last executing test programs: 6.196624355s ago: executing program 3 (id=1718): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x40000000, 0x0, 0xf, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='(\'}*\'\x00') r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0008000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) 5.510053877s ago: executing program 1 (id=1723): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8a5a186dd99732653be084ec3ac90c500b4d4bc2e787759227e6c", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0xfe33) 5.38925673s ago: executing program 2 (id=1724): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x21) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4ca67e9aa648"], 0xfe33) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x42c, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="180800000000000000000000000000008519da1d9e75873fa7000000000000000000000000000000950000000000040000000000001ed757461e55d6ee00000010f062b19c4586ae15560cbd1922d11ae60fc0c57b33230bf7ca62f0094d2cba2abe1b2a180c6a841260057265276a7284d3d4f57658d705de47f6f4f798020cc0aa9190823e4b62df9b49121a350fa54fbe4b307dcd4fe123f1f045be7ecdaacb621711e434a47cb6706f497680fafba061f43e3e02a9f4915055526c95909f7efdd4"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x0, 0x2e, 0x5f, 0x5f, 0x0, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2e, 0x0, 0x1, 0x6}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x5, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f00000008c0)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x4, 0x4, 0x11}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="305d27b5c18b7e4554d059f8bb90f1833facde8ed6df40233c8c91f8b3fdbe43860ce6f3307ae5f46f47bf5e63974ecfca6f1addfd4775ef2afd6204dd0c4cc9cf9d745b5413d4fab569790ca6783230f0dd33e8760f85a73dd1536af120bfb11f494c3d0800000044807d60f85e65ffbd853e029774f92fbcc7055773dc50fdc89e10a75e3c168dfe0f13a74c303136d72e76aab1bf14bfa4fdc583123e5a92e7cc52c8", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB], 0x10) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x21, &(0x7f0000000740), 0x4) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r8, r8, 0x2f}, 0x20) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r10, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r11, r11, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r11, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='/\x00\x00\x00\b\x00', @ANYRES32=r9, @ANYBLOB, @ANYBLOB="fd9c45b930a762c3ef492a24a4b5763404d56e838fdd5d6630541a69"], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map=r3, r4, 0x19, 0x10, r6, @void, @value=r2, @void, @void, r12}, 0x20) 5.353341061s ago: executing program 0 (id=1725): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100115f4201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.23650084s ago: executing program 2 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xfffffffffffffd4e}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000099e60b84e74eabc9c8abec000000000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000c38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005b00000095000000000000001c4b9766e735d2568a658fa6abe6923cd1824c38c3edca5aaac5c1291f08e6c41802f9a9fc89ace19b5cbaa2068468eb4a10068e174e"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000eb000000000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000700)="8ac49d1cf7cbaf377061d299233bd2964fca6317cd5fb69fb616712e02efd3fdee84d5eff183a0757072f7a65772353a8ed14d720502605ff9f1", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r4, r2}, 0xc) 2.129045183s ago: executing program 1 (id=1727): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'freezer'}, {0x2b, 'io'}]}, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0xe2b7, 0x1, 0x20000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@enum64={0x3, 0x9, 0x0, 0x13, 0x1, 0x9, [{0x9, 0xff, 0x10}, {0x10, 0x2, 0x7ff}, {0x6, 0x101, 0x4}, {0xc, 0x7f, 0x4d}, {0x7, 0x2, 0xfffffff1}, {0x8, 0x10, 0x70e52fbb}, {0xf, 0xac67, 0xd}, {0x4, 0x96, 0x2}, {0xf, 0x8, 0xd3}]}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x4}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000380)=""/7, 0xb8, 0x7, 0x0, 0x8000, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x11}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='&'], 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x8, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000240)='GPL\x00', 0x7, 0x40, &(0x7f0000000280)=""/64, 0x41000, 0x43, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, r6, r7], &(0x7f0000000580)=[{0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2b, 'devices'}, {0x7b, 'cpuacct'}, {0x2b, 'cpuacct'}]}, 0x21) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'freezer'}, {0x2b, 'io'}]}, 0xd) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4, 0xe2b7, 0x1, 0x20000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x2}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@enum64={0x3, 0x9, 0x0, 0x13, 0x1, 0x9, [{0x9, 0xff, 0x10}, {0x10, 0x2, 0x7ff}, {0x6, 0x101, 0x4}, {0xc, 0x7f, 0x4d}, {0x7, 0x2, 0xfffffff1}, {0x8, 0x10, 0x70e52fbb}, {0xf, 0xac67, 0xd}, {0x4, 0x96, 0x2}, {0xf, 0x8, 0xd3}]}, @float={0x3, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x4}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000380)=""/7, 0xb8, 0x7, 0x0, 0x8000, 0x10000}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x11}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x8, 0x8}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000240)='GPL\x00', 0x7, 0x40, &(0x7f0000000280)=""/64, 0x41000, 0x43, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0x80000001, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r4, 0xffffffffffffffff, r6, r7], &(0x7f0000000580)=[{0x0, 0x1, 0x6, 0x7}], 0x10, 0x7}, 0x94) (async) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}, {0x2b, 'devices'}, {0x7b, 'cpuacct'}, {0x2b, 'cpuacct'}]}, 0x21) (async) 2.043660636s ago: executing program 3 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x19, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x4, 0x2}, 0x10c253, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xc8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x6, &(0x7f0000000200)=r6, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xc, 0x8001, 0x3ff, 0x0, 0x2080, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r11 = socket$kcm(0x2c, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) sendmsg$kcm(r12, &(0x7f0000002d80)={&(0x7f0000000800)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000880)="0f16f67ee167f6a1ec0b68f5291c85", 0xf}, {&(0x7f00000008c0)="8fa2adc0eed6f95aede4588f44078fac80d75530f991d0e4790e50ef9b690c98a8536bbdca33268e1a10eb0f28ab490316bdf6e7885946b5d40643bb026d0faabef8069c23d79e0a0fa7f1dfc60ed78ac189444b29e6c96f1a8ac59cc0f1c00f9e7bd183e8a93eb3e30e35e6443424f8f3ecac79711cfe3cbeb6f1186113f8ae322268d308af8aa422e2f743c934530ab9f30083d365a3e6a33ba2f22489022b1f12a47ba7825c979fd2cc0565e75151da788955e5055960f051b84ecc95e824987e1d6c33467829e0fd80f8b8fc", 0xce}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="9f0b49208268e6ee18e77e61d488cb50f228f73847ec8286a48e4fb345d7f99b06a385f8d198e82b624d8fdcb5a6662dcc66de1f25f0273d0265f4bfc97c5f4affff3fff825bb9f060f932ced5bd12109521530c93b7a3cdf1acf6ca2c26255f3aa62ceeb3a65b28e6c1c9ba45552f6ed29cef0740a5de25fd82de893b3ade57cd32f4ea28049e7c4a79515d0f93d023d0557eccb40b8d", 0x97}], 0x4, &(0x7f0000002bc0)=[{0x28, 0x10b, 0x45, "9a54a3a2e8596c7c9455e10ca89142ee2479968d3f"}, {0x28, 0x119, 0x5, "f39022679fe47d951cf0b261e79f58065f3d59bd5444df"}, {0x90, 0x0, 0x10001, "e5dd2612612bba14953d5520268452b4f5e2026512bdda50d4ac789a0e633758e5bc39c980ce3b0ce6965934cb6e7b8c258704945d16e041ef46a1aef7aacf0b3828caada6bf215aecad95eeca057734a9fe37d29cb6bac49e78dfe6e7b189d043085efe4cce9a194ba64ceb1de55410a8bd24b4197af1b264c5df26d6"}, {0xb0, 0x84, 0x10000, "61cacd494347a77c07f9adecc7576ce7cbbdfb7da149cccaef1f6c4f51e25b302a1279cd0fad0b75f3606d3e2b1e856b70ad04c83d19c7e619294fdb4cc729822b02fe5665e56d119388176aa8fcb80a145c662db5cd27dd5ccda41d74efb48438a745fcee00b67598e0b99e20055684c7cad3206cf062ff23d5fe8744d5808c93810c7b0b90f441ae37f9c43e26fd2e57d514fca24e0c3cb561e6"}], 0x190}, 0x1) setsockopt$sock_attach_bpf(r11, 0x11b, 0x3, &(0x7f0000000040)=r12, 0x4) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xe, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa320, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x3, 0x6, 0xb, 0x5, 0x80}], &(0x7f0000000080)='GPL\x00', 0x7, 0x4, &(0x7f00000000c0)=""/4, 0x41100, 0x8, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x2, 0x200, 0x8001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r7, r9, r10, 0x1, 0x1, r12, 0x1, r13], &(0x7f00000006c0)=[{0x2, 0x5, 0xb, 0xb}, {0x5, 0x2, 0x5, 0x4}, {0x5, 0x4, 0x4, 0x8}], 0x10, 0x1}, 0x94) 1.937345299s ago: executing program 0 (id=1729): socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff5"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000017c0)={&(0x7f0000000080)="fadf8737dbd73b", 0x0, 0x0, 0x0, 0x7, r0, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000008000e7ff000000", @ANYRES32, @ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f0000000000000004000000181100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) 1.871661241s ago: executing program 1 (id=1731): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x8000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5761, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.686793527s ago: executing program 2 (id=1732): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB="000000000000000018ac"], 0x50) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x40}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) 1.57718325s ago: executing program 3 (id=1733): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x3}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/133, 0x85}, 0x40000020) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7ff, 0x58c, 0x7b70, 0x10480, 0xffffffffffffffff, 0xffffffff, '\x00', r2, r0, 0x2, 0x0, 0x0, 0xb, @void, @value, @value=r3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={&(0x7f0000000440)="e64a028317a86ee09685ea64ba3844cf58cd4d7f5ac838889cdafc0100add0c78fcb4d36ad5cc1e2f664821100fd96989fd81f0ee8524e7356eaf6ef6f5990fdf3b78a5734612fc8962c50ca8934d02261402edba428921975f2acda670143bc67b6e695aee62074c33c8fb7de695c64a78183b2131d084cfeac332674a4569781ebf58f8dd8712a51310c0e3f56387797982f1cf1af35a2c8d1d2a69243dd04d60c5931369c7900a9af2cfbda9c014504197610a29065e64e9385ef3dd6258739c67c99a89e60053b86f3ad7ba8571b85c1815d6c8e8bec8970b8209909609f79", &(0x7f0000000540)=""/87, &(0x7f00000005c0)="02598f9b2606f2ce86ed8d45f84db17eb0c361d663188a563c76a74de5a6ff52cc0f219311fd06f7d1f0251bf3fea9ab767840deb84ba14f51e6a433c7b02e86da147e0f45730a4ba6b6bfbee2cf94c9150d48b8b44eedafd11e8e17d46d97dfcef8849ad9462cfb19a8a96e54ac155c3610c74b66bf528430f745dde47e7266e077901e129b4ba114d060cb6001e817ac93a3acabdbe25603e6f4f65e89cc7945e7f18e5b148ce4e202d66028d6bedc65bbe934a41b451a82cf6d23cdde982f03e41ebbb09927f7d9b0ecc46b66", &(0x7f00000010c0)="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", 0x6, r4, 0x4}, 0x38) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e00000005000000040000000200000080040000", @ANYRES32=r4, @ANYBLOB="060000000000000020000000008000000020000035bd28d3b75e6802daad1ac6a7f0ea2c80d9af30eb916f54ba", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0300000003000000050000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0xf3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000001080)="f6f6e9d250a13c8ad610eef1894386dd78bb3fb7db90886fae089adbde87b8a86001", 0x0, 0x6, 0x0, 0xa, 0x0, &(0x7f0000000280)='\x00'/10, 0x0, 0x0, 0x0, 0x8}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5dd, 0x9}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x101c21, 0xc8, 0x94a, 0x7, 0x40, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa"], 0xfdef) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r12, 0x4000, r11}, 0x18) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x82, &(0x7f0000000000)=r13, 0x8) 1.575212031s ago: executing program 0 (id=1734): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=r3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) r8 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r7, 0x0, 0xfffffffffffffe59, &(0x7f00000023c0)}, 0x30) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000140)="a64103aa31f36d44753e63c2a86878043e14aa033fae39a4db46369200d2e691e7b56ac544aeca087174265fcd3304d66e421c88a560713f57e9dfce520873e4e26eee8a26ba4f6d52f7bfe2e0f739c7d9142fbf8a7e116a08995866b645b5c1eb69f097204228974335c7e4db8e13e8189ed22483aa6c630f6f3a3c5ea22f974c1a815a3aa4f663508ff250", 0x8c}, {&(0x7f0000000200)="b83a3cd67060446ea44901fdf497e22bba98b75d83ef557035b7082332922e0d5a206e8a5cf11a3c3cfdfbfb56a04ab6805b1963848f57adce59967eaae6670e090267e5dbebb0804c8ba397fe59fc0b37978dcec57cb0973ddec6958aaf24e3ea23731307c370d66bc1655c72958707c03ba1391d699730730c9cd6349b91e8163b8de9fafc21cfb960bb03484e88cd698e9bb42526618d50799dab846fe646c2b01df2044006d29d132724712bd56ce32586e93bd598b72d43bcd1dc162476b34698c984871daae41e7731bba35dbff170997f8d", 0xd5}, {&(0x7f00000003c0)="b8b513d7aa60fe3933b798ebf028e8980ddc9fb89a615d4db56959e175c41e5bffd0bc947b6e440ef9eba73b1642fa844158fb79c705747f475d31950966cf85b0a94317714ca17dfefa256909f57df11ac33cdf6032aa6c203751bb77840caa3669ef6a5f47d76d7562864c4dfd23af2b4c61eb3751908658534cb621b569f7d1d50d6651df7b31ca87c2782bd7fee254905b85c826f22341c8c70cb2ebd9b69124646c3aed566e3c0574602ee7b2ec3a8f4e1a756ec151890e6d8ac29e2e1ddb7535b108893b77ed57d9d60ecf6c8d2c5eed523203069ad29953672c", 0xdd}], 0x3, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x50, 0x2004c041}, 0x4040005) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) 1.528982012s ago: executing program 2 (id=1735): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x1f, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x10, 0x1, 0x182a, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x2f, 0x2004, 0x0, @value=r4, @void, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fea000000071101a000000cb009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(r5) 1.465507654s ago: executing program 1 (id=1736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10c82, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xe6) (async) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000000c0)={'bridge_slave_1', 0x32, 0x30}, 0x11) (async) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) r4 = getpid() (async) r5 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x3, 0xfa, 0xdb, 0x0, 0x0, 0x400, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240), 0xd}, 0x10, 0x800, 0x2, 0x4, 0x3, 0x856, 0x1, 0x0, 0x5937, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x9, 0x9, 0x7, 0x2, 0x0, 0x0, 0x20100, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x2, 0x0, 0xfffffffa, 0x1, 0xffffffffffffff99, 0xfffffe01, 0x7, 0x0, 0xec2, 0x0, 0x8}, r4, 0x6, r5, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa00000}, [@ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb}, @map_fd={0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xd, &(0x7f0000000400)=""/13, 0x41000, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xe, 0xfffffff7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r0], &(0x7f0000000500)=[{0x0, 0x1, 0x7ff, 0x9}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000600)={r2, r7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000640)='bridge_slave_1') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r7, 0x0, 0xc4, 0x1000, &(0x7f0000000680)="d614a8f6da2b49cb0534856fb5c54f3a4836402d5c7bbdf7b06c216656bfed1cfed5c1378a4f6775b1ad1f2c8a53c5c378eca52d55816c454e9f1e0b915f5204e90671bca854fc781089b3f625293645e307875c554fbfccf6f82f1a67bc5f36120c0c21c6e244f83dbe9e9202708feac92e9756bb66a16aff042d93dc262a79ca5df93dcda154dd3790039cfdd05c9b8c299c6dc1e2fe1c9051965e44f2538ccc4ab9a141037f94e9c0705140b7c65858471e12c46b2b24592b74bad20ae193fd627bf3", &(0x7f0000000780)=""/4096, 0x10, 0x0, 0x7b, 0xb9, &(0x7f0000001780)="42a570f0876fc2ac066c1716cfa8a564c3df18b67876f96f1d3b6769114b79bd875f4c816e24ccfec2fc7b2c165a384b9d627618adcec519d4a88b5562238393067c3dfb7f94330f7000e058345b65159f488dff4baf550d4a99878723eb824f5efe03ccfe8710d6e961b83c0da5d168c172202b700f1d8f9c9c25", &(0x7f0000001800)="00588a35d7ff7a12d7ff902c9a93579a0da56a1c9cdc58fdd4546708dc484e476a4a3d678400cab76a99a3e992f0810fe1eebe94e844efaab4a181eb1bd8cab4f407fb8a1869b2c0932efa8ea1ed9981ef2c5d67a02ee6db12a23816c8209a2bc9c9c41083b4b9498a02781dd4fc618bbc7196e12c502d23e2842d8a48ccf4a8734412e64fc1019a6904d902f82fe9a72ca98bceb11ba1e9cfa53bc93b3d9217904b8b3315ff37d1235c25a9d6f2d1a961cfe50f96f2fa9243", 0x3, 0x0, 0x6}, 0x50) sendmsg$kcm(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001940), 0x0, &(0x7f0000001980)=[{0x18, 0x110, 0xcc76, "b593609c"}, {0x18, 0x88, 0x5, "0246754fbc"}, {0x68, 0x116, 0x21, "0eabd05be766113bd47ed76d332cb12bc4dddc33169b5058a7d555dbaa49f95816f485c0896f32083b64691fff9f0f4f322c1c47c2151d4447d359da64c13ec55cef0341a0f6ad371db9de0d6d46c0beaf38a4b7"}, {0xd8, 0x114, 0x2, "f67da5a7089a68302fdcf962dbd5d0314a96fd41c7c116b0d66cf07585a02d38e8b6ce8ee2895b1e25f21e223ea20c231c635577a195dc9ff6004542b9d3283c72fda0065ff6d2287f2fe6a35d9544d45602b6660c1c95fa17a99702ba1704215b5d25b69c27f3c0219bd2fa8bd4b2905e51ee9e9d4b605519bd5f80899c10d8511ac6ab65273efaf07f058fbaf01157994afd24b09c03c4ac04f4129d8fa3897426127312b8c0b4cd22da3ab39ed16f75871a278079e73dc935be678454aa2fac465e"}, {0x88, 0x107, 0x9, "9e69a995a8ae243f1f4810921e8a8bc26823cb9d965f08167dfffe23c315b094ccfb8f314de2eb8c9f679b2c6638754314e56cc1d295aec8d15241dc61247531efd0c11cf352fa0f1177b17e7746449f4359d1fb010197e4b1540732e64ede3419897228926b700fcda533e8d9e7251dc8bb75d6"}], 0x1f8}, 0x24000894) openat$tun(0xffffffffffffff9c, &(0x7f0000001bc0), 0x109181, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001c00)={r3, r7, 0x4, r7}, 0x10) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000001c40)=0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c80), 0x4) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001f00)={r8, &(0x7f0000001d80)="3c0ec09aba028be733bae2cb6d251112e61c4d9d33c79f11d9510beb94b4e440f9b346740679d601e50fe27740969786b072e1df6da39a84367951db39ca1932e8d7ba9880aab9badcb0", &(0x7f0000001e00)=""/227}, 0x20) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001fc0)={r8, 0x58, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002000), 0x4) (async) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f00000020c0)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=@base={0x13, 0x2, 0x1000000, 0x5, 0x10000, r8, 0xe, '\x00', r9, r10, 0x0, 0x5, 0x4, 0x0, @void, @value, @value=r11}, 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002100), 0x4) (async, rerun: 32) syz_clone(0x42000, &(0x7f0000002140)="67077ffad1498654e14c2486f8d40d5100e9794b8df0dd5a093cfe68792d2eb2cfae95686a648da6ecddf65afe4ff54e3c4f5841ab18ba84ce73c75627f603a913c844459f18866a81008036449adda5ea35602a4f73b5270d151a6f0f0e19", 0x5f, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="d6d918f7d14ec933de6d8d63925f057e70b37746005d25c3042a545825661500ad18de099a649022c606cffc0cae4d2b4c043339fcbe768d1cf0d9722e6f99f90a15758f6c1ece69e38cbf1f78b27ff6a3c34f8ab70e395c7fbe21ab1b8da52213dbfe5750fca0ffafa46771b02c0337f1bc1e511cff3454a02ea6") (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000022c0)=0x5) (rerun: 32) 1.369497527s ago: executing program 3 (id=1737): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8a5a186dd99732653be084ec3ac90c500b4d4bc2e787759227e6c", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0xfe33) 1.320888868s ago: executing program 2 (id=1738): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x40000000, 0x0, 0xf, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='(\'}*\'\x00') r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0008000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) 591.920111ms ago: executing program 0 (id=1739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) 425.488507ms ago: executing program 1 (id=1740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x6, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xfffffffffffffd4e}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000099e60b84e74eabc9c8abec000000000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000c38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005b00000095000000000000001c4b9766e735d2568a658fa6abe6923cd1824c38c3edca5aaac5c1291f08e6c41802f9a9fc89ace19b5cbaa2068468eb4a10068e174e"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000eb000000000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f0000000700)="8ac49d1cf7cbaf377061d299233bd2964fca6317cd5fb69fb616712e02efd3fdee84d5eff183a0757072f7a65772353a8ed14d720502605ff9f1", 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa300000000000007030000f8feffff720af0fff8ffffff71a4f0ff0000000071102c00000000001d400500000000004704000001ed00000f030000000000004c440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r4, r2}, 0xc) 375.424259ms ago: executing program 0 (id=1741): socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611069000000000063013000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x30, 0x2e, 0x2e, 0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000600)=""/187, 0x58, 0xbb, 0x0, 0x1}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000005000000b80000000000007ee055250000f1ffffff000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000007c0)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x7, 0x3, 0x7, 0x14800, r4, 0x66cb, '\x00', r5, r2, 0x0, 0x5, 0x4, 0x3, @void, @value, @value=r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000023010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x3000c085) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400001"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) 242.897883ms ago: executing program 3 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) (async) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (rerun: 32) 163.065775ms ago: executing program 2 (id=1743): socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff5"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000017c0)={&(0x7f0000000080)="fadf8737dbd73b", 0x0, 0x0, 0x0, 0x7, r0, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000008000e7ff000000", @ANYRES32, @ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f0000000000000004000000181100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804) socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) 25.292869ms ago: executing program 3 (id=1744): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fffffe100004000632f77fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) 23.963349ms ago: executing program 0 (id=1745): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x2, 0xa, 0x8, 0x0, 0x0, 0x6, 0x20080, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7fffffff, 0x5f23}, 0x10240, 0x7, 0x5, 0x1, 0x9, 0x1000000, 0x8, 0x0, 0x1, 0x0, 0x9}) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x2, 0x0, 0x10, 0x0, 0x0, 0x400, 0x1f378d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x40}, 0x0, 0x3ff, 0x200, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1000000}, 0x44) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xb7}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x3a) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={0xffffffffffffffff, r5}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5b, 0x5b, 0xc, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x4, 0xa811, 0x4}], "e2c7a4"}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x6}, @float={0xf, 0x0, 0x0, 0x10, 0x18}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x0, 0x0, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000380)=""/136, 0x80, 0x88, 0x1, 0xbad, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x22, 0x7, 0x21) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1746): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa, 0xf, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xd}, 0x84a8, 0x2f, 0x43a1bd79, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xfffffffffffffb28) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) gettid() r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x81, 0x6, 0x0, 0x0, 0x4, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x65d9, 0x2}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x1000002, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) kernel console output (not intermixed with test programs): T5963] ? load_image+0x420/0x420 [ 75.889522][ T5963] ? __might_sleep+0xe0/0xe0 [ 75.894133][ T5963] ? __lock_acquire+0x7d40/0x7d40 [ 75.899182][ T5963] should_fail_ex+0x39d/0x4d0 [ 75.903891][ T5963] should_failslab+0x9/0x20 [ 75.908419][ T5963] slab_pre_alloc_hook+0x59/0x310 [ 75.913483][ T5963] ? sk_prot_alloc+0xe7/0x210 [ 75.918187][ T5963] ? sk_prot_alloc+0xe7/0x210 [ 75.922886][ T5963] __kmem_cache_alloc_node+0x53/0x250 [ 75.928292][ T5963] ? sk_prot_alloc+0xe7/0x210 [ 75.932993][ T5963] __kmalloc+0xa4/0x230 [ 75.937179][ T5963] sk_prot_alloc+0xe7/0x210 [ 75.941702][ T5963] ? sk_alloc+0x24/0x360 [ 75.945967][ T5963] sk_alloc+0x3a/0x360 [ 75.950059][ T5963] ? bpf_ctx_init+0x163/0x1a0 [ 75.954755][ T5963] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 75.960325][ T5963] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 75.965721][ T5963] ? __fget_files+0x28/0x4b0 [ 75.970332][ T5963] ? __fget_files+0x43d/0x4b0 [ 75.975047][ T5963] ? cpu_online+0x60/0x60 [ 75.979403][ T5963] bpf_prog_test_run+0x321/0x390 [ 75.984371][ T5963] __sys_bpf+0x49d/0x890 [ 75.988634][ T5963] ? bpf_link_show_fdinfo+0x390/0x390 [ 75.994040][ T5963] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 76.000233][ T5963] __x64_sys_bpf+0x7c/0x90 [ 76.004673][ T5963] do_syscall_64+0x55/0xb0 [ 76.009103][ T5963] ? clear_bhb_loop+0x40/0x90 [ 76.013792][ T5963] ? clear_bhb_loop+0x40/0x90 [ 76.018490][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 76.024411][ T5963] RIP: 0033:0x7f4ee959ce59 [ 76.028850][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.048475][ T5963] RSP: 002b:00007f4eea3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.056912][ T5963] RAX: ffffffffffffffda RBX: 00007f4ee9815fa0 RCX: 00007f4ee959ce59 [ 76.064900][ T5963] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 76.072887][ T5963] RBP: 00007f4eea3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 76.080874][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.088861][ T5963] R13: 00007f4ee9816038 R14: 00007f4ee9815fa0 R15: 00007fff2ae9c968 [ 76.096866][ T5963] [ 76.536439][ T5981] netlink: 'syz.3.45': attribute type 21 has an invalid length. [ 76.574135][ T5981] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 76.604118][ T5981] netlink: 100 bytes leftover after parsing attributes in process `syz.3.45'. [ 77.558407][ T5991] syzkaller0: entered promiscuous mode [ 77.583651][ T5991] syzkaller0: entered allmulticast mode [ 79.588052][ T5999] FAULT_INJECTION: forcing a failure. [ 79.588052][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.601418][ T5999] CPU: 0 PID: 5999 Comm: syz.3.49 Not tainted syzkaller #0 [ 79.608620][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.618668][ T5999] Call Trace: [ 79.621949][ T5999] [ 79.624881][ T5999] dump_stack_lvl+0x18c/0x250 [ 79.629552][ T5999] ? show_regs_print_info+0x20/0x20 [ 79.634738][ T5999] ? load_image+0x420/0x420 [ 79.639228][ T5999] ? __might_fault+0xaa/0x120 [ 79.643894][ T5999] ? __lock_acquire+0x7d40/0x7d40 [ 79.648908][ T5999] should_fail_ex+0x39d/0x4d0 [ 79.653594][ T5999] _copy_from_user+0x2f/0xe0 [ 79.658191][ T5999] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 79.663571][ T5999] ? __mutex_lock+0x956/0xcc0 [ 79.668259][ T5999] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 79.673626][ T5999] ? dev_ioctl+0x83c/0x1140 [ 79.678125][ T5999] ? dev_ifsioc+0x958/0xc40 [ 79.682630][ T5999] dev_ioctl+0x84c/0x1140 [ 79.686968][ T5999] sock_ioctl+0x74c/0x7e0 [ 79.691285][ T5999] ? sock_poll+0x3e0/0x3e0 [ 79.695696][ T5999] ? bpf_lsm_file_ioctl+0x9/0x10 [ 79.700616][ T5999] ? security_file_ioctl+0x80/0xa0 [ 79.705713][ T5999] ? sock_poll+0x3e0/0x3e0 [ 79.710116][ T5999] __se_sys_ioctl+0xfd/0x170 [ 79.714696][ T5999] do_syscall_64+0x55/0xb0 [ 79.719097][ T5999] ? clear_bhb_loop+0x40/0x90 [ 79.723767][ T5999] ? clear_bhb_loop+0x40/0x90 [ 79.728449][ T5999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.734350][ T5999] RIP: 0033:0x7f7cde59ce59 [ 79.738767][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.758363][ T5999] RSP: 002b:00007f7cdf3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.766775][ T5999] RAX: ffffffffffffffda RBX: 00007f7cde815fa0 RCX: 00007f7cde59ce59 [ 79.774750][ T5999] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 79.782719][ T5999] RBP: 00007f7cdf3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 79.790691][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.798649][ T5999] R13: 00007f7cde816038 R14: 00007f7cde815fa0 R15: 00007ffec61819f8 [ 79.806620][ T5999] [ 80.080338][ T6014] FAULT_INJECTION: forcing a failure. [ 80.080338][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 80.116431][ T6014] CPU: 0 PID: 6014 Comm: syz.0.53 Not tainted syzkaller #0 [ 80.123679][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.133750][ T6014] Call Trace: [ 80.137017][ T6014] [ 80.139946][ T6014] dump_stack_lvl+0x18c/0x250 [ 80.144654][ T6014] ? show_regs_print_info+0x20/0x20 [ 80.149878][ T6014] ? load_image+0x420/0x420 [ 80.154393][ T6014] ? __might_sleep+0xe0/0xe0 [ 80.158989][ T6014] ? __lock_acquire+0x7d40/0x7d40 [ 80.164019][ T6014] should_fail_ex+0x39d/0x4d0 [ 80.168701][ T6014] should_failslab+0x9/0x20 [ 80.173202][ T6014] slab_pre_alloc_hook+0x59/0x310 [ 80.178230][ T6014] ? apparmor_sk_alloc_security+0x77/0x100 [ 80.184034][ T6014] __kmem_cache_alloc_node+0x53/0x250 [ 80.189410][ T6014] ? apparmor_sk_alloc_security+0x77/0x100 [ 80.195211][ T6014] kmalloc_trace+0x2a/0xe0 [ 80.199630][ T6014] apparmor_sk_alloc_security+0x77/0x100 [ 80.205262][ T6014] security_sk_alloc+0x6e/0xa0 [ 80.210023][ T6014] sk_prot_alloc+0x101/0x210 [ 80.214609][ T6014] ? sk_alloc+0x24/0x360 [ 80.218849][ T6014] sk_alloc+0x3a/0x360 [ 80.222914][ T6014] ? bpf_ctx_init+0x163/0x1a0 [ 80.227588][ T6014] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 80.233133][ T6014] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 80.238505][ T6014] ? __fget_files+0x28/0x4b0 [ 80.243093][ T6014] ? __fget_files+0x43d/0x4b0 [ 80.247773][ T6014] ? cpu_online+0x60/0x60 [ 80.252097][ T6014] bpf_prog_test_run+0x321/0x390 [ 80.257035][ T6014] __sys_bpf+0x49d/0x890 [ 80.261272][ T6014] ? bpf_link_show_fdinfo+0x390/0x390 [ 80.266643][ T6014] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 80.272803][ T6014] __x64_sys_bpf+0x7c/0x90 [ 80.277221][ T6014] do_syscall_64+0x55/0xb0 [ 80.281637][ T6014] ? clear_bhb_loop+0x40/0x90 [ 80.286316][ T6014] ? clear_bhb_loop+0x40/0x90 [ 80.290989][ T6014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.296879][ T6014] RIP: 0033:0x7f11ffb9ce59 [ 80.301287][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.320882][ T6014] RSP: 002b:00007f1200a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 80.329291][ T6014] RAX: ffffffffffffffda RBX: 00007f11ffe15fa0 RCX: 00007f11ffb9ce59 [ 80.337256][ T6014] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 80.345220][ T6014] RBP: 00007f1200a97090 R08: 0000000000000000 R09: 0000000000000000 [ 80.353184][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.361145][ T6014] R13: 00007f11ffe16038 R14: 00007f11ffe15fa0 R15: 00007ffd02220478 [ 80.369118][ T6014] [ 80.796578][ T6024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.56'. [ 80.993988][ T6028] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.176499][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 81.585955][ T6039] : port 1(ip6gretap0) entered blocking state [ 81.634150][ T6039] : port 1(ip6gretap0) entered disabled state [ 81.640657][ T6039] ip6gretap0: entered allmulticast mode [ 81.660898][ T2135] cfg80211: failed to load regulatory.db [ 81.670239][ T6039] ip6gretap0: entered promiscuous mode [ 81.750737][ T6047] FAULT_INJECTION: forcing a failure. [ 81.750737][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 81.782212][ T6048] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.803991][ T6047] CPU: 1 PID: 6047 Comm: syz.3.64 Not tainted syzkaller #0 [ 81.811226][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.821383][ T6047] Call Trace: [ 81.824675][ T6047] [ 81.827622][ T6047] dump_stack_lvl+0x18c/0x250 [ 81.832326][ T6047] ? show_regs_print_info+0x20/0x20 [ 81.837548][ T6047] ? load_image+0x420/0x420 [ 81.842078][ T6047] ? __asan_memset+0x22/0x40 [ 81.846684][ T6047] should_fail_ex+0x39d/0x4d0 [ 81.851358][ T6047] should_failslab+0x9/0x20 [ 81.855855][ T6047] slab_pre_alloc_hook+0x59/0x310 [ 81.860872][ T6047] kmem_cache_alloc+0x5a/0x2d0 [ 81.865620][ T6047] ? slab_build_skb+0x2b/0x3f0 [ 81.870377][ T6047] slab_build_skb+0x2b/0x3f0 [ 81.874967][ T6047] bpf_prog_test_run_skb+0x3ef/0x18c0 [ 81.880339][ T6047] ? __fget_files+0x28/0x4b0 [ 81.884927][ T6047] ? __fget_files+0x43d/0x4b0 [ 81.889606][ T6047] ? cpu_online+0x60/0x60 [ 81.893928][ T6047] bpf_prog_test_run+0x321/0x390 [ 81.898865][ T6047] __sys_bpf+0x49d/0x890 [ 81.903103][ T6047] ? bpf_link_show_fdinfo+0x390/0x390 [ 81.908476][ T6047] ? lock_chain_count+0x20/0x20 [ 81.913318][ T6047] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 81.919300][ T6047] __x64_sys_bpf+0x7c/0x90 [ 81.923713][ T6047] do_syscall_64+0x55/0xb0 [ 81.928121][ T6047] ? clear_bhb_loop+0x40/0x90 [ 81.932787][ T6047] ? clear_bhb_loop+0x40/0x90 [ 81.937452][ T6047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.943342][ T6047] RIP: 0033:0x7f7cde59ce59 [ 81.947748][ T6047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.967344][ T6047] RSP: 002b:00007f7cdf3ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.975748][ T6047] RAX: ffffffffffffffda RBX: 00007f7cde815fa0 RCX: 00007f7cde59ce59 [ 81.983709][ T6047] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 81.991669][ T6047] RBP: 00007f7cdf3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 81.999629][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.007594][ T6047] R13: 00007f7cde816038 R14: 00007f7cde815fa0 R15: 00007ffec61819f8 [ 82.015570][ T6047] [ 82.591524][ T6080] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 82.686918][ T6079] netlink: 64 bytes leftover after parsing attributes in process `syz.2.71'. [ 82.923748][ T6079] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.71'. [ 83.025133][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 83.393366][ T6096] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET) [ 83.397419][ T6101] netlink: 10 bytes leftover after parsing attributes in process `syz.1.80'. [ 83.548706][ T6104] raw_sendmsg: syz.2.77 forgot to set AF_INET. Fix it! [ 83.570787][ T6093] FAULT_INJECTION: forcing a failure. [ 83.570787][ T6093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.602052][ T6093] CPU: 1 PID: 6093 Comm: syz.0.76 Not tainted syzkaller #0 [ 83.609286][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.619353][ T6093] Call Trace: [ 83.622632][ T6093] [ 83.625557][ T6093] dump_stack_lvl+0x18c/0x250 [ 83.630235][ T6093] ? show_regs_print_info+0x20/0x20 [ 83.635435][ T6093] ? load_image+0x420/0x420 [ 83.639934][ T6093] ? __might_fault+0xaa/0x120 [ 83.644606][ T6093] ? __lock_acquire+0x7d40/0x7d40 [ 83.649629][ T6093] should_fail_ex+0x39d/0x4d0 [ 83.654313][ T6093] _copy_to_user+0x2f/0xa0 [ 83.658732][ T6093] bpf_test_finish+0x206/0x650 [ 83.663500][ T6093] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.669656][ T6093] ? convert_skb_to___skb+0x420/0x420 [ 83.675036][ T6093] bpf_prog_test_run_skb+0x1122/0x18c0 [ 83.680504][ T6093] ? cpu_online+0x60/0x60 [ 83.684832][ T6093] bpf_prog_test_run+0x321/0x390 [ 83.689768][ T6093] __sys_bpf+0x49d/0x890 [ 83.694009][ T6093] ? bpf_link_show_fdinfo+0x390/0x390 [ 83.699381][ T6093] ? lock_chain_count+0x20/0x20 [ 83.704232][ T6093] __x64_sys_bpf+0x7c/0x90 [ 83.708642][ T6093] do_syscall_64+0x55/0xb0 [ 83.713061][ T6093] ? clear_bhb_loop+0x40/0x90 [ 83.717729][ T6093] ? clear_bhb_loop+0x40/0x90 [ 83.722399][ T6093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.728288][ T6093] RIP: 0033:0x7f11ffb9ce59 [ 83.732699][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.752297][ T6093] RSP: 002b:00007f1200a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.760705][ T6093] RAX: ffffffffffffffda RBX: 00007f11ffe15fa0 RCX: 00007f11ffb9ce59 [ 83.768672][ T6093] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 83.776642][ T6093] RBP: 00007f1200a97090 R08: 0000000000000000 R09: 0000000000000000 [ 83.784607][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.792568][ T6093] R13: 00007f11ffe16038 R14: 00007f11ffe15fa0 R15: 00007ffd02220478 [ 83.800544][ T6093] [ 83.988363][ T6110] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.83'. [ 84.064224][ T6113] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.84'. [ 84.824763][ T6130] Zero length message leads to an empty skb [ 85.144388][ T6137] FAULT_INJECTION: forcing a failure. [ 85.144388][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.157873][ T6137] CPU: 1 PID: 6137 Comm: syz.0.93 Not tainted syzkaller #0 [ 85.165087][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.175141][ T6137] Call Trace: [ 85.178420][ T6137] [ 85.181352][ T6137] dump_stack_lvl+0x18c/0x250 [ 85.186030][ T6137] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.192184][ T6137] ? show_regs_print_info+0x20/0x20 [ 85.197380][ T6137] ? load_image+0x420/0x420 [ 85.201895][ T6137] should_fail_ex+0x39d/0x4d0 [ 85.206581][ T6137] _copy_to_user+0x2f/0xa0 [ 85.210993][ T6137] bpf_test_finish+0x19f/0x650 [ 85.215764][ T6137] ? dst_hold+0x70/0x70 [ 85.219918][ T6137] ? convert_skb_to___skb+0x420/0x420 [ 85.225301][ T6137] bpf_prog_test_run_skb+0x1122/0x18c0 [ 85.230775][ T6137] ? cpu_online+0x60/0x60 [ 85.235101][ T6137] bpf_prog_test_run+0x321/0x390 [ 85.240035][ T6137] __sys_bpf+0x49d/0x890 [ 85.244273][ T6137] ? bpf_link_show_fdinfo+0x390/0x390 [ 85.249650][ T6137] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.255816][ T6137] __x64_sys_bpf+0x7c/0x90 [ 85.260226][ T6137] do_syscall_64+0x55/0xb0 [ 85.264638][ T6137] ? clear_bhb_loop+0x40/0x90 [ 85.269306][ T6137] ? clear_bhb_loop+0x40/0x90 [ 85.273978][ T6137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.279868][ T6137] RIP: 0033:0x7f11ffb9ce59 [ 85.284277][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.303879][ T6137] RSP: 002b:00007f1200a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.312305][ T6137] RAX: ffffffffffffffda RBX: 00007f11ffe15fa0 RCX: 00007f11ffb9ce59 [ 85.320287][ T6137] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 85.328259][ T6137] RBP: 00007f1200a97090 R08: 0000000000000000 R09: 0000000000000000 [ 85.336225][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.344192][ T6137] R13: 00007f11ffe16038 R14: 00007f11ffe15fa0 R15: 00007ffd02220478 [ 85.352178][ T6137] [ 85.442102][ T6148] Illegal XDP return value 2018725929 on prog (id 142) dev N/A, expect packet loss! [ 85.640007][ T6156] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 85.678563][ T6156] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.98'. [ 85.755949][ T6157] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 87.272259][ T6181] __nla_validate_parse: 1 callbacks suppressed [ 87.272275][ T6181] netlink: 180 bytes leftover after parsing attributes in process `syz.0.104'. [ 87.532755][ T6195] netlink: 64 bytes leftover after parsing attributes in process `syz.0.108'. [ 87.602179][ T6192] netlink: 64 bytes leftover after parsing attributes in process `syz.0.108'. [ 88.177847][ T6202] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 88.209862][ T6202] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 88.246646][ T6203] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 88.385913][ T6213] tap0: tun_chr_ioctl cmd 1074025677 [ 88.391348][ T6213] tap0: linktype set to 778 [ 91.279287][ T6261] netlink: 'syz.1.125': attribute type 27 has an invalid length. [ 91.287410][ T6263] netlink: 'syz.1.125': attribute type 19 has an invalid length. [ 91.302317][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'. [ 91.544640][ T6278] tap0: tun_chr_ioctl cmd 1074025692 [ 91.947095][ T6285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.129'. [ 91.965498][ T6285] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.129'. [ 92.056654][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 93.212523][ T6307] syzkaller0: entered promiscuous mode [ 93.283195][ T6307] syzkaller0: entered allmulticast mode [ 95.444312][ T6318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.139'. [ 95.455975][ T6322] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.139'. [ 95.465394][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 99.007721][ T6348] netlink: 'syz.1.149': attribute type 21 has an invalid length. [ 99.033956][ T6348] netlink: 128 bytes leftover after parsing attributes in process `syz.1.149'. [ 99.069823][ T6348] netlink: 'syz.1.149': attribute type 4 has an invalid length. [ 99.128005][ T6348] netlink: 3 bytes leftover after parsing attributes in process `syz.1.149'. [ 99.152772][ T6356] netlink: 'syz.2.151': attribute type 9 has an invalid length. [ 99.171082][ T6356] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.151'. [ 99.192265][ T6349] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.149'. [ 99.331967][ T6357] netlink: 'syz.2.151': attribute type 9 has an invalid length. [ 99.347673][ T6357] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.151'. [ 99.805552][ T6363] netlink: 'syz.3.154': attribute type 9 has an invalid length. [ 99.829122][ T6363] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.154'. [ 100.064844][ T6367] netlink: 'syz.2.155': attribute type 13 has an invalid length. [ 100.081909][ T6367] netlink: 172 bytes leftover after parsing attributes in process `syz.2.155'. [ 100.391231][ T6385] netlink: 'syz.1.157': attribute type 10 has an invalid length. [ 103.399946][ T6391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.972233][ T6419] netlink: 'syz.0.167': attribute type 9 has an invalid length. [ 103.980686][ T6419] __nla_validate_parse: 1 callbacks suppressed [ 103.980763][ T6419] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.167'. [ 104.491851][ T6431] netlink: 'syz.1.169': attribute type 6 has an invalid length. [ 104.532247][ T6431] netlink: 26 bytes leftover after parsing attributes in process `syz.1.169'. [ 104.812172][ T6440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.930482][ T6447] syz.3.175 (6447) used greatest stack depth: 20008 bytes left [ 105.976605][ T6461] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.179'. [ 106.025094][ T6461] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.039395][ T6461] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.060318][ T6461] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.083564][ T6461] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.103590][ T6461] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.131243][ T6466] netlink: 'syz.3.180': attribute type 9 has an invalid length. [ 106.158263][ T6466] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.180'. [ 106.279030][ T6470] netlink: 'syz.1.179': attribute type 29 has an invalid length. [ 106.692706][ T6475] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.183'. [ 106.705121][ T6473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.765113][ T6475] netlink: 'syz.1.183': attribute type 3 has an invalid length. [ 106.788672][ T6477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.827981][ T6473] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.828337][ T6475] netlink: 'syz.1.183': attribute type 6 has an invalid length. [ 106.955293][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.975459][ T6475] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.183'. [ 107.033380][ T6482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.185'. [ 108.300891][ T6518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.342359][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.541898][ T5087] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 109.667106][ T6568] validate_nla: 3 callbacks suppressed [ 109.667119][ T6568] netlink: 'syz.3.209': attribute type 21 has an invalid length. [ 109.751873][ T6568] netlink: 'syz.3.209': attribute type 6 has an invalid length. [ 109.773216][ T6568] __nla_validate_parse: 4 callbacks suppressed [ 109.773228][ T6568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.209'. [ 109.856184][ T6570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.210'. [ 110.042257][ T6570] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.210'. [ 110.043792][ T6577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.212'. [ 110.086025][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 110.684858][ T6591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.746982][ T6593] netlink: 168 bytes leftover after parsing attributes in process `syz.1.216'. [ 111.324614][ T6601] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.220'. [ 111.783842][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'. [ 111.797282][ T6616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.224'. [ 111.829316][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'. [ 111.864775][ T6619] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 111.882781][ T6619] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.890615][ T6619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.897891][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 111.905195][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 111.912473][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 112.213953][ T6637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.765942][ T6660] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 113.365539][ T6679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.560119][ T6684] delete_channel: no stack [ 115.067159][ T6713] __nla_validate_parse: 6 callbacks suppressed [ 115.067260][ T6713] netlink: 128 bytes leftover after parsing attributes in process `syz.3.250'. [ 115.090963][ T6713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.123957][ T6709] netlink: 'syz.1.249': attribute type 17 has an invalid length. [ 115.133408][ T6709] netlink: 'syz.1.249': attribute type 16 has an invalid length. [ 115.153765][ T6709] netlink: 152 bytes leftover after parsing attributes in process `syz.1.249'. [ 115.269967][ T6718] netlink: 'syz.1.249': attribute type 46 has an invalid length. [ 115.309762][ T6715] bridge_slave_1: left allmulticast mode [ 115.340442][ T6715] bridge_slave_1: left promiscuous mode [ 115.369247][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.899910][ T6715] bridge_slave_0: left allmulticast mode [ 115.906129][ T6715] bridge_slave_0: left promiscuous mode [ 115.912338][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.079070][ T6709] : port 1(ip6gretap0) entered blocking state [ 116.086615][ T6709] : port 1(ip6gretap0) entered disabled state [ 116.093241][ T6709] ip6gretap0: entered allmulticast mode [ 116.099696][ T6709] ip6gretap0: entered promiscuous mode [ 116.115750][ T6724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.123317][ T6724] IPv6: NLM_F_CREATE should be set when creating new route [ 116.131113][ T6724] IPv6: NLM_F_CREATE should be set when creating new route [ 116.138674][ T6724] IPv6: NLM_F_CREATE should be set when creating new route [ 116.162606][ T6727] netlink: 64 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.250369][ T6730] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.254'. [ 116.311929][ T6730] netlink: zone id is out of range [ 116.376998][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.391250][ T6727] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.253'. [ 116.438412][ T6738] netlink: 'syz.1.255': attribute type 2 has an invalid length. [ 116.460300][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 116.479241][ T6730] delete_channel: no stack [ 116.484492][ T6737] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 116.505456][ T6739] netlink: 'syz.0.256': attribute type 29 has an invalid length. [ 116.546577][ T6737] team0: Port device dummy0 added [ 116.558176][ T6737] syz.0.256 (6737) used greatest stack depth: 19856 bytes left [ 116.583994][ T6739] netlink: 'syz.0.256': attribute type 29 has an invalid length. [ 116.677880][ T6743] netlink: 34659 bytes leftover after parsing attributes in process `syz.3.257'. [ 116.870076][ T6751] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.260'. [ 117.280035][ T6760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.383204][ T6762] netlink: 'syz.0.263': attribute type 21 has an invalid length. [ 117.587972][ T6769] netlink: 64 bytes leftover after parsing attributes in process `syz.2.265'. [ 118.219214][ T5087] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 118.354890][ T6790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.819428][ T6809] netlink: 'syz.2.278': attribute type 29 has an invalid length. [ 118.867284][ T6809] netlink: 'syz.2.278': attribute type 29 has an invalid length. [ 119.313815][ T6830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.848176][ T6865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.357350][ T6891] pim6reg1: entered promiscuous mode [ 124.365705][ T6891] pim6reg1: entered allmulticast mode [ 124.389096][ T6897] validate_nla: 5 callbacks suppressed [ 124.389112][ T6897] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 124.482247][ T6897] __nla_validate_parse: 6 callbacks suppressed [ 124.482264][ T6897] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.303'. [ 124.605418][ T6905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.961443][ T6928] netlink: 'syz.1.313': attribute type 29 has an invalid length. [ 125.998985][ T6928] netlink: 'syz.1.313': attribute type 29 has an invalid length. [ 126.339571][ T6938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.209610][ T6948] syzkaller0: entered promiscuous mode [ 128.267848][ T6948] syzkaller0: entered allmulticast mode [ 128.455505][ T6960] IPv6: reg1: Disabled Multicast RS [ 130.119969][ T6980] team_slave_0: entered allmulticast mode [ 133.066672][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.074949][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.409272][ T7041] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.341'. [ 134.817630][ T7045] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.344'. [ 135.045565][ T7052] netlink: 76 bytes leftover after parsing attributes in process `syz.1.346'. [ 136.142491][ T7088] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.356'. [ 136.237408][ T7088] netlink: 8454 bytes leftover after parsing attributes in process `syz.3.356'. [ 137.116334][ T5087] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 137.192626][ T7113] netlink: 'syz.1.364': attribute type 25 has an invalid length. [ 137.218086][ T7113] netlink: 'syz.1.364': attribute type 29 has an invalid length. [ 137.693512][ T7115] netlink: 'syz.0.365': attribute type 3 has an invalid length. [ 137.712817][ T7115] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.365'. [ 138.149581][ T7134] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 138.248852][ T7141] netlink: 'syz.1.375': attribute type 25 has an invalid length. [ 138.266940][ T7141] netlink: 'syz.1.375': attribute type 25 has an invalid length. [ 138.883624][ T7152] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 138.907232][ T7152] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.379'. [ 138.935174][ T7152] netlink: 9 bytes leftover after parsing attributes in process `syz.0.379'. [ 139.230456][ T7159] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 139.279181][ T7159] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.378'. [ 140.651392][ T7186] netlink: 'syz.1.389': attribute type 21 has an invalid length. [ 140.666673][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 140.698841][ T7187] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.388'. [ 140.714619][ T7187] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.388'. [ 140.753133][ T7184] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.388'. [ 140.775822][ T7187] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.388'. [ 140.917781][ T7193] netlink: 'syz.1.389': attribute type 13 has an invalid length. [ 140.952416][ T7193] netlink: 160 bytes leftover after parsing attributes in process `syz.1.389'. [ 141.037390][ T7193] erspan0: refused to change device tx_queue_len [ 141.070125][ T7193] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 141.212540][ T7193] syz.1.389 (7193) used greatest stack depth: 19816 bytes left [ 141.898812][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.403'. [ 142.244085][ T7240] validate_nla: 1 callbacks suppressed [ 142.244104][ T7240] netlink: 'syz.0.404': attribute type 13 has an invalid length. [ 142.287869][ T7240] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.404'. [ 142.753892][ T7262] netlink: 'syz.2.412': attribute type 27 has an invalid length. [ 143.212883][ T7262] bond0: (slave bond_slave_0): Releasing backup interface [ 143.673695][ T7288] netlink: 'syz.0.417': attribute type 13 has an invalid length. [ 143.683104][ T7288] netlink: 168 bytes leftover after parsing attributes in process `syz.0.417'. [ 145.342492][ T7326] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 145.378773][ T7326] tap0: tun_chr_ioctl cmd 1074025677 [ 145.384483][ T7326] tap0: linktype set to 825 [ 145.845157][ T7351] netlink: 'syz.3.439': attribute type 10 has an invalid length. [ 145.894482][ T7351] team0: Device hsr_slave_0 failed to register rx_handler [ 146.395176][ T7344] netlink: 10 bytes leftover after parsing attributes in process `syz.2.437'. [ 146.982205][ T7376] netlink: 'syz.2.443': attribute type 5 has an invalid length. [ 147.087399][ T7379] netlink: 'syz.1.444': attribute type 22 has an invalid length. [ 147.756641][ T7398] netlink: 196 bytes leftover after parsing attributes in process `syz.3.451'. [ 149.237914][ T7425] netlink: 'syz.0.459': attribute type 2 has an invalid length. [ 149.301860][ T7425] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.459'. [ 151.394318][ T7458] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.466'. [ 151.477841][ T5087] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 151.607665][ T7462] mac80211_hwsim hwsim3 ..c: renamed from wlan1 [ 152.141522][ T7463] netlink: 'syz.2.467': attribute type 10 has an invalid length. [ 152.204664][ T7463] netlink: 2 bytes leftover after parsing attributes in process `syz.2.467'. [ 152.251694][ T7463] hsr0: entered promiscuous mode [ 153.491827][ T5087] Bluetooth: hci1: command tx timeout [ 153.722451][ T7507] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 153.730716][ T7507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.479'. [ 153.840923][ T7507] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.479'. [ 154.791828][ T7554] netlink: 10 bytes leftover after parsing attributes in process `syz.1.489'. [ 155.587753][ T7564] netlink: 'syz.2.492': attribute type 10 has an invalid length. [ 155.622150][ T7564] veth0_macvtap: left promiscuous mode [ 155.885267][ T7567] netlink: 'syz.2.492': attribute type 7 has an invalid length. [ 156.727833][ T7589] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.498'. [ 157.047731][ T7602] netlink: 'syz.0.502': attribute type 21 has an invalid length. [ 157.085504][ T7602] netlink: 128 bytes leftover after parsing attributes in process `syz.0.502'. [ 157.095219][ T7602] netlink: 3 bytes leftover after parsing attributes in process `syz.0.502'. [ 157.147873][ T7606] netlink: 'syz.3.503': attribute type 21 has an invalid length. [ 157.155945][ T7606] netlink: 128 bytes leftover after parsing attributes in process `syz.3.503'. [ 157.182858][ T7606] netlink: 'syz.3.503': attribute type 5 has an invalid length. [ 157.205780][ T7606] netlink: 3 bytes leftover after parsing attributes in process `syz.3.503'. [ 157.295992][ T7611] syzkaller0: entered promiscuous mode [ 157.301507][ T7611] syzkaller0: entered allmulticast mode [ 157.737692][ T7608] netlink: 'syz.0.504': attribute type 10 has an invalid length. [ 157.816192][ T7608] team0: Device ipvlan1 failed to register rx_handler [ 159.312252][ T7608] syz.0.504 (7608) used greatest stack depth: 18960 bytes left [ 160.483045][ T7644] netlink: 'syz.2.513': attribute type 3 has an invalid length. [ 160.517306][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.513'. [ 160.895490][ T7667] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.520'. [ 160.994465][ T7656] netlink: 'syz.1.518': attribute type 2 has an invalid length. [ 161.009461][ T7656] netlink: 'syz.1.518': attribute type 8 has an invalid length. [ 161.068443][ T7656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.518'. [ 161.191189][ T7666] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.520'. [ 161.214222][ T7671] netlink: 188 bytes leftover after parsing attributes in process `syz.0.521'. [ 161.600928][ T7688] netlink: 'syz.1.526': attribute type 9 has an invalid length. [ 161.611872][ T7688] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.526'. [ 161.630001][ T7691] netlink: 'syz.3.527': attribute type 39 has an invalid length. [ 161.846933][ T7708] netlink: 'syz.1.530': attribute type 26 has an invalid length. [ 161.858633][ T7708] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.530'. [ 162.109274][ T7723] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 162.462619][ T7732] delete_channel: no stack [ 162.468230][ T7732] delete_channel: no stack [ 162.748903][ T7753] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 162.759496][ T7753] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 163.090642][ T7759] netlink: 'syz.2.543': attribute type 21 has an invalid length. [ 163.112984][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.543'. [ 167.784770][ T7844] veth1_macvtap: left promiscuous mode [ 167.790297][ T7844] macsec0: entered allmulticast mode [ 167.863070][ T7847] veth1_macvtap: entered promiscuous mode [ 167.882675][ T7847] veth1_macvtap: entered allmulticast mode [ 167.888578][ T7847] macsec0: entered promiscuous mode [ 168.044335][ T7852] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.568'. [ 168.992897][ T7870] netlink: 10 bytes leftover after parsing attributes in process `syz.1.573'. [ 169.122836][ T7884] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 169.172089][ T7884] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.576'. [ 170.519273][ T7915] netlink: 'syz.3.582': attribute type 25 has an invalid length. [ 170.541578][ T7915] netlink: 'syz.3.582': attribute type 25 has an invalid length. [ 170.793276][ T7914] netlink: 'syz.1.590': attribute type 3 has an invalid length. [ 170.836215][ T7914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.590'. [ 173.894821][ T7933] netlink: 10 bytes leftover after parsing attributes in process `syz.3.587'. [ 174.239843][ T7949] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.593'. [ 178.033298][ T8024] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.614'. [ 179.131569][ T8039] netlink: 'syz.0.618': attribute type 9 has an invalid length. [ 179.140408][ T8039] netlink: 371 bytes leftover after parsing attributes in process `syz.0.618'. [ 179.233277][ T8048] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.621'. [ 179.820207][ T5087] Bluetooth: hci3: ISO packet for unknown connection handle 3101 [ 180.116152][ T8064] netlink: 'syz.3.626': attribute type 2 has an invalid length. [ 180.128619][ T8064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.626'. [ 180.360292][ T8070] bridge_slave_1: left allmulticast mode [ 180.411914][ T8070] bridge_slave_1: left promiscuous mode [ 180.419380][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.585061][ T8070] bridge_slave_0: left allmulticast mode [ 180.602263][ T8070] bridge_slave_0: left promiscuous mode [ 180.618924][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.678032][ T8098] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 182.881595][ T8098] team0: Device ipvlan1 failed to register rx_handler [ 183.820644][ T8120] netlink: 'syz.2.643': attribute type 4 has an invalid length. [ 183.832054][ T8120] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.643'. [ 184.286925][ T8126] netlink: 830 bytes leftover after parsing attributes in process `syz.0.644'. [ 184.381883][ T8128] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 184.395739][ T8128] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.645'. [ 184.472809][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.576923][ T8152] netlink: 10 bytes leftover after parsing attributes in process `syz.1.651'. [ 186.373255][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 186.373298][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 186.379438][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 186.385281][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 188.046136][ T8163] IPv6: Can't replace route, no match found [ 188.122444][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.655'. [ 188.183026][ T8165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.656'. [ 188.216563][ T8165] hsr_slave_0: left promiscuous mode [ 188.234670][ T8165] hsr_slave_1: left promiscuous mode [ 188.882567][ T8196] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.661'. [ 189.206623][ T8208] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.666'. [ 189.715691][ T8226] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 189.723991][ T8226] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.671'. [ 189.786454][ T8228] netlink: 'syz.3.672': attribute type 29 has an invalid length. [ 189.804535][ T8228] netlink: 'syz.3.672': attribute type 29 has an invalid length. [ 189.816667][ T8228] netlink: 'syz.3.672': attribute type 29 has an invalid length. [ 189.826541][ T8228] netlink: 'syz.3.672': attribute type 29 has an invalid length. [ 190.408127][ T8242] netlink: 'syz.0.677': attribute type 39 has an invalid length. [ 190.470404][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 190.682651][ T8255] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 190.723377][ T8255] macvlan1: entered allmulticast mode [ 190.811251][ T8255] veth1_vlan: entered allmulticast mode [ 190.894514][ T8255] team0: Port device macvlan1 added [ 191.144440][ T8268] netlink: 'syz.0.686': attribute type 4 has an invalid length. [ 191.167790][ T8268] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 191.194553][ T8269] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.686'. [ 191.246693][ T8271] bridge0: port 3(team0) entered blocking state [ 191.272653][ T8271] bridge0: port 3(team0) entered disabled state [ 191.294688][ T8271] team0: entered allmulticast mode [ 191.299938][ T8271] team_slave_0: entered allmulticast mode [ 191.310825][ T8271] team_slave_1: entered allmulticast mode [ 191.632311][ T8271] team0: entered promiscuous mode [ 191.641115][ T8271] team_slave_0: entered promiscuous mode [ 191.668677][ T8271] team_slave_1: entered promiscuous mode [ 191.697844][ T8271] macvlan1: entered promiscuous mode [ 191.818185][ T8271] bridge0: port 3(team0) entered blocking state [ 191.830177][ T8271] bridge0: port 3(team0) entered forwarding state [ 191.891772][ T49] wlan1: Trigger new scan to find an IBSS to join [ 192.311884][ T8295] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.693'. [ 192.339621][ T8295] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 193.141127][ T8319] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 193.170365][ T8319] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.700'. [ 194.298928][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.309846][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.445867][ T8341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.729388][ T8350] netlink: 'syz.1.708': attribute type 4 has an invalid length. [ 194.768573][ T8350] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.708'. [ 194.872517][ T8353] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 195.079853][ T8359] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.711'. [ 195.230808][ T8361] netlink: 'syz.1.712': attribute type 3 has an invalid length. [ 195.363766][ T8361] netlink: 160780 bytes leftover after parsing attributes in process `syz.1.712'. [ 195.396757][ T8368] netlink: 196 bytes leftover after parsing attributes in process `syz.3.714'. [ 195.404851][ T8361] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 196.048039][ T8372] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 196.261701][ T8372] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.715'. [ 196.894201][ T8372] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 196.944114][ T7522] wlan1: Trigger new scan to find an IBSS to join [ 197.006313][ T8372] netlink: 55 bytes leftover after parsing attributes in process `syz.2.715'. [ 197.431602][ T8388] netlink: 'syz.3.718': attribute type 21 has an invalid length. [ 197.444329][ T8388] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 197.463976][ T8388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.718'. [ 197.502361][ T8393] netlink: 188 bytes leftover after parsing attributes in process `syz.3.718'. [ 197.713722][ T8391] syzkaller0: entered promiscuous mode [ 197.719336][ T8391] syzkaller0: entered allmulticast mode [ 198.014252][ T7522] wlan1: Creating new IBSS network, BSSID fe:50:7f:8f:3c:49 [ 198.191100][ T8417] netlink: 'syz.2.721': attribute type 29 has an invalid length. [ 200.524880][ T8417] netlink: 'syz.2.721': attribute type 29 has an invalid length. [ 200.809481][ T8427] netlink: 'syz.3.726': attribute type 3 has an invalid length. [ 200.827637][ T8427] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.726'. [ 201.134803][ T8445] netlink: 178060 bytes leftover after parsing attributes in process `syz.3.729'. [ 201.307459][ T8449] syz.0.734: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 201.383748][ T8449] CPU: 1 PID: 8449 Comm: syz.0.734 Not tainted syzkaller #0 [ 201.391110][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.401191][ T8449] Call Trace: [ 201.404510][ T8449] [ 201.407464][ T8449] dump_stack_lvl+0x18c/0x250 [ 201.412171][ T8449] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.418365][ T8449] ? show_regs_print_info+0x20/0x20 [ 201.423588][ T8449] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.429791][ T8449] warn_alloc+0x246/0x340 [ 201.434153][ T8449] ? stack_trace_save+0xaa/0x100 [ 201.439116][ T8449] ? zone_watermark_ok_safe+0x230/0x230 [ 201.444705][ T8449] ? kasan_set_track+0x5f/0x70 [ 201.449486][ T8449] ? kasan_set_track+0x4e/0x70 [ 201.454266][ T8449] ? __kasan_kmalloc+0x8f/0xa0 [ 201.459056][ T8449] ? xsk_init_queue+0xad/0x100 [ 201.463843][ T8449] ? xsk_setsockopt+0x4e5/0x760 [ 201.468716][ T8449] ? do_sock_setsockopt+0x175/0x1a0 [ 201.473938][ T8449] ? __x64_sys_setsockopt+0x182/0x200 [ 201.479335][ T8449] __vmalloc_node_range+0x126/0x1330 [ 201.484682][ T8449] ? free_vm_area+0x50/0x50 [ 201.489228][ T8449] vmalloc_user+0x74/0x80 [ 201.493586][ T8449] ? xskq_create+0xbf/0x170 [ 201.498105][ T8449] xskq_create+0xbf/0x170 [ 201.502453][ T8449] xsk_init_queue+0xad/0x100 [ 201.507061][ T8449] xsk_setsockopt+0x4e5/0x760 [ 201.511759][ T8449] ? xsk_poll+0x680/0x680 [ 201.516111][ T8449] ? __fget_files+0x28/0x4b0 [ 201.520725][ T8449] ? __fget_files+0x28/0x4b0 [ 201.525340][ T8449] ? aa_sock_opt_perm+0x74/0x100 [ 201.530307][ T8449] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 201.535883][ T8449] ? security_socket_setsockopt+0x7e/0xa0 [ 201.541639][ T8449] ? xsk_poll+0x680/0x680 [ 201.545991][ T8449] do_sock_setsockopt+0x175/0x1a0 [ 201.551040][ T8449] ? __fdget+0x180/0x210 [ 201.555314][ T8449] __x64_sys_setsockopt+0x182/0x200 [ 201.560548][ T8449] do_syscall_64+0x55/0xb0 [ 201.564991][ T8449] ? clear_bhb_loop+0x40/0x90 [ 201.569690][ T8449] ? clear_bhb_loop+0x40/0x90 [ 201.574389][ T8449] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.580313][ T8449] RIP: 0033:0x7f11ffb9ce59 [ 201.584747][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.604376][ T8449] RSP: 002b:00007f1200a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.612819][ T8449] RAX: ffffffffffffffda RBX: 00007f11ffe15fa0 RCX: 00007f11ffb9ce59 [ 201.620813][ T8449] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 201.628802][ T8449] RBP: 00007f11ffc32d6f R08: 0000000000000004 R09: 0000000000000000 [ 201.636795][ T8449] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 201.644782][ T8449] R13: 00007f11ffe16038 R14: 00007f11ffe15fa0 R15: 00007ffd02220478 [ 201.652776][ T8449] [ 201.694156][ T8449] Mem-Info: [ 201.697676][ T8449] active_anon:15897 inactive_anon:0 isolated_anon:0 [ 201.697676][ T8449] active_file:18131 inactive_file:39997 isolated_file:0 [ 201.697676][ T8449] unevictable:768 dirty:33 writeback:0 [ 201.697676][ T8449] slab_reclaimable:10870 slab_unreclaimable:92700 [ 201.697676][ T8449] mapped:24579 shmem:8872 pagetables:612 [ 201.697676][ T8449] sec_pagetables:0 bounce:0 [ 201.697676][ T8449] kernel_misc_reclaimable:0 [ 201.697676][ T8449] free:1332950 free_pcp:9970 free_cma:0 [ 201.747352][ T8449] Node 0 active_anon:60488kB inactive_anon:0kB active_file:72524kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98316kB dirty:132kB writeback:0kB shmem:30852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 201.878227][ T8449] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 201.909265][ T8449] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.978841][ T8463] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 202.001751][ T8449] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 202.008043][ T8449] Node 0 DMA32 free:1444780kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:51388kB inactive_anon:0kB active_file:72524kB inactive_file:158956kB unevictable:1536kB writepending:232kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:11820kB local_pcp:10180kB free_cma:0kB [ 202.041256][ T8449] lowmem_reserve[]: 0 0 0 0 0 [ 202.046570][ T8449] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 202.073865][ T8449] lowmem_reserve[]: 0 0 0 0 0 [ 202.079138][ T8449] Node 1 Normal free:3892560kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19556kB local_pcp:7232kB free_cma:0kB [ 202.108908][ T8449] lowmem_reserve[]: 0 0 0 0 0 [ 202.114140][ T8449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 202.127906][ T8449] Node 0 DMA32: 2279*4kB (UM) 1488*8kB (UME) 1497*16kB (UME) 978*32kB (UME) 598*64kB (UME) 239*128kB (UME) 74*256kB (UM) 19*512kB (UME) 9*1024kB (UME) 10*2048kB (UM) 303*4096kB (UM) = 1444588kB [ 202.165138][ T8449] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 202.191739][ T8449] Node 1 Normal: 260*4kB (UME) 58*8kB (UME) 51*16kB (UME) 86*32kB (UME) 22*64kB (UME) 2*128kB (UE) 3*256kB (UE) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3892560kB [ 202.221638][ T8449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.231225][ T8449] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.255507][ T8449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 202.265321][ T8449] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 202.281668][ T8449] 62810 total pagecache pages [ 202.286392][ T8449] 0 pages in swap cache [ 202.290557][ T8449] Free swap = 124996kB [ 202.297101][ T8449] Total swap = 124996kB [ 202.301283][ T8449] 2097051 pages RAM [ 202.312616][ T8449] 0 pages HighMem/MovableOnly [ 202.317316][ T8449] 416933 pages reserved [ 202.321966][ T8449] 0 pages cma reserved [ 202.662211][ T8491] netlink: 6 bytes leftover after parsing attributes in process `syz.2.743'. [ 203.961193][ T8518] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 205.066269][ T8518] hsr0: left promiscuous mode [ 205.167912][ T8518] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 205.310708][ T8523] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.377127][ T8523] netlink: 1 bytes leftover after parsing attributes in process `syz.1.752'. [ 206.235010][ T8536] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.756'. [ 207.743613][ T8573] netlink: 'syz.0.765': attribute type 10 has an invalid length. [ 207.753800][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'. [ 207.767586][ T8573] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 207.809827][ T8582] tun0: tun_chr_ioctl cmd 1074025681 [ 207.824723][ T8580] netlink: 'syz.3.766': attribute type 3 has an invalid length. [ 207.861712][ T8580] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 207.869850][ T8580] netlink: 'syz.3.766': attribute type 7 has an invalid length. [ 207.906695][ T8580] netlink: 'syz.3.766': attribute type 8 has an invalid length. [ 207.942754][ T8580] netlink: 'syz.3.766': attribute type 7 has an invalid length. [ 208.001844][ T8580] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.766'. [ 209.248854][ T8631] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 209.280791][ T8630] syz.2.780 (8630) used obsolete PPPIOCDETACH ioctl [ 209.537834][ T8631] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 209.636385][ T8627] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 209.997404][ T8641] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.784'. [ 210.020920][ T8632] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 210.042544][ T8632] netlink: 55 bytes leftover after parsing attributes in process `syz.0.779'. [ 210.942696][ T8654] bridge0: port 3(team0) entered blocking state [ 211.000564][ T8654] bridge0: port 3(team0) entered disabled state [ 211.068069][ T8654] team0: entered allmulticast mode [ 211.121134][ T8654] team_slave_0: entered allmulticast mode [ 211.222933][ T8654] team_slave_1: entered allmulticast mode [ 211.254890][ T8654] dummy0: entered allmulticast mode [ 211.295935][ T8654] team0: entered promiscuous mode [ 211.301195][ T8654] team_slave_0: entered promiscuous mode [ 211.352394][ T8654] team_slave_1: entered promiscuous mode [ 211.359869][ T8654] dummy0: entered promiscuous mode [ 211.396117][ T8654] bridge0: port 3(team0) entered blocking state [ 211.403119][ T8654] bridge0: port 3(team0) entered forwarding state [ 211.736695][ T8671] team0: Port device wlan1 added [ 212.165114][ T8680] syzkaller0: entered promiscuous mode [ 212.170786][ T8680] syzkaller0: entered allmulticast mode [ 212.228825][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.796'. [ 212.275709][ T8689] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 212.315663][ T8692] IPv6: pim6reg1: Disabled Multicast RS [ 214.793105][ T8705] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.800'. [ 214.866405][ T8703] validate_nla: 2 callbacks suppressed [ 214.866439][ T8703] netlink: 'syz.1.799': attribute type 3 has an invalid length. [ 214.903715][ T8703] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.799'. [ 214.913757][ T8705] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 215.451406][ T8727] netlink: 'syz.1.806': attribute type 3 has an invalid length. [ 215.481766][ T8727] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.806'. [ 215.569154][ T8730] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 215.589195][ T8733] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 215.604204][ T8733] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 215.620160][ T8730] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 215.639794][ T8730] netlink: 'syz.3.807': attribute type 29 has an invalid length. [ 216.241441][ T8738] netlink: 'syz.2.810': attribute type 3 has an invalid length. [ 216.267715][ T8738] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.810'. [ 216.641829][ T8757] netlink: 'syz.3.814': attribute type 5 has an invalid length. [ 216.930197][ T8765] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.815'. [ 218.126020][ T8791] netlink: 'syz.3.823': attribute type 10 has an invalid length. [ 218.141821][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.823'. [ 218.197887][ T8791] batman_adv: batadv0: Adding interface: virt_wifi0 [ 218.210490][ T8791] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.240480][ T8791] batman_adv: batadv0: Interface activated: virt_wifi0 [ 219.101382][ T8810] netlink: 10 bytes leftover after parsing attributes in process `syz.0.829'. [ 219.142747][ T8809] netlink: 164 bytes leftover after parsing attributes in process `syz.0.829'. [ 220.395130][ T8849] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 220.897959][ T8865] validate_nla: 3 callbacks suppressed [ 220.897975][ T8865] netlink: 'syz.2.842': attribute type 7 has an invalid length. [ 222.566113][ T8874] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 222.575528][ T8874] geneve0: entered promiscuous mode [ 222.595982][ T8874] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 222.772616][ T8881] netlink: 184 bytes leftover after parsing attributes in process `syz.0.847'. [ 224.045444][ T8914] syzkaller0: entered promiscuous mode [ 224.051250][ T8914] syzkaller0: entered allmulticast mode [ 224.178829][ T8914] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 224.242625][ T8914] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 224.265840][ T8914] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 224.280854][ T8914] netlink: 'syz.2.855': attribute type 3 has an invalid length. [ 224.292696][ T8923] ref_ctr_offset mismatch. inode: 0x3d3 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 224.309228][ T8914] netlink: 'syz.2.855': attribute type 4 has an invalid length. [ 224.318029][ T8914] netlink: 'syz.2.855': attribute type 5 has an invalid length. [ 224.351409][ T8914] netlink: 'syz.2.855': attribute type 6 has an invalid length. [ 224.392049][ T8914] netlink: 'syz.2.855': attribute type 7 has an invalid length. [ 224.411738][ T8914] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.855'. [ 224.816405][ T8940] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.863'. [ 224.925488][ T8942] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.863'. [ 225.305523][ T8958] C: renamed from team_slave_0 (while UP) [ 225.331420][ T8958] netlink: 116 bytes leftover after parsing attributes in process `syz.3.868'. [ 225.351898][ T8958] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.376981][ T8963] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.868'. [ 226.192200][ T8989] netlink: 3 bytes leftover after parsing attributes in process `syz.2.876'. [ 227.020169][ T9012] validate_nla: 12 callbacks suppressed [ 227.020183][ T9012] netlink: 'syz.2.880': attribute type 12 has an invalid length. [ 227.035307][ T9012] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.880'. [ 227.445345][ T9025] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.884'. [ 231.215504][ T9059] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 231.226922][ T9059] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.894'. [ 231.545385][ T9074] netlink: 703 bytes leftover after parsing attributes in process `syz.1.896'. [ 231.916163][ T9088] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.903'. [ 232.069778][ T9093] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.905'. [ 232.086887][ T9093] bridge_slave_1: default FDB implementation only supports local addresses [ 232.310426][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 232.340074][ T9101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.908'. [ 232.405672][ T9101] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.908'. [ 232.492031][ T9112] Q6`Ҙ: renamed from lo (while UP) [ 232.601435][ T9118] netlink: 'syz.3.911': attribute type 9 has an invalid length. [ 232.630991][ T9118] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.911'. [ 232.787338][ T9123] netlink: 'syz.1.912': attribute type 4 has an invalid length. [ 232.805103][ T9123] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.912'. [ 233.393716][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.913'. [ 236.519597][ T9177] netlink: 'syz.1.926': attribute type 21 has an invalid length. [ 236.545000][ T9177] netlink: 'syz.1.926': attribute type 10 has an invalid length. [ 236.554573][ T9177] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.926'. [ 236.725201][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 237.003368][ T9187] C: renamed from team_slave_0 [ 237.080634][ T9198] netlink: 'syz.2.929': attribute type 3 has an invalid length. [ 237.133935][ T9198] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 237.155859][ T9198] netlink: 'syz.2.929': attribute type 7 has an invalid length. [ 237.159553][ T9187] netlink: 'syz.2.929': attribute type 3 has an invalid length. [ 237.186897][ T9198] netlink: 'syz.2.929': attribute type 8 has an invalid length. [ 237.207662][ T9198] netlink: 'syz.2.929': attribute type 7 has an invalid length. [ 237.223682][ T9198] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.929'. [ 237.242855][ T9187] netlink: 116 bytes leftover after parsing attributes in process `syz.2.929'. [ 237.259450][ T9187] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 237.280445][ T9200] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.933'. [ 240.706019][ T9223] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.940'. [ 240.788133][ T5779] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 241.146536][ T9238] C: renamed from team_slave_0 (while UP) [ 241.200623][ T9240] validate_nla: 5 callbacks suppressed [ 241.200641][ T9240] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 241.221992][ T9240] netlink: 'syz.1.945': attribute type 4 has an invalid length. [ 241.229834][ T9240] netlink: 'syz.1.945': attribute type 7 has an invalid length. [ 241.247287][ T9240] netlink: 'syz.1.945': attribute type 8 has an invalid length. [ 241.271128][ T9240] netlink: 'syz.1.945': attribute type 7 has an invalid length. [ 241.279641][ T9238] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 241.288059][ T9240] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.945'. [ 241.297992][ T9238] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 241.310718][ T9238] netlink: 116 bytes leftover after parsing attributes in process `syz.1.945'. [ 241.327289][ T9238] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.516013][ T9244] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.946'. [ 242.038432][ T9271] netlink: 14 bytes leftover after parsing attributes in process `syz.2.953'. [ 245.618980][ T9280] netlink: 10 bytes leftover after parsing attributes in process `syz.3.958'. [ 245.698544][ T9288] C: renamed from team_slave_0 (while UP) [ 245.730626][ T9288] netlink: 'syz.0.955': attribute type 3 has an invalid length. [ 245.824648][ T9288] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 245.833713][ T9288] netlink: 116 bytes leftover after parsing attributes in process `syz.0.955'. [ 245.843477][ T9288] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 245.889258][ T9282] netlink: 'syz.1.956': attribute type 10 has an invalid length. [ 246.003729][ T9282] bridge0: port 3(team0) entered disabled state [ 246.016646][ T9288] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.955'. [ 246.053165][ T9282] team0: left allmulticast mode [ 246.089541][ T9282] C: left allmulticast mode [ 246.105120][ T9282] team_slave_1: left allmulticast mode [ 246.152551][ T9282] team0: left promiscuous mode [ 246.157698][ T9282] C: left promiscuous mode [ 246.227267][ T9282] team_slave_1: left promiscuous mode [ 246.262870][ T9282] macvlan1: left promiscuous mode [ 246.295263][ T9282] bridge0: port 3(team0) entered disabled state [ 246.296863][ T9298] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.960'. [ 246.359330][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.391435][ T9282] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.848497][ T9310] validate_nla: 5 callbacks suppressed [ 246.848541][ T9310] netlink: 'syz.2.962': attribute type 33 has an invalid length. [ 246.872207][ T9310] netlink: 160 bytes leftover after parsing attributes in process `syz.2.962'. [ 247.195447][ T9324] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.968'. [ 247.672744][ T9345] netlink: 'syz.0.975': attribute type 2 has an invalid length. [ 247.788625][ T9349] netlink: 'syz.1.976': attribute type 46 has an invalid length. [ 247.801917][ T9350] netlink: 'syz.1.976': attribute type 46 has an invalid length. [ 248.353267][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.979'. [ 248.880281][ T9381] netlink: 'syz.2.983': attribute type 3 has an invalid length. [ 248.894836][ T9383] netlink: 'syz.1.985': attribute type 10 has an invalid length. [ 248.931898][ T9381] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 248.940630][ T9381] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.983'. [ 249.253676][ T9383] bond0: (slave team0): Releasing backup interface [ 249.354523][ T9383] team0 (unregistering): Port device C removed [ 249.388738][ T9383] team0 (unregistering): Port device team_slave_1 removed [ 249.430802][ T9405] netlink: 'syz.3.990': attribute type 29 has an invalid length. [ 249.461054][ T9383] veth1_vlan: left allmulticast mode [ 249.500529][ T9408] netlink: 'syz.2.991': attribute type 3 has an invalid length. [ 249.513704][ T9383] team0 (unregistering): Port device macvlan1 removed [ 249.517198][ T9408] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.991'. [ 249.552200][ T9405] netlink: 'syz.3.990': attribute type 29 has an invalid length. [ 250.499299][ T9431] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.997'. [ 250.865469][ T9443] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1002'. [ 251.168815][ T9452] netpci0: tun_chr_ioctl cmd 2147767519 [ 251.196387][ T9452] netpci0: tun_chr_ioctl cmd 1074025680 [ 252.036602][ T9479] validate_nla: 7 callbacks suppressed [ 252.036622][ T9479] netlink: 'syz.1.1011': attribute type 3 has an invalid length. [ 252.071980][ T9479] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 252.079859][ T9479] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1011'. [ 252.511941][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1014'. [ 252.592409][ T9486] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 252.613996][ T9486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1014'. [ 252.631785][ T9486] veth0_vlan: left promiscuous mode [ 252.663239][ T9486] veth0_vlan: left allmulticast mode [ 252.678126][ T9486] veth0_vlan: entered promiscuous mode [ 252.699317][ T9486] batman_adv: batadv0: Adding interface: veth0_vlan [ 252.717636][ T9486] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.749404][ T9486] batman_adv: batadv0: Interface activated: veth0_vlan [ 254.241274][ T9529] netlink: 'syz.1.1023': attribute type 3 has an invalid length. [ 254.259978][ T9529] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 254.282209][ T9529] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1023'. [ 254.912813][ T9536] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 254.924726][ T9536] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1026'. [ 255.029509][ T9549] netlink: 'syz.1.1036': attribute type 3 has an invalid length. [ 255.048648][ T9549] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 255.063396][ T9549] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1036'. [ 255.742773][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749209][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755809][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 255.778198][ T9547] netlink: 'syz.2.1028': attribute type 10 has an invalid length. [ 255.867140][ T9547] team0 (unregistering): Port device C removed [ 255.885032][ T9547] team0 (unregistering): Port device team_slave_1 removed [ 255.912058][ T9547] team0 (unregistering): Port device wlan1 removed [ 255.940381][ T9567] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1032'. [ 255.951608][ T9567] tc_dump_action: action bad kind [ 256.001162][ T9567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1032'. [ 256.078491][ T9567] netlink: 'syz.3.1032': attribute type 13 has an invalid length. [ 256.106500][ T9567] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1032'. [ 256.721745][ T9585] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.668322][ T9594] validate_nla: 1 callbacks suppressed [ 257.668432][ T9594] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 257.736219][ T9594] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1048'. [ 259.649998][ T9601] netlink: 'syz.2.1040': attribute type 10 has an invalid length. [ 259.908157][ T9605] netlink: 'syz.0.1042': attribute type 21 has an invalid length. [ 259.954006][ T9605] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 260.050848][ T9609] syzkaller0: entered promiscuous mode [ 260.062757][ T9609] syzkaller0: entered allmulticast mode [ 260.091928][ T9612] netlink: 'syz.2.1046': attribute type 21 has an invalid length. [ 260.099809][ T9612] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1046'. [ 260.131969][ T9612] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1046'. [ 262.578615][ T9628] netlink: 'syz.0.1050': attribute type 10 has an invalid length. [ 262.594176][ T9628] bridge0: port 3(team0) entered disabled state [ 262.644440][ T9628] team0 (unregistering): left allmulticast mode [ 262.650760][ T9628] C: left allmulticast mode [ 262.655833][ T9628] team_slave_1: left allmulticast mode [ 262.661337][ T9628] dummy0: left allmulticast mode [ 262.667600][ T9628] team0 (unregistering): left promiscuous mode [ 262.674335][ T9628] C: left promiscuous mode [ 262.679164][ T9628] team_slave_1: left promiscuous mode [ 262.701797][ T9628] dummy0: left promiscuous mode [ 262.711846][ T9628] bridge0: port 3(team0) entered disabled state [ 262.740777][ T9628] team0 (unregistering): Port device C removed [ 262.757562][ T9628] team0 (unregistering): Port device team_slave_1 removed [ 262.785071][ T9628] team0 (unregistering): Port device dummy0 removed [ 262.822078][ T9641] netlink: 'syz.2.1054': attribute type 10 has an invalid length. [ 262.830280][ T9641] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1054'. [ 263.172538][ T9652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.400402][ T9725] netlink: 'syz.3.1074': attribute type 11 has an invalid length. [ 266.414870][ T9725] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1074'. [ 266.489087][ T9725] netlink: 'syz.3.1074': attribute type 22 has an invalid length. [ 266.883041][ T9727] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 266.951928][ T9727] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1073'. [ 267.366227][ T9735] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 267.392877][ T9735] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 267.995061][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 268.021139][ T9755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 268.105875][ T9750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 268.126727][ T9751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1082'. [ 268.685898][ T9771] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1090'. [ 268.721883][ T9771] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1090'. [ 269.438724][ T9792] bridge0: port 3(syz_tun) entered blocking state [ 269.460782][ T9792] bridge0: port 3(syz_tun) entered disabled state [ 269.476867][ T9792] syz_tun: entered allmulticast mode [ 269.495947][ T9792] syz_tun: entered promiscuous mode [ 269.516799][ T9792] bridge0: port 3(syz_tun) entered blocking state [ 269.523609][ T9792] bridge0: port 3(syz_tun) entered forwarding state [ 270.705054][ T9832] netlink: 'syz.1.1108': attribute type 11 has an invalid length. [ 270.721891][ T9832] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1108'. [ 271.688883][ T9881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1118'. [ 271.713810][ T9881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1118'. [ 271.755117][ T9879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1118'. [ 272.384767][ T5779] Bluetooth: hci3: Malformed HCI Event [ 272.503095][ T9906] netlink: 'syz.1.1127': attribute type 21 has an invalid length. [ 272.511035][ T9906] netlink: 'syz.1.1127': attribute type 5 has an invalid length. [ 272.600202][ T9912] netlink: 'syz.2.1129': attribute type 41 has an invalid length. [ 272.919243][ T9923] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 273.790375][ T9937] netlink: 'syz.0.1132': attribute type 10 has an invalid length. [ 273.916962][ T9937] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 274.744802][ T9967] __nla_validate_parse: 3 callbacks suppressed [ 274.744822][ T9967] netlink: 194724 bytes leftover after parsing attributes in process `syz.1.1141'. [ 276.328728][ T9959] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 276.812339][ T9987] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.928663][ T9994] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 276.950348][ T9994] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1150'. [ 277.613660][T10009] netlink: 'syz.0.1154': attribute type 7 has an invalid length. [ 277.621958][T10009] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 277.629808][T10009] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1154'. [ 277.731076][T10014] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 277.746710][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'. [ 277.771762][T10012] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 277.797397][T10014] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 277.812107][T10014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1156'. [ 278.042684][T10025] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.289495][T10032] : renamed from bond_slave_1 (while UP) [ 278.577281][T10046] netlink: 'syz.2.1167': attribute type 13 has an invalid length. [ 278.587404][T10046] netlink: 'syz.2.1167': attribute type 2 has an invalid length. [ 279.074581][T10055] netlink: 'syz.3.1169': attribute type 21 has an invalid length. [ 279.091590][T10055] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1169'. [ 279.409213][T10065] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 279.863422][T10072] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1174'. [ 279.915675][T10074] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1175'. [ 282.240785][T10157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1196'. [ 282.379548][T10157] bond0: (slave geneve0): Releasing backup interface [ 282.637018][T10162] syzkaller0: entered promiscuous mode [ 282.712066][T10162] syzkaller0: entered allmulticast mode [ 282.851168][T10157] validate_nla: 2 callbacks suppressed [ 282.851186][T10157] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 282.865126][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1196'. [ 282.874560][T10157] ipvlan1: entered promiscuous mode [ 282.879824][T10157] ipvlan1: entered allmulticast mode [ 282.889198][T10157] veth0_vlan: entered allmulticast mode [ 282.899432][T10157] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 283.233786][T10182] netlink: 'syz.2.1202': attribute type 28 has an invalid length. [ 283.242370][T10182] netlink: 'syz.2.1202': attribute type 29 has an invalid length. [ 283.258475][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1202'. [ 285.690696][T10198] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1209'. [ 285.959985][T10211] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 286.016189][T10213] delete_channel: no stack [ 286.040446][T10213] delete_channel: no stack [ 286.197877][T10221] netlink: 'syz.1.1215': attribute type 21 has an invalid length. [ 286.207662][T10221] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1215'. [ 286.528566][T10231] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 286.548176][T10231] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 286.572193][T10231] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 286.607860][T10231] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 286.697371][T10237] netlink: 'syz.1.1217': attribute type 29 has an invalid length. [ 287.042445][T10248] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1221'. [ 287.273874][T10257] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1223'. [ 287.584140][T10257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.629545][T10257] bond0 (unregistering): Released all slaves [ 287.680394][T10259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 287.782241][T10273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1227'. [ 288.448491][T10289] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1234'. [ 289.603148][T10311] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 289.631061][T10311] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 289.742356][T10313] validate_nla: 1 callbacks suppressed [ 289.742374][T10313] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 289.763010][T10313] netlink: 'syz.0.1241': attribute type 8 has an invalid length. [ 289.773186][T10313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1241'. [ 290.453937][T10320] netlink: 'syz.2.1242': attribute type 2 has an invalid length. [ 290.465319][T10320] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1242'. [ 291.034994][T10330] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 291.098875][T10330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1245'. [ 291.554791][T10342] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 291.581854][T10342] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 292.558545][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 292.633782][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 292.683900][T10366] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 292.741695][T10366] team0: Device wlan1 is of different type [ 293.084527][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.111739][T10376] netlink: 'syz.0.1258': attribute type 17 has an invalid length. [ 293.145616][T10376] netlink: 'syz.0.1258': attribute type 16 has an invalid length. [ 293.161632][T10376] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1258'. [ 293.206403][T10377] netlink: 'syz.0.1258': attribute type 46 has an invalid length. [ 293.265431][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.292524][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.440711][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.458834][T10383] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 293.545545][T10383] veth0_macvtap: left promiscuous mode [ 293.710321][T10392] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1263'. [ 295.011222][T10422] validate_nla: 4 callbacks suppressed [ 295.011236][T10422] netlink: 'syz.3.1272': attribute type 21 has an invalid length. [ 295.056615][T10422] netlink: 'syz.3.1272': attribute type 20 has an invalid length. [ 295.086077][T10421] netlink: 'syz.3.1272': attribute type 21 has an invalid length. [ 295.117907][T10421] netlink: 'syz.3.1272': attribute type 20 has an invalid length. [ 295.244113][T10431] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1275'. [ 295.326458][T10431] syz.2.1275[10431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.327479][T10431] syz.2.1275[10431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.556641][T10437] netlink: 'syz.3.1276': attribute type 3 has an invalid length. [ 295.628669][T10439] netlink: 'syz.2.1277': attribute type 27 has an invalid length. [ 295.663223][T10439] netlink: 'syz.2.1277': attribute type 4 has an invalid length. [ 295.739538][T10442] netlink: 'syz.1.1278': attribute type 29 has an invalid length. [ 295.843786][T10443] netlink: 'syz.2.1277': attribute type 21 has an invalid length. [ 295.875766][T10442] netlink: 'syz.1.1278': attribute type 29 has an invalid length. [ 296.146771][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.195383][T10452] team0: Port device batadv0 added [ 298.889189][T10495] __nla_validate_parse: 4 callbacks suppressed [ 298.889206][T10495] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1287'. [ 298.987164][T10494] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1289'. [ 299.007395][T10494] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.1289'. [ 299.476222][T10513] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.1294'. [ 300.035348][T10531] delete_channel: no stack [ 300.304702][T10527] validate_nla: 12 callbacks suppressed [ 300.304722][T10527] netlink: 'syz.2.1296': attribute type 21 has an invalid length. [ 300.333328][T10527] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1296'. [ 300.350601][T10527] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1296'. [ 300.392099][T10543] netlink: zone id is out of range [ 300.406410][T10543] netlink: set zone limit has 8 unknown bytes [ 300.806494][T10582] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 300.863527][T10582] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 300.958195][T10587] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 301.035869][T10589] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 301.091189][T10585] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 301.167321][T10589] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1302'. [ 301.181647][T10582] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 301.193610][T10587] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 301.471247][T10599] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1305'. [ 301.906007][T10610] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 302.004476][T10611] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 302.779466][T10636] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1317'. [ 302.794412][T10638] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1316'. [ 304.632415][T10680] __nla_validate_parse: 1 callbacks suppressed [ 304.632436][T10680] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1329'. [ 308.243783][T10703] validate_nla: 3 callbacks suppressed [ 308.243797][T10703] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 308.272408][T10704] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 308.653683][T10715] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.1339'. [ 308.845654][T10723] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 308.869449][T10723] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1340'. [ 308.875176][T10722] syzkaller0: entered promiscuous mode [ 308.885142][T10722] syzkaller0: entered allmulticast mode [ 309.229875][T10737] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 309.237789][T10737] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1345'. [ 309.403038][T10745] netlink: 'syz.3.1347': attribute type 1 has an invalid length. [ 309.456090][T10745] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.1347'. [ 310.940613][T10762] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 310.962635][T10762] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1350'. [ 311.527530][T10772] netlink: 'syz.2.1353': attribute type 3 has an invalid length. [ 311.535708][T10772] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1353'. [ 311.855625][T10775] FAULT_INJECTION: forcing a failure. [ 311.855625][T10775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.910798][T10775] CPU: 0 PID: 10775 Comm: syz.2.1354 Not tainted syzkaller #0 [ 311.918338][T10775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.928404][T10775] Call Trace: [ 311.931676][T10775] [ 311.934594][T10775] dump_stack_lvl+0x18c/0x250 [ 311.939266][T10775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.945416][T10775] ? show_regs_print_info+0x20/0x20 [ 311.950606][T10775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.956794][T10775] should_fail_ex+0x39d/0x4d0 [ 311.961509][T10775] _copy_to_user+0x2f/0xa0 [ 311.965920][T10775] simple_read_from_buffer+0xe7/0x150 [ 311.971287][T10775] proc_fail_nth_read+0x1e8/0x260 [ 311.976311][T10775] ? proc_fault_inject_write+0x360/0x360 [ 311.981940][T10775] ? fsnotify_perm+0x271/0x5e0 [ 311.986691][T10775] ? proc_fault_inject_write+0x360/0x360 [ 311.992316][T10775] vfs_read+0x28b/0x970 [ 311.996468][T10775] ? kernel_read+0x1e0/0x1e0 [ 312.001050][T10775] ? __fget_files+0x28/0x4b0 [ 312.005645][T10775] ? __fget_files+0x28/0x4b0 [ 312.010251][T10775] ? __fget_files+0x43d/0x4b0 [ 312.014926][T10775] ? __fdget_pos+0x2a3/0x330 [ 312.019510][T10775] ? ksys_read+0x75/0x260 [ 312.023880][T10775] ksys_read+0x150/0x260 [ 312.028121][T10775] ? vfs_write+0x990/0x990 [ 312.032531][T10775] ? lockdep_hardirqs_on+0x98/0x150 [ 312.037720][T10775] do_syscall_64+0x55/0xb0 [ 312.042126][T10775] ? clear_bhb_loop+0x40/0x90 [ 312.046786][T10775] ? clear_bhb_loop+0x40/0x90 [ 312.051454][T10775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.057384][T10775] RIP: 0033:0x7f4c80f5d68e [ 312.061834][T10775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.081452][T10775] RSP: 002b:00007f4c81f0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.089874][T10775] RAX: ffffffffffffffda RBX: 00007f4c81f106c0 RCX: 00007f4c80f5d68e [ 312.097848][T10775] RDX: 000000000000000f RSI: 00007f4c81f100a0 RDI: 0000000000000019 [ 312.105818][T10775] RBP: 00007f4c81f10090 R08: 0000000000000000 R09: 0000000000000000 [ 312.113796][T10775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.121766][T10775] R13: 00007f4c81216128 R14: 00007f4c81216090 R15: 00007ffcaee55d38 [ 312.129764][T10775] [ 313.253806][T10777] netlink: 'syz.2.1355': attribute type 10 has an invalid length. [ 313.279366][T10777] macvlan0: entered promiscuous mode [ 313.287974][T10777] macvlan0: entered allmulticast mode [ 313.735308][T10795] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1359'. [ 314.264682][T10807] netlink: 'syz.2.1362': attribute type 3 has an invalid length. [ 314.292564][T10807] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1362'. [ 314.455168][T10806] delete_channel: no stack [ 314.572369][T10811] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1364'. [ 314.587468][T10811] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1364'. [ 316.146676][T10843] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 316.164487][T10843] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 317.177122][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.186683][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.424719][T10851] netlink: 117620 bytes leftover after parsing attributes in process `syz.1.1377'. [ 318.522039][T10847] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1375'. [ 320.212551][T10883] netlink: 'syz.3.1386': attribute type 3 has an invalid length. [ 320.248142][T10883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1386'. [ 322.436930][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.594988][T10892] netlink: 'syz.3.1390': attribute type 21 has an invalid length. [ 322.621108][T10892] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1390'. [ 322.633818][T10892] netlink: 'syz.3.1390': attribute type 5 has an invalid length. [ 322.658171][T10892] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1390'. [ 322.837474][T10901] netlink: 'syz.3.1392': attribute type 3 has an invalid length. [ 322.868092][T10901] netlink: 'syz.3.1392': attribute type 8 has an invalid length. [ 322.876767][T10901] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1392'. [ 322.921604][T10900] netlink: 'syz.3.1392': attribute type 3 has an invalid length. [ 322.936137][T10900] netlink: 'syz.3.1392': attribute type 8 has an invalid length. [ 322.956666][T10900] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1392'. [ 322.973500][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 323.256193][T10912] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1395'. [ 323.287429][T10912] openvswitch: netlink: Duplicate key (type 0). [ 323.721806][T10924] netlink: 'syz.3.1399': attribute type 4 has an invalid length. [ 323.740138][T10924] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1399'. [ 323.885359][T10927] netlink: 'syz.2.1398': attribute type 3 has an invalid length. [ 323.912161][T10927] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1398'. [ 324.673592][T10942] netlink: 'syz.0.1404': attribute type 21 has an invalid length. [ 324.692752][T10942] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.125032][T10949] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1405'. [ 326.139348][T10975] validate_nla: 2 callbacks suppressed [ 326.139365][T10975] netlink: 'syz.2.1411': attribute type 3 has an invalid length. [ 326.195569][T10975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1411'. [ 326.330721][T10972] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1413'. [ 326.539780][T10964] netlink: 'syz.3.1410': attribute type 21 has an invalid length. [ 327.927477][T11010] netlink: 'syz.3.1423': attribute type 21 has an invalid length. [ 327.966881][T11010] __nla_validate_parse: 2 callbacks suppressed [ 327.966899][T11010] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1423'. [ 328.021878][T11010] netlink: 'syz.3.1423': attribute type 4 has an invalid length. [ 328.029669][T11010] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1423'. [ 328.055638][T11014] netlink: 'syz.0.1424': attribute type 3 has an invalid length. [ 328.079258][T11014] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1424'. [ 328.313825][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.323110][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.332389][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.341592][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.350738][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.359951][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.369149][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.378303][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.387501][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.396718][T11019] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 328.625844][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 328.857200][T11027] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.1429'. [ 328.906173][T11028] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1430'. [ 330.188477][T11052] netlink: 'syz.1.1438': attribute type 3 has an invalid length. [ 330.220100][T11052] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1438'. [ 330.523409][T11049] netlink: 'syz.3.1437': attribute type 46 has an invalid length. [ 330.819755][T11069] netlink: 'syz.0.1443': attribute type 9 has an invalid length. [ 330.839520][T11069] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1443'. [ 330.893520][T11074] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 330.902626][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'. [ 330.967862][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1444'. [ 330.995067][T11073] netlink: 'syz.3.1445': attribute type 3 has an invalid length. [ 331.254498][T11087] netlink: 'syz.3.1449': attribute type 3 has an invalid length. [ 334.123045][T11089] netlink: 'syz.0.1450': attribute type 2 has an invalid length. [ 334.205714][T11093] netlink: 'syz.2.1452': attribute type 9 has an invalid length. [ 334.231229][T11093] __nla_validate_parse: 2 callbacks suppressed [ 334.231257][T11093] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1452'. [ 334.388304][T11096] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 334.398708][T11096] bridge0: port 3(syz_tun) entered disabled state [ 334.405640][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.413543][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.560668][T11096] bridge0: port 3(syz_tun) entered blocking state [ 334.567468][T11096] bridge0: port 3(syz_tun) entered forwarding state [ 334.574747][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.582117][T11096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.589770][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.597213][T11096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.801214][T11096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 339.880823][T11112] syzkaller0: entered promiscuous mode [ 339.886522][T11112] syzkaller0: entered allmulticast mode [ 340.425919][T11145] netlink: 'syz.3.1465': attribute type 4 has an invalid length. [ 340.434057][T11145] netlink: 'syz.3.1465': attribute type 16 has an invalid length. [ 340.442389][T11145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1465'. [ 340.745301][T11150] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 340.758372][T11150] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1466'. [ 342.020173][T11152] netlink: 'syz.3.1466': attribute type 10 has an invalid length. [ 342.041637][T11152] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1466'. [ 342.062086][T11152] bond0: entered promiscuous mode [ 342.099257][T11152] bond_slave_0: entered promiscuous mode [ 342.114386][T11152] bond_slave_1: entered promiscuous mode [ 342.168592][T11155] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1467'. [ 342.215825][T11154] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 342.244327][T11154] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 342.286936][T11154] netlink: 'syz.0.1467': attribute type 29 has an invalid length. [ 342.315679][T11171] netlink: 'syz.3.1470': attribute type 29 has an invalid length. [ 342.328916][T11171] netlink: 'syz.3.1470': attribute type 29 has an invalid length. [ 342.508990][T11180] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 342.531743][T11180] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1474'. [ 343.111957][T11207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1480'. [ 343.284418][T11213] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1482'. [ 343.309257][T11213] net_ratelimit: 3322 callbacks suppressed [ 343.309273][T11213] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 343.349038][T11213] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 343.565470][T11223] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1485'. [ 343.837523][T11238] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1488'. [ 343.876523][T11239] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1489'. [ 345.045866][ T5779] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 346.274735][T11282] validate_nla: 11 callbacks suppressed [ 346.274755][T11282] netlink: 'syz.1.1498': attribute type 3 has an invalid length. [ 346.336705][T11282] __nla_validate_parse: 1 callbacks suppressed [ 346.336722][T11282] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1498'. [ 348.250483][T11311] netlink: 'syz.3.1503': attribute type 28 has an invalid length. [ 348.276356][T11311] netlink: 'syz.3.1503': attribute type 29 has an invalid length. [ 348.306731][T11311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1503'. [ 348.329681][T11306] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1503'. [ 348.680525][T11320] netlink: 'syz.2.1507': attribute type 1 has an invalid length. [ 348.690821][T11320] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.1507'. [ 348.836696][T11326] netlink: 'syz.3.1509': attribute type 3 has an invalid length. [ 348.845316][T11326] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1509'. [ 349.006005][T11332] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1511'. [ 349.038133][T11332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.189787][T11338] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1513'. [ 349.236506][T11338] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 349.249185][T11338] CPU: 1 PID: 11338 Comm: syz.2.1513 Not tainted syzkaller #0 [ 349.256722][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.266819][T11338] Call Trace: [ 349.270127][T11338] [ 349.273079][T11338] dump_stack_lvl+0x18c/0x250 [ 349.277798][T11338] ? show_regs_print_info+0x20/0x20 [ 349.283026][T11338] ? load_image+0x420/0x420 [ 349.287585][T11338] sysfs_warn_dup+0x8e/0xa0 [ 349.292113][T11338] sysfs_do_create_link_sd+0xc0/0x110 [ 349.297511][T11338] device_add_class_symlinks+0x1cf/0x240 [ 349.303183][T11338] device_add+0x507/0xc50 [ 349.307550][T11338] wiphy_register+0x1dad/0x2ae0 [ 349.312497][T11338] ? cfg80211_event_work+0x40/0x40 [ 349.317654][T11338] ? minstrel_ht_alloc+0x88a/0x990 [ 349.322822][T11338] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 349.328934][T11338] ieee80211_register_hw+0x3464/0x4250 [ 349.334501][T11338] ? ieee80211_tasklet_handler+0x20/0x20 [ 349.340159][T11338] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 349.346092][T11338] ? __debug_object_init+0xec/0x450 [ 349.351362][T11338] ? __asan_memset+0x22/0x40 [ 349.355997][T11338] ? __hrtimer_init+0x186/0x270 [ 349.360919][T11338] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 349.366751][T11338] ? mac80211_hwsim_free+0x220/0x220 [ 349.372066][T11338] ? rcu_is_watching+0x15/0xb0 [ 349.376859][T11338] ? kstrndup+0xbd/0x140 [ 349.381148][T11338] hwsim_new_radio_nl+0xdc9/0x1a90 [ 349.386302][T11338] ? __nla_validate+0x50/0x50 [ 349.391036][T11338] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 349.397425][T11338] ? __nla_parse+0x40/0x50 [ 349.401874][T11338] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 349.408239][T11338] genl_family_rcv_msg_doit+0x211/0x310 [ 349.413808][T11338] ? end_current_label_crit_section+0x170/0x170 [ 349.420086][T11338] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 349.426029][T11338] ? bpf_lsm_capable+0x9/0x10 [ 349.430728][T11338] ? security_capable+0x89/0xb0 [ 349.435618][T11338] genl_rcv_msg+0x619/0x7a0 [ 349.440159][T11338] ? genl_bind+0x360/0x360 [ 349.444595][T11338] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 349.450955][T11338] ? perf_trace_lock+0x304/0x3b0 [ 349.455950][T11338] netlink_rcv_skb+0x241/0x4d0 [ 349.460743][T11338] ? genl_bind+0x360/0x360 [ 349.465188][T11338] ? netlink_ack+0x1180/0x1180 [ 349.470003][T11338] ? __lock_acquire+0x7d40/0x7d40 [ 349.475067][T11338] ? down_read+0x1ac/0x2e0 [ 349.479512][T11338] genl_rcv+0x28/0x40 [ 349.483516][T11338] netlink_unicast+0x751/0x8d0 [ 349.488370][T11338] netlink_sendmsg+0x8d0/0xbf0 [ 349.493184][T11338] ? perf_trace_lock+0x304/0x3b0 [ 349.498186][T11338] ? netlink_getsockopt+0x590/0x590 [ 349.503426][T11338] ? aa_sock_msg_perm+0x94/0x150 [ 349.508397][T11338] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.513702][T11338] ? security_socket_sendmsg+0x80/0xa0 [ 349.519179][T11338] ? netlink_getsockopt+0x590/0x590 [ 349.524418][T11338] ____sys_sendmsg+0x5ba/0x960 [ 349.529227][T11338] ? __asan_memset+0x22/0x40 [ 349.533844][T11338] ? __sys_sendmsg_sock+0x30/0x30 [ 349.538885][T11338] ? __import_iovec+0x5f2/0x850 [ 349.543777][T11338] ? import_iovec+0x73/0xa0 [ 349.548309][T11338] ___sys_sendmsg+0x2a6/0x360 [ 349.553052][T11338] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.558015][T11338] __se_sys_sendmsg+0x1c2/0x2b0 [ 349.562919][T11338] ? __x64_sys_sendmsg+0x80/0x80 [ 349.567925][T11338] ? lockdep_hardirqs_on+0x98/0x150 [ 349.573164][T11338] do_syscall_64+0x55/0xb0 [ 349.577600][T11338] ? clear_bhb_loop+0x40/0x90 [ 349.582296][T11338] ? clear_bhb_loop+0x40/0x90 [ 349.586992][T11338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.592911][T11338] RIP: 0033:0x7f4c80f9ce59 [ 349.597344][T11338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.616969][T11338] RSP: 002b:00007f4c81f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.625411][T11338] RAX: ffffffffffffffda RBX: 00007f4c81215fa0 RCX: 00007f4c80f9ce59 [ 349.633398][T11338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 349.641384][T11338] RBP: 00007f4c81032d6f R08: 0000000000000000 R09: 0000000000000000 [ 349.649372][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.657361][T11338] R13: 00007f4c81216038 R14: 00007f4c81215fa0 R15: 00007ffcaee55d38 [ 349.665392][T11338] [ 350.228004][T11356] netlink: 'syz.2.1520': attribute type 3 has an invalid length. [ 350.253237][T11356] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1520'. [ 350.549243][T11367] netlink: 'syz.3.1524': attribute type 21 has an invalid length. [ 350.820784][T11381] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1528'. [ 350.821991][T11387] netlink: 'syz.3.1529': attribute type 10 has an invalid length. [ 350.897701][T11387] bridge_slave_1: entered promiscuous mode [ 350.914390][T11387] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 350.929164][T11381] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1528'. [ 351.224309][T11407] netlink: 'syz.3.1535': attribute type 3 has an invalid length. [ 351.373106][T11409] __nla_validate_parse: 2 callbacks suppressed [ 351.373172][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 351.579597][T11411] netlink: 'syz.2.1538': attribute type 27 has an invalid length. [ 351.602301][T11411] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1538'. [ 351.683113][T11414] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1537'. [ 351.971729][T11425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1543'. [ 351.983000][T11415] netlink: 'syz.1.1539': attribute type 6 has an invalid length. [ 351.984015][T11424] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 351.991739][T11415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1539'. [ 352.014203][T11425] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1543'. [ 352.023613][T11424] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1542'. [ 352.096597][T11425] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 352.116089][T11425] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 352.144757][T11427] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 352.168503][T11430] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 352.644877][T11444] netlink: 'syz.3.1548': attribute type 3 has an invalid length. [ 352.653771][T11444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1548'. [ 352.945352][T11454] netlink: 'syz.3.1551': attribute type 3 has an invalid length. [ 352.949748][T11452] netlink: 'syz.0.1552': attribute type 27 has an invalid length. [ 352.953159][T11454] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1551'. [ 353.046491][T11452] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1552'. [ 354.251064][T11468] veth0_macvtap: left promiscuous mode [ 355.028092][T11479] tap0: tun_chr_ioctl cmd 1074025677 [ 355.033892][T11479] tap0: linktype set to 270 [ 355.062363][T11468] syz.1.1556 (11468) used greatest stack depth: 18600 bytes left [ 355.173466][ T5773] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 355.434619][T11498] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 356.330390][T11533] delete_channel: no stack [ 356.445394][T11540] __nla_validate_parse: 10 callbacks suppressed [ 356.445409][T11540] netlink: 209024 bytes leftover after parsing attributes in process `syz.0.1574'. [ 356.474390][T11540] openvswitch: netlink: Flow key attr not present in new flow. [ 356.503071][T11543] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1576'. [ 356.683432][T11549] validate_nla: 8 callbacks suppressed [ 356.683450][T11549] netlink: 'syz.1.1577': attribute type 10 has an invalid length. [ 356.769826][T11555] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1577'. [ 356.905426][T11564] netlink: 'syz.0.1581': attribute type 3 has an invalid length. [ 356.971577][T11564] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 357.334159][T11565] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 357.356895][T11568] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1583'. [ 357.689796][T11577] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1586'. [ 358.336760][T11591] bridge0: port 3(syz_tun) entered blocking state [ 358.349135][T11591] bridge0: port 3(syz_tun) entered disabled state [ 358.397503][T11591] syz_tun: entered allmulticast mode [ 358.447446][T11591] syz_tun: entered promiscuous mode [ 358.464278][T11591] bridge0: port 3(syz_tun) entered blocking state [ 358.471438][T11591] bridge0: port 3(syz_tun) entered forwarding state [ 358.964056][T11606] netlink: 'syz.1.1592': attribute type 3 has an invalid length. [ 358.981618][T11606] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1592'. [ 359.472117][T11609] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 359.487980][T11614] netlink: 'syz.0.1595': attribute type 9 has an invalid length. [ 359.532526][T11614] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1595'. [ 360.428473][T11645] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 360.449370][T11645] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1602'. [ 360.555988][T11646] tap0: tun_chr_ioctl cmd 1074025677 [ 360.564137][T11646] tap0: linktype set to 270 [ 360.802325][T11648] netlink: 'syz.2.1604': attribute type 12 has an invalid length. [ 360.810227][T11648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1604'. [ 360.928760][T11650] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 361.269164][T11665] netlink: 'syz.1.1610': attribute type 29 has an invalid length. [ 362.617688][T11686] validate_nla: 4 callbacks suppressed [ 362.617708][T11686] netlink: 'syz.3.1614': attribute type 3 has an invalid length. [ 362.643577][T11689] netlink: 'syz.2.1616': attribute type 10 has an invalid length. [ 362.661701][T11689] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 362.809180][T11686] __nla_validate_parse: 1 callbacks suppressed [ 362.809201][T11686] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1614'. [ 363.278685][T11689] batman_adv: batadv0: Removing interface: veth0_vlan [ 363.751288][T11696] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 363.772219][T11697] netlink: 'syz.0.1625': attribute type 3 has an invalid length. [ 363.780038][T11697] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1625'. [ 364.112126][T11699] netlink: 'syz.3.1617': attribute type 12 has an invalid length. [ 364.152904][T11699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1617'. [ 364.404936][T11704] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 364.602362][T11704] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.634930][T11704] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.666022][T11704] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.701860][T11704] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.808901][T11706] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1621'. [ 364.824228][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 365.768874][T11752] netlink: 'syz.0.1638': attribute type 21 has an invalid length. [ 365.776916][T11752] netlink: 'syz.0.1638': attribute type 5 has an invalid length. [ 365.791681][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 370.155922][T11790] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1655'. [ 370.275828][T11810] netlink: 'syz.2.1666': attribute type 27 has an invalid length. [ 370.305110][T11810] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1666'. [ 370.423964][T11814] netlink: 'syz.0.1665': attribute type 10 has an invalid length. [ 371.991893][T11841] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 372.140545][T11841] delete_channel: no stack [ 372.395390][T11849] pim6reg1: entered promiscuous mode [ 372.400771][T11849] pim6reg1: entered allmulticast mode [ 372.602165][T11855] netlink: 'syz.2.1678': attribute type 10 has an invalid length. [ 374.313686][T11893] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 374.322069][T11893] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1688'. [ 374.404744][T11903] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 374.417354][T11898] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 374.478334][T11898] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1688'. [ 374.777713][T11903] team0 (unregistering): Port device C removed [ 377.606978][T11903] team0 (unregistering): Port device team_slave_1 removed [ 377.626192][T11903] team0 (unregistering): Port device batadv0 removed [ 377.813254][T11913] netlink: 'syz.1.1693': attribute type 10 has an invalid length. [ 377.940932][T11913] netlink: 'syz.1.1693': attribute type 10 has an invalid length. [ 377.963454][T11913] bridge0: port 3(syz_tun) entered disabled state [ 377.976538][T11913] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.989786][T11913] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.004098][T11922] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1696'. [ 378.039381][T11924] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1695'. [ 378.063833][T11924] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 378.254404][T11932] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1699'. [ 378.576937][T11937] netlink: 'syz.3.1701': attribute type 10 has an invalid length. [ 378.600855][T11937] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1701'. [ 378.633566][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639986][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.824414][T11942] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1702'. [ 379.124038][T11944] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 379.549541][T11964] netlink: 'syz.1.1709': attribute type 21 has an invalid length. [ 379.587767][T11964] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.591830][T11961] can: request_module (can-proto-5) failed. [ 379.625563][T11964] IPv6: Can't replace route, no match found [ 379.768829][T11971] syz.0.1711: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 379.785320][T11971] CPU: 1 PID: 11971 Comm: syz.0.1711 Not tainted syzkaller #0 [ 379.792841][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.802941][T11971] Call Trace: [ 379.806258][T11971] [ 379.809228][T11971] dump_stack_lvl+0x18c/0x250 [ 379.814144][T11971] ? show_regs_print_info+0x20/0x20 [ 379.819403][T11971] ? load_image+0x420/0x420 [ 379.823990][T11971] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 379.830464][T11971] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 379.836979][T11971] warn_alloc+0x246/0x340 [ 379.841345][T11971] ? stack_trace_save+0xaa/0x100 [ 379.846311][T11971] ? zone_watermark_ok_safe+0x230/0x230 [ 379.851886][T11971] ? kasan_set_track+0x5f/0x70 [ 379.856679][T11971] ? kasan_set_track+0x4e/0x70 [ 379.861449][T11971] ? __kasan_kmalloc+0x8f/0xa0 [ 379.866227][T11971] ? xsk_init_queue+0xad/0x100 [ 379.871060][T11971] ? xsk_setsockopt+0x4e5/0x760 [ 379.875917][T11971] ? do_sock_setsockopt+0x175/0x1a0 [ 379.881202][T11971] ? __x64_sys_setsockopt+0x182/0x200 [ 379.886593][T11971] __vmalloc_node_range+0x126/0x1330 [ 379.891939][T11971] ? free_vm_area+0x50/0x50 [ 379.896472][T11971] vmalloc_user+0x74/0x80 [ 379.900813][T11971] ? xskq_create+0xbf/0x170 [ 379.905326][T11971] xskq_create+0xbf/0x170 [ 379.909666][T11971] xsk_init_queue+0xad/0x100 [ 379.914267][T11971] xsk_setsockopt+0x4e5/0x760 [ 379.918955][T11971] ? xsk_poll+0x680/0x680 [ 379.923299][T11971] ? __fget_files+0x28/0x4b0 [ 379.927926][T11971] ? __fget_files+0x28/0x4b0 [ 379.932528][T11971] ? aa_sock_opt_perm+0x74/0x100 [ 379.937514][T11971] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 379.943080][T11971] ? security_socket_setsockopt+0x7e/0xa0 [ 379.948806][T11971] ? xsk_poll+0x680/0x680 [ 379.953147][T11971] do_sock_setsockopt+0x175/0x1a0 [ 379.958182][T11971] ? __fdget+0x180/0x210 [ 379.962442][T11971] __x64_sys_setsockopt+0x182/0x200 [ 379.967657][T11971] do_syscall_64+0x55/0xb0 [ 379.972078][T11971] ? clear_bhb_loop+0x40/0x90 [ 379.976867][T11971] ? clear_bhb_loop+0x40/0x90 [ 379.981550][T11971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.987507][T11971] RIP: 0033:0x7f11ffb9ce59 [ 379.991930][T11971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.011549][T11971] RSP: 002b:00007f1200a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.019974][T11971] RAX: ffffffffffffffda RBX: 00007f11ffe15fa0 RCX: 00007f11ffb9ce59 [ 380.027948][T11971] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 380.035923][T11971] RBP: 00007f11ffc32d6f R08: 0000000000000004 R09: 0000000000000000 [ 380.043901][T11971] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 380.051876][T11971] R13: 00007f11ffe16038 R14: 00007f11ffe15fa0 R15: 00007ffd02220478 [ 380.059877][T11971] [ 380.083343][T11971] Mem-Info: [ 380.086536][T11971] active_anon:10440 inactive_anon:0 isolated_anon:0 [ 380.086536][T11971] active_file:18865 inactive_file:40069 isolated_file:0 [ 380.086536][T11971] unevictable:768 dirty:233 writeback:0 [ 380.086536][T11971] slab_reclaimable:10614 slab_unreclaimable:95686 [ 380.086536][T11971] mapped:24888 shmem:1377 pagetables:540 [ 380.086536][T11971] sec_pagetables:0 bounce:0 [ 380.086536][T11971] kernel_misc_reclaimable:0 [ 380.086536][T11971] free:1332171 free_pcp:10889 free_cma:0 [ 380.165456][T11971] Node 0 active_anon:41908kB inactive_anon:0kB active_file:75460kB inactive_file:160076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99516kB dirty:932kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11400kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 380.208548][T11975] netlink: 'syz.1.1712': attribute type 10 has an invalid length. [ 380.223043][T11975] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1712'. [ 380.224518][T11971] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 380.233036][T11975] hsr0: entered promiscuous mode [ 380.266422][T11971] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.269530][T11975] bridge0: port 4(hsr0) entered blocking state [ 380.301963][T11971] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 380.309002][T11971] Node 0 DMA32 free:1417476kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:41872kB inactive_anon:0kB active_file:75460kB inactive_file:159244kB unevictable:1536kB writepending:932kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:27212kB local_pcp:15096kB free_cma:0kB [ 380.327658][T11975] bridge0: port 4(hsr0) entered disabled state [ 380.347675][T11971] lowmem_reserve[]: 0 0 0 0 0 [ 380.350655][T11975] hsr0: entered allmulticast mode [ 380.360546][T11975] hsr_slave_0: entered allmulticast mode [ 380.368544][T11975] hsr_slave_1: entered allmulticast mode [ 380.373786][T11971] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.413074][T11971] lowmem_reserve[]: 0 0 0 0 0 [ 380.418737][T11971] Node 1 Normal free:3895908kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16320kB local_pcp:4768kB free_cma:0kB [ 380.472030][T11971] lowmem_reserve[]: 0 0 0 0 0 [ 380.482969][T11971] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.496044][T11971] Node 0 DMA32: 2059*4kB (U) 1253*8kB (UME) 2069*16kB (UME) 957*32kB (UME) 497*64kB (UME) 307*128kB (UME) 145*256kB (UME) 53*512kB (UME) 22*1024kB (UME) 7*2048kB (UM) 284*4096kB (UM) = 1417476kB [ 380.577045][T11971] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 380.597258][T11971] Node 1 Normal: 261*4kB (UME) 58*8kB (UME) 52*16kB (UME) 144*32kB (UME) 41*64kB (UME) 2*128kB (UE) 4*256kB (UE) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3895908kB [ 380.616862][T11971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.627165][T11971] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.638048][T11971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.674173][T11971] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.731605][T11971] 60295 total pagecache pages [ 380.746670][T11971] 0 pages in swap cache [ 380.750902][T11971] Free swap = 124996kB [ 380.756840][T11971] Total swap = 124996kB [ 380.761680][T11971] 2097051 pages RAM [ 380.765642][T11971] 0 pages HighMem/MovableOnly [ 380.770461][T11971] 416933 pages reserved [ 380.775194][T11971] 0 pages cma reserved [ 380.814153][T11984] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 381.360260][T11996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1718'. [ 381.620690][T12019] netlink: 'syz.2.1730': attribute type 10 has an invalid length. [ 381.660525][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1722'. [ 381.684247][T12015] mac80211_hwsim hwsim5 ..c: renamed from wlan1 [ 381.855554][T12023] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1724'. [ 385.283376][T12037] netlink: 'syz.2.1726': attribute type 10 has an invalid length. [ 385.741606][T12063] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 385.831978][T12064] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1734'. [ 386.172519][T12081] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1738'. [ 387.018618][T12090] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 387.547035][T12110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'. [ 390.236559][T12107] ------------[ cut here ]------------ [ 390.242746][T12107] WARNING: CPU: 1 PID: 12107 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470 [ 390.252666][T12107] Modules linked in: [ 390.256594][T12107] CPU: 1 PID: 12107 Comm: syz.0.1745 Not tainted syzkaller #0 [ 390.264132][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.274353][T12107] RIP: 0010:perf_pending_task+0x35c/0x470 [ 390.280112][T12107] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 390.300071][T12107] RSP: 0018:ffffc9000bd0f9c0 EFLAGS: 00010293 [ 390.306291][T12107] RAX: ffffffff81b1603c RBX: ffff88807a89fe48 RCX: ffff88802764bc00 [ 390.314614][T12107] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 390.322726][T12107] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 390.330726][T12107] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802764bc00 [ 390.338848][T12107] R13: ffff88805c1c2d30 R14: ffff88807a89fc08 R15: 1ffff1100f513f81 [ 390.347139][T12107] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 390.356210][T12107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.362898][T12107] CR2: 0000001b2d909ff8 CR3: 000000002e76d000 CR4: 00000000003506e0 [ 390.370909][T12107] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 390.379004][T12107] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 390.387105][T12107] Call Trace: [ 390.390412][T12107] [ 390.393429][T12107] task_work_run+0x1d4/0x260 [ 390.398092][T12107] ? task_work_cancel+0x220/0x220 [ 390.403255][T12107] do_exit+0x95a/0x2460 [ 390.407456][T12107] ? get_signal+0x1068/0x13f0 [ 390.412241][T12107] ? put_task_struct+0xc0/0xc0 [ 390.417048][T12107] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 390.423131][T12107] ? lock_chain_count+0x20/0x20 [ 390.428016][T12107] ? _raw_spin_lock_irq+0xbb/0xf0 [ 390.433307][T12107] do_group_exit+0x21b/0x2d0 [ 390.437935][T12107] ? lockdep_hardirqs_on+0x98/0x150 [ 390.443312][T12107] get_signal+0x12fc/0x13f0 [ 390.448105][T12107] arch_do_signal_or_restart+0xc2/0x800 [ 390.454321][T12107] ? get_sigframe_size+0x20/0x20 [ 390.459304][T12107] ? perf_trace_preemptirq_template+0xac/0x330 [ 390.465552][T12107] ? exit_to_user_mode_loop+0x3b/0x110 [ 390.471029][T12107] exit_to_user_mode_loop+0x70/0x110 [ 390.476420][T12107] exit_to_user_mode_prepare+0xee/0x180 [ 390.482036][T12107] syscall_exit_to_user_mode+0x1a/0x50 [ 390.487504][T12107] do_syscall_64+0x61/0xb0 [ 390.491993][T12107] ? clear_bhb_loop+0x40/0x90 [ 390.496701][T12107] ? clear_bhb_loop+0x40/0x90 [ 390.501605][T12107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.507550][T12107] RIP: 0033:0x7f11ffb9ce59 [ 390.512095][T12107] Code: Unable to access opcode bytes at 0x7f11ffb9ce2f. [ 390.519151][T12107] RSP: 002b:00007f1200a760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.527699][T12107] RAX: fffffffffffffe00 RBX: 00007f11ffe16098 RCX: 00007f11ffb9ce59 [ 390.535828][T12107] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11ffe16098 [ 390.543916][T12107] RBP: 00007f11ffe16090 R08: 0000000000000000 R09: 0000000000000000 [ 390.552193][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.560207][T12107] R13: 00007f11ffe16128 R14: 00007ffd02220390 R15: 00007ffd02220478 [ 390.568340][T12107] [ 390.571390][T12107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.578694][T12107] CPU: 1 PID: 12107 Comm: syz.0.1745 Not tainted syzkaller #0 [ 390.586174][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.596254][T12107] Call Trace: [ 390.599544][T12107] [ 390.602482][T12107] dump_stack_lvl+0x18c/0x250 [ 390.607184][T12107] ? show_regs_print_info+0x20/0x20 [ 390.612397][T12107] ? load_image+0x420/0x420 [ 390.616931][T12107] panic+0x2dc/0x730 [ 390.620869][T12107] ? bpf_jit_dump+0xd0/0xd0 [ 390.625403][T12107] __warn+0x2e0/0x470 [ 390.629412][T12107] ? perf_pending_task+0x35c/0x470 [ 390.634553][T12107] ? perf_pending_task+0x35c/0x470 [ 390.639685][T12107] report_bug+0x2be/0x4f0 [ 390.644064][T12107] ? perf_pending_task+0x35c/0x470 [ 390.649199][T12107] ? perf_pending_task+0x35c/0x470 [ 390.654337][T12107] ? perf_pending_task+0x35e/0x470 [ 390.659470][T12107] handle_bug+0xcf/0x120 [ 390.663732][T12107] exc_invalid_op+0x1a/0x50 [ 390.668251][T12107] asm_exc_invalid_op+0x1a/0x20 [ 390.673120][T12107] RIP: 0010:perf_pending_task+0x35c/0x470 [ 390.678857][T12107] Code: ff 84 db 75 14 e8 74 cb d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 cb d5 ff e8 4b 3d 4f ff eb e5 e8 54 cb d5 ff <0f> 0b e9 f3 fe ff ff e8 48 cb d5 ff 48 c7 c7 10 f9 1c 8d 4c 89 f6 [ 390.698467][T12107] RSP: 0018:ffffc9000bd0f9c0 EFLAGS: 00010293 [ 390.704532][T12107] RAX: ffffffff81b1603c RBX: ffff88807a89fe48 RCX: ffff88802764bc00 [ 390.712501][T12107] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 390.720468][T12107] RBP: 0000000000000001 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 390.728432][T12107] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffff88802764bc00 [ 390.736399][T12107] R13: ffff88805c1c2d30 R14: ffff88807a89fc08 R15: 1ffff1100f513f81 [ 390.744374][T12107] ? perf_pending_task+0x35c/0x470 [ 390.749506][T12107] task_work_run+0x1d4/0x260 [ 390.754102][T12107] ? task_work_cancel+0x220/0x220 [ 390.759138][T12107] do_exit+0x95a/0x2460 [ 390.763300][T12107] ? get_signal+0x1068/0x13f0 [ 390.767975][T12107] ? put_task_struct+0xc0/0xc0 [ 390.772740][T12107] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 390.778718][T12107] ? lock_chain_count+0x20/0x20 [ 390.783562][T12107] ? _raw_spin_lock_irq+0xbb/0xf0 [ 390.788589][T12107] do_group_exit+0x21b/0x2d0 [ 390.793183][T12107] ? lockdep_hardirqs_on+0x98/0x150 [ 390.798382][T12107] get_signal+0x12fc/0x13f0 [ 390.802898][T12107] arch_do_signal_or_restart+0xc2/0x800 [ 390.808448][T12107] ? get_sigframe_size+0x20/0x20 [ 390.813381][T12107] ? perf_trace_preemptirq_template+0xac/0x330 [ 390.819548][T12107] ? exit_to_user_mode_loop+0x3b/0x110 [ 390.825010][T12107] exit_to_user_mode_loop+0x70/0x110 [ 390.830292][T12107] exit_to_user_mode_prepare+0xee/0x180 [ 390.835838][T12107] syscall_exit_to_user_mode+0x1a/0x50 [ 390.841294][T12107] do_syscall_64+0x61/0xb0 [ 390.845708][T12107] ? clear_bhb_loop+0x40/0x90 [ 390.850379][T12107] ? clear_bhb_loop+0x40/0x90 [ 390.855050][T12107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.860942][T12107] RIP: 0033:0x7f11ffb9ce59 [ 390.865351][T12107] Code: Unable to access opcode bytes at 0x7f11ffb9ce2f. [ 390.872358][T12107] RSP: 002b:00007f1200a760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 390.880767][T12107] RAX: fffffffffffffe00 RBX: 00007f11ffe16098 RCX: 00007f11ffb9ce59 [ 390.888735][T12107] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11ffe16098 [ 390.896699][T12107] RBP: 00007f11ffe16090 R08: 0000000000000000 R09: 0000000000000000 [ 390.904667][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.912635][T12107] R13: 00007f11ffe16128 R14: 00007ffd02220390 R15: 00007ffd02220478 [ 390.920620][T12107] [ 390.923883][T12107] Kernel Offset: disabled [ 390.928200][T12107] Rebooting in 86400 seconds..