310 [ 656.807459][T16209] kmem_cache_alloc+0x5a/0x2d0 [ 656.807488][T16209] ? skb_clone+0x1eb/0x370 [ 656.807515][T16209] skb_clone+0x1eb/0x370 [ 656.807539][T16209] bpf_clone_redirect+0x167/0x4a0 [ 656.807579][T16209] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 656.807608][T16209] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 656.807634][T16209] ? preempt_schedule+0xc0/0xd0 [ 656.887281][T16200] team0: Port device geneve1 added [ 656.887715][T16209] ? perf_trace_preemptirq_template+0xac/0x330 [ 656.887762][T16209] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 656.926505][T16209] ? lockdep_softirqs_on+0x580/0x580 [ 656.931848][T16209] ? lock_chain_count+0x20/0x20 [ 656.936753][T16209] ? __local_bh_disable_ip+0x108/0x1a0 [ 656.942276][T16209] ? __cant_sleep+0x220/0x220 [ 656.946998][T16209] ? __local_bh_enable_ip+0x13a/0x1c0 [ 656.952418][T16209] ? _local_bh_enable+0xa0/0xa0 [ 656.957318][T16209] ? bpf_test_timer_continue+0x135/0x380 [ 656.963004][T16209] ? bpf_test_run+0x174/0x870 [ 656.967752][T16209] bpf_test_run+0x2df/0x870 [ 656.972322][T16209] ? bpf_test_run+0x174/0x870 [ 656.977047][T16209] ? convert___skb_to_skb+0x590/0x590 [ 656.982471][T16209] ? eth_get_headlen+0x210/0x210 [ 656.987463][T16209] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 656.993103][T16209] ? convert___skb_to_skb+0x3d/0x590 [ 656.998439][T16209] bpf_prog_test_run_skb+0xad2/0x12b0 [ 657.003892][T16209] ? cpu_online+0x60/0x60 [ 657.008278][T16209] bpf_prog_test_run+0x321/0x390 [ 657.013352][T16209] __sys_bpf+0x49d/0x890 [ 657.017737][T16209] ? bpf_link_show_fdinfo+0x390/0x390 [ 657.023182][T16209] ? lock_chain_count+0x20/0x20 [ 657.028102][T16209] __x64_sys_bpf+0x7c/0x90 [ 657.032575][T16209] do_syscall_64+0x55/0xa0 [ 657.037045][T16209] ? clear_bhb_loop+0x40/0x90 [ 657.041770][T16209] ? clear_bhb_loop+0x40/0x90 [ 657.046495][T16209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.052450][T16209] RIP: 0033:0x7fdfa599af79 [ 657.056909][T16209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.076569][T16209] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.085039][T16209] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 657.093069][T16209] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 657.101096][T16209] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 657.109212][T16209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.117248][T16209] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 657.125310][T16209] [ 657.770125][T16225] tap0: tun_chr_ioctl cmd 1074025677 [ 657.776612][T16225] tap0: linktype set to 778 [ 658.041897][T16234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3211'. [ 658.059696][T16234] caif0: entered promiscuous mode [ 658.067052][T16234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.937749][T16256] tap0: tun_chr_ioctl cmd 1074025677 [ 658.947581][T16256] tap0: linktype set to 778 [ 660.137549][T16283] tap0: tun_chr_ioctl cmd 1074025677 [ 660.182151][T16283] tap0: linktype set to 778 [ 660.229814][T16286] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3234'. [ 660.242116][T16288] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 660.314876][T16291] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3236'. [ 660.327199][T16291] hsr_slave_0: left promiscuous mode [ 660.466859][T16297] netlink: 'syz.1.3238': attribute type 10 has an invalid length. [ 660.477696][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3238'. [ 660.498194][T16297] bond0: (slave dummy0): Releasing backup interface [ 660.531105][T16297] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 660.735767][T16307] netlink: 'syz.0.3240': attribute type 3 has an invalid length. [ 660.768823][T16307] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3240'. [ 660.917239][T16309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3243'. [ 661.048774][T16311] netlink: 'syz.2.3244': attribute type 17 has an invalid length. [ 661.056691][T16311] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3244'. [ 661.473837][T16325] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3249'. [ 661.543329][T16327] FAULT_INJECTION: forcing a failure. [ 661.543329][T16327] name failslab, interval 1, probability 0, space 0, times 0 [ 661.556074][T16327] CPU: 1 PID: 16327 Comm: syz.2.3251 Not tainted syzkaller #0 [ 661.563582][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 661.573774][T16327] Call Trace: [ 661.577105][T16327] [ 661.580081][T16327] dump_stack_lvl+0x18c/0x250 [ 661.584889][T16327] ? show_regs_print_info+0x20/0x20 [ 661.590128][T16327] ? load_image+0x400/0x400 [ 661.594665][T16327] ? netdev_core_pick_tx+0x340/0x340 [ 661.599985][T16327] should_fail_ex+0x39d/0x4d0 [ 661.604713][T16327] should_failslab+0x9/0x20 [ 661.609255][T16327] slab_pre_alloc_hook+0x59/0x310 [ 661.614329][T16327] kmem_cache_alloc+0x5a/0x2d0 [ 661.619138][T16327] ? skb_clone+0x1eb/0x370 [ 661.623595][T16327] skb_clone+0x1eb/0x370 [ 661.627875][T16327] bpf_clone_redirect+0x167/0x4a0 [ 661.632943][T16327] bpf_prog_da1e0ee5f8d5c8f5+0x5d/0x62 [ 661.638441][T16327] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 661.644472][T16327] ? perf_trace_preemptirq_template+0xac/0x330 [ 661.650665][T16327] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 661.656704][T16327] ? lockdep_softirqs_on+0x580/0x580 [ 661.662037][T16327] ? lock_chain_count+0x20/0x20 [ 661.666912][T16327] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 661.673191][T16327] ? __local_bh_disable_ip+0x108/0x1a0 [ 661.678679][T16327] ? __cant_sleep+0x220/0x220 [ 661.683385][T16327] ? __local_bh_enable_ip+0x13a/0x1c0 [ 661.688782][T16327] ? _local_bh_enable+0xa0/0xa0 [ 661.693667][T16327] ? bpf_test_timer_continue+0x135/0x380 [ 661.699349][T16327] ? bpf_test_run+0x174/0x870 [ 661.704062][T16327] bpf_test_run+0x2df/0x870 [ 661.708603][T16327] ? bpf_test_run+0x174/0x870 [ 661.713308][T16327] ? convert___skb_to_skb+0x590/0x590 [ 661.718711][T16327] ? eth_get_headlen+0x210/0x210 [ 661.723688][T16327] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 661.729268][T16327] ? convert___skb_to_skb+0x3d/0x590 [ 661.734604][T16327] bpf_prog_test_run_skb+0xad2/0x12b0 [ 661.740014][T16327] ? cpu_online+0x60/0x60 [ 661.744370][T16327] bpf_prog_test_run+0x321/0x390 [ 661.749340][T16327] __sys_bpf+0x49d/0x890 [ 661.753734][T16327] ? bpf_link_show_fdinfo+0x390/0x390 [ 661.759150][T16327] ? lock_chain_count+0x20/0x20 [ 661.764035][T16327] __x64_sys_bpf+0x7c/0x90 [ 661.768486][T16327] do_syscall_64+0x55/0xa0 [ 661.772935][T16327] ? clear_bhb_loop+0x40/0x90 [ 661.777651][T16327] ? clear_bhb_loop+0x40/0x90 [ 661.782357][T16327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.788278][T16327] RIP: 0033:0x7ff70019af79 [ 661.792720][T16327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.812355][T16327] RSP: 002b:00007ff70114c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.820815][T16327] RAX: ffffffffffffffda RBX: 00007ff700415fa0 RCX: 00007ff70019af79 [ 661.828823][T16327] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 661.836820][T16327] RBP: 00007ff70114c090 R08: 0000000000000000 R09: 0000000000000000 [ 661.844821][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.852904][T16327] R13: 00007ff700416038 R14: 00007ff700415fa0 R15: 00007ffdb1d1d998 [ 661.860920][T16327] [ 662.152825][T16339] netlink: 'syz.1.3256': attribute type 49 has an invalid length. [ 662.207105][T16338] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3257'. [ 662.224427][T16339] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3256'. [ 662.324204][T16333] tap0: tun_chr_ioctl cmd 1074025677 [ 662.340478][T16333] tap0: linktype set to 778 [ 662.626769][T16344] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3258'. [ 663.959310][T16381] tap0: tun_chr_ioctl cmd 1074025677 [ 663.965015][T16381] tap0: linktype set to 778 [ 664.680931][T16399] netlink: 'syz.0.3276': attribute type 10 has an invalid length. [ 666.186184][T16436] tap0: tun_chr_ioctl cmd 1074025677 [ 666.218855][T16436] tap0: linktype set to 778 [ 667.880995][T16474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.140794][T16483] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 668.484910][T16490] FAULT_INJECTION: forcing a failure. [ 668.484910][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 668.498803][T16490] CPU: 0 PID: 16490 Comm: syz.0.3308 Not tainted syzkaller #0 [ 668.506331][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 668.516440][T16490] Call Trace: [ 668.519768][T16490] [ 668.522738][T16490] dump_stack_lvl+0x18c/0x250 [ 668.527478][T16490] ? show_regs_print_info+0x20/0x20 [ 668.532747][T16490] ? load_image+0x400/0x400 [ 668.537315][T16490] ? __might_fault+0xaa/0x120 [ 668.542044][T16490] ? __lock_acquire+0x7d40/0x7d40 [ 668.547118][T16490] should_fail_ex+0x39d/0x4d0 [ 668.551877][T16490] _copy_to_user+0x2f/0xa0 [ 668.556358][T16490] generic_map_lookup_batch+0x860/0xc60 [ 668.561965][T16490] ? bpf_map_update_value+0x720/0x720 [ 668.567567][T16490] ? __fdget+0x180/0x210 [ 668.571869][T16490] ? bpf_map_update_value+0x720/0x720 [ 668.577313][T16490] bpf_map_do_batch+0x2cb/0x610 [ 668.582217][T16490] ? bpf_lsm_bpf+0x9/0x10 [ 668.586598][T16490] ? security_bpf+0x7e/0xa0 [ 668.591175][T16490] __sys_bpf+0x7d7/0x890 [ 668.595472][T16490] ? bpf_link_show_fdinfo+0x390/0x390 [ 668.600918][T16490] ? lock_chain_count+0x20/0x20 [ 668.605831][T16490] __x64_sys_bpf+0x7c/0x90 [ 668.610297][T16490] do_syscall_64+0x55/0xa0 [ 668.614769][T16490] ? clear_bhb_loop+0x40/0x90 [ 668.619507][T16490] ? clear_bhb_loop+0x40/0x90 [ 668.624236][T16490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.630177][T16490] RIP: 0033:0x7fdfa599af79 [ 668.634642][T16490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.654310][T16490] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.662785][T16490] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 668.670811][T16490] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 668.678844][T16490] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 668.686864][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.694887][T16490] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 668.702931][T16490] [ 668.888773][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3309'. [ 668.898056][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3309'. [ 668.927045][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3309'. [ 668.959698][T16493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3309'. [ 669.440002][T16504] FAULT_INJECTION: forcing a failure. [ 669.440002][T16504] name failslab, interval 1, probability 0, space 0, times 0 [ 669.478753][T16504] CPU: 0 PID: 16504 Comm: syz.1.3312 Not tainted syzkaller #0 [ 669.486297][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 669.496401][T16504] Call Trace: [ 669.499728][T16504] [ 669.502706][T16504] dump_stack_lvl+0x18c/0x250 [ 669.507448][T16504] ? show_regs_print_info+0x20/0x20 [ 669.512713][T16504] ? load_image+0x400/0x400 [ 669.517277][T16504] ? __might_sleep+0xe0/0xe0 [ 669.521921][T16504] ? __lock_acquire+0x7d40/0x7d40 [ 669.526997][T16504] ? _copy_from_iter+0x1f1/0x12e0 [ 669.532096][T16504] should_fail_ex+0x39d/0x4d0 [ 669.536841][T16504] should_failslab+0x9/0x20 [ 669.541485][T16504] slab_pre_alloc_hook+0x59/0x310 [ 669.546582][T16504] kmem_cache_alloc_node+0x60/0x320 [ 669.551929][T16504] ? __alloc_skb+0x103/0x2c0 [ 669.556584][T16504] __alloc_skb+0x103/0x2c0 [ 669.561067][T16504] tipc_buf_acquire+0x2b/0xe0 [ 669.565796][T16504] tipc_msg_build+0x8c3/0xee0 [ 669.570551][T16504] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 669.576677][T16504] ? tipc_nametbl_lookup_mcast_nodes+0x2e/0x9e0 [ 669.583005][T16504] __tipc_sendmsg+0x1c70/0x2bb0 [ 669.587933][T16504] ? rht_unlock+0x1d0/0x1d0 [ 669.592519][T16504] ? __lock_acquire+0x1273/0x7d40 [ 669.597609][T16504] ? register_lock_class+0xc4/0x8a0 [ 669.602856][T16504] ? wait_woken+0x180/0x180 [ 669.607415][T16504] ? is_dynamic_key+0x260/0x260 [ 669.612321][T16504] ? mark_lock+0x94/0x320 [ 669.616714][T16504] ? __lock_acquire+0x1347/0x7d40 [ 669.621847][T16504] ? verify_lock_unused+0x140/0x140 [ 669.627104][T16504] ? perf_trace_lock_acquire+0x104/0x410 [ 669.632804][T16504] __tipc_sendstream+0x1039/0x1270 [ 669.637975][T16504] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 669.644654][T16504] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 669.650674][T16504] ? lock_chain_count+0x20/0x20 [ 669.655565][T16504] ? tsk_advance_rx_queue+0x310/0x310 [ 669.661004][T16504] ? __local_bh_enable_ip+0x13a/0x1c0 [ 669.666496][T16504] ? _local_bh_enable+0xa0/0xa0 [ 669.671384][T16504] tipc_sendstream+0x55/0x70 [ 669.676035][T16504] ? tipc_getsockopt+0x5a0/0x5a0 [ 669.681011][T16504] ____sys_sendmsg+0x5ba/0x960 [ 669.685826][T16504] ? __lock_acquire+0x7d40/0x7d40 [ 669.690903][T16504] ? __asan_memset+0x22/0x40 [ 669.695530][T16504] ? __sys_sendmsg_sock+0x30/0x30 [ 669.700597][T16504] ? __import_iovec+0x5f2/0x850 [ 669.705500][T16504] ? import_iovec+0x73/0xa0 [ 669.710052][T16504] ___sys_sendmsg+0x2a6/0x360 [ 669.714849][T16504] ? get_pid_task+0x20/0x1e0 [ 669.719576][T16504] ? __sys_sendmsg+0x2a0/0x2a0 [ 669.724394][T16504] ? __lock_acquire+0x7d40/0x7d40 [ 669.729490][T16504] __se_sys_sendmsg+0x1c2/0x2b0 [ 669.734369][T16504] ? __x64_sys_sendmsg+0x80/0x80 [ 669.739391][T16504] ? lockdep_hardirqs_on+0x98/0x150 [ 669.744625][T16504] do_syscall_64+0x55/0xa0 [ 669.749078][T16504] ? clear_bhb_loop+0x40/0x90 [ 669.753798][T16504] ? clear_bhb_loop+0x40/0x90 [ 669.758511][T16504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.764428][T16504] RIP: 0033:0x7f8ee899af79 [ 669.768874][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.788535][T16504] RSP: 002b:00007f8ee98e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.796989][T16504] RAX: ffffffffffffffda RBX: 00007f8ee8c15fa0 RCX: 00007f8ee899af79 [ 669.804991][T16504] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 669.813024][T16504] RBP: 00007f8ee98e7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.821024][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 669.829029][T16504] R13: 00007f8ee8c16038 R14: 00007f8ee8c15fa0 R15: 00007ffe355c2ab8 [ 669.837064][T16504] [ 670.916878][T16541] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 671.396992][T16549] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3329'. [ 671.418868][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'. [ 671.916511][T16559] netlink: 'syz.2.3333': attribute type 21 has an invalid length. [ 672.034376][T16559] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3333'. [ 672.633550][T16580] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3341'. [ 673.068472][T16594] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.3346'. [ 673.114210][T16593] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.3346'. [ 674.038419][T16623] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 674.701386][T16645] __nla_validate_parse: 2 callbacks suppressed [ 674.701425][T16645] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3366'. [ 674.896390][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 675.119310][T16657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.137524][T16661] netlink: 'syz.0.3380': attribute type 3 has an invalid length. [ 675.168939][T16661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3380'. [ 675.248297][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3371'. [ 675.283126][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3371'. [ 675.311284][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3371'. [ 675.551029][T16673] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3378'. [ 675.694709][T16679] netlink: 'syz.0.3382': attribute type 21 has an invalid length. [ 675.710958][T16679] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3382'. [ 676.234334][T16704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3391'. [ 676.305624][T16704] netlink: 'syz.2.3391': attribute type 33 has an invalid length. [ 676.408879][T16706] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3392'. [ 676.618283][T16712] netlink: 'syz.1.3394': attribute type 21 has an invalid length. [ 677.221776][T16734] netlink: 'syz.2.3403': attribute type 29 has an invalid length. [ 677.238673][T16734] netlink: 'syz.2.3403': attribute type 3 has an invalid length. [ 677.428845][T16737] netlink: 'syz.2.3403': attribute type 10 has an invalid length. [ 677.920788][T16742] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 678.006256][T16744] netlink: 'syz.0.3407': attribute type 21 has an invalid length. [ 678.024921][T16744] netlink: 'syz.0.3407': attribute type 1 has an invalid length. [ 678.969776][T16767] sctp: [Deprecated]: syz.2.3412 (pid 16767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.969776][T16767] Use struct sctp_sack_info instead [ 679.998139][T16795] __nla_validate_parse: 8 callbacks suppressed [ 679.998181][T16795] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3425'. [ 680.194291][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3427'. [ 680.252646][T16801] validate_nla: 2 callbacks suppressed [ 680.252667][T16801] netlink: 'syz.1.3427': attribute type 33 has an invalid length. [ 680.370152][T16805] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3430'. [ 680.422089][T16805] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3430'. [ 680.474467][T16810] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3430'. [ 680.535255][T16810] netlink: 'syz.4.3430': attribute type 29 has an invalid length. [ 680.778171][T16805] 22Gx (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.051208][T16805] 22Gx (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.232706][T16805] 22Gx (unregistering): (slave netdevsim0): Releasing backup interface [ 681.326779][T16805] 22Gx (unregistering): (slave wlan1): Releasing backup interface [ 681.391129][T16805] 22Gx (unregistering): Released all slaves [ 681.432487][T16810] netlink: 'syz.4.3430': attribute type 29 has an invalid length. [ 681.464735][T16827] FAULT_INJECTION: forcing a failure. [ 681.464735][T16827] name failslab, interval 1, probability 0, space 0, times 0 [ 681.487177][T16827] CPU: 1 PID: 16827 Comm: syz.1.3435 Not tainted syzkaller #0 [ 681.494753][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 681.504903][T16827] Call Trace: [ 681.508286][T16827] [ 681.511325][T16827] dump_stack_lvl+0x18c/0x250 [ 681.516109][T16827] ? show_regs_print_info+0x20/0x20 [ 681.521397][T16827] ? load_image+0x400/0x400 [ 681.526059][T16827] ? __might_sleep+0xe0/0xe0 [ 681.530888][T16827] ? __lock_acquire+0x7d40/0x7d40 [ 681.536002][T16827] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 681.542256][T16827] should_fail_ex+0x39d/0x4d0 [ 681.547042][T16827] should_failslab+0x9/0x20 [ 681.551633][T16827] slab_pre_alloc_hook+0x59/0x310 [ 681.556801][T16827] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 681.562191][T16827] __kmem_cache_alloc_node+0x53/0x250 [ 681.567670][T16827] ? inet6_rtm_newroute+0xa0d/0x1c90 [ 681.573048][T16827] kmalloc_trace+0x2a/0xe0 [ 681.577561][T16827] inet6_rtm_newroute+0xa0d/0x1c90 [ 681.582812][T16827] ? __mutex_lock+0x94c/0xcc0 [ 681.587608][T16827] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 681.593611][T16827] ? do_raw_spin_unlock+0x121/0x230 [ 681.598956][T16827] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 681.604123][T16827] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 681.609282][T16827] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 681.615233][T16827] rtnetlink_rcv_msg+0x869/0xfa0 [ 681.620294][T16827] ? rtnetlink_bind+0x80/0x80 [ 681.625022][T16827] ? trace_call_bpf+0xc3/0x6c0 [ 681.629967][T16827] ? trace_call_bpf+0xc3/0x6c0 [ 681.634789][T16827] ? __lock_acquire+0x7d40/0x7d40 [ 681.639854][T16827] ? __local_bh_enable_ip+0x13a/0x1c0 [ 681.645313][T16827] ? trace_call_bpf+0xc3/0x6c0 [ 681.650151][T16827] ? trace_call_bpf+0xc3/0x6c0 [ 681.655079][T16827] ? trace_call_bpf+0x5e9/0x6c0 [ 681.660001][T16827] ? __dev_queue_xmit+0x26b/0x36b0 [ 681.665270][T16827] ? trace_call_bpf+0xc3/0x6c0 [ 681.670096][T16827] ? __dev_queue_xmit+0x124f/0x36b0 [ 681.675365][T16827] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 681.681529][T16827] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 681.687409][T16827] ? perf_trace_lock+0x304/0x3b0 [ 681.692457][T16827] netlink_rcv_skb+0x241/0x4d0 [ 681.697287][T16827] ? rtnetlink_bind+0x80/0x80 [ 681.702017][T16827] ? netlink_ack+0x1180/0x1180 [ 681.706876][T16827] ? __lock_acquire+0x7d40/0x7d40 [ 681.711974][T16827] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.717244][T16827] netlink_unicast+0x751/0x8d0 [ 681.722104][T16827] netlink_sendmsg+0x8d0/0xbf0 [ 681.726918][T16827] ? perf_trace_lock+0x304/0x3b0 [ 681.731925][T16827] ? netlink_getsockopt+0x590/0x590 [ 681.737177][T16827] ? aa_sock_msg_perm+0x94/0x150 [ 681.742177][T16827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 681.747515][T16827] ? security_socket_sendmsg+0x80/0xa0 [ 681.753021][T16827] ? netlink_getsockopt+0x590/0x590 [ 681.758277][T16827] ____sys_sendmsg+0x5ba/0x960 [ 681.763120][T16827] ? __asan_memset+0x22/0x40 [ 681.767764][T16827] ? __sys_sendmsg_sock+0x30/0x30 [ 681.772837][T16827] ? __import_iovec+0x5f2/0x850 [ 681.777837][T16827] ? import_iovec+0x73/0xa0 [ 681.782414][T16827] ___sys_sendmsg+0x2a6/0x360 [ 681.787158][T16827] ? __sys_sendmsg+0x2a0/0x2a0 [ 681.792036][T16827] ? __lock_acquire+0x7d40/0x7d40 [ 681.797178][T16827] __se_sys_sendmsg+0x1c2/0x2b0 [ 681.802100][T16827] ? __x64_sys_sendmsg+0x80/0x80 [ 681.807137][T16827] ? lockdep_hardirqs_on+0x98/0x150 [ 681.812407][T16827] do_syscall_64+0x55/0xa0 [ 681.816883][T16827] ? clear_bhb_loop+0x40/0x90 [ 681.821615][T16827] ? clear_bhb_loop+0x40/0x90 [ 681.826364][T16827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.832306][T16827] RIP: 0033:0x7f8ee899af79 [ 681.836768][T16827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.856428][T16827] RSP: 002b:00007f8ee98e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.864918][T16827] RAX: ffffffffffffffda RBX: 00007f8ee8c15fa0 RCX: 00007f8ee899af79 [ 681.872941][T16827] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 681.880962][T16827] RBP: 00007f8ee98e7090 R08: 0000000000000000 R09: 0000000000000000 [ 681.888985][T16827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.897000][T16827] R13: 00007f8ee8c16038 R14: 00007f8ee8c15fa0 R15: 00007ffe355c2ab8 [ 681.905060][T16827] [ 682.248144][T16832] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3437'. [ 682.293788][T16836] FAULT_INJECTION: forcing a failure. [ 682.293788][T16836] name failslab, interval 1, probability 0, space 0, times 0 [ 682.307643][T16836] CPU: 1 PID: 16836 Comm: syz.0.3439 Not tainted syzkaller #0 [ 682.315174][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 682.325285][T16836] Call Trace: [ 682.328610][T16836] [ 682.331584][T16836] dump_stack_lvl+0x18c/0x250 [ 682.336325][T16836] ? show_regs_print_info+0x20/0x20 [ 682.341583][T16836] ? load_image+0x400/0x400 [ 682.346150][T16836] should_fail_ex+0x39d/0x4d0 [ 682.350876][T16836] should_failslab+0x9/0x20 [ 682.355414][T16836] slab_pre_alloc_hook+0x59/0x310 [ 682.360489][T16836] kmem_cache_alloc+0x5a/0x2d0 [ 682.365297][T16836] ? dst_alloc+0x105/0x170 [ 682.369754][T16836] dst_alloc+0x105/0x170 [ 682.374035][T16836] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 682.380140][T16836] ? ip_route_output_key_hash_rcu+0x1331/0x2360 [ 682.386438][T16836] ? ip_route_output_key_hash+0x13d/0x330 [ 682.392191][T16836] ip_route_output_key_hash+0x1f3/0x330 [ 682.397778][T16836] ? ip_route_input_rcu+0x30e0/0x30e0 [ 682.403190][T16836] ? crng_make_state+0x350/0x700 [ 682.408234][T16836] ? lockdep_hardirqs_on+0x98/0x150 [ 682.413483][T16836] ip_route_output_flow+0x2a/0x150 [ 682.418648][T16836] sctp_v4_get_dst+0x400/0x1230 [ 682.423555][T16836] ? sctp_v4_xmit+0xde0/0xde0 [ 682.428368][T16836] ? _get_random_bytes+0x1e8/0x250 [ 682.433551][T16836] ? _raw_spin_unlock+0x40/0x40 [ 682.438457][T16836] ? dst_release+0x72/0x1a0 [ 682.442997][T16836] sctp_transport_route+0x10b/0x2c0 [ 682.448254][T16836] sctp_assoc_add_peer+0x650/0x1390 [ 682.453493][T16836] sctp_connect_new_asoc+0x323/0x6a0 [ 682.458806][T16836] ? __sctp_connect+0xd80/0xd80 [ 682.463683][T16836] ? __local_bh_enable_ip+0x13a/0x1c0 [ 682.469088][T16836] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 682.474666][T16836] ? security_sctp_bind_connect+0x89/0xb0 [ 682.480432][T16836] sctp_sendmsg+0x1575/0x28c0 [ 682.485147][T16836] ? sctp_getsockopt+0xb60/0xb60 [ 682.490113][T16836] ? aa_sk_perm+0x83c/0x970 [ 682.494653][T16836] ? aa_af_perm+0x330/0x330 [ 682.499187][T16836] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 682.505634][T16836] ? sock_rps_record_flow+0x19/0x3f0 [ 682.510952][T16836] ? inet_sendmsg+0xe9/0x2f0 [ 682.515664][T16836] ? inet_send_prepare+0x260/0x260 [ 682.520806][T16836] ____sys_sendmsg+0x5ba/0x960 [ 682.525624][T16836] ? __asan_memset+0x22/0x40 [ 682.530245][T16836] ? __sys_sendmsg_sock+0x30/0x30 [ 682.535299][T16836] ? __import_iovec+0x3fa/0x850 [ 682.540193][T16836] ? import_iovec+0x73/0xa0 [ 682.544737][T16836] ___sys_sendmsg+0x2a6/0x360 [ 682.549436][T16836] ? get_pid_task+0x20/0x1e0 [ 682.554066][T16836] ? __sys_sendmsg+0x2a0/0x2a0 [ 682.558881][T16836] ? __lock_acquire+0x7d40/0x7d40 [ 682.563985][T16836] __se_sys_sendmsg+0x1c2/0x2b0 [ 682.568861][T16836] ? __x64_sys_sendmsg+0x80/0x80 [ 682.573840][T16836] ? lockdep_hardirqs_on+0x98/0x150 [ 682.579065][T16836] do_syscall_64+0x55/0xa0 [ 682.583509][T16836] ? clear_bhb_loop+0x40/0x90 [ 682.588209][T16836] ? clear_bhb_loop+0x40/0x90 [ 682.592911][T16836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.598828][T16836] RIP: 0033:0x7fdfa599af79 [ 682.603270][T16836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.622917][T16836] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.631365][T16836] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 682.639366][T16836] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 682.647362][T16836] RBP: 00007fdfa6834090 R08: 0000000000000000 R09: 0000000000000000 [ 682.655375][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.663392][T16836] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 682.671408][T16836] [ 682.811954][T16838] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3440'. [ 682.996063][T16847] netlink: 'syz.4.3444': attribute type 21 has an invalid length. [ 683.872799][T16866] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3451'. [ 684.034982][T16874] netlink: 'syz.4.3453': attribute type 46 has an invalid length. [ 684.043500][T16874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3453'. [ 684.132676][T16876] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 684.151010][T16876] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3454'. [ 684.322988][T16882] netlink: 'syz.0.3457': attribute type 33 has an invalid length. [ 684.970868][T16903] sctp: [Deprecated]: syz.1.3463 (pid 16903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.970868][T16903] Use struct sctp_sack_info instead [ 685.450246][T16916] netlink: 'syz.2.3469': attribute type 3 has an invalid length. [ 685.458177][T16916] __nla_validate_parse: 2 callbacks suppressed [ 685.458192][T16916] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3469'. [ 685.714367][T16920] mac80211_hwsim hwsim34 wlan0: left promiscuous mode [ 685.728864][T16920] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 686.029439][T16928] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3474'. [ 686.130556][T16933] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 686.139261][T16933] netlink: 'syz.2.3476': attribute type 4 has an invalid length. [ 686.147095][T16933] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3476'. [ 686.171918][T16933] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 686.183777][T16933] netlink: 'syz.2.3476': attribute type 4 has an invalid length. [ 686.200018][T16933] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3476'. [ 686.696139][T16948] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3482'. [ 687.037946][T16960] sctp: [Deprecated]: syz.0.3484 (pid 16960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 687.037946][T16960] Use struct sctp_sack_info instead [ 687.114291][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.121354][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.373254][T16965] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3488'. [ 688.041666][T16975] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3500'. [ 688.167923][T16975] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3500'. [ 688.258754][T16983] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3500'. [ 688.293813][T16983] netlink: 'syz.0.3500': attribute type 29 has an invalid length. [ 688.452927][T16975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.509738][T16988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3496'. [ 688.526172][T16975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.556894][T16975] bond0 (unregistering): Released all slaves [ 688.677604][T16983] netlink: 'syz.0.3500': attribute type 29 has an invalid length. [ 688.686385][T16985] netlink: 'syz.0.3500': attribute type 29 has an invalid length. [ 688.823604][T16986] netlink: 'syz.0.3500': attribute type 29 has an invalid length. [ 689.272425][T17007] netlink: 'syz.2.3504': attribute type 11 has an invalid length. [ 689.908458][T17022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.952693][T17022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.030162][T17022] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 690.076917][T17022] bond0 (unregistering): Released all slaves [ 690.449906][T17040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.474167][T17043] validate_nla: 4 callbacks suppressed [ 690.474186][T17043] netlink: 'syz.0.3516': attribute type 10 has an invalid length. [ 690.490335][T17043] __nla_validate_parse: 12 callbacks suppressed [ 690.490354][T17043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3516'. [ 690.867601][T17057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.985510][T17061] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.3523'. [ 692.125850][T17090] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3535'. [ 692.419443][T17094] syzkaller0: entered promiscuous mode [ 692.425011][T17094] syzkaller0: entered allmulticast mode [ 692.448730][T17098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3538'. [ 692.519281][T17098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3538'. [ 692.548932][T17100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3538'. [ 692.836919][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 692.849150][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 692.865513][T17110] netlink: 'syz.0.3541': attribute type 10 has an invalid length. [ 692.875897][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 692.884491][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 692.907740][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 692.919464][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 693.000465][T17116] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3545'. [ 693.325992][T17111] chnl_net:caif_netlink_parms(): no params data found [ 693.485982][T17111] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.493460][T17111] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.501457][T17111] bridge_slave_0: entered allmulticast mode [ 693.509624][T17111] bridge_slave_0: entered promiscuous mode [ 693.519619][T17111] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.559175][T17111] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.566674][T17111] bridge_slave_1: entered allmulticast mode [ 693.590746][T17111] bridge_slave_1: entered promiscuous mode [ 693.653837][T17111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.682403][T17111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.797669][T17111] team0: Port device team_slave_0 added [ 693.811391][T17111] team0: Port device team_slave_1 added [ 693.882442][T17111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.898419][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.964581][T17111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.985748][T17111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.996594][T17111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 694.029991][T17111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.164591][T17111] hsr_slave_0: entered promiscuous mode [ 694.207122][T17111] hsr_slave_1: entered promiscuous mode [ 694.640500][T17111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.820157][T17111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.883851][T17165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.957224][T17111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.989267][T17169] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 695.033298][ T5082] Bluetooth: hci3: command tx timeout [ 695.071915][T17111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.523547][T17111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 695.603217][T17111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 695.682162][T17111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 695.826919][T17111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 695.947540][T17193] bridge_slave_0: left promiscuous mode [ 695.958670][T17193] bridge_slave_0: left allmulticast mode [ 696.017015][T17193] bridge_slave_0: entered promiscuous mode [ 696.028545][T17193] bridge_slave_0: entered allmulticast mode [ 696.043883][T17193] FAULT_INJECTION: forcing a failure. [ 696.043883][T17193] name failslab, interval 1, probability 0, space 0, times 0 [ 696.074354][T17193] CPU: 1 PID: 17193 Comm: syz.1.3572 Not tainted syzkaller #0 [ 696.081915][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 696.092016][T17193] Call Trace: [ 696.095345][T17193] [ 696.098318][T17193] dump_stack_lvl+0x18c/0x250 [ 696.103062][T17193] ? show_regs_print_info+0x20/0x20 [ 696.108325][T17193] ? load_image+0x400/0x400 [ 696.112884][T17193] ? __might_sleep+0xe0/0xe0 [ 696.117528][T17193] ? __lock_acquire+0x7d40/0x7d40 [ 696.122604][T17193] should_fail_ex+0x39d/0x4d0 [ 696.127340][T17193] should_failslab+0x9/0x20 [ 696.131894][T17193] slab_pre_alloc_hook+0x59/0x310 [ 696.136972][T17193] ? up_read+0x20/0x20 [ 696.141091][T17193] ? ipv6_add_addr+0x566/0x10d0 [ 696.145992][T17193] __kmem_cache_alloc_node+0x53/0x250 [ 696.151506][T17193] ? ipv6_add_addr+0x566/0x10d0 [ 696.156426][T17193] kmalloc_trace+0x2a/0xe0 [ 696.160903][T17193] ipv6_add_addr+0x566/0x10d0 [ 696.165725][T17193] ? ipv6_count_addresses+0x190/0x190 [ 696.171213][T17193] addrconf_add_linklocal+0x273/0x6d0 [ 696.176652][T17193] ? inet6_addr_del+0x690/0x690 [ 696.181559][T17193] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 696.187664][T17193] ? lock_chain_count+0x20/0x20 [ 696.192546][T17193] ? __local_bh_enable_ip+0x13a/0x1c0 [ 696.197950][T17193] ? lockdep_hardirqs_on+0x98/0x150 [ 696.203177][T17193] ? ipv6_generate_eui64+0x4d9/0x9a0 [ 696.208521][T17193] ? __asan_memcpy+0x40/0x70 [ 696.213152][T17193] ? ipv6_generate_eui64+0x690/0x9a0 [ 696.218491][T17193] addrconf_addr_gen+0x50e/0x620 [ 696.223464][T17193] ? ip6_route_add+0x12d/0x160 [ 696.228248][T17193] ? addrconf_sysctl_register+0x1b0/0x1b0 [ 696.233998][T17193] ? addrconf_add_dev+0x29c/0x3b0 [ 696.239053][T17193] ? __ipv6_isatap_ifid+0x310/0x310 [ 696.244304][T17193] ? addrconf_permanent_addr+0x975/0xa30 [ 696.249976][T17193] addrconf_init_auto_addrs+0x77b/0xb20 [ 696.255556][T17193] ? addrconf_dad_run+0x1d0/0x1d0 [ 696.260637][T17193] ? __mutex_lock+0x315/0xcc0 [ 696.265364][T17193] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 696.271029][T17193] ? mutex_unlock+0x10/0x10 [ 696.275595][T17193] ? tls_dev_event+0x74d/0xf40 [ 696.280396][T17193] ? addrconf_link_ready+0x116/0x170 [ 696.285724][T17193] addrconf_notify+0xb62/0x1010 [ 696.290640][T17193] notifier_call_chain+0x197/0x380 [ 696.295815][T17193] __dev_notify_flags+0x1aa/0x310 [ 696.300912][T17193] ? __dev_change_flags+0x6a0/0x6a0 [ 696.306151][T17193] ? __dev_change_flags+0x529/0x6a0 [ 696.311390][T17193] ? __mutex_lock+0x4f9/0xcc0 [ 696.316213][T17193] ? dev_get_flags+0x1c0/0x1c0 [ 696.321032][T17193] ? mutex_lock_nested+0x20/0x20 [ 696.326039][T17193] dev_change_flags+0xe8/0x1a0 [ 696.330894][T17193] dev_ioctl+0x7b4/0x1140 [ 696.335261][T17193] sock_do_ioctl+0x239/0x310 [ 696.339900][T17193] ? sock_show_fdinfo+0xb0/0xb0 [ 696.344797][T17193] sock_ioctl+0x5ba/0x7e0 [ 696.349184][T17193] ? sock_poll+0x3e0/0x3e0 [ 696.353662][T17193] ? bpf_lsm_file_ioctl+0x9/0x10 [ 696.358629][T17193] ? security_file_ioctl+0x80/0xa0 [ 696.363780][T17193] ? sock_poll+0x3e0/0x3e0 [ 696.368228][T17193] __se_sys_ioctl+0xfd/0x170 [ 696.372860][T17193] do_syscall_64+0x55/0xa0 [ 696.377312][T17193] ? clear_bhb_loop+0x40/0x90 [ 696.382032][T17193] ? clear_bhb_loop+0x40/0x90 [ 696.386762][T17193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 696.392683][T17193] RIP: 0033:0x7f8ee899af79 [ 696.397161][T17193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.416820][T17193] RSP: 002b:00007f8ee98e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.425258][T17193] RAX: ffffffffffffffda RBX: 00007f8ee8c15fa0 RCX: 00007f8ee899af79 [ 696.433251][T17193] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006 [ 696.441253][T17193] RBP: 00007f8ee98e7090 R08: 0000000000000000 R09: 0000000000000000 [ 696.449256][T17193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.457243][T17193] R13: 00007f8ee8c16038 R14: 00007f8ee8c15fa0 R15: 00007ffe355c2ab8 [ 696.465247][T17193] [ 696.641324][T17111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.693331][T17111] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.718757][T13053] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.726005][T13053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.773538][T17206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.798310][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.805609][T13091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.066701][T17213] netlink: 'syz.0.3577': attribute type 25 has an invalid length. [ 697.091072][T17213] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3577'. [ 697.108965][ T5082] Bluetooth: hci3: command tx timeout [ 697.433513][T17111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.765283][T13053] ip6gretap0 (unregistering): left allmulticast mode [ 697.781869][T13053] ip6gretap0 (unregistering): left promiscuous mode [ 697.801499][T13053] : port 1(ip6gretap0) entered disabled state [ 698.816460][T17111] veth0_vlan: entered promiscuous mode [ 698.884845][T17111] veth1_vlan: entered promiscuous mode [ 699.040186][T17111] veth0_macvtap: entered promiscuous mode [ 699.164543][T17111] veth1_macvtap: entered promiscuous mode [ 699.189181][ T5082] Bluetooth: hci3: command tx timeout [ 699.643730][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.669684][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.688798][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.706610][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.734036][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.745919][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.768529][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.779551][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.821234][T17111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.883142][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.896206][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.906690][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.918731][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.930871][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.942113][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.952425][T17111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.964393][T17111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.976514][T17111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.029721][T17111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.039596][T17111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.052685][T17111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.079862][T17111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.310467][T11968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.327977][T11968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.278706][ T5082] Bluetooth: hci3: command tx timeout [ 703.606841][T13752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.622297][T13752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.007619][T17295] netlink: 'syz.4.3534': attribute type 1 has an invalid length. [ 704.036866][T17295] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3534'. [ 704.056771][T17295] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3534'. [ 704.084006][T17297] netlink: 'syz.4.3534': attribute type 4 has an invalid length. [ 704.106133][T17297] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3534'. [ 704.196883][T17297] P`: renamed from bond0 (while UP) [ 704.365335][T13053] hsr_slave_0: left promiscuous mode [ 704.371858][T13053] batman_adv: batadv0: Removing interface: team0 [ 704.397926][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.424794][T13053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.450620][T13053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.458139][T13053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.485233][T13053] bridge0: port 4(dummy0) entered disabled state [ 704.505930][T13053] bridge_slave_1: left allmulticast mode [ 704.518614][T13053] bridge_slave_1: left promiscuous mode [ 704.527330][T13053] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.554262][T13053] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.599742][T13053] veth1_macvtap: left promiscuous mode [ 704.605459][T13053] veth0_macvtap: left promiscuous mode [ 704.798976][T17325] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3610'. [ 705.351678][T13053] team0 (unregistering): Port device team_slave_1 removed [ 705.403852][T13053] team0 (unregistering): Port device C removed [ 705.929249][T17325] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.3610'. [ 705.948658][T17325] tipc: Started in network mode [ 705.953614][T17325] tipc: Node identity b, cluster identity 73 [ 705.970714][T17325] tipc: Node number set to 11 [ 706.462179][T17337] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3614'. [ 706.508515][T17337] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 706.615327][T17340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.773549][T17374] netlink: 'syz.4.3629': attribute type 21 has an invalid length. [ 707.801087][T17374] netlink: 'syz.4.3629': attribute type 4 has an invalid length. [ 707.821084][T17374] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3629'. [ 707.885762][T17374] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3629'. [ 708.213797][T17393] bridge_slave_0: left promiscuous mode [ 708.220304][T17393] bridge_slave_0: left allmulticast mode [ 708.364440][T17396] bridge_slave_0: entered promiscuous mode [ 708.381008][T17396] bridge_slave_0: entered allmulticast mode [ 708.511445][T17398] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3637'. [ 708.534210][T17398] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3637'. [ 709.137795][T17431] netlink: 'syz.0.3647': attribute type 10 has an invalid length. [ 709.934864][T17458] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 710.410833][T17468] __nla_validate_parse: 1 callbacks suppressed [ 710.410850][T17468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3661'. [ 710.505402][T17473] netlink: 'syz.1.3670': attribute type 10 has an invalid length. [ 711.554628][T17503] netlink: 'syz.0.3673': attribute type 10 has an invalid length. [ 713.284084][T17541] netlink: 'syz.2.3687': attribute type 10 has an invalid length. [ 713.689801][T17545] syzkaller0: entered promiscuous mode [ 713.717541][T17545] syzkaller0: entered allmulticast mode [ 717.176744][T17591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3701'. [ 718.326389][T17608] C: renamed from team_slave_0 (while UP) [ 718.354912][T17608] netlink: 'syz.4.3706': attribute type 2 has an invalid length. [ 718.368039][T17608] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3706'. [ 718.394751][T17608] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 718.503253][T17625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3711'. [ 718.627797][T17625] caif0: left promiscuous mode [ 718.639699][T17625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.186412][T17634] delete_channel: no stack [ 719.633965][T17653] netlink: 'syz.4.3722': attribute type 10 has an invalid length. [ 719.672072][T17653] batman_adv: batadv0: Adding interface: team0 [ 719.718572][T17653] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.848537][T17653] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 720.510708][T17673] netlink: 822 bytes leftover after parsing attributes in process `syz.4.3724'. [ 720.708994][T17684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3731'. [ 720.875108][T17690] netlink: 'syz.1.3734': attribute type 10 has an invalid length. [ 720.900585][T17690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3734'. [ 720.910044][T17690] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 721.517794][T17710] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3741'. [ 721.789784][T17715] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3743'. [ 721.858096][T17697] delete_channel: no stack [ 721.949640][T17717] delete_channel: no stack [ 721.954874][T17717] delete_channel: no stack [ 722.513661][T17732] netlink: 'syz.1.3750': attribute type 10 has an invalid length. [ 722.591396][T17732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3750'. [ 817.188855][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 827.678357][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 827.685402][ C0] rcu: 1-....: (1 GPs behind) idle=19d4/1/0x4000000000000000 softirq=69920/69921 fqs=5243 [ 827.696559][ C0] rcu: hardirqs softirqs csw/system [ 827.703026][ C0] rcu: number: 7745335 0 0 [ 827.709482][ C0] rcu: cputime: 25125 27402 0 ==> 52510(ms) [ 827.717327][ C0] rcu: (detected by 0, t=10502 jiffies, g=92009, q=878 ncpus=2) [ 827.725116][ C0] Sending NMI from CPU 0 to CPUs 1: [ 827.730365][ C1] NMI backtrace for cpu 1 [ 827.730376][ C1] CPU: 1 PID: 17729 Comm: syz.0.3749 Not tainted syzkaller #0 [ 827.730394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 827.730405][ C1] RIP: 0010:perf_prepare_sample+0x5/0x1df0 [ 827.730435][ C1] Code: eb a5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ac fe ff ff 4c 89 e7 e8 4a 31 31 00 e9 9f fe ff ff 0f 1f 44 00 00 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 00 [ 827.730450][ C1] RSP: 0018:ffffc900001efe90 EFLAGS: 00000046 [ 827.730465][ C1] RAX: ffffffff81ae31f0 RBX: ffffc900001f0180 RCX: ffff88807e5f8000 [ 827.730478][ C1] RDX: ffff8880b8f36888 RSI: ffff88805a75aaa8 RDI: ffffc900001f0180 [ 827.730491][ C1] RBP: ffffc900001effa8 R08: dffffc0000000000 R09: 1ffffffff2237ea0 [ 827.730504][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: dffffc0000000000 [ 827.730517][ C1] R13: ffff88805a75aaa8 R14: ffff8880b8f36888 R15: 1ffff9200003dfd8 [ 827.730530][ C1] FS: 00007fdfa68346c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 827.730545][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.730556][ C1] CR2: 000020000001e000 CR3: 000000005720b000 CR4: 00000000003506e0 [ 827.730572][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 827.730584][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 827.730594][ C1] Call Trace: [ 827.730604][ C1] [ 827.730612][ C1] perf_event_output_forward+0x187/0x3e0 [ 827.730634][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 827.730654][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 827.730682][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 827.730705][ C1] __perf_event_overflow+0x447/0x630 [ 827.730731][ C1] perf_swevent_event+0x324/0x630 [ 827.730761][ C1] ? perf_tp_event+0x1450/0x1450 [ 827.730780][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 827.730807][ C1] ? perf_trace_lock_acquire+0x104/0x410 [ 827.730838][ C1] perf_tp_event+0x54f/0x1450 [ 827.730862][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 827.730883][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 827.730928][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 827.730953][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 827.730974][ C1] ? sched_clock_cpu+0x75/0x430 [ 827.730993][ C1] ? perf_event_wakeup+0x2ee/0x380 [ 827.731014][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 827.731041][ C1] perf_trace_preemptirq_template+0x269/0x330 [ 827.731071][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 827.731093][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 827.731122][ C1] ? __irq_exit_rcu+0xdf/0x190 [ 827.731141][ C1] ? irq_exit_rcu+0x20/0x20 [ 827.731161][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 827.731182][ C1] trace_irq_enable+0xbb/0xe0 [ 827.731207][ C1] trace_hardirqs_on+0x18/0x40 [ 827.731231][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 827.731249][ C1] RIP: 0010:unwind_next_frame+0x4a3/0x2970 [ 827.731267][ C1] Code: 74 24 48 48 89 d8 4c 29 e0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 4d 8d 3c 44 4c 89 f8 48 c1 e8 03 0f b6 04 10 <84> c0 75 3e 4d 63 2f 4d 01 fd 4c 89 ef 4c 89 f6 e8 e8 db 4b 00 49 [ 827.731281][ C1] RSP: 0018:ffffc900001f0598 EFLAGS: 00000a02 [ 827.731295][ C1] RAX: 0000000000000000 RBX: ffffffff8f063aa0 RCX: 0000000000000020 [ 827.731307][ C1] RDX: dffffc0000000000 RSI: 00000000001bb9c9 RDI: 00000000001bb9ea [ 827.731319][ C1] RBP: ffffffff8f063a20 R08: ffffc900001f0730 R09: 0000000000000011 [ 827.731331][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8f063a20 [ 827.731343][ C1] R13: 00000000001bb9c9 R14: ffffffff8aa01449 R15: ffffffff8f063a60 [ 827.731358][ C1] ? asm_sysvec_apic_timer_interrupt+0x19/0x20 [ 827.731389][ C1] ? unwind_next_frame+0x2b2/0x2970 [ 827.731409][ C1] ? asm_sysvec_apic_timer_interrupt+0x19/0x20 [ 827.731430][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.731450][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.731469][ C1] ? stack_trace_save+0x100/0x100 [ 827.731490][ C1] arch_stack_walk+0x144/0x190 [ 827.731512][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.731535][ C1] stack_trace_save+0xaa/0x100 [ 827.731555][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 827.731577][ C1] ? mark_lock+0x94/0x320 [ 827.731601][ C1] kasan_set_track+0x4e/0x70 [ 827.731619][ C1] ? kasan_set_track+0x4e/0x70 [ 827.731648][ C1] ? kasan_save_free_info+0x2e/0x50 [ 827.731668][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 827.731686][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 827.731701][ C1] ? kmem_cache_free+0xf8/0x270 [ 827.731746][ C1] ? skb_release_data+0x60a/0x800 [ 827.731772][ C1] ? consume_skb+0xb2/0x110 [ 827.731796][ C1] ? mac80211_hwsim_beacon_tx+0x3e9/0x780 [ 827.731816][ C1] ? __iterate_interfaces+0x243/0x500 [ 827.731840][ C1] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 827.731864][ C1] ? mac80211_hwsim_beacon+0xbb/0x1b0 [ 827.731880][ C1] ? __hrtimer_run_queues+0x52a/0xc40 [ 827.731898][ C1] ? hrtimer_run_softirq+0x187/0x2b0 [ 827.731916][ C1] ? handle_softirqs+0x280/0x820 [ 827.731932][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 827.731947][ C1] ? irq_exit_rcu+0x9/0x20 [ 827.731961][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 827.731978][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.732027][ C1] ? kmem_cache_free+0xf8/0x270 [ 827.732050][ C1] kasan_save_free_info+0x2e/0x50 [ 827.732073][ C1] ____kasan_slab_free+0x126/0x1e0 [ 827.732095][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 827.732115][ C1] ? skb_release_data+0x60a/0x800 [ 827.732140][ C1] kmem_cache_free+0xf8/0x270 [ 827.732169][ C1] skb_release_data+0x60a/0x800 [ 827.732205][ C1] consume_skb+0xb2/0x110 [ 827.732232][ C1] mac80211_hwsim_beacon_tx+0x3e9/0x780 [ 827.732257][ C1] __iterate_interfaces+0x243/0x500 [ 827.732282][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 827.732301][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 827.732328][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 827.732347][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 827.732375][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 827.732395][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 827.732419][ C1] ? hw_scan_work+0xf60/0xf60 [ 827.732442][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 827.732460][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 827.732488][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 827.732510][ C1] handle_softirqs+0x280/0x820 [ 827.732531][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 827.732552][ C1] ? do_softirq+0x1a0/0x1a0 [ 827.732572][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 827.732597][ C1] __irq_exit_rcu+0xd3/0x190 [ 827.732615][ C1] ? irq_exit_rcu+0x20/0x20 [ 827.732638][ C1] irq_exit_rcu+0x9/0x20 [ 827.732653][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 827.732672][ C1] [ 827.732677][ C1] [ 827.732684][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.732702][ C1] RIP: 0010:internal_get_user_pages_fast+0x2080/0x2760 [ 827.732728][ C1] Code: e8 05 de be ff e9 4a ff ff ff e8 fb dd be ff e8 c6 15 bc 08 48 83 bc 24 b8 00 00 00 00 74 b0 e8 e6 dd be ff fb 83 7c 24 74 00 <48> 8b 4c 24 60 75 0a e8 d4 dd be ff e9 85 00 00 00 48 b8 00 00 00 [ 827.732748][ C1] RSP: 0018:ffffc9000b5aee40 EFLAGS: 00000246 [ 827.732763][ C1] RAX: ffffffff81c836ca RBX: 0000000000000000 RCX: 0000000000080000 [ 827.732775][ C1] RDX: ffffc9000fc11000 RSI: 000000000001fa67 RDI: 000000000001fa68 [ 827.732786][ C1] RBP: ffffc9000b5af050 R08: ffffffff911bf607 R09: 1ffffffff2237ec0 [ 827.732799][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec1 R12: 0000000000000000 [ 827.732811][ C1] R13: 0200000000000000 R14: 000020000001f000 R15: 0000000000000000 [ 827.732828][ C1] ? internal_get_user_pages_fast+0x207a/0x2760 [ 827.732882][ C1] ? get_user_pages_fast_only+0xa0/0xa0 [ 827.732907][ C1] ? __task_pid_nr_ns+0x390/0x470 [ 827.732935][ C1] ? perf_get_regs_user+0x5bb/0x6b0 [ 827.732963][ C1] perf_prepare_sample+0x10fc/0x1df0 [ 827.732989][ C1] ? perf_callchain+0x220/0x220 [ 827.733015][ C1] perf_event_output_forward+0x187/0x3e0 [ 827.733034][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 827.733053][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 827.733074][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 827.733107][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 827.733141][ C1] __perf_event_overflow+0x447/0x630 [ 827.733166][ C1] perf_swevent_event+0x324/0x630 [ 827.733189][ C1] ? perf_tp_event+0x1450/0x1450 [ 827.733215][ C1] ___perf_sw_event+0x4a7/0x730 [ 827.733237][ C1] ? ___perf_sw_event+0x199/0x730 [ 827.733255][ C1] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 827.733281][ C1] ? rep_movs_alternative+0x4a/0x90 [ 827.733325][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 827.733343][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.733368][ C1] __perf_sw_event+0x139/0x270 [ 827.733390][ C1] do_user_addr_fault+0x123e/0x12c0 [ 827.733416][ C1] ? rcu_is_watching+0x15/0xb0 [ 827.733441][ C1] exc_page_fault+0x64/0x100 [ 827.733460][ C1] asm_exc_page_fault+0x26/0x30 [ 827.733476][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 827.733499][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 827.733513][ C1] RSP: 0018:ffffc9000b5af818 EFLAGS: 00050206 [ 827.733526][ C1] RAX: ffffffff84272301 RBX: 0000000000008000 RCX: 0000000000002140 [ 827.733537][ C1] RDX: 0000000000000001 RSI: 000020000001e000 RDI: ffff888065af5ec0 [ 827.733548][ C1] RBP: ffffc9000b5af970 R08: ffff888065af7fff R09: 1ffff1100cb5efff [ 827.733560][ C1] R10: dffffc0000000000 R11: ffffed100cb5f000 R12: ffff888065af0000 [ 827.733571][ C1] R13: 0000200000018140 R14: ffffc9000b5afc18 R15: 1ffff920016b5f83 [ 827.733589][ C1] ? _copy_from_iter+0x1f1/0x12e0 [ 827.733619][ C1] _copy_from_iter+0x24e/0x12e0 [ 827.733641][ C1] ? __virt_addr_valid+0x18c/0x540 [ 827.733663][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 827.733686][ C1] ? copyout_mc+0x70/0x70 [ 827.733707][ C1] ? __virt_addr_valid+0x18c/0x540 [ 827.733728][ C1] ? __virt_addr_valid+0x18c/0x540 [ 827.733772][ C1] ? __virt_addr_valid+0x469/0x540 [ 827.733796][ C1] ? __check_object_size+0x506/0xa20 [ 827.733826][ C1] kcm_sendmsg+0xd95/0x28b0 [ 827.733944][ C1] ? kcm_getsockopt+0x280/0x280 [ 827.733969][ C1] ? tomoyo_socket_sendmsg+0x16/0x30 [ 827.733990][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 827.734013][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 827.734034][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 827.734054][ C1] sock_write_iter+0x2df/0x420 [ 827.734075][ C1] ? sock_read_iter+0x3e0/0x3e0 [ 827.734100][ C1] ? common_file_perm+0x198/0x1f0 [ 827.734127][ C1] vfs_write+0x46c/0x990 [ 827.734154][ C1] ? file_end_write+0x250/0x250 [ 827.734181][ C1] ? __fget_files+0x43d/0x4b0 [ 827.734210][ C1] ? __fdget_pos+0x1d8/0x330 [ 827.734230][ C1] ? ksys_write+0x75/0x260 [ 827.734255][ C1] ksys_write+0x150/0x260 [ 827.734279][ C1] ? __ia32_sys_read+0x90/0x90 [ 827.734305][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 827.734327][ C1] do_syscall_64+0x55/0xa0 [ 827.734349][ C1] ? clear_bhb_loop+0x40/0x90 [ 827.734367][ C1] ? clear_bhb_loop+0x40/0x90 [ 827.734387][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.734405][ C1] RIP: 0033:0x7fdfa599af79 [ 827.734421][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.734434][ C1] RSP: 002b:00007fdfa6834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 827.734450][ C1] RAX: ffffffffffffffda RBX: 00007fdfa5c15fa0 RCX: 00007fdfa599af79 [ 827.734463][ C1] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 000000000000000b [ 827.734474][ C1] RBP: 00007fdfa5a316e0 R08: 0000000000000000 R09: 0000000000000000 [ 827.734485][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.734495][ C1] R13: 00007fdfa5c16038 R14: 00007fdfa5c15fa0 R15: 00007fff40043628 [ 827.734519][ C1]