last executing test programs: 5m49.757284769s ago: executing program 2 (id=1398): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r1}) socket$kcm(0x29, 0x7, 0x0) 5m49.285933547s ago: executing program 2 (id=1403): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800407d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x82f8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 5m48.659209954s ago: executing program 2 (id=1406): socketpair(0x8, 0x3, 0x5, &(0x7f0000000180)) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x21, &(0x7f0000000780)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x4, 0x2, 0x0, 0xb}], 0x10, 0x3}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061104000000001009500000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x38}, 0x41) 5m47.762440657s ago: executing program 2 (id=1413): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x5}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="000898"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) 5m46.604242615s ago: executing program 2 (id=1420): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x92, 0x3, 0x9, 0x0, 0x100000080001, 0x91239, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x1}, 0x102200, 0x1, 0xb, 0x6, 0x3, 0x8, 0x43, 0x0, 0xe18a, 0x0, 0x1000000000000007}, 0x0, 0x2, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x0, 0x6, 0x6, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x20000000009, 0x64019, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0xf4, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 5m45.932378584s ago: executing program 2 (id=1422): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x5, 0x1, 0x8, 0x6, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x4e, &(0x7f0000000cc0)=""/78, 0x41100, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x1, 0x1480}, 0x10, 0xe61b, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000e80)=[{0x1, 0x5, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x2c, 0x1, 0x20000a, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x8, 0x8, 0x8430, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x3}, 0x50) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000e03a10e6d2b54a5df5f1b18a508e60000000b705000500000300ba638aafefb5a6c33b1767e6bb652a089c243c734516a7a8e4da1d1426c6c92a001d38e40d99a57efc059b30034696177f3a021fdee3304a176a07c63825a147f57493293e34a77494d46caeb40000000000000000000000000013b3a232191d23be2cdb900984d71910c6351f9a39afac92736a95c2c93ce41d4346cdc9ab4da71d4626b0a211198aed991a493893ef2c6fa68a1ae91fde8fd780ca46065528692f782d80e8eea139f9434978c23f8a75f2b3904fd538f8bad0e39a0462184361100f50e94e99bc298649ef782d29ba8ecf5c49ed9e7f64edf6c19c8f953550154a4799"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000280)}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x17, 0x0, 0x0, 0x8000}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="c237c7dbc912ff92eb5a1dfc58309da6dd46602d8ddebcb0f3b2d8bee8f1af9ce5eaea7e8031899ccbeed97a25a6cfc7d04ce4b8c6c02e72954e1dbf99d71957adf8a517d7cee8bdec4a13ed9a3d41204cf543acd3a22c8bbd75ca091d4bb11b5d5fcbe7421a1521d1b983cce566", 0x6e}], 0x1, &(0x7f00000003c0)=[{0x98, 0x118, 0x1, "85d094d175df71bed93e9ad8086e6c1db6436e274b57547ddf0dcaf64bddde5dc74fc667034b7399b12a92b940f12781fc3c6b613f9fcaef4bb3cd8e67e53f59a9068dcbc398ddc09072e1b079ffa9b3d9bd280a2a9477f9f8a29d6156b2478ef278c9dca2891d27a1bcf84a87b48477f6f70587bed1e0256babd0d9a2fc9b9ae6c2fe679d451923"}], 0x98}, 0x8000) 5m30.743671068s ago: executing program 32 (id=1422): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x0, 0x5, 0x1, 0x8, 0x6, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x4e, &(0x7f0000000cc0)=""/78, 0x41100, 0x3, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xb, 0x1, 0x1480}, 0x10, 0xe61b, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000e80)=[{0x1, 0x5, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x2c, 0x1, 0x20000a, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x7, 0x8, 0x8, 0x8430, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x3}, 0x50) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x58, &(0x7f0000000280)}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x17, 0x0, 0x0, 0x8000}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="c237c7dbc912ff92eb5a1dfc58309da6dd46602d8ddebcb0f3b2d8bee8f1af9ce5eaea7e8031899ccbeed97a25a6cfc7d04ce4b8c6c02e72954e1dbf99d71957adf8a517d7cee8bdec4a13ed9a3d41204cf543acd3a22c8bbd75ca091d4bb11b5d5fcbe7421a1521d1b983cce566", 0x6e}], 0x1, &(0x7f00000003c0)=[{0x98, 0x118, 0x1, "85d094d175df71bed93e9ad8086e6c1db6436e274b57547ddf0dcaf64bddde5dc74fc667034b7399b12a92b940f12781fc3c6b613f9fcaef4bb3cd8e67e53f59a9068dcbc398ddc09072e1b079ffa9b3d9bd280a2a9477f9f8a29d6156b2478ef278c9dca2891d27a1bcf84a87b48477f6f70587bed1e0256babd0d9a2fc9b9ae6c2fe679d451923"}], 0x98}, 0x8000) 3.470849465s ago: executing program 0 (id=2546): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0xc8, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc0800000e800200875a65969ff57b00fc"], 0xfdef) 3.273356947s ago: executing program 3 (id=2548): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x9, 0x42, 0x40, 0x1028}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x3, r0}, 0x38) 3.21804167s ago: executing program 0 (id=2550): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c0000"], &(0x7f0000000000)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32], 0x48) write$cgroup_int(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000810004000000000095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2.569740148s ago: executing program 4 (id=2554): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080), 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800407d}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.569322958s ago: executing program 3 (id=2555): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f0000000240)="00000300000000000000", 0xa}, {&(0x7f00000002c0)="832debe16dcb86c87d5aefe65d02cfd5abf09af52aa52b8cabb58fc01abb15f60d5a22c41db1026e79ce59a5435ee6dbbda06da24d6ba4b1c74be48cbecfac18a86c6beeaa9d76f459afacefd359e19a883a72f60ace4e37e2a42a3bb1370dba262a81516897d1c6d6b3535adf8dda2565eb11f4790cd2919d6c3e6f81debad0fcbe88b526c21f32fa437bf41e509dd290c7a0770786a6a11677efa2b21d2e84e1126303bec5af3365c0761d846d3573e20682f18e3d99691b1c6c6e9c3d37752907e3e7534f89102cb6c494562eff1c54205dc3fa6b", 0xd6}], 0x3}, 0x8080) 2.476157894s ago: executing program 0 (id=2556): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0x9d, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000700e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020fd8107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.435313326s ago: executing program 3 (id=2557): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000d1800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, &(0x7f0000000780)="8b0773cda2f846a143357b193dceb6ec9c315bedd436e5cba50f4ffeebfcab792b324a9b9154eb394500e4ead1265ab777dbf909067a53b979c6ad6702fa6316573bfa6c387071147cd4401f1573f621980f98f972e92893f62736da09ae748501fd8337afcb45cfeb7c1350a071bddcb5c118a7ae0925bbd3c2beb9b5ac92582f95ee209669fc2642028cf22cef5f3c54ce373a893a4a4c411b8baa6ac2a9a952d1becbb49cbe35fd174f3f", 0xac, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000a40)="2e395a3dfb67cf42f498e7138875d771f6c533a61e1648bba1652c13df3e57505c2c0cf3ca75f60742265de1a29275dc939efc6d5f697fc9562b24c381a9b179bb5bf8299f1fe02da503055b9e065760b4b93a633e5fc218c7d06d487508f2b5ed9494c68d9754ad07d852fe7b908025a5386304d8183ac19f28f0894cfe3aab9b662ae1ea519eaeb5e961f5336ed1f0aff91da8389ecc3d82") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x91, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x3111, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b30000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b70800e7ff0000007b8af8ff00000000aa080000000000007b8af0ff00000000bfa100000000000007010000f8d1e222e8215affffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000580)=r3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x6d01eb45, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.312589463s ago: executing program 4 (id=2559): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a9243be5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.001301862s ago: executing program 1 (id=2560): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x18, 0x0, 0x2) close(r2) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x5a5f, 0x4, 0xc, 0x30884, 0xffffffffffffffff, 0x44, '\x00', r5, 0xffffffffffffffff, 0x400003, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1a, 0x1d, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @printk={@d}, @map_fd={0x18, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x0, 0x5, 0x4}, 0x10, 0x0, r4, 0x0, &(0x7f0000000800), 0x0, 0x10, 0x3}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) gettid() 1.954980904s ago: executing program 4 (id=2561): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0x1000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a0200ffffffff180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000950000000000000016e9b0a283000d9b3a47f2756c692a01751911ae604340a278f43f49129c4bc9f1e3f2c8c2f02333e42eb91d93fd2eb17728a86a9cc959b178d3519025f2131f51165336f87828cf503d7bdd69a182f70e794acf18edfa02c9774c4f"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x27) 1.953945184s ago: executing program 0 (id=2562): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r4, 0x0, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(r5, 0x0, 0x40000040) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000840000000000000001"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f0000000740)=r7, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e12080006000000a441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) 1.423289676s ago: executing program 3 (id=2563): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) 1.419818576s ago: executing program 1 (id=2564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) (async) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x80, 0x0}, 0x200ce0c0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 64) write$cgroup_pressure(r0, &(0x7f0000000000)={'some', 0x20, 0x408f, 0x20, 0x8}, 0x2f) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0xfe33) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) 1.339854921s ago: executing program 4 (id=2565): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x59ed}, [@generic={0x40, 0x0, 0x6, 0x101, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0xa9, 0x25, &(0x7f00000002c0)=""/37, 0x40f00, 0x9, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x5, 0x2, 0x1, 0x7}], 0x10, 0x5}, 0x94) 1.104896494s ago: executing program 3 (id=2566): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12003) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, &(0x7f0000000680)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r7}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r8, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r9, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x4, '\x00', 0x0, r4, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, [@generic={0x3, 0x4, 0x9, 0x2, 0x400}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000280)='syzkaller\x00', 0x101, 0x4e, &(0x7f00000002c0)=""/78, 0x40f00, 0x3, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x7, &(0x7f0000000400)=[r4, r4, r10], &(0x7f0000000480)=[{0x3, 0x5, 0x5, 0x5}, {0x0, 0x3, 0xa, 0x6}, {0x4, 0x4, 0xf, 0x4}, {0x5, 0x1, 0x1, 0x7}, {0x2, 0x5, 0x5, 0x6}, {0x0, 0x3, 0x4}, {0x2, 0x2, 0xd, 0x4}], 0x10, 0x5}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) 1.047683248s ago: executing program 1 (id=2567): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000004af6b590b52dc65100000008000000000000000000000300000000020000000200000002004eaf000000000000000b030000000000"], 0x0, 0x5a}, 0x28) 988.552701ms ago: executing program 4 (id=2568): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080), 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800407d}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 854.932389ms ago: executing program 0 (id=2569): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x80}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 854.432279ms ago: executing program 3 (id=2570): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000200), 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r7, &(0x7f0000000440)}, 0x20) 824.186341ms ago: executing program 1 (id=2571): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0x9d, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000700e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020fd8107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 384.660297ms ago: executing program 4 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000faffff0e00000000000000000000000000004dac21895fab96385fa335e50c04b8c490433752e3c644df67864891800a2b9f143893cadf6a59f5b5bf2f67e12cfc9aeacc52a9e3303c3ff71a48fdd3b2c368be41523089602cccd13bff28264a2e0fc3c95be887a231658372f4fee14f1dde0137eb37e72a867b356ae5d6eaed3ee2ce21650d4e041c4f8a12a412", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0, 0xd5, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x91, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES16=r1, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0xcc29, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100), 0x4) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) sendmsg$inet(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x6b, &(0x7f0000000000), 0x20000010) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES16=r13], 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 232.829046ms ago: executing program 1 (id=2573): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x20) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1a, 0x0, 0xffffffffffffffff, 0x9db, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x8, 0xa, 0x0, 0x100, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffebc2}}, @alu={0x7, 0x0, 0xc, 0x5, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x62454a65}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 146.996961ms ago: executing program 0 (id=2574): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='+net_prio +hugetlm -hugetl}B+rlimit \v\x00\x00\x00etlb -net_prio +etlb +blkio '], 0x47) r1 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000005000000080000000800000040000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c0370b2f1efdf0f1f4e51e9485d39664e263645e72382bd668a83eb3707e9d6ca88362be9f68"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xb69b, '\x00', 0x0, r5, 0x0, 0x5, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r12 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0x0, 0xd, 0x0, 0x0, 0x1, 0x783c2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x800c4, 0xfffffffffffffffd}, 0x0, 0x5, 0x0, 0x6, 0x4, 0xffff0000, 0xffff}, r12, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0x80fe}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={r3, r7}) 0s ago: executing program 1 (id=2575): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0x58, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', r3, r0, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x20010, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x8000000000000000, 0xffffffffffffffff}, 0x2002, 0xfffffffffffffffd, 0x9, 0x3, 0x80, 0x5, 0x1, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x2) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x27) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000900000018000000000000000000000050000000185100000f0000000000000000000000950000000000000018130000", @ANYRES32=r2, @ANYBLOB="000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008010000800300000600000085000000060000001839000005000000000000000000000075962000010000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x3, 0xbf, &(0x7f00000002c0)=""/191, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, r1, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000400)=[r2], &(0x7f0000000440)=[{0x0, 0x5, 0xc, 0x1}, {0x3, 0x4, 0xb, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x2, 0x1, 0x10, 0xd}, {0x4, 0x4, 0x7, 0x8}, {0x5, 0x2, 0x5, 0x3}, {0x4, 0x1, 0xe, 0x9}], 0x10, 0x7ff}, 0x94) kernel console output (not intermixed with test programs): [ 630.327151][T12001] netlink_sendmsg+0x8d0/0xbf0 [ 630.332146][T12001] ? netlink_getsockopt+0x590/0x590 [ 630.337601][T12001] ? aa_sock_msg_perm+0x94/0x150 [ 630.342698][T12001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 630.348103][T12001] ? security_socket_sendmsg+0x80/0xa0 [ 630.353685][T12001] ? netlink_getsockopt+0x590/0x590 [ 630.359039][T12001] ____sys_sendmsg+0x5ba/0x960 [ 630.364095][T12001] ? __asan_memset+0x22/0x40 [ 630.368813][T12001] ? __sys_sendmsg_sock+0x30/0x30 [ 630.374042][T12001] ? __import_iovec+0x5f2/0x850 [ 630.379120][T12001] ? import_iovec+0x73/0xa0 [ 630.392572][T12001] ___sys_sendmsg+0x2a6/0x360 [ 630.397531][T12001] ? __sys_sendmsg+0x2a0/0x2a0 [ 630.402754][T12001] ? __lock_acquire+0x7d40/0x7d40 [ 630.408173][T12001] __se_sys_sendmsg+0x1c2/0x2b0 [ 630.413195][T12001] ? __x64_sys_sendmsg+0x80/0x80 [ 630.418448][T12001] ? lockdep_hardirqs_on+0x98/0x150 [ 630.423818][T12001] do_syscall_64+0x55/0xa0 [ 630.428383][T12001] ? clear_bhb_loop+0x40/0x90 [ 630.433190][T12001] ? clear_bhb_loop+0x40/0x90 [ 630.438018][T12001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.444127][T12001] RIP: 0033:0x7f9edf99acb9 [ 630.448758][T12001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.468572][T12001] RSP: 002b:00007f9ee0789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.477133][T12001] RAX: ffffffffffffffda RBX: 00007f9edfc15fa0 RCX: 00007f9edf99acb9 [ 630.485223][T12001] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 630.493333][T12001] RBP: 00007f9ee0789090 R08: 0000000000000000 R09: 0000000000000000 [ 630.501430][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.509599][T12001] R13: 00007f9edfc16038 R14: 00007f9edfc15fa0 R15: 00007ffd7cdc69f8 [ 630.517933][T12001] [ 630.899475][T12009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.906940][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 630.914551][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 630.921983][T12009] IPv6: NLM_F_CREATE should be set when creating new route [ 632.072412][T12021] netlink: 'syz.4.1792': attribute type 21 has an invalid length. [ 632.161168][T12021] netlink: 'syz.4.1792': attribute type 2 has an invalid length. [ 632.224959][T12021] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.1792'. [ 632.972578][T12037] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1797'. [ 635.231013][T12060] netlink: 'syz.3.1800': attribute type 46 has an invalid length. [ 635.276797][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1800'. [ 635.788137][T12066] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 635.837184][T12066] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 635.890308][T12072] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1803'. [ 636.052043][T12071] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 636.229215][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 636.308443][T12071] bond0: (slave dummy0): Releasing backup interface [ 636.379976][T12071] dummy0: entered promiscuous mode [ 636.385555][T12071] dummy0: entered allmulticast mode [ 636.459708][T12071] team0: Port device dummy0 added [ 636.509241][T12079] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 636.563414][T12079] dummy0: left promiscuous mode [ 636.593501][T12079] dummy0: left allmulticast mode [ 636.776631][T12079] team0: Port device dummy0 removed [ 636.816753][T12079] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 636.826701][T12089] FAULT_INJECTION: forcing a failure. [ 636.826701][T12089] name failslab, interval 1, probability 0, space 0, times 0 [ 636.909088][T12089] CPU: 1 PID: 12089 Comm: syz.0.1805 Not tainted syzkaller #0 [ 636.916807][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.927173][T12089] Call Trace: [ 636.930509][T12089] [ 636.933488][T12089] dump_stack_lvl+0x18c/0x250 [ 636.938226][T12089] ? show_regs_print_info+0x20/0x20 [ 636.943477][T12089] ? load_image+0x400/0x400 [ 636.948025][T12089] ? __might_sleep+0xe0/0xe0 [ 636.952751][T12089] ? __lock_acquire+0x7d40/0x7d40 [ 636.957840][T12089] should_fail_ex+0x39d/0x4d0 [ 636.962570][T12089] should_failslab+0x9/0x20 [ 636.967135][T12089] slab_pre_alloc_hook+0x59/0x310 [ 636.972301][T12089] ? tomoyo_encode+0x28b/0x540 [ 636.977247][T12089] ? tomoyo_encode+0x28b/0x540 [ 636.982053][T12089] __kmem_cache_alloc_node+0x53/0x250 [ 636.987575][T12089] ? tomoyo_encode+0x28b/0x540 [ 636.992474][T12089] __kmalloc+0xa4/0x230 [ 636.996771][T12089] tomoyo_encode+0x28b/0x540 [ 637.001432][T12089] tomoyo_realpath_from_path+0x592/0x5d0 [ 637.007305][T12089] tomoyo_path_number_perm+0x248/0x620 [ 637.012826][T12089] ? tomoyo_path_number_perm+0x217/0x620 [ 637.018599][T12089] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 637.024101][T12089] ? trace_call_bpf+0xc3/0x6c0 [ 637.028925][T12089] ? trace_call_bpf+0xc3/0x6c0 [ 637.033907][T12089] ? trace_call_bpf+0x5e9/0x6c0 [ 637.039012][T12089] ? __fget_files+0x28/0x4b0 [ 637.043619][T12089] ? __fget_files+0x28/0x4b0 [ 637.048322][T12089] security_file_ioctl+0x70/0xa0 [ 637.053286][T12089] __se_sys_ioctl+0x48/0x170 [ 637.057908][T12089] do_syscall_64+0x55/0xa0 [ 637.062340][T12089] ? clear_bhb_loop+0x40/0x90 [ 637.067030][T12089] ? clear_bhb_loop+0x40/0x90 [ 637.071721][T12089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.077629][T12089] RIP: 0033:0x7fa9cff9acb9 [ 637.082064][T12089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.101882][T12089] RSP: 002b:00007fa9ce1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.110954][T12089] RAX: ffffffffffffffda RBX: 00007fa9d0216180 RCX: 00007fa9cff9acb9 [ 637.118960][T12089] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000009 [ 637.127217][T12089] RBP: 00007fa9ce1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 637.135379][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.143555][T12089] R13: 00007fa9d0216218 R14: 00007fa9d0216180 R15: 00007ffda21e21f8 [ 637.151752][T12089] [ 637.163512][T12071] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1803'. [ 637.181642][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 637.229238][T12080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 637.230883][T12089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 637.261466][T12071] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 637.439717][T12082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 640.123011][T12122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.187941][T12124] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1815'. [ 641.844782][T12143] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 642.593299][T12166] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1827'. [ 642.697035][T12164] IPv6: Can't replace route, no match found [ 644.084169][T12178] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 645.061946][T12201] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1838'. [ 645.328097][T12198] IPv6: Can't replace route, no match found [ 645.789362][T12207] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1839'. [ 646.897173][T12231] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1848'. [ 646.924974][T12231] IPv6: Can't replace route, no match found [ 647.239385][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 649.927123][T12272] IPv6: Can't replace route, no match found [ 649.956704][T12275] netlink: 'syz.4.1860': attribute type 9 has an invalid length. [ 649.968231][T12275] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1860'. [ 650.069608][T12276] netlink: 'syz.4.1860': attribute type 9 has an invalid length. [ 650.088030][T12276] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1860'. [ 651.251630][T12303] netlink: 'syz.4.1869': attribute type 9 has an invalid length. [ 651.270917][T12303] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1869'. [ 651.493066][T12310] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.1870'. [ 651.576595][T12310] IPv6: Can't replace route, no match found [ 651.632891][T12316] FAULT_INJECTION: forcing a failure. [ 651.632891][T12316] name failslab, interval 1, probability 0, space 0, times 0 [ 651.646042][T12316] CPU: 0 PID: 12316 Comm: syz.1.1872 Not tainted syzkaller #0 [ 651.653902][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.664108][T12316] Call Trace: [ 651.667423][T12316] [ 651.670386][T12316] dump_stack_lvl+0x18c/0x250 [ 651.675214][T12316] ? show_regs_print_info+0x20/0x20 [ 651.680462][T12316] ? load_image+0x400/0x400 [ 651.685005][T12316] ? __might_sleep+0xe0/0xe0 [ 651.689639][T12316] ? __lock_acquire+0x7d40/0x7d40 [ 651.694803][T12316] should_fail_ex+0x39d/0x4d0 [ 651.699525][T12316] should_failslab+0x9/0x20 [ 651.704110][T12316] slab_pre_alloc_hook+0x59/0x310 [ 651.709226][T12316] ? trace_raw_output_contention_end+0xd0/0xd0 [ 651.715419][T12316] ? fib6_info_alloc+0x30/0xf0 [ 651.720222][T12316] ? fib6_info_alloc+0x30/0xf0 [ 651.725020][T12316] __kmem_cache_alloc_node+0x53/0x250 [ 651.730429][T12316] ? fib6_get_table+0x39/0x260 [ 651.735235][T12316] ? fib6_info_alloc+0x30/0xf0 [ 651.740030][T12316] __kmalloc+0xa4/0x230 [ 651.744235][T12316] fib6_info_alloc+0x30/0xf0 [ 651.748961][T12316] ip6_route_info_create+0x44f/0x1240 [ 651.754396][T12316] ? mutex_lock_nested+0x20/0x20 [ 651.759406][T12316] ip6_route_add+0x28/0x160 [ 651.763970][T12316] ipv6_route_ioctl+0x3b4/0x500 [ 651.768902][T12316] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 651.774729][T12316] ? __might_fault+0xaa/0x120 [ 651.779614][T12316] ? __might_fault+0xc6/0x120 [ 651.784404][T12316] ? __might_fault+0xaa/0x120 [ 651.789120][T12316] inet6_ioctl+0x247/0x2d0 [ 651.793646][T12316] ? inet6_getname+0x650/0x650 [ 651.798449][T12316] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 651.803964][T12316] sock_do_ioctl+0xfc/0x310 [ 651.808573][T12316] ? sock_show_fdinfo+0xb0/0xb0 [ 651.813481][T12316] sock_ioctl+0x5ba/0x7e0 [ 651.817900][T12316] ? sock_poll+0x3e0/0x3e0 [ 651.822364][T12316] ? bpf_lsm_file_ioctl+0x9/0x10 [ 651.827348][T12316] ? security_file_ioctl+0x80/0xa0 [ 651.832498][T12316] ? sock_poll+0x3e0/0x3e0 [ 651.837040][T12316] __se_sys_ioctl+0xfd/0x170 [ 651.841669][T12316] do_syscall_64+0x55/0xa0 [ 651.846158][T12316] ? clear_bhb_loop+0x40/0x90 [ 651.850870][T12316] ? clear_bhb_loop+0x40/0x90 [ 651.855602][T12316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.861616][T12316] RIP: 0033:0x7f9edf99acb9 [ 651.866065][T12316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.885722][T12316] RSP: 002b:00007f9eddbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.894349][T12316] RAX: ffffffffffffffda RBX: 00007f9edfc16090 RCX: 00007f9edf99acb9 [ 651.902528][T12316] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 651.910530][T12316] RBP: 00007f9eddbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 651.918612][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.926625][T12316] R13: 00007f9edfc16128 R14: 00007f9edfc16090 R15: 00007ffd7cdc69f8 [ 651.934836][T12316] [ 652.188986][T12318] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1871'. [ 652.219457][T12318] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1871'. [ 652.239055][T12318] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1871'. [ 652.614655][T12327] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 652.633074][T12327] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.434484][T12330] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 653.963878][T12353] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1881'. [ 653.994848][T12353] IPv6: Can't replace route, no match found [ 654.879774][T12368] netlink: 'syz.4.1888': attribute type 10 has an invalid length. [ 655.796448][T12380] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1891'. [ 655.833125][T12380] IPv6: Can't replace route, no match found [ 657.213481][T12403] netlink: 'syz.0.1898': attribute type 9 has an invalid length. [ 657.223641][T12403] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1898'. [ 659.553969][T12421] netlink: 'syz.0.1902': attribute type 10 has an invalid length. [ 659.578626][T12421] hsr0: left promiscuous mode [ 659.594194][T12421] hsr0: left allmulticast mode [ 659.607919][T12421] hsr_slave_0: left allmulticast mode [ 659.650897][T12421] hsr_slave_1: left allmulticast mode [ 659.800939][T12421] team0: Port device hsr0 removed [ 659.807681][T12421] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 659.998494][T12421] : (slave hsr0): The slave device specified does not support setting the MAC address [ 660.081587][T12421] : (slave hsr0): Error -95 calling set_mac_address [ 663.934609][T12507] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.1928'. [ 663.972457][T12507] IPv6: Can't replace route, no match found [ 664.893110][T12513] netlink: 'syz.3.1930': attribute type 9 has an invalid length. [ 664.978093][T12513] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1930'. [ 667.196212][T12554] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1940'. [ 667.212569][T12554] IPv6: Can't replace route, no match found [ 669.181250][T12561] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1943'. [ 672.661605][T10584] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 672.722498][T12597] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1951'. [ 672.890588][T12599] IPv6: Can't replace route, no match found [ 673.409852][T12606] FAULT_INJECTION: forcing a failure. [ 673.409852][T12606] name failslab, interval 1, probability 0, space 0, times 0 [ 673.439055][T12606] CPU: 1 PID: 12606 Comm: syz.4.1954 Not tainted syzkaller #0 [ 673.446651][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 673.457316][T12606] Call Trace: [ 673.460637][T12606] [ 673.463602][T12606] dump_stack_lvl+0x18c/0x250 [ 673.468325][T12606] ? show_regs_print_info+0x20/0x20 [ 673.473567][T12606] ? load_image+0x400/0x400 [ 673.478200][T12606] ? __might_sleep+0xe0/0xe0 [ 673.482915][T12606] ? __lock_acquire+0x7d40/0x7d40 [ 673.488069][T12606] should_fail_ex+0x39d/0x4d0 [ 673.492797][T12606] should_failslab+0x9/0x20 [ 673.497320][T12606] slab_pre_alloc_hook+0x59/0x310 [ 673.502368][T12606] kmem_cache_alloc_node+0x60/0x320 [ 673.507587][T12606] ? __alloc_skb+0x103/0x2c0 [ 673.512324][T12606] __alloc_skb+0x103/0x2c0 [ 673.516887][T12606] __ip_append_data+0x2b73/0x3d40 [ 673.522001][T12606] ? raw_send_hdrinc+0x1170/0x1170 [ 673.527133][T12606] ? mark_lock+0x94/0x320 [ 673.531525][T12606] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 673.537521][T12606] ? ip_setup_cork+0x860/0x860 [ 673.542317][T12606] ? ip_setup_cork+0x530/0x860 [ 673.547104][T12606] ip_append_data+0x10d/0x180 [ 673.551912][T12606] ? raw_send_hdrinc+0x1170/0x1170 [ 673.557046][T12606] raw_sendmsg+0x15c1/0x1c00 [ 673.561670][T12606] ? compat_raw_ioctl+0x70/0x70 [ 673.566541][T12606] ? __lock_acquire+0x1273/0x7d40 [ 673.571602][T12606] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 673.578137][T12606] ? sock_rps_record_flow+0x19/0x3f0 [ 673.583440][T12606] ? inet_sendmsg+0x7c/0x2f0 [ 673.588133][T12606] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 673.593434][T12606] ? security_socket_sendmsg+0x80/0xa0 [ 673.598921][T12606] ? inet_send_prepare+0x260/0x260 [ 673.604053][T12606] ____sys_sendmsg+0x5ba/0x960 [ 673.608893][T12606] ? __lock_acquire+0x7d40/0x7d40 [ 673.613960][T12606] ? __asan_memset+0x22/0x40 [ 673.618660][T12606] ? __sys_sendmsg_sock+0x30/0x30 [ 673.623791][T12606] ? __import_iovec+0x3fa/0x850 [ 673.628780][T12606] ? import_iovec+0x73/0xa0 [ 673.633426][T12606] ___sys_sendmsg+0x2a6/0x360 [ 673.638249][T12606] ? __sys_sendmsg+0x2a0/0x2a0 [ 673.643094][T12606] ? __lock_acquire+0x7d40/0x7d40 [ 673.648178][T12606] __se_sys_sendmsg+0x1c2/0x2b0 [ 673.653071][T12606] ? __x64_sys_sendmsg+0x80/0x80 [ 673.658044][T12606] ? lockdep_hardirqs_on+0x98/0x150 [ 673.663276][T12606] do_syscall_64+0x55/0xa0 [ 673.667707][T12606] ? clear_bhb_loop+0x40/0x90 [ 673.672400][T12606] ? clear_bhb_loop+0x40/0x90 [ 673.677104][T12606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.683028][T12606] RIP: 0033:0x7febeb19acb9 [ 673.687454][T12606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.707190][T12606] RSP: 002b:00007febec0d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.715735][T12606] RAX: ffffffffffffffda RBX: 00007febeb416180 RCX: 00007febeb19acb9 [ 673.723875][T12606] RDX: 0000000020000040 RSI: 0000200000000440 RDI: 000000000000000f [ 673.731908][T12606] RBP: 00007febec0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 673.739908][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.747889][T12606] R13: 00007febeb416218 R14: 00007febeb416180 R15: 00007ffc62989868 [ 673.755900][T12606] [ 675.322329][T12633] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1963'. [ 677.819604][T12633] IPv6: Can't replace route, no match found [ 677.839127][T12651] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 677.849045][T12651] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1966'. [ 678.672460][T12675] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1972'. [ 679.174713][T12682] FAULT_INJECTION: forcing a failure. [ 679.174713][T12682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.189366][T12682] CPU: 0 PID: 12682 Comm: syz.0.1974 Not tainted syzkaller #0 [ 679.197019][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.207194][T12682] Call Trace: [ 679.210517][T12682] [ 679.213610][T12682] dump_stack_lvl+0x18c/0x250 [ 679.218532][T12682] ? show_regs_print_info+0x20/0x20 [ 679.223898][T12682] ? load_image+0x400/0x400 [ 679.228453][T12682] ? __might_fault+0xaa/0x120 [ 679.233277][T12682] ? __lock_acquire+0x7d40/0x7d40 [ 679.238993][T12682] should_fail_ex+0x39d/0x4d0 [ 679.243843][T12682] _copy_from_user+0x2f/0xe0 [ 679.248501][T12682] __sys_bpf+0x23e/0x890 [ 679.252838][T12682] ? bpf_link_show_fdinfo+0x390/0x390 [ 679.258307][T12682] ? lock_chain_count+0x20/0x20 [ 679.263259][T12682] __x64_sys_bpf+0x7c/0x90 [ 679.267772][T12682] do_syscall_64+0x55/0xa0 [ 679.272254][T12682] ? clear_bhb_loop+0x40/0x90 [ 679.277092][T12682] ? clear_bhb_loop+0x40/0x90 [ 679.281884][T12682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.287861][T12682] RIP: 0033:0x7fa9cff9acb9 [ 679.292369][T12682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.312144][T12682] RSP: 002b:00007fa9d0d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.320667][T12682] RAX: ffffffffffffffda RBX: 00007fa9d0215fa0 RCX: 00007fa9cff9acb9 [ 679.329550][T12682] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 679.337992][T12682] RBP: 00007fa9d0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 679.346017][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.354425][T12682] R13: 00007fa9d0216038 R14: 00007fa9d0215fa0 R15: 00007ffda21e21f8 [ 679.362911][T12682] [ 679.542322][T12689] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1976'. [ 679.597744][T12689] IPv6: Can't replace route, no match found [ 682.223794][T12699] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 682.232270][T12699] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1978'. [ 683.205365][T12730] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.1988'. [ 683.367738][T12730] IPv6: Can't replace route, no match found [ 683.563297][T12723] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.1987'. [ 683.591410][T12723] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1987'. [ 686.133711][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.140316][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.933791][T12764] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 686.971705][T12760] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1999'. [ 687.045702][T12764] team0: Device hsr_slave_0 failed to register rx_handler [ 687.340586][T12760] IPv6: Can't replace route, no match found [ 690.092746][T12778] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2001'. [ 691.345091][T12788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 691.368563][T12788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 691.423733][T12792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 691.454417][T12788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 691.589199][T12797] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2009'. [ 694.567751][T12806] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 696.493229][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 696.529302][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 696.804510][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 696.840926][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2022'. [ 696.892315][T12850] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 696.996360][T12858] netlink: 'syz.3.2025': attribute type 10 has an invalid length. [ 697.170483][T12858] netlink: 'syz.3.2025': attribute type 11 has an invalid length. [ 697.178806][T12858] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.2025'. [ 700.130204][T12898] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 700.163024][T12898] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2033'. [ 701.637495][T12911] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 701.723733][T12915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2038'. [ 702.342132][T12929] netlink: 'syz.1.2044': attribute type 21 has an invalid length. [ 702.350701][T12929] netlink: 'syz.1.2044': attribute type 6 has an invalid length. [ 702.358565][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2044'. [ 702.386213][T12927] netlink: 'syz.4.2043': attribute type 10 has an invalid length. [ 702.630859][T12927] hsr0: entered promiscuous mode [ 702.636954][T12927] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 705.882633][T12955] netlink: 'syz.4.2049': attribute type 13 has an invalid length. [ 706.275768][T12962] netlink: 'syz.4.2052': attribute type 10 has an invalid length. [ 706.338661][T12962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2052'. [ 706.356086][T12962] dummy0: entered promiscuous mode [ 706.389291][T12962] dummy0: entered allmulticast mode [ 706.646325][T12962] bridge0: port 4(dummy0) entered blocking state [ 706.690921][T12962] bridge0: port 4(dummy0) entered disabled state [ 707.275720][T12962] bridge0: port 4(dummy0) entered blocking state [ 707.282415][T12962] bridge0: port 4(dummy0) entered forwarding state [ 709.930393][T12979] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2057'. [ 710.333641][T13001] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 710.514979][T13001] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2062'. [ 710.595610][T13006] FAULT_INJECTION: forcing a failure. [ 710.595610][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 710.630990][T13006] CPU: 0 PID: 13006 Comm: syz.4.2065 Not tainted syzkaller #0 [ 710.638904][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.649725][T13006] Call Trace: [ 710.653080][T13006] [ 710.656076][T13006] dump_stack_lvl+0x18c/0x250 [ 710.660849][T13006] ? __sctp_connect+0x5b7/0xd80 [ 710.665923][T13006] ? sctp_setsockopt+0x6d8/0x11e0 [ 710.671275][T13006] ? show_regs_print_info+0x20/0x20 [ 710.676711][T13006] ? load_image+0x400/0x400 [ 710.681474][T13006] should_fail_ex+0x39d/0x4d0 [ 710.686225][T13006] should_failslab+0x9/0x20 [ 710.690953][T13006] slab_pre_alloc_hook+0x59/0x310 [ 710.696572][T13006] ? sctp_add_bind_addr+0x8c/0x360 [ 710.702042][T13006] __kmem_cache_alloc_node+0x53/0x250 [ 710.708280][T13006] ? sctp_add_bind_addr+0x8c/0x360 [ 710.708361][T13006] kmalloc_trace+0x2a/0xe0 [ 710.708396][T13006] sctp_add_bind_addr+0x8c/0x360 [ 710.708435][T13006] sctp_copy_local_addr_list+0x315/0x4f0 [ 710.708471][T13006] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 710.708501][T13006] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 710.738857][T13001] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 710.742538][T13006] ? sctp_v4_is_any+0x35/0x60 [ 710.742585][T13006] ? sctp_copy_one_addr+0x8c/0x350 [ 710.742622][T13006] sctp_bind_addr_copy+0xb3/0x3c0 [ 710.742653][T13006] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 710.742690][T13006] sctp_connect_new_asoc+0x2f9/0x6a0 [ 710.742719][T13006] ? __sctp_connect+0xd80/0xd80 [ 710.742750][T13006] ? mark_lock+0x94/0x320 [ 710.742771][T13006] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 710.742796][T13006] __sctp_connect+0x5b7/0xd80 [ 710.742836][T13006] ? sctp_send_asconf+0x170/0x170 [ 710.742859][T13006] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.742879][T13006] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 710.742906][T13006] ? security_sctp_bind_connect+0x89/0xb0 [ 710.742934][T13006] sctp_setsockopt_connectx+0x104/0x1a0 [ 710.742965][T13006] sctp_setsockopt+0x6d8/0x11e0 [ 710.742987][T13006] ? sock_common_recvmsg+0x190/0x190 [ 710.743017][T13006] do_sock_setsockopt+0x175/0x1a0 [ 710.743047][T13006] ? __fdget+0x180/0x210 [ 710.743076][T13006] __x64_sys_setsockopt+0x182/0x200 [ 710.743116][T13006] do_syscall_64+0x55/0xa0 [ 710.743141][T13006] ? clear_bhb_loop+0x40/0x90 [ 710.743163][T13006] ? clear_bhb_loop+0x40/0x90 [ 710.743185][T13006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.743207][T13006] RIP: 0033:0x7febeb19acb9 [ 710.743230][T13006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.743247][T13006] RSP: 002b:00007febec11b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 710.743275][T13006] RAX: ffffffffffffffda RBX: 00007febeb415fa0 RCX: 00007febeb19acb9 [ 710.743290][T13006] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 710.743304][T13006] RBP: 00007febec11b090 R08: 0000000000000010 R09: 0000000000000000 [ 710.743318][T13006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.743331][T13006] R13: 00007febeb416038 R14: 00007febeb415fa0 R15: 00007ffc62989868 [ 710.743370][T13006] [ 711.266669][T13010] netlink: 'syz.3.2066': attribute type 10 has an invalid length. [ 711.584908][T13018] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 711.666989][T13018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2069'. [ 711.862054][T13018] dummy0: entered promiscuous mode [ 711.866014][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2070'. [ 711.868109][T13018] dummy0: entered allmulticast mode [ 712.065191][T13018] bond0: (slave dummy0): Releasing backup interface [ 712.281642][T13018] bridge0: port 4(dummy0) entered blocking state [ 712.298429][T13018] bridge0: port 4(dummy0) entered disabled state [ 712.449505][T13021] netlink: 822 bytes leftover after parsing attributes in process `syz.4.2070'. [ 712.474620][T13024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2070'. [ 712.499922][T13027] netlink: 'syz.4.2070': attribute type 13 has an invalid length. [ 713.526991][T13057] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2079'. [ 716.054628][T13070] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2085'. [ 716.099190][T13075] netlink: 'syz.0.2085': attribute type 29 has an invalid length. [ 716.107485][T13075] netlink: 'syz.0.2085': attribute type 29 has an invalid length. [ 716.132342][T13075] netlink: 'syz.0.2085': attribute type 29 has an invalid length. [ 716.170559][T13068] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 716.200192][T13068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2083'. [ 716.221851][T13068] dummy0: entered promiscuous mode [ 716.232707][T13068] dummy0: entered allmulticast mode [ 716.304894][T13068] bond0: (slave dummy0): Releasing backup interface [ 716.345584][T13070] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2085'. [ 716.491921][T13068] bridge0: port 3(dummy0) entered blocking state [ 716.502651][T13068] bridge0: port 3(dummy0) entered disabled state [ 716.655514][T13075] netlink: 'syz.0.2085': attribute type 29 has an invalid length. [ 716.675147][T13079] FAULT_INJECTION: forcing a failure. [ 716.675147][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 716.689332][T13079] CPU: 0 PID: 13079 Comm: syz.4.2087 Not tainted syzkaller #0 [ 716.696897][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.707173][T13079] Call Trace: [ 716.710489][T13079] [ 716.713440][T13079] dump_stack_lvl+0x18c/0x250 [ 716.718146][T13079] ? show_regs_print_info+0x20/0x20 [ 716.723546][T13079] ? load_image+0x400/0x400 [ 716.728178][T13079] ? __might_sleep+0xe0/0xe0 [ 716.732791][T13079] ? __lock_acquire+0x7d40/0x7d40 [ 716.737849][T13079] should_fail_ex+0x39d/0x4d0 [ 716.742682][T13079] should_failslab+0x9/0x20 [ 716.747228][T13079] slab_pre_alloc_hook+0x59/0x310 [ 716.752372][T13079] ? trace_event_raw_event_lock+0x250/0x250 [ 716.758464][T13079] ? netdevice_event+0x3cc/0x8e0 [ 716.764124][T13079] __kmem_cache_alloc_node+0x53/0x250 [ 716.769609][T13079] ? netdevice_event+0x3cc/0x8e0 [ 716.774680][T13079] kmalloc_trace+0x2a/0xe0 [ 716.779149][T13079] netdevice_event+0x3cc/0x8e0 [ 716.783991][T13079] ? __up_read+0x2b6/0x6b0 [ 716.788435][T13079] ? inet6addr_event+0xd0/0xd0 [ 716.793243][T13079] ? netdevice_event+0x8e0/0x8e0 [ 716.798306][T13079] ? add_default_gids+0xe0/0xe0 [ 716.803262][T13079] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 716.809528][T13079] ? enum_all_gids_of_dev_cb+0x260/0x260 [ 716.815353][T13079] ? netdev_upper_walk+0x210/0x210 [ 716.820586][T13079] ? add_default_gids+0xe0/0xe0 [ 716.825708][T13079] notifier_call_chain+0x197/0x380 [ 716.830973][T13079] dev_set_mac_address+0x39a/0x4d0 [ 716.836200][T13079] ? dev_pre_changeaddr_notify+0x120/0x120 [ 716.842231][T13079] ? down_write+0x16e/0x200 [ 716.846769][T13079] dev_set_mac_address_user+0x31/0x50 [ 716.852166][T13079] dev_ioctl+0x7b4/0x1140 [ 716.856528][T13079] sock_do_ioctl+0x239/0x310 [ 716.861234][T13079] ? sock_show_fdinfo+0xb0/0xb0 [ 716.866384][T13079] sock_ioctl+0x5ba/0x7e0 [ 716.870737][T13079] ? sock_poll+0x3e0/0x3e0 [ 716.875193][T13079] ? bpf_lsm_file_ioctl+0x9/0x10 [ 716.880146][T13079] ? security_file_ioctl+0x80/0xa0 [ 716.885366][T13079] ? sock_poll+0x3e0/0x3e0 [ 716.889799][T13079] __se_sys_ioctl+0xfd/0x170 [ 716.894419][T13079] do_syscall_64+0x55/0xa0 [ 716.898946][T13079] ? clear_bhb_loop+0x40/0x90 [ 716.903643][T13079] ? clear_bhb_loop+0x40/0x90 [ 716.908363][T13079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.914283][T13079] RIP: 0033:0x7febeb19acb9 [ 716.918726][T13079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.938434][T13079] RSP: 002b:00007febec0fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.946866][T13079] RAX: ffffffffffffffda RBX: 00007febeb416090 RCX: 00007febeb19acb9 [ 716.954859][T13079] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000009 [ 716.962848][T13079] RBP: 00007febec0fa090 R08: 0000000000000000 R09: 0000000000000000 [ 716.970929][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.978918][T13079] R13: 00007febeb416128 R14: 00007febeb416090 R15: 00007ffc62989868 [ 716.987011][T13079] [ 717.076808][T13081] syz.4.2088[13081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 717.076959][T13081] syz.4.2088[13081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 717.559262][T13092] IPv6: Can't replace route, no match found [ 718.549498][T13101] netlink: 'syz.3.2094': attribute type 3 has an invalid length. [ 718.559340][T13101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2094'. [ 718.788364][T13109] FAULT_INJECTION: forcing a failure. [ 718.788364][T13109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.811958][T13109] CPU: 0 PID: 13109 Comm: syz.0.2096 Not tainted syzkaller #0 [ 718.819507][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.829724][T13109] Call Trace: [ 718.833136][T13109] [ 718.836097][T13109] dump_stack_lvl+0x18c/0x250 [ 718.840824][T13109] ? show_regs_print_info+0x20/0x20 [ 718.846323][T13109] ? load_image+0x400/0x400 [ 718.850877][T13109] ? __might_fault+0xaa/0x120 [ 718.855691][T13109] ? __lock_acquire+0x7d40/0x7d40 [ 718.860763][T13109] should_fail_ex+0x39d/0x4d0 [ 718.865490][T13109] _copy_from_iter+0x1d9/0x12e0 [ 718.870389][T13109] ? __virt_addr_valid+0x18c/0x540 [ 718.875548][T13109] ? __lock_acquire+0x7d40/0x7d40 [ 718.880715][T13109] ? __asan_memcpy+0x40/0x70 [ 718.885383][T13109] ? copyout_mc+0x70/0x70 [ 718.889767][T13109] ? __virt_addr_valid+0x18c/0x540 [ 718.894914][T13109] ? __virt_addr_valid+0x18c/0x540 [ 718.900053][T13109] ? __virt_addr_valid+0x469/0x540 [ 718.905202][T13109] ? __phys_addr_symbol+0x2f/0x70 [ 718.910257][T13109] ? __check_object_size+0x506/0xa20 [ 718.915611][T13109] sctp_user_addto_chunk+0x8f/0x220 [ 718.920960][T13109] sctp_datamsg_from_user+0x741/0xee0 [ 718.926380][T13109] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 718.931759][T13109] ? __asan_memcpy+0x40/0x70 [ 718.936360][T13109] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 718.941776][T13109] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 718.947700][T13109] ? __sctp_connect+0xd80/0xd80 [ 718.952578][T13109] ? __local_bh_enable_ip+0x13a/0x1c0 [ 718.958183][T13109] ? _local_bh_enable+0xa0/0xa0 [ 718.963075][T13109] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 718.969014][T13109] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 718.974954][T13109] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 718.980759][T13109] ? security_sctp_bind_connect+0x89/0xb0 [ 718.986639][T13109] sctp_sendmsg+0x1b83/0x28c0 [ 718.991375][T13109] ? sctp_getsockopt+0xb60/0xb60 [ 718.996707][T13109] ? aa_sk_perm+0x83c/0x970 [ 719.001360][T13109] ? aa_af_perm+0x330/0x330 [ 719.005896][T13109] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 719.012368][T13109] ? sock_rps_record_flow+0x19/0x3f0 [ 719.017770][T13109] ? inet_sendmsg+0x7c/0x2f0 [ 719.022549][T13109] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 719.027866][T13109] ? security_socket_sendmsg+0x80/0xa0 [ 719.033438][T13109] ? inet_send_prepare+0x260/0x260 [ 719.038572][T13109] ____sys_sendmsg+0x5ba/0x960 [ 719.043359][T13109] ? __lock_acquire+0x7d40/0x7d40 [ 719.048407][T13109] ? __asan_memset+0x22/0x40 [ 719.053015][T13109] ? __sys_sendmsg_sock+0x30/0x30 [ 719.058057][T13109] ? __import_iovec+0x5f2/0x850 [ 719.063114][T13109] ? import_iovec+0x73/0xa0 [ 719.067696][T13109] ___sys_sendmsg+0x2a6/0x360 [ 719.072660][T13109] ? __sys_sendmsg+0x2a0/0x2a0 [ 719.077494][T13109] ? __lock_acquire+0x7d40/0x7d40 [ 719.082560][T13109] __se_sys_sendmsg+0x1c2/0x2b0 [ 719.087432][T13109] ? __x64_sys_sendmsg+0x80/0x80 [ 719.092430][T13109] ? lockdep_hardirqs_on+0x98/0x150 [ 719.097754][T13109] do_syscall_64+0x55/0xa0 [ 719.102291][T13109] ? clear_bhb_loop+0x40/0x90 [ 719.106991][T13109] ? clear_bhb_loop+0x40/0x90 [ 719.111940][T13109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.117849][T13109] RIP: 0033:0x7fa9cff9acb9 [ 719.122289][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.142262][T13109] RSP: 002b:00007fa9d0d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.150801][T13109] RAX: ffffffffffffffda RBX: 00007fa9d0215fa0 RCX: 00007fa9cff9acb9 [ 719.158970][T13109] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 719.166974][T13109] RBP: 00007fa9d0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 719.174959][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.182956][T13109] R13: 00007fa9d0216038 R14: 00007fa9d0215fa0 R15: 00007ffda21e21f8 [ 719.190957][T13109] [ 719.197826][T13110] netlink: 'syz.3.2098': attribute type 10 has an invalid length. [ 719.246449][T13110] netlink: 'syz.3.2098': attribute type 3 has an invalid length. [ 719.266251][T13110] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2098'. [ 720.460079][T13136] netlink: 'syz.0.2104': attribute type 9 has an invalid length. [ 720.469356][T13136] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2104'. [ 722.477846][T13144] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2107'. [ 723.318555][T13149] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2108'. [ 723.329428][T13149] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.2108'. [ 723.338739][T13149] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2108'. [ 723.379107][T13149] tc_dump_action: action bad kind [ 723.392572][T13150] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 723.468617][T13150] : (slave syz_tun): Enslaving as an active interface with an up link [ 724.175403][T13153] netlink: 'syz.4.2109': attribute type 10 has an invalid length. [ 724.185448][T13153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.210041][T13153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.246811][T13164] FAULT_INJECTION: forcing a failure. [ 724.246811][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 724.270926][T13164] CPU: 1 PID: 13164 Comm: syz.1.2113 Not tainted syzkaller #0 [ 724.278735][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.288860][T13164] Call Trace: [ 724.292287][T13164] [ 724.295297][T13164] dump_stack_lvl+0x18c/0x250 [ 724.300043][T13164] ? sctp_sendmsg+0x1575/0x28c0 [ 724.305044][T13164] ? ___sys_sendmsg+0x2a6/0x360 [ 724.310065][T13164] ? show_regs_print_info+0x20/0x20 [ 724.315414][T13164] ? load_image+0x400/0x400 [ 724.320104][T13164] should_fail_ex+0x39d/0x4d0 [ 724.324869][T13164] should_failslab+0x9/0x20 [ 724.329438][T13164] slab_pre_alloc_hook+0x59/0x310 [ 724.334535][T13164] ? sctp_add_bind_addr+0x8c/0x360 [ 724.339727][T13164] __kmem_cache_alloc_node+0x53/0x250 [ 724.345182][T13164] ? sctp_add_bind_addr+0x8c/0x360 [ 724.353624][T13164] kmalloc_trace+0x2a/0xe0 [ 724.358120][T13164] sctp_add_bind_addr+0x8c/0x360 [ 724.363139][T13164] sctp_copy_local_addr_list+0x315/0x4f0 [ 724.369285][T13164] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 724.375266][T13164] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 724.381424][T13164] ? sctp_v4_is_any+0x35/0x60 [ 724.386330][T13164] ? sctp_copy_one_addr+0x8c/0x350 [ 724.391516][T13164] sctp_bind_addr_copy+0xb3/0x3c0 [ 724.396623][T13164] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 724.403009][T13164] sctp_connect_new_asoc+0x2f9/0x6a0 [ 724.408358][T13164] ? __sctp_connect+0xd80/0xd80 [ 724.413354][T13164] ? __local_bh_enable_ip+0x13a/0x1c0 [ 724.418901][T13164] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 724.424574][T13164] ? security_sctp_bind_connect+0x89/0xb0 [ 724.430431][T13164] sctp_sendmsg+0x1575/0x28c0 [ 724.435139][T13164] ? sctp_getsockopt+0xb60/0xb60 [ 724.440088][T13164] ? aa_sk_perm+0x83c/0x970 [ 724.444670][T13164] ? aa_af_perm+0x330/0x330 [ 724.449266][T13164] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 724.455697][T13164] ? sock_rps_record_flow+0x19/0x3f0 [ 724.460998][T13164] ? inet_sendmsg+0xe9/0x2f0 [ 724.465636][T13164] ? inet_send_prepare+0x260/0x260 [ 724.470831][T13164] ____sys_sendmsg+0x5ba/0x960 [ 724.475666][T13164] ? __lock_acquire+0x7d40/0x7d40 [ 724.480743][T13164] ? __asan_memset+0x22/0x40 [ 724.485345][T13164] ? __sys_sendmsg_sock+0x30/0x30 [ 724.490381][T13164] ? __import_iovec+0x5f2/0x850 [ 724.495256][T13164] ? import_iovec+0x73/0xa0 [ 724.499834][T13164] ___sys_sendmsg+0x2a6/0x360 [ 724.504722][T13164] ? __sys_sendmsg+0x2a0/0x2a0 [ 724.509611][T13164] ? trace_call_bpf+0xc3/0x6c0 [ 724.514417][T13164] __se_sys_sendmsg+0x1c2/0x2b0 [ 724.519342][T13164] ? __x64_sys_sendmsg+0x80/0x80 [ 724.524412][T13164] ? lockdep_hardirqs_on+0x98/0x150 [ 724.529786][T13164] do_syscall_64+0x55/0xa0 [ 724.534284][T13164] ? clear_bhb_loop+0x40/0x90 [ 724.539032][T13164] ? clear_bhb_loop+0x40/0x90 [ 724.543819][T13164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.549777][T13164] RIP: 0033:0x7f9edf99acb9 [ 724.554244][T13164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.574020][T13164] RSP: 002b:00007f9ee0789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.582704][T13164] RAX: ffffffffffffffda RBX: 00007f9edfc15fa0 RCX: 00007f9edf99acb9 [ 724.590945][T13164] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000010 [ 724.599408][T13164] RBP: 00007f9ee0789090 R08: 0000000000000000 R09: 0000000000000000 [ 724.608646][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.617033][T13164] R13: 00007f9edfc16038 R14: 00007f9edfc15fa0 R15: 00007ffd7cdc69f8 [ 724.625322][T13164] [ 726.948848][T13211] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2124'. [ 727.047393][T13211] IPv6: Can't replace route, no match found [ 727.215550][T13213] netlink: 'syz.3.2125': attribute type 33 has an invalid length. [ 727.250515][T13213] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2125'. [ 727.305753][T13213] `: renamed from team0 (while UP) [ 728.487240][T13220] netlink: 'syz.1.2127': attribute type 39 has an invalid length. [ 728.779038][T13222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2127'. [ 729.292115][T13254] netlink: 'syz.3.2135': attribute type 2 has an invalid length. [ 729.303367][T13254] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2135'. [ 729.325022][T13248] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2134'. [ 729.655158][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 729.759866][T13261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 730.492761][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2146'. [ 730.506988][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2146'. [ 730.518033][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2146'. [ 734.476383][T13336] netlink: 'syz.0.2158': attribute type 33 has an invalid length. [ 734.539114][T13336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2158'. [ 734.662039][T13336] `: renamed from team0 (while UP) [ 735.241399][T10584] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 741.400179][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 742.400955][T13409] syzkaller0: entered promiscuous mode [ 742.428519][T13409] syzkaller0: entered allmulticast mode [ 742.435568][T13413] syzkaller0: left promiscuous mode [ 742.446392][T13413] syzkaller0: left allmulticast mode [ 742.570526][T13427] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2176'. [ 744.824553][T13425] IPv6: Can't replace route, no match found [ 746.458330][T13479] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2190'. [ 747.564970][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.574352][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.617878][T13479] IPv6: Can't replace route, no match found [ 749.100274][T13499] netlink: 'syz.1.2195': attribute type 10 has an invalid length. [ 749.108344][T13499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2195'. [ 749.134385][T13499] veth0_vlan: entered allmulticast mode [ 749.149629][T13499] bridge0: port 5(veth0_vlan) entered blocking state [ 749.156619][T13499] bridge0: port 5(veth0_vlan) entered disabled state [ 749.167236][T13499] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 749.517638][T13512] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2200'. [ 749.582113][T13512] IPv6: Can't replace route, no match found [ 750.180005][T13526] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2203'. [ 750.690095][T13520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.659524][T13521] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 752.675125][T13521] bond0: (slave wlan1): Releasing backup interface [ 752.688534][T13521] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 752.698408][T13521] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 752.707230][T13521] team0: Port device wlan1 added [ 752.899211][T10584] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 753.132341][T13553] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2210'. [ 753.163805][T13553] IPv6: Can't replace route, no match found [ 753.374629][T13562] cgroup: fork rejected by pids controller in /syz1 [ 754.463790][T13681] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2219'. [ 754.849228][T13684] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2221'. [ 754.875305][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.885246][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.914291][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 754.954453][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 754.977152][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 754.985272][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.089516][T10584] Bluetooth: hci0: command tx timeout [ 757.139028][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.342627][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.544687][T13701] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2222'. [ 757.749656][T13701] IPv6: Can't replace route, no match found [ 757.857704][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.077291][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.141543][T13685] chnl_net:caif_netlink_parms(): no params data found [ 758.228531][T13714] netlink: 'syz.3.2228': attribute type 9 has an invalid length. [ 758.245325][T13714] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2228'. [ 758.399953][T13717] netlink: 'syz.3.2228': attribute type 9 has an invalid length. [ 758.407792][T13717] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2228'. [ 758.459598][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.466816][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.489154][T13685] bridge_slave_0: entered allmulticast mode [ 758.496152][T13685] bridge_slave_0: entered promiscuous mode [ 758.580971][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.588275][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.619972][T13685] bridge_slave_1: entered allmulticast mode [ 758.627365][T13685] bridge_slave_1: entered promiscuous mode [ 758.855388][T13730] FAULT_INJECTION: forcing a failure. [ 758.855388][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.874291][T13730] CPU: 1 PID: 13730 Comm: syz.3.2230 Not tainted syzkaller #0 [ 758.877436][T13685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.881894][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 758.881910][T13730] Call Trace: [ 758.881920][T13730] [ 758.881929][T13730] dump_stack_lvl+0x18c/0x250 [ 758.881967][T13730] ? show_regs_print_info+0x20/0x20 [ 758.881994][T13730] ? load_image+0x400/0x400 [ 758.882021][T13730] ? __might_fault+0xaa/0x120 [ 758.882043][T13730] ? __lock_acquire+0x7d40/0x7d40 [ 758.932006][T13730] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 758.938051][T13730] should_fail_ex+0x39d/0x4d0 [ 758.942885][T13730] _copy_from_iter+0x1d9/0x12e0 [ 758.947882][T13730] ? __virt_addr_valid+0x18c/0x540 [ 758.953159][T13730] ? __lock_acquire+0x7d40/0x7d40 [ 758.958326][T13730] ? __alloc_skb+0x138/0x2c0 [ 758.962979][T13730] ? rcu_is_watching+0x15/0xb0 [ 758.967800][T13730] ? __alloc_skb+0x138/0x2c0 [ 758.972533][T13730] ? copyout_mc+0x70/0x70 [ 758.977001][T13730] ? __virt_addr_valid+0x18c/0x540 [ 758.982304][T13730] ? __virt_addr_valid+0x18c/0x540 [ 758.987608][T13730] ? __virt_addr_valid+0x469/0x540 [ 758.992777][T13730] ? __check_object_size+0x506/0xa20 [ 758.998129][T13730] pfkey_sendmsg+0x203/0x10e0 [ 759.002860][T13730] ? __might_sleep+0xe0/0xe0 [ 759.007514][T13730] ? mark_lock+0x94/0x320 [ 759.012075][T13730] ? __lock_acquire+0x1273/0x7d40 [ 759.017351][T13730] ? pfkey_release+0x320/0x320 [ 759.022297][T13730] ? aa_sk_perm+0x83c/0x970 [ 759.026869][T13730] ? aa_af_perm+0x330/0x330 [ 759.031683][T13730] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 759.038149][T13730] ? aa_sock_msg_perm+0x94/0x150 [ 759.043135][T13730] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 759.048497][T13730] ? security_socket_sendmsg+0x80/0xa0 [ 759.054012][T13730] ? pfkey_release+0x320/0x320 [ 759.058920][T13730] ____sys_sendmsg+0x5ba/0x960 [ 759.063754][T13730] ? __asan_memset+0x22/0x40 [ 759.068397][T13730] ? __sys_sendmsg_sock+0x30/0x30 [ 759.073575][T13730] ? __import_iovec+0x5f2/0x850 [ 759.077714][T13685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.078563][T13730] ? import_iovec+0x73/0xa0 [ 759.092395][T13730] ___sys_sendmsg+0x2a6/0x360 [ 759.097142][T13730] ? __sys_sendmsg+0x2a0/0x2a0 [ 759.102088][T13730] ? __lock_acquire+0x7d40/0x7d40 [ 759.107285][T13730] __se_sys_sendmsg+0x1c2/0x2b0 [ 759.112205][T13730] ? __x64_sys_sendmsg+0x80/0x80 [ 759.117219][T13730] ? lockdep_hardirqs_on+0x98/0x150 [ 759.122497][T13730] do_syscall_64+0x55/0xa0 [ 759.126976][T13730] ? clear_bhb_loop+0x40/0x90 [ 759.131802][T13730] ? clear_bhb_loop+0x40/0x90 [ 759.136549][T13730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.142506][T13730] RIP: 0033:0x7f6e95d9acb9 [ 759.146994][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.167085][T13730] RSP: 002b:00007f6e96d08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.174812][T13685] team0: Port device team_slave_0 added [ 759.175558][T13730] RAX: ffffffffffffffda RBX: 00007f6e96015fa0 RCX: 00007f6e95d9acb9 [ 759.175578][T13730] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 759.175591][T13730] RBP: 00007f6e96d08090 R08: 0000000000000000 R09: 0000000000000000 [ 759.187510][T13685] team0: Port device team_slave_1 added [ 759.189329][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.189348][T13730] R13: 00007f6e96016038 R14: 00007f6e96015fa0 R15: 00007ffc586ac438 [ 759.189381][T13730] [ 759.239775][T10584] Bluetooth: hci0: command tx timeout [ 760.311899][T13685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.348768][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.413654][T13685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.323993][T10584] Bluetooth: hci0: command tx timeout [ 763.024941][T13685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.034889][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.061596][T13685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.403947][T10584] Bluetooth: hci0: command tx timeout [ 763.452337][T13788] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2237'. [ 763.472550][T13685] hsr_slave_0: entered promiscuous mode [ 763.498621][T13685] hsr_slave_1: entered promiscuous mode [ 763.543032][T13788] IPv6: Can't replace route, no match found [ 763.762369][T13793] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2239'. [ 764.209740][T13804] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2242'. [ 764.323186][T13804] netlink: 'syz.3.2242': attribute type 29 has an invalid length. [ 764.951858][T13802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.013506][T13802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.090276][T13802] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 765.121721][T13802] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 765.154484][T13802] bond0 (unregistering): (slave O3ãc¤±): Releasing backup interface [ 765.171023][T13802] bond0 (unregistering): Released all slaves [ 765.338972][T13804] netlink: 'syz.3.2242': attribute type 29 has an invalid length. [ 766.359729][ T11] batman_adv: batadv0: Interface deactivated: wlan0 [ 766.382892][ T11] batman_adv: batadv0: Removing interface: wlan0 [ 766.586189][T13847] FAULT_INJECTION: forcing a failure. [ 766.586189][T13847] name failslab, interval 1, probability 0, space 0, times 0 [ 766.599220][T13847] CPU: 0 PID: 13847 Comm: syz.3.2248 Not tainted syzkaller #0 [ 766.606846][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.617041][T13847] Call Trace: [ 766.620568][T13847] [ 766.623739][T13847] dump_stack_lvl+0x18c/0x250 [ 766.628672][T13847] ? show_regs_print_info+0x20/0x20 [ 766.634026][T13847] ? load_image+0x400/0x400 [ 766.638599][T13847] ? __might_sleep+0xe0/0xe0 [ 766.643225][T13847] ? __lock_acquire+0x7d40/0x7d40 [ 766.648319][T13847] should_fail_ex+0x39d/0x4d0 [ 766.653027][T13847] should_failslab+0x9/0x20 [ 766.657555][T13847] slab_pre_alloc_hook+0x59/0x310 [ 766.662602][T13847] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 766.668480][T13847] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 766.674214][T13847] __kmem_cache_alloc_node+0x53/0x250 [ 766.679623][T13847] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 766.685353][T13847] __kmalloc+0xa4/0x230 [ 766.689531][T13847] tomoyo_realpath_from_path+0xe3/0x5d0 [ 766.695099][T13847] tomoyo_path_number_perm+0x248/0x620 [ 766.700581][T13847] ? tomoyo_path_number_perm+0x217/0x620 [ 766.706250][T13847] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 766.711733][T13847] ? ksys_write+0x1c4/0x260 [ 766.716381][T13847] ? __fget_files+0x28/0x4b0 [ 766.720985][T13847] ? __fget_files+0x28/0x4b0 [ 766.725624][T13847] security_file_ioctl+0x70/0xa0 [ 766.730614][T13847] __se_sys_ioctl+0x48/0x170 [ 766.735223][T13847] do_syscall_64+0x55/0xa0 [ 766.739667][T13847] ? clear_bhb_loop+0x40/0x90 [ 766.744357][T13847] ? clear_bhb_loop+0x40/0x90 [ 766.749080][T13847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.754986][T13847] RIP: 0033:0x7f6e95d9acb9 [ 766.759547][T13847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.779285][T13847] RSP: 002b:00007f6e96ce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.787722][T13847] RAX: ffffffffffffffda RBX: 00007f6e96016090 RCX: 00007f6e95d9acb9 [ 766.795731][T13847] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 766.803712][T13847] RBP: 00007f6e96ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 766.811704][T13847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.819697][T13847] R13: 00007f6e96016128 R14: 00007f6e96016090 R15: 00007ffc586ac438 [ 766.827740][T13847] [ 766.840099][T13847] ERROR: Out of memory at tomoyo_realpath_from_path. [ 768.944287][ T11] hsr_slave_0: left promiscuous mode [ 768.965689][ T11] hsr_slave_1: left promiscuous mode [ 768.976389][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.985150][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.996147][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.003966][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.020475][ T11] bridge0: port 4(dummy0) entered disabled state [ 769.031069][ T11] bridge0: port 3(team0) entered disabled state [ 769.040767][ T11] bridge_slave_1: left allmulticast mode [ 769.046559][ T11] bridge_slave_1: left promiscuous mode [ 769.055103][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.064504][ T11] bridge_slave_0: left allmulticast mode [ 769.070674][ T11] bridge_slave_0: left promiscuous mode [ 769.076394][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.099364][ T11] veth1_vlan: left promiscuous mode [ 769.189742][T13851] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2249'. [ 769.821211][ T11] team_slave_1 (unregistering): left promiscuous mode [ 769.828305][ T11] team_slave_1 (unregistering): left allmulticast mode [ 769.840502][ T11] team0 (unregistering): Port device team_slave_1 removed [ 769.892962][ T11] team_slave_0 (unregistering): left promiscuous mode [ 769.902679][ T11] team_slave_0 (unregistering): left allmulticast mode [ 769.912723][ T11] team0 (unregistering): Port device team_slave_0 removed [ 769.966948][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.021687][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.413821][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 770.422637][ T11] bond0 (unregistering): Released all slaves [ 770.563998][T13851] IPv6: Can't replace route, no match found [ 770.744645][T13685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 770.766876][T13685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 770.812065][T13685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 770.837997][T13685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 771.294209][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.394458][T13685] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.465508][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.472838][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.543972][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.551249][T10675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.884386][T13888] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.2254'. [ 771.937347][T13888] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 772.109925][T13897] FAULT_INJECTION: forcing a failure. [ 772.109925][T13897] name failslab, interval 1, probability 0, space 0, times 0 [ 772.129339][T13897] CPU: 1 PID: 13897 Comm: syz.0.2256 Not tainted syzkaller #0 [ 772.137076][T13897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.147255][T13897] Call Trace: [ 772.150615][T13897] [ 772.153588][T13897] dump_stack_lvl+0x18c/0x250 [ 772.158327][T13897] ? show_regs_print_info+0x20/0x20 [ 772.163608][T13897] ? load_image+0x400/0x400 [ 772.168176][T13897] ? __might_sleep+0xe0/0xe0 [ 772.172811][T13897] ? __lock_acquire+0x7d40/0x7d40 [ 772.178315][T13897] ? is_dynamic_key+0x260/0x260 [ 772.183364][T13897] should_fail_ex+0x39d/0x4d0 [ 772.188066][T13897] should_failslab+0x9/0x20 [ 772.192687][T13897] slab_pre_alloc_hook+0x59/0x310 [ 772.197834][T13897] kmem_cache_alloc_node+0x60/0x320 [ 772.203056][T13897] ? __alloc_skb+0x103/0x2c0 [ 772.207701][T13897] __alloc_skb+0x103/0x2c0 [ 772.212142][T13897] __ip6_append_data+0x2abc/0x3c50 [ 772.217293][T13897] ? ip6_mtu+0x7d/0x3f0 [ 772.221470][T13897] ? rawv6_send_hdrinc+0x1640/0x1640 [ 772.227036][T13897] ? ip6_mtu+0x7d/0x3f0 [ 772.231247][T13897] ? ip6_setup_cork+0xfe0/0xfe0 [ 772.236215][T13897] ip6_append_data+0x1b0/0x350 [ 772.241098][T13897] ? rawv6_send_hdrinc+0x1640/0x1640 [ 772.246463][T13897] rawv6_sendmsg+0x1264/0x1770 [ 772.251262][T13897] ? verify_lock_unused+0x140/0x140 [ 772.256504][T13897] ? compat_rawv6_ioctl+0x70/0x70 [ 772.261553][T13897] ? aa_sk_perm+0x83c/0x970 [ 772.266168][T13897] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 772.272606][T13897] ? inet_sendmsg+0x7c/0x2f0 [ 772.277207][T13897] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 772.282513][T13897] ? security_socket_sendmsg+0x80/0xa0 [ 772.287985][T13897] ? inet_send_prepare+0x260/0x260 [ 772.293216][T13897] ____sys_sendmsg+0x5ba/0x960 [ 772.298258][T13897] ? __lock_acquire+0x7d40/0x7d40 [ 772.303301][T13897] ? __asan_memset+0x22/0x40 [ 772.307909][T13897] ? __sys_sendmsg_sock+0x30/0x30 [ 772.312949][T13897] ? __import_iovec+0x5f2/0x850 [ 772.317825][T13897] ? import_iovec+0x73/0xa0 [ 772.322366][T13897] ___sys_sendmsg+0x2a6/0x360 [ 772.327067][T13897] ? __sys_sendmsg+0x2a0/0x2a0 [ 772.331965][T13897] ? __lock_acquire+0x7d40/0x7d40 [ 772.337055][T13897] __se_sys_sendmsg+0x1c2/0x2b0 [ 772.341959][T13897] ? __x64_sys_sendmsg+0x80/0x80 [ 772.347416][T13897] ? lockdep_hardirqs_on+0x98/0x150 [ 772.352639][T13897] do_syscall_64+0x55/0xa0 [ 772.357167][T13897] ? clear_bhb_loop+0x40/0x90 [ 772.361868][T13897] ? clear_bhb_loop+0x40/0x90 [ 772.366566][T13897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.372473][T13897] RIP: 0033:0x7fa9cff9acb9 [ 772.376992][T13897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.396795][T13897] RSP: 002b:00007fa9d0d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.405400][T13897] RAX: ffffffffffffffda RBX: 00007fa9d0215fa0 RCX: 00007fa9cff9acb9 [ 772.413514][T13897] RDX: 000000000400c000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 772.421518][T13897] RBP: 00007fa9d0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 772.429587][T13897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.437574][T13897] R13: 00007fa9d0216038 R14: 00007fa9d0215fa0 R15: 00007ffda21e21f8 [ 772.445749][T13897] [ 772.936185][T13685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.956396][T13909] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2258'. [ 773.042088][T13915] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 773.050311][T13915] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2259'. [ 773.633695][T13909] IPv6: Can't replace route, no match found [ 774.133588][T13932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2262'. [ 774.966791][T13934] FAULT_INJECTION: forcing a failure. [ 774.966791][T13934] name fail_futex, interval 1, probability 0, space 0, times 1 [ 774.980164][T13934] CPU: 1 PID: 13934 Comm: syz.0.2262 Not tainted syzkaller #0 [ 774.987683][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.997770][T13934] Call Trace: [ 775.001078][T13934] [ 775.004030][T13934] dump_stack_lvl+0x18c/0x250 [ 775.008717][T13934] ? show_regs_print_info+0x20/0x20 [ 775.013923][T13934] ? load_image+0x400/0x400 [ 775.018427][T13934] ? __lock_acquire+0x1347/0x7d40 [ 775.023478][T13934] ? verify_lock_unused+0x140/0x140 [ 775.028789][T13934] should_fail_ex+0x39d/0x4d0 [ 775.033540][T13934] get_futex_key+0x16f/0x1010 [ 775.038249][T13934] ? futex_setup_timer+0xc0/0xc0 [ 775.043210][T13934] ? perf_trace_lock+0xfc/0x3b0 [ 775.048090][T13934] futex_wake+0x127/0x4f0 [ 775.052438][T13934] ? futex_wake_mark+0x150/0x150 [ 775.057414][T13934] do_futex+0x35d/0x3e0 [ 775.061581][T13934] ? __might_fault+0xaa/0x120 [ 775.066275][T13934] ? __ia32_sys_get_robust_list+0x110/0x110 [ 775.072205][T13934] ? __might_fault+0xc6/0x120 [ 775.077157][T13934] mm_release+0x184/0x3a0 [ 775.081503][T13934] ? exit_mm_release+0x30/0x30 [ 775.086276][T13934] ? lockdep_hardirqs_on+0x98/0x150 [ 775.091527][T13934] exit_mm+0xa7/0x2c0 [ 775.095533][T13934] ? do_exit+0x2460/0x2460 [ 775.099964][T13934] ? taskstats_exit+0x35e/0x9e0 [ 775.104866][T13934] do_exit+0x8dd/0x2460 [ 775.109060][T13934] ? get_signal+0x1068/0x13f0 [ 775.113831][T13934] ? put_task_struct+0xc0/0xc0 [ 775.118703][T13934] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 775.124701][T13934] ? lock_chain_count+0x20/0x20 [ 775.129575][T13934] ? _raw_spin_lock_irq+0xbb/0xf0 [ 775.134619][T13934] do_group_exit+0x21b/0x2d0 [ 775.139231][T13934] ? lockdep_hardirqs_on+0x98/0x150 [ 775.144441][T13934] get_signal+0x12fc/0x13f0 [ 775.148982][T13934] arch_do_signal_or_restart+0xc2/0x800 [ 775.154549][T13934] ? get_sigframe_size+0x20/0x20 [ 775.159501][T13934] ? perf_trace_preemptirq_template+0xac/0x330 [ 775.165784][T13934] ? exit_to_user_mode_loop+0x3b/0x110 [ 775.171265][T13934] exit_to_user_mode_loop+0x70/0x110 [ 775.176574][T13934] exit_to_user_mode_prepare+0xee/0x180 [ 775.182146][T13934] syscall_exit_to_user_mode+0x1a/0x50 [ 775.187620][T13934] do_syscall_64+0x61/0xa0 [ 775.192054][T13934] ? clear_bhb_loop+0x40/0x90 [ 775.196743][T13934] ? clear_bhb_loop+0x40/0x90 [ 775.201445][T13934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.207356][T13934] RIP: 0033:0x7fa9cff9acb9 [ 775.211791][T13934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.231506][T13934] RSP: 002b:00007fa9ce1d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 775.240030][T13934] RAX: fffffffffffffe00 RBX: 00007fa9d0216180 RCX: 00007fa9cff9acb9 [ 775.248011][T13934] RDX: 0000000000010182 RSI: 00002000000005c0 RDI: 0000000000000004 [ 775.255993][T13934] RBP: 00007fa9ce1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 775.263972][T13934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.272039][T13934] R13: 00007fa9d0216218 R14: 00007fa9d0216180 R15: 00007ffda21e21f8 [ 775.280187][T13934] [ 777.026722][T13932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2262'. [ 777.249996][T13942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'. [ 777.264896][T13685] veth0_vlan: entered promiscuous mode [ 777.306378][T13942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'. [ 777.325500][T13944] netlink: 'syz.0.2263': attribute type 10 has an invalid length. [ 777.356040][T13944] wlan1: mtu less than device minimum [ 777.389412][T13944] : (slave wlan1): Error -22 calling dev_set_mtu [ 777.405407][T13948] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'. [ 777.428560][T13942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2265'. [ 777.473572][T13685] veth1_vlan: entered promiscuous mode [ 777.622220][T13685] veth0_macvtap: entered promiscuous mode [ 777.689793][T13685] veth1_macvtap: entered promiscuous mode [ 777.782923][T13685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.845323][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.865303][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.878386][T13685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.925396][T13685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.956824][T13685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.978976][T13685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.999849][T13685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.616007][T13981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 778.731588][T10683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.779101][T10683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.801477][T13981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 779.072855][T13991] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2270'. [ 779.114157][T13986] IPv6: Can't replace route, no match found [ 779.130412][T13983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 779.156230][T13988] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 779.210106][T10675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.218606][T10675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.054612][T14017] FAULT_INJECTION: forcing a failure. [ 780.054612][T14017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.176107][T14017] CPU: 0 PID: 14017 Comm: syz.3.2274 Not tainted syzkaller #0 [ 780.183664][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.193771][T14017] Call Trace: [ 780.197099][T14017] [ 780.200077][T14017] dump_stack_lvl+0x18c/0x250 [ 780.204809][T14017] ? show_regs_print_info+0x20/0x20 [ 780.210056][T14017] ? load_image+0x400/0x400 [ 780.214615][T14017] ? __might_fault+0xaa/0x120 [ 780.219384][T14017] ? __lock_acquire+0x7d40/0x7d40 [ 780.224462][T14017] should_fail_ex+0x39d/0x4d0 [ 780.229286][T14017] _copy_to_user+0x2f/0xa0 [ 780.233754][T14017] bpf_test_finish+0x25a/0x650 [ 780.238582][T14017] ? convert_skb_to___skb+0x420/0x420 [ 780.244084][T14017] ? _copy_from_user+0xa5/0xe0 [ 780.248909][T14017] ? bpf_test_init+0x119/0x140 [ 780.253715][T14017] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 780.259228][T14017] ? dev_put+0x80/0x80 [ 780.263349][T14017] ? dev_put+0x80/0x80 [ 780.267460][T14017] bpf_prog_test_run+0x321/0x390 [ 780.272438][T14017] __sys_bpf+0x49d/0x890 [ 780.276721][T14017] ? bpf_link_show_fdinfo+0x390/0x390 [ 780.282160][T14017] ? lock_chain_count+0x20/0x20 [ 780.287169][T14017] __x64_sys_bpf+0x7c/0x90 [ 780.291626][T14017] do_syscall_64+0x55/0xa0 [ 780.296084][T14017] ? clear_bhb_loop+0x40/0x90 [ 780.300794][T14017] ? clear_bhb_loop+0x40/0x90 [ 780.305600][T14017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 780.311527][T14017] RIP: 0033:0x7f6e95d9acb9 [ 780.316107][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.335931][T14017] RSP: 002b:00007f6e96d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 780.344568][T14017] RAX: ffffffffffffffda RBX: 00007f6e96015fa0 RCX: 00007f6e95d9acb9 [ 780.352761][T14017] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 780.360787][T14017] RBP: 00007f6e96d08090 R08: 0000000000000000 R09: 0000000000000000 [ 780.368906][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.377012][T14017] R13: 00007f6e96016038 R14: 00007f6e96015fa0 R15: 00007ffc586ac438 [ 780.385173][T14017] [ 782.692620][T14049] __nla_validate_parse: 1 callbacks suppressed [ 782.692660][T14049] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2280'. [ 784.656654][T14065] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2282'. [ 784.677849][T14065] IPv6: Can't replace route, no match found [ 784.704764][T10584] Bluetooth: hci4: ISO packet for unknown connection handle 815 [ 785.437089][T14077] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.2286'. [ 786.099828][T14093] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2290'. [ 786.535857][T14106] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2296'. [ 786.549294][T14105] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2295'. [ 786.588365][T14106] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 786.669381][T14105] IPv6: Can't replace route, no match found [ 787.109837][T14120] FAULT_INJECTION: forcing a failure. [ 787.109837][T14120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.157565][T14120] CPU: 0 PID: 14120 Comm: syz.1.2300 Not tainted syzkaller #0 [ 787.165219][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.175332][T14120] Call Trace: [ 787.178662][T14120] [ 787.181639][T14120] dump_stack_lvl+0x18c/0x250 [ 787.186383][T14120] ? show_regs_print_info+0x20/0x20 [ 787.191651][T14120] ? load_image+0x400/0x400 [ 787.196353][T14120] ? __might_fault+0xaa/0x120 [ 787.201092][T14120] ? __lock_acquire+0x7d40/0x7d40 [ 787.206609][T14120] should_fail_ex+0x39d/0x4d0 [ 787.211353][T14120] _copy_from_iter+0x1d9/0x12e0 [ 787.216259][T14120] ? __virt_addr_valid+0x18c/0x540 [ 787.221417][T14120] ? __lock_acquire+0x7d40/0x7d40 [ 787.226493][T14120] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 787.231922][T14120] ? copyout_mc+0x70/0x70 [ 787.236309][T14120] ? __virt_addr_valid+0x18c/0x540 [ 787.241486][T14120] ? __virt_addr_valid+0x18c/0x540 [ 787.246737][T14120] ? __virt_addr_valid+0x469/0x540 [ 787.252082][T14120] ? __check_object_size+0x506/0xa20 [ 787.257439][T14120] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 787.263270][T14120] ? sk_psock_verdict_data_ready+0x13f/0x520 [ 787.269299][T14120] ? __receive_sock+0x90/0x90 [ 787.274121][T14120] ? skb_put+0x11b/0x210 [ 787.278383][T14120] unix_stream_sendmsg+0x562/0xbf0 [ 787.283616][T14120] ? unix_show_fdinfo+0x270/0x270 [ 787.288656][T14120] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 787.295095][T14120] ? aa_sock_msg_perm+0x94/0x150 [ 787.300064][T14120] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 787.305363][T14120] ? security_socket_sendmsg+0x80/0xa0 [ 787.310837][T14120] ? unix_show_fdinfo+0x270/0x270 [ 787.315883][T14120] ____sys_sendmsg+0x5ba/0x960 [ 787.320764][T14120] ? __asan_memset+0x22/0x40 [ 787.325369][T14120] ? __sys_sendmsg_sock+0x30/0x30 [ 787.330419][T14120] ? __import_iovec+0x5f2/0x850 [ 787.335302][T14120] ? import_iovec+0x73/0xa0 [ 787.339835][T14120] ___sys_sendmsg+0x2a6/0x360 [ 787.344539][T14120] ? __sys_sendmsg+0x2a0/0x2a0 [ 787.349344][T14120] ? __lock_acquire+0x7d40/0x7d40 [ 787.354422][T14120] __se_sys_sendmsg+0x1c2/0x2b0 [ 787.359300][T14120] ? __x64_sys_sendmsg+0x80/0x80 [ 787.364274][T14120] ? lockdep_hardirqs_on+0x98/0x150 [ 787.369574][T14120] do_syscall_64+0x55/0xa0 [ 787.374008][T14120] ? clear_bhb_loop+0x40/0x90 [ 787.378705][T14120] ? clear_bhb_loop+0x40/0x90 [ 787.383402][T14120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.389308][T14120] RIP: 0033:0x7f391b19acb9 [ 787.393748][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.413376][T14120] RSP: 002b:00007f391c08c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.421899][T14120] RAX: ffffffffffffffda RBX: 00007f391b416090 RCX: 00007f391b19acb9 [ 787.429889][T14120] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005 [ 787.438454][T14120] RBP: 00007f391c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 787.446458][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.454560][T14120] R13: 00007f391b416128 R14: 00007f391b416090 R15: 00007ffe5cde1288 [ 787.462665][T14120] [ 788.118473][T14137] netlink: 'syz.1.2304': attribute type 10 has an invalid length. [ 788.302758][T14146] IPv6: NLM_F_REPLACE set, but no existing node found! [ 788.341573][T14148] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2308'. [ 788.357201][T14150] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2309'. [ 788.427957][T14152] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 788.436937][T14152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2308'. [ 788.446273][T14152] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 788.454253][T14152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2308'. [ 788.467892][T14151] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2309'. [ 788.469861][T14148] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 788.492974][T14150] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 788.499133][T14148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2308'. [ 788.623059][T14150] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 788.692265][T14154] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2311'. [ 788.814063][T14154] IPv6: Can't replace route, no match found [ 789.095743][T14151] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 789.108794][T14156] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 790.343761][T14179] netlink: 'syz.0.2317': attribute type 10 has an invalid length. [ 790.358976][T14179] netlink: 'syz.0.2317': attribute type 10 has an invalid length. [ 790.367003][T14179] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2317'. [ 790.401606][T14179] openvswitch: netlink: Message has 4 unknown bytes. [ 790.858259][T14194] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 790.883532][T14194] syzkaller0: entered promiscuous mode [ 790.889283][T14194] syzkaller0: entered allmulticast mode [ 790.926660][T14190] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2322'. [ 791.056106][T14201] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2323'. [ 794.263600][T14239] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 794.288021][T14239] `: left allmulticast mode [ 794.297219][T14239] team_slave_0: left allmulticast mode [ 794.303422][T14239] team_slave_1: left allmulticast mode [ 794.314506][T14239] `: left promiscuous mode [ 794.319617][T14239] team_slave_0: left promiscuous mode [ 794.325484][T14239] team_slave_1: left promiscuous mode [ 794.335910][T14239] bridge0: port 2(`) entered disabled state [ 794.484638][T14240] IPv6: Can't replace route, no match found [ 794.638365][T14250] netlink: 'syz.0.2340': attribute type 10 has an invalid length. [ 795.266158][T14259] __nla_validate_parse: 2 callbacks suppressed [ 795.266177][T14259] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2342'. [ 795.296554][T14263] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 795.661190][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.680704][T14263] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 795.694669][T14259] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2342'. [ 796.662156][T14283] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2348'. [ 796.717425][T14283] IPv6: Can't replace route, no match found [ 798.984129][T14297] netlink: 'syz.3.2353': attribute type 29 has an invalid length. [ 798.992566][T14297] netlink: 'syz.3.2353': attribute type 29 has an invalid length. [ 799.003487][T14297] netlink: 'syz.3.2353': attribute type 29 has an invalid length. [ 799.803705][T14312] bridge0: port 2(ip6gretap0) entered blocking state [ 799.811483][T14312] bridge0: port 2(ip6gretap0) entered disabled state [ 799.818679][T14312] ip6gretap0: entered allmulticast mode [ 799.827247][T14312] ip6gretap0: entered promiscuous mode [ 800.280031][T14322] FAULT_INJECTION: forcing a failure. [ 800.280031][T14322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.341006][T14322] CPU: 0 PID: 14322 Comm: syz.1.2362 Not tainted syzkaller #0 [ 800.348640][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 800.358739][T14322] Call Trace: [ 800.362061][T14322] [ 800.365034][T14322] dump_stack_lvl+0x18c/0x250 [ 800.369773][T14322] ? show_regs_print_info+0x20/0x20 [ 800.375024][T14322] ? load_image+0x400/0x400 [ 800.379577][T14322] ? __lock_acquire+0x7d40/0x7d40 [ 800.385094][T14322] ? snprintf+0xe9/0x140 [ 800.389394][T14322] should_fail_ex+0x39d/0x4d0 [ 800.394142][T14322] _copy_to_user+0x2f/0xa0 [ 800.398699][T14322] simple_read_from_buffer+0xe7/0x150 [ 800.404144][T14322] proc_fail_nth_read+0x1e8/0x260 [ 800.409225][T14322] ? proc_fault_inject_write+0x360/0x360 [ 800.414930][T14322] ? fsnotify_perm+0x271/0x5e0 [ 800.419775][T14322] ? proc_fault_inject_write+0x360/0x360 [ 800.425563][T14322] vfs_read+0x28b/0x970 [ 800.429814][T14322] ? kernel_read+0x1e0/0x1e0 [ 800.434475][T14322] ? __fget_files+0x28/0x4b0 [ 800.439117][T14322] ? __fget_files+0x28/0x4b0 [ 800.443768][T14322] ? __fget_files+0x43d/0x4b0 [ 800.448512][T14322] ? __fdget_pos+0x2a3/0x330 [ 800.453143][T14322] ? ksys_read+0x75/0x260 [ 800.457500][T14322] ksys_read+0x150/0x260 [ 800.461766][T14322] ? vfs_write+0x990/0x990 [ 800.466207][T14322] ? lockdep_hardirqs_on+0x98/0x150 [ 800.471421][T14322] do_syscall_64+0x55/0xa0 [ 800.475900][T14322] ? clear_bhb_loop+0x40/0x90 [ 800.480590][T14322] ? clear_bhb_loop+0x40/0x90 [ 800.485285][T14322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.491190][T14322] RIP: 0033:0x7f391b15b58e [ 800.495622][T14322] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.515385][T14322] RSP: 002b:00007f391c08bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.523818][T14322] RAX: ffffffffffffffda RBX: 00007f391c08c6c0 RCX: 00007f391b15b58e [ 800.531804][T14322] RDX: 000000000000000f RSI: 00007f391c08c0a0 RDI: 0000000000000005 [ 800.540008][T14322] RBP: 00007f391c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 800.548013][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.556006][T14322] R13: 00007f391b416128 R14: 00007f391b416090 R15: 00007ffe5cde1288 [ 800.564013][T14322] [ 800.787175][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.802454][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.822284][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.831089][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.846770][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 800.855933][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 800.931087][T14325] netlink: 'syz.1.2364': attribute type 2 has an invalid length. [ 801.782874][T14326] chnl_net:caif_netlink_parms(): no params data found [ 802.333808][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.341757][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.349660][T14326] bridge_slave_0: entered allmulticast mode [ 802.357685][T14326] bridge_slave_0: entered promiscuous mode [ 802.373146][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.381164][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.388471][T14326] bridge_slave_1: entered allmulticast mode [ 802.541127][T14326] bridge_slave_1: entered promiscuous mode [ 802.555231][T14361] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2370'. [ 802.919553][ T5778] Bluetooth: hci1: command tx timeout [ 803.104887][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.122875][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.237838][T10683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.326167][T14326] team0: Port device team_slave_0 added [ 803.370984][T10683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.399221][T14326] team0: Port device team_slave_1 added [ 803.473983][T10683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.487922][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.495752][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.524554][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.583848][T10683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.597701][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.605489][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.631775][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.707597][T14326] hsr_slave_0: entered promiscuous mode [ 803.714258][T14326] hsr_slave_1: entered promiscuous mode [ 803.730618][T14326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.738525][T14326] Cannot create hsr debugfs directory [ 803.975139][T10683] ip6gretap0 (unregistering): left allmulticast mode [ 803.983426][T10683] ip6gretap0 (unregistering): left promiscuous mode [ 803.990490][T10683] bridge0: port 2(ip6gretap0) entered disabled state [ 804.887960][T14405] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2381'. [ 804.999044][ T5778] Bluetooth: hci1: command tx timeout [ 805.255965][T14326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 805.399959][T14326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 805.500891][T14326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 805.526131][T14326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 805.683521][T14434] netlink: 'syz.4.2387': attribute type 29 has an invalid length. [ 806.211722][T14451] netlink: 'syz.4.2390': attribute type 3 has an invalid length. [ 806.256347][T14451] netlink: 'syz.4.2390': attribute type 7 has an invalid length. [ 806.260329][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.304260][T14454] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 806.339197][T14451] netlink: 'syz.4.2390': attribute type 8 has an invalid length. [ 806.345281][T14454] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2390'. [ 806.388059][T14451] netlink: 'syz.4.2390': attribute type 7 has an invalid length. [ 806.462247][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.470930][T14451] netlink: 198048 bytes leftover after parsing attributes in process `syz.4.2390'. [ 806.513744][T10683] hsr_slave_0: left promiscuous mode [ 806.524643][T10683] hsr_slave_1: left promiscuous mode [ 806.534254][T10683] bridge0: port 3(dummy0) entered disabled state [ 806.567564][T10683] bridge_slave_0: left allmulticast mode [ 806.582694][T10683] bridge_slave_0: left promiscuous mode [ 806.611712][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.081177][ T5778] Bluetooth: hci1: command tx timeout [ 808.204655][T10683] veth1_vlan: left promiscuous mode [ 808.219095][T10683] ëwÂ0Á: left promiscuous mode [ 809.005191][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.013436][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.090398][T10683] ` (unregistering): Port device team_slave_1 removed [ 809.146790][T10683] ` (unregistering): Port device team_slave_0 removed [ 809.167745][ T5778] Bluetooth: hci1: command tx timeout [ 809.785251][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.792448][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.833822][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.841103][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.964271][T14326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.083379][T14503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2401'. [ 810.137252][T14503] netlink: 'syz.4.2401': attribute type 11 has an invalid length. [ 810.160083][T14503] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2401'. [ 810.445815][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.544995][T14326] veth0_vlan: entered promiscuous mode [ 810.545100][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.565043][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.575747][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.586604][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.597393][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.602155][T14326] veth1_vlan: entered promiscuous mode [ 810.607382][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.623755][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.633865][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.644003][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.654430][T14514] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 810.701412][T14326] veth0_macvtap: entered promiscuous mode [ 810.727653][T14326] veth1_macvtap: entered promiscuous mode [ 810.787146][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.814068][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.837558][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.888069][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.916897][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.948517][T14326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.975685][T14326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.007617][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.048475][T14326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.075006][T14326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.096843][T14326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.118490][T14326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.425342][T14524] FAULT_INJECTION: forcing a failure. [ 811.425342][T14524] name failslab, interval 1, probability 0, space 0, times 0 [ 811.452200][T14524] CPU: 0 PID: 14524 Comm: syz.0.2407 Not tainted syzkaller #0 [ 811.459872][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.469985][T14524] Call Trace: [ 811.473299][T14524] [ 811.476264][T14524] dump_stack_lvl+0x18c/0x250 [ 811.480996][T14524] ? show_regs_print_info+0x20/0x20 [ 811.486283][T14524] ? load_image+0x400/0x400 [ 811.490853][T14524] should_fail_ex+0x39d/0x4d0 [ 811.495586][T14524] should_failslab+0x9/0x20 [ 811.500143][T14524] slab_pre_alloc_hook+0x59/0x310 [ 811.505222][T14524] ? bpf_test_init+0x9f/0x140 [ 811.510040][T14524] ? bpf_test_init+0x9f/0x140 [ 811.514756][T14524] __kmem_cache_alloc_node+0x53/0x250 [ 811.520155][T14524] ? bpf_test_init+0x9f/0x140 [ 811.524846][T14524] __kmalloc+0xa4/0x230 [ 811.529019][T14524] bpf_test_init+0x9f/0x140 [ 811.533633][T14524] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 811.539041][T14524] ? dev_put+0x80/0x80 [ 811.543127][T14524] ? dev_put+0x80/0x80 [ 811.547463][T14524] bpf_prog_test_run+0x321/0x390 [ 811.552427][T14524] __sys_bpf+0x49d/0x890 [ 811.556680][T14524] ? bpf_link_show_fdinfo+0x390/0x390 [ 811.562180][T14524] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 811.568377][T14524] __x64_sys_bpf+0x7c/0x90 [ 811.572847][T14524] do_syscall_64+0x55/0xa0 [ 811.577282][T14524] ? clear_bhb_loop+0x40/0x90 [ 811.581970][T14524] ? clear_bhb_loop+0x40/0x90 [ 811.586745][T14524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 811.592653][T14524] RIP: 0033:0x7fa9cff9acb9 [ 811.597080][T14524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.616878][T14524] RSP: 002b:00007fa9ce1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.625305][T14524] RAX: ffffffffffffffda RBX: 00007fa9d0216090 RCX: 00007fa9cff9acb9 [ 811.633285][T14524] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 811.641266][T14524] RBP: 00007fa9ce1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 811.649245][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.657231][T14524] R13: 00007fa9d0216128 R14: 00007fa9d0216090 R15: 00007ffda21e21f8 [ 811.665237][T14524] [ 811.962518][T14526] netlink: 'syz.4.2408': attribute type 1 has an invalid length. [ 812.322382][ T3432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.370344][ T3432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.735617][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.758045][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.204951][T14553] netlink: 'syz.1.2414': attribute type 5 has an invalid length. [ 816.225546][T14553] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 816.248997][T14553] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2414'. [ 816.280857][T14557] IPv6: Can't replace route, no match found [ 816.299493][T14554] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2361'. [ 817.326940][ T5766] : (slave syz_tun): Releasing backup interface [ 817.382731][T14568] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 817.425804][T14568] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 817.478019][T10584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 817.502383][T10584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 817.530038][T10584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 817.538622][T10584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 817.550911][T10584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 817.553354][ T3432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.581643][T10584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.755981][ T3432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.817852][T14577] netlink: 12671 bytes leftover after parsing attributes in process `syz.3.2420'. [ 817.856984][T14580] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2421'. [ 817.879232][T14580] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2421'. [ 817.899047][T14580] tc_dump_action: action bad kind [ 818.027246][ T3432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.407901][T14598] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2425'. [ 818.439187][T14589] netlink: 'syz.3.2424': attribute type 13 has an invalid length. [ 818.447089][T14589] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2424'. [ 818.486302][T14589] syz_tun: refused to change device tx_queue_len [ 818.548260][T14598] IPv6: Can't replace route, no match found [ 818.809514][T14601] FAULT_INJECTION: forcing a failure. [ 818.809514][T14601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.853937][T14601] CPU: 1 PID: 14601 Comm: syz.3.2426 Not tainted syzkaller #0 [ 818.861496][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.871778][T14601] Call Trace: [ 818.875096][T14601] [ 818.878075][T14601] dump_stack_lvl+0x18c/0x250 [ 818.882841][T14601] ? show_regs_print_info+0x20/0x20 [ 818.888102][T14601] ? load_image+0x400/0x400 [ 818.892662][T14601] ? __might_fault+0xaa/0x120 [ 818.897385][T14601] ? __lock_acquire+0x7d40/0x7d40 [ 818.902575][T14601] should_fail_ex+0x39d/0x4d0 [ 818.907312][T14601] _copy_from_iter+0x1d9/0x12e0 [ 818.912223][T14601] ? __kmem_cache_alloc_node+0x13a/0x250 [ 818.917896][T14601] ? __virt_addr_valid+0x18c/0x540 [ 818.923029][T14601] ? __lock_acquire+0x7d40/0x7d40 [ 818.928080][T14601] ? copyout_mc+0x70/0x70 [ 818.932439][T14601] ? __virt_addr_valid+0x18c/0x540 [ 818.937569][T14601] ? __virt_addr_valid+0x18c/0x540 [ 818.942721][T14601] ? __virt_addr_valid+0x469/0x540 [ 818.947857][T14601] ? __check_object_size+0x506/0xa20 [ 818.953177][T14601] tipc_msg_build+0x861/0xee0 [ 818.957884][T14601] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 818.963982][T14601] ? net_generic+0x1e/0x240 [ 818.968508][T14601] ? tipc_group_bc_cong+0x15c/0x210 [ 818.973754][T14601] tipc_send_group_bcast+0x7d8/0xad0 [ 818.979077][T14601] ? tipc_wait_for_connect+0x650/0x650 [ 818.984565][T14601] ? wait_woken+0x180/0x180 [ 818.989100][T14601] __tipc_sendmsg+0x33c/0x2bb0 [ 818.993906][T14601] ? rht_unlock+0x1d0/0x1d0 [ 818.998446][T14601] ? verify_lock_unused+0x140/0x140 [ 819.003656][T14601] ? verify_lock_unused+0x140/0x140 [ 819.008890][T14601] ? perf_trace_lock+0xfc/0x3b0 [ 819.013963][T14601] ? trace_event_raw_event_lock+0x250/0x250 [ 819.019888][T14601] ? mark_lock+0x94/0x320 [ 819.024406][T14601] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 819.030408][T14601] ? __local_bh_enable_ip+0x13a/0x1c0 [ 819.035794][T14601] ? lockdep_hardirqs_on+0x98/0x150 [ 819.041017][T14601] ? __local_bh_enable_ip+0x13a/0x1c0 [ 819.046401][T14601] ? _local_bh_enable+0xa0/0xa0 [ 819.051277][T14601] tipc_sendmsg+0x55/0x70 [ 819.055621][T14601] sock_write_iter+0x2df/0x420 [ 819.060400][T14601] ? sock_read_iter+0x3e0/0x3e0 [ 819.065281][T14601] ? common_file_perm+0x198/0x1f0 [ 819.070342][T14601] vfs_write+0x46c/0x990 [ 819.074612][T14601] ? file_end_write+0x250/0x250 [ 819.079488][T14601] ? __fget_files+0x43d/0x4b0 [ 819.084205][T14601] ? __fdget_pos+0x1d8/0x330 [ 819.088820][T14601] ? ksys_write+0x75/0x260 [ 819.093255][T14601] ksys_write+0x150/0x260 [ 819.097618][T14601] ? __ia32_sys_read+0x90/0x90 [ 819.102406][T14601] ? lockdep_hardirqs_on+0x98/0x150 [ 819.107619][T14601] do_syscall_64+0x55/0xa0 [ 819.112140][T14601] ? clear_bhb_loop+0x40/0x90 [ 819.116925][T14601] ? clear_bhb_loop+0x40/0x90 [ 819.121619][T14601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.127548][T14601] RIP: 0033:0x7ff84179acb9 [ 819.131984][T14601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.151607][T14601] RSP: 002b:00007ff8426ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.160041][T14601] RAX: ffffffffffffffda RBX: 00007ff841a15fa0 RCX: 00007ff84179acb9 [ 819.168029][T14601] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004 [ 819.176011][T14601] RBP: 00007ff8426ba090 R08: 0000000000000000 R09: 0000000000000000 [ 819.183998][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.192076][T14601] R13: 00007ff841a16038 R14: 00007ff841a15fa0 R15: 00007fff6ddf44a8 [ 819.200076][T14601] [ 819.646649][ T5778] Bluetooth: hci2: command tx timeout [ 821.729086][ T5778] Bluetooth: hci2: command tx timeout [ 823.159134][T14625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2431'. [ 823.168223][T14625] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2431'. [ 823.207563][T14573] chnl_net:caif_netlink_parms(): no params data found [ 823.799058][ T5778] Bluetooth: hci2: command tx timeout [ 823.827768][T14645] netlink: 'syz.1.2434': attribute type 3 has an invalid length. [ 823.847797][T14645] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2434'. [ 824.130942][T14655] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2435'. [ 824.154028][T14573] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.161608][T14573] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.169289][T14573] bridge_slave_0: entered allmulticast mode [ 824.176528][T14573] bridge_slave_0: entered promiscuous mode [ 824.185769][T14573] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.193099][T14573] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.200511][T14573] bridge_slave_1: entered allmulticast mode [ 824.208454][T14573] bridge_slave_1: entered promiscuous mode [ 824.215931][T14652] IPv6: Can't replace route, no match found [ 824.291706][T14640] netlink: 'syz.3.2433': attribute type 33 has an invalid length. [ 824.321026][T14640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2433'. [ 824.642450][T14573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.672967][T14573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.714240][T14672] net_ratelimit: 3319 callbacks suppressed [ 824.714259][T14672] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 824.823360][T14573] team0: Port device team_slave_0 added [ 824.895732][T14573] team0: Port device team_slave_1 added [ 825.062309][T14573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.114815][T14573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.166762][T14573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.268377][T14573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.278794][T14573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.337191][T14573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.361751][ T5778] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 825.533376][T14697] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2446'. [ 825.575393][T14573] hsr_slave_0: entered promiscuous mode [ 825.592738][T14573] hsr_slave_1: entered promiscuous mode [ 825.603213][T14573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.616700][T14573] Cannot create hsr debugfs directory [ 825.661101][T14697] IPv6: Can't replace route, no match found [ 825.887983][T14695] Bluetooth: hci2: command tx timeout [ 826.082462][T14716] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2450'. [ 826.252717][ T3432] hsr_slave_0: left promiscuous mode [ 826.275931][ T3432] hsr_slave_1: left promiscuous mode [ 826.288175][ T3432] bridge0: port 3(`) entered disabled state [ 826.309917][ T3432] bridge_slave_1: left allmulticast mode [ 826.315821][ T3432] bridge_slave_1: left promiscuous mode [ 826.336819][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.382984][ T3432] bridge_slave_0: left allmulticast mode [ 826.388798][ T3432] bridge_slave_0: left promiscuous mode [ 826.409073][ T3432] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.525486][ T3432] veth1_vlan: left promiscuous mode [ 826.531188][ T3432] veth0_vlan: left promiscuous mode [ 827.690070][ T3432] team_slave_1 (unregistering): left promiscuous mode [ 827.697106][ T3432] team_slave_1 (unregistering): left allmulticast mode [ 827.714240][ T3432] ` (unregistering): Port device team_slave_1 removed [ 827.760062][ T3432] team_slave_0 (unregistering): left promiscuous mode [ 827.772801][ T3432] ` (unregistering): Port device team_slave_0 removed [ 827.826361][ T3432]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.885088][ T3432]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.205454][ T3432]  (unregistering): (slave dummy0): Releasing backup interface [ 828.268552][ T3432]  (unregistering): (slave bridge0): Releasing backup interface [ 828.277473][ T3432]  (unregistering): Released all slaves [ 828.399372][T14751] IPv6: Can't replace route, no match found [ 829.830475][T14779] netlink: 'syz.4.2461': attribute type 21 has an invalid length. [ 829.839946][T14779] IPv6: NLM_F_CREATE should be specified when creating new route [ 829.859789][T14779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 829.867097][T14779] IPv6: NLM_F_CREATE should be set when creating new route [ 829.874521][T14779] IPv6: NLM_F_CREATE should be set when creating new route [ 829.881829][T14779] IPv6: NLM_F_CREATE should be set when creating new route [ 830.292844][T14573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 830.321917][T14573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.389740][T14573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.416968][T14573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.477562][T14799] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2464'. [ 830.511046][T14810] IPv6: Can't replace route, no match found [ 830.918533][T14817] netlink: 'syz.3.2466': attribute type 30 has an invalid length. [ 830.997463][T14573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.027366][T14573] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.280582][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.287872][T10675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.332879][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.340251][T10675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.935138][T14837] netlink: 'syz.3.2472': attribute type 49 has an invalid length. [ 832.297922][T14573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.423053][T14573] veth0_vlan: entered promiscuous mode [ 832.453871][T14573] veth1_vlan: entered promiscuous mode [ 832.533617][T14573] veth0_macvtap: entered promiscuous mode [ 832.555587][T14856] IPv6: Can't replace route, no match found [ 832.583336][T14573] veth1_macvtap: entered promiscuous mode [ 832.663295][T14573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.690042][T14573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.727350][T14573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 832.749349][T14573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.771605][T14573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.798284][T14573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.815951][T14573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.827064][T14573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.844059][T14573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.865062][T14573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 832.876839][T14573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 832.940671][T14573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.061291][T14573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.103876][T14573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.159375][T14573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.189069][T14573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.430915][T10675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.494603][T10675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.583188][ T2875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 833.629112][ T2875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.743473][T14881] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2481'. [ 834.030929][T14891] IPv6: Can't replace route, no match found [ 834.047715][T14881] netlink: del zone limit has 4 unknown bytes [ 834.904164][T14902] netlink: 'syz.3.2485': attribute type 21 has an invalid length. [ 834.970252][T14902] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.525613][T14921] FAULT_INJECTION: forcing a failure. [ 835.525613][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 835.569060][T14921] CPU: 0 PID: 14921 Comm: syz.1.2488 Not tainted syzkaller #0 [ 835.576610][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.586905][T14921] Call Trace: [ 835.590249][T14921] [ 835.593221][T14921] dump_stack_lvl+0x18c/0x250 [ 835.597947][T14921] ? sctp_sendmsg+0x1575/0x28c0 [ 835.602849][T14921] ? ___sys_sendmsg+0x2a6/0x360 [ 835.607760][T14921] ? show_regs_print_info+0x20/0x20 [ 835.613027][T14921] ? load_image+0x400/0x400 [ 835.617608][T14921] should_fail_ex+0x39d/0x4d0 [ 835.622345][T14921] should_failslab+0x9/0x20 [ 835.626902][T14921] slab_pre_alloc_hook+0x59/0x310 [ 835.631993][T14921] ? sctp_add_bind_addr+0x8c/0x360 [ 835.637167][T14921] __kmem_cache_alloc_node+0x53/0x250 [ 835.642631][T14921] ? sctp_add_bind_addr+0x8c/0x360 [ 835.647806][T14921] kmalloc_trace+0x2a/0xe0 [ 835.652280][T14921] sctp_add_bind_addr+0x8c/0x360 [ 835.657274][T14921] sctp_copy_local_addr_list+0x315/0x4f0 [ 835.662969][T14921] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 835.668754][T14921] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 835.674897][T14921] ? sctp_v4_is_any+0x35/0x60 [ 835.679725][T14921] ? sctp_copy_one_addr+0x8c/0x350 [ 835.684909][T14921] sctp_bind_addr_copy+0xb3/0x3c0 [ 835.690082][T14921] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 835.696469][T14921] sctp_connect_new_asoc+0x2f9/0x6a0 [ 835.701829][T14921] ? __sctp_connect+0xd80/0xd80 [ 835.706821][T14921] ? __local_bh_enable_ip+0x13a/0x1c0 [ 835.712254][T14921] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 835.717858][T14921] ? security_sctp_bind_connect+0x89/0xb0 [ 835.723638][T14921] sctp_sendmsg+0x1575/0x28c0 [ 835.728480][T14921] ? sctp_getsockopt+0xb60/0xb60 [ 835.733482][T14921] ? aa_sk_perm+0x83c/0x970 [ 835.738054][T14921] ? aa_af_perm+0x330/0x330 [ 835.742626][T14921] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 835.749191][T14921] ? sock_rps_record_flow+0x19/0x3f0 [ 835.754544][T14921] ? inet_sendmsg+0xe9/0x2f0 [ 835.759191][T14921] ? inet_send_prepare+0x260/0x260 [ 835.764357][T14921] ____sys_sendmsg+0x5ba/0x960 [ 835.769179][T14921] ? __lock_acquire+0x7d40/0x7d40 [ 835.774350][T14921] ? __asan_memset+0x22/0x40 [ 835.779080][T14921] ? __sys_sendmsg_sock+0x30/0x30 [ 835.784161][T14921] ? __import_iovec+0x5f2/0x850 [ 835.789095][T14921] ? import_iovec+0x73/0xa0 [ 835.793672][T14921] ___sys_sendmsg+0x2a6/0x360 [ 835.798425][T14921] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.803290][T14921] ? __lock_acquire+0x7d40/0x7d40 [ 835.808584][T14921] __se_sys_sendmsg+0x1c2/0x2b0 [ 835.813582][T14921] ? __x64_sys_sendmsg+0x80/0x80 [ 835.818618][T14921] ? lockdep_hardirqs_on+0x98/0x150 [ 835.823878][T14921] do_syscall_64+0x55/0xa0 [ 835.828476][T14921] ? clear_bhb_loop+0x40/0x90 [ 835.833207][T14921] ? clear_bhb_loop+0x40/0x90 [ 835.837936][T14921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.843880][T14921] RIP: 0033:0x7f391b19acb9 [ 835.848353][T14921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.868021][T14921] RSP: 002b:00007f391c0ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.876542][T14921] RAX: ffffffffffffffda RBX: 00007f391b415fa0 RCX: 00007f391b19acb9 [ 835.884565][T14921] RDX: 00000000000080d1 RSI: 0000200000000300 RDI: 0000000000000004 [ 835.892584][T14921] RBP: 00007f391c0ad090 R08: 0000000000000000 R09: 0000000000000000 [ 835.900612][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 835.908635][T14921] R13: 00007f391b416038 R14: 00007f391b415fa0 R15: 00007ffe5cde1288 [ 835.916689][T14921] [ 836.148920][T14938] syzkaller0: refused to change device tx_queue_len [ 836.156352][T14939] syzkaller0: refused to change device tx_queue_len [ 836.204107][T14940] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 836.213702][T14935] netlink: 'syz.1.2491': attribute type 39 has an invalid length. [ 836.240511][T14940] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2492'. [ 836.284824][T14940] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 836.344024][T14935] veth0_macvtap: left promiscuous mode [ 836.743937][T14943] netlink: 'syz.0.2492': attribute type 21 has an invalid length. [ 836.792883][T14943] IPv6: NLM_F_CREATE should be specified when creating new route [ 837.599116][T14950] IPv6: Can't replace route, no match found [ 838.276763][T14966] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 838.313607][T14966] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2497'. [ 838.499920][T14969] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 838.525006][T14969] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2497'. [ 839.065359][T14980] netlink: 'syz.3.2501': attribute type 2 has an invalid length. [ 839.095850][T14980] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.189146][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.243391][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.309457][T14987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.505126][T14987] netlink: 'syz.3.2501': attribute type 2 has an invalid length. [ 839.535947][T14987] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.572711][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2501'. [ 839.888097][T15001] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2505'. [ 840.048115][T15007] IPv6: Can't replace route, no match found [ 840.076659][T15008] netlink: 'syz.4.2505': attribute type 10 has an invalid length. [ 840.186458][T15008] batman_adv: batadv0: Adding interface: virt_wifi0 [ 840.304916][T15008] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.393464][T15008] batman_adv: batadv0: Interface activated: virt_wifi0 [ 841.750317][T15047] netlink: 'syz.3.2512': attribute type 4 has an invalid length. [ 842.469227][T15071] IPv6: Can't replace route, no match found [ 842.831614][T15084] netlink: 'syz.4.2522': attribute type 29 has an invalid length. [ 842.845087][T15084] netlink: 'syz.4.2522': attribute type 29 has an invalid length. [ 842.865330][T15085] netlink: 'syz.4.2522': attribute type 29 has an invalid length. [ 843.144070][T15093] netlink: 'syz.0.2523': attribute type 17 has an invalid length. [ 843.175193][T15093] netlink: 'syz.0.2523': attribute type 16 has an invalid length. [ 843.195359][T15093] __nla_validate_parse: 2 callbacks suppressed [ 843.195471][T15093] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2523'. [ 846.158414][T15125] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.2532'. [ 846.172372][T15125] netlink: 'syz.1.2532': attribute type 21 has an invalid length. [ 846.196343][T15125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2532'. [ 846.643149][T15123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.871193][T15130] IPv6: Can't replace route, no match found [ 847.151580][T15137] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2536'. [ 847.381372][T15147] FAULT_INJECTION: forcing a failure. [ 847.381372][T15147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.446113][T15147] CPU: 1 PID: 15147 Comm: syz.1.2538 Not tainted syzkaller #0 [ 847.453664][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 847.463867][T15147] Call Trace: [ 847.467180][T15147] [ 847.470142][T15147] dump_stack_lvl+0x18c/0x250 [ 847.474890][T15147] ? show_regs_print_info+0x20/0x20 [ 847.480121][T15147] ? load_image+0x400/0x400 [ 847.484664][T15147] ? __might_fault+0xaa/0x120 [ 847.489374][T15147] ? __lock_acquire+0x7d40/0x7d40 [ 847.494436][T15147] should_fail_ex+0x39d/0x4d0 [ 847.499249][T15147] _copy_to_user+0x2f/0xa0 [ 847.503699][T15147] __htab_map_lookup_and_delete_batch+0xfcd/0x1360 [ 847.510290][T15147] ? jhash+0x740/0x740 [ 847.514566][T15147] ? __fdget+0x180/0x210 [ 847.518943][T15147] ? htab_percpu_map_seq_show_elem+0x4a0/0x4a0 [ 847.525127][T15147] bpf_map_do_batch+0x2cb/0x610 [ 847.530051][T15147] ? bpf_lsm_bpf+0x9/0x10 [ 847.534440][T15147] ? security_bpf+0x7e/0xa0 [ 847.539171][T15147] __sys_bpf+0x7d7/0x890 [ 847.543458][T15147] ? bpf_link_show_fdinfo+0x390/0x390 [ 847.548984][T15147] ? lock_chain_count+0x20/0x20 [ 847.553919][T15147] __x64_sys_bpf+0x7c/0x90 [ 847.558375][T15147] do_syscall_64+0x55/0xa0 [ 847.562925][T15147] ? clear_bhb_loop+0x40/0x90 [ 847.567634][T15147] ? clear_bhb_loop+0x40/0x90 [ 847.572347][T15147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.578283][T15147] RIP: 0033:0x7f391b19acb9 [ 847.582734][T15147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.602662][T15147] RSP: 002b:00007f391c08c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 847.611307][T15147] RAX: ffffffffffffffda RBX: 00007f391b416090 RCX: 00007f391b19acb9 [ 847.619320][T15147] RDX: 0000000000000038 RSI: 0000200000000980 RDI: 0000000000000018 [ 847.627333][T15147] RBP: 00007f391c08c090 R08: 0000000000000000 R09: 0000000000000000 [ 847.635432][T15147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.643960][T15147] R13: 00007f391b416128 R14: 00007f391b416090 R15: 00007ffe5cde1288 [ 847.652065][T15147] [ 848.076863][T15155] FAULT_INJECTION: forcing a failure. [ 848.076863][T15155] name failslab, interval 1, probability 0, space 0, times 0 [ 848.141258][T15155] CPU: 0 PID: 15155 Comm: syz.3.2542 Not tainted syzkaller #0 [ 848.148802][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.158889][T15155] Call Trace: [ 848.162179][T15155] [ 848.165214][T15155] dump_stack_lvl+0x18c/0x250 [ 848.169916][T15155] ? __sctp_connect+0x5b7/0xd80 [ 848.174802][T15155] ? sctp_setsockopt+0x6d8/0x11e0 [ 848.180193][T15155] ? show_regs_print_info+0x20/0x20 [ 848.185407][T15155] ? load_image+0x400/0x400 [ 848.189948][T15155] should_fail_ex+0x39d/0x4d0 [ 848.194656][T15155] should_failslab+0x9/0x20 [ 848.199184][T15155] slab_pre_alloc_hook+0x59/0x310 [ 848.204328][T15155] ? sctp_add_bind_addr+0x8c/0x360 [ 848.209474][T15155] __kmem_cache_alloc_node+0x53/0x250 [ 848.214866][T15155] ? sctp_add_bind_addr+0x8c/0x360 [ 848.219998][T15155] kmalloc_trace+0x2a/0xe0 [ 848.224436][T15155] sctp_add_bind_addr+0x8c/0x360 [ 848.229402][T15155] sctp_copy_local_addr_list+0x315/0x4f0 [ 848.235056][T15155] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 848.240977][T15155] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 848.247065][T15155] ? sctp_v4_is_any+0x35/0x60 [ 848.251756][T15155] ? sctp_copy_one_addr+0x8c/0x350 [ 848.256888][T15155] sctp_bind_addr_copy+0xb3/0x3c0 [ 848.261929][T15155] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 848.268281][T15155] sctp_connect_new_asoc+0x2f9/0x6a0 [ 848.273756][T15155] ? __sctp_connect+0xd80/0xd80 [ 848.278708][T15155] ? mark_lock+0x94/0x320 [ 848.283051][T15155] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 848.288873][T15155] __sctp_connect+0x5b7/0xd80 [ 848.293576][T15155] ? sctp_send_asconf+0x170/0x170 [ 848.298608][T15155] ? __local_bh_enable_ip+0x13a/0x1c0 [ 848.303997][T15155] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 848.309562][T15155] ? security_sctp_bind_connect+0x89/0xb0 [ 848.315396][T15155] sctp_setsockopt_connectx+0x104/0x1a0 [ 848.320960][T15155] sctp_setsockopt+0x6d8/0x11e0 [ 848.325831][T15155] ? sock_common_recvmsg+0x190/0x190 [ 848.331233][T15155] do_sock_setsockopt+0x175/0x1a0 [ 848.336273][T15155] ? __fdget+0x180/0x210 [ 848.340631][T15155] __x64_sys_setsockopt+0x182/0x200 [ 848.345858][T15155] do_syscall_64+0x55/0xa0 [ 848.350376][T15155] ? clear_bhb_loop+0x40/0x90 [ 848.355064][T15155] ? clear_bhb_loop+0x40/0x90 [ 848.359765][T15155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.365864][T15155] RIP: 0033:0x7ff84179acb9 [ 848.370380][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.390014][T15155] RSP: 002b:00007ff8426ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 848.400011][T15155] RAX: ffffffffffffffda RBX: 00007ff841a15fa0 RCX: 00007ff84179acb9 [ 848.408182][T15155] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 848.416267][T15155] RBP: 00007ff8426ba090 R08: 0000000000000010 R09: 0000000000000000 [ 848.424516][T15155] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.432592][T15155] R13: 00007ff841a16038 R14: 00007ff841a15fa0 R15: 00007fff6ddf44a8 [ 848.440594][T15155] [ 848.725081][T15167] IPv6: Can't replace route, no match found [ 848.976924][T15178] netlink: 'syz.0.2550': attribute type 10 has an invalid length. [ 849.005466][T15178] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 849.056073][T15173] IPv6: Can't replace route, no match found [ 849.603355][T15188] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2553'. [ 849.823585][T15194] IPv6: Can't replace route, no match found [ 849.978494][T15196] netlink: 'syz.3.2557': attribute type 3 has an invalid length. [ 849.987787][T15196] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2557'. [ 850.638442][T15205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2562'. [ 850.720755][T15205] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2562'. [ 850.782729][T15207] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2562'. [ 850.854655][T15211] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2562'. [ 850.987306][T15219] netlink: 'syz.0.2562': attribute type 21 has an invalid length. [ 851.370945][T14695] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 851.434396][T15237] IPv6: Can't replace route, no match found [ 852.155345][ C1] [ 852.155354][ C1] ================================ [ 852.155358][ C1] WARNING: inconsistent lock state [ 852.155365][ C1] syzkaller #0 Not tainted [ 852.155374][ C1] -------------------------------- [ 852.155378][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 852.155385][ C1] syz.0.2574/15248 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 852.155404][ C1] ffff88805fdbd218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 852.155451][ C1] {INITIAL USE} state was registered at: [ 852.155458][ C1] lock_acquire+0x19e/0x420 [ 852.155474][ C1] _raw_spin_lock+0x2e/0x40 [ 852.155489][ C1] htab_lock_bucket+0x17d/0x300 [ 852.155504][ C1] htab_map_update_elem+0x229/0x1040 [ 852.155518][ C1] bpf_map_update_value+0x660/0x720 [ 852.155530][ C1] map_update_elem+0x57b/0x700 [ 852.155545][ C1] __sys_bpf+0x6b5/0x890 [ 852.155559][ C1] __x64_sys_bpf+0x7c/0x90 [ 852.155572][ C1] do_syscall_64+0x55/0xa0 [ 852.155591][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.155606][ C1] irq event stamp: 2360 [ 852.155612][ C1] hardirqs last enabled at (2359): [] exc_debug+0xf5/0x140 [ 852.155637][ C1] hardirqs last disabled at (2360): [] exc_debug+0x73/0x140 [ 852.155661][ C1] softirqs last enabled at (1740): [] bpf_map_alloc_id+0x87/0xd0 [ 852.155681][ C1] softirqs last disabled at (1738): [] bpf_map_alloc_id+0x21/0xd0 [ 852.155711][ C1] [ 852.155711][ C1] other info that might help us debug this: [ 852.155716][ C1] Possible unsafe locking scenario: [ 852.155716][ C1] [ 852.155720][ C1] CPU0 [ 852.155723][ C1] ---- [ 852.155726][ C1] lock(&htab->lockdep_key); [ 852.155736][ C1] [ 852.155739][ C1] lock(&htab->lockdep_key); [ 852.155749][ C1] [ 852.155749][ C1] *** DEADLOCK *** [ 852.155749][ C1] [ 852.155752][ C1] no locks held by syz.0.2574/15248. [ 852.155759][ C1] [ 852.155759][ C1] stack backtrace: [ 852.155764][ C1] CPU: 1 PID: 15248 Comm: syz.0.2574 Not tainted syzkaller #0 [ 852.155779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.155787][ C1] Call Trace: [ 852.155794][ C1] <#DB> [ 852.155802][ C1] dump_stack_lvl+0x18c/0x250 [ 852.155830][ C1] ? show_regs_print_info+0x20/0x20 [ 852.155865][ C1] ? print_usage_bug+0x475/0x690 [ 852.155885][ C1] ? verify_lock_unused+0x18/0x140 [ 852.155913][ C1] lock_acquire+0x2c2/0x420 [ 852.155941][ C1] ? htab_lock_bucket+0x17d/0x300 [ 852.155963][ C1] ? read_lock_is_recursive+0x20/0x20 [ 852.155996][ C1] ? perf_trace_lock_acquire+0x104/0x410 [ 852.156030][ C1] _raw_spin_lock+0x2e/0x40 [ 852.156045][ C1] ? htab_lock_bucket+0x17d/0x300 [ 852.156062][ C1] htab_lock_bucket+0x17d/0x300 [ 852.156086][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 852.156105][ C1] ? look_up_lock_class+0x75/0x140 [ 852.156127][ C1] ? verify_lock_unused+0x18/0x140 [ 852.156150][ C1] ? jhash+0x3c3/0x740 [ 852.156178][ C1] htab_map_delete_elem+0x1a4/0x650 [ 852.156208][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 852.156228][ C1] ? perf_callchain+0x1f0/0x1f0 [ 852.156261][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 852.156285][ C1] bpf_overflow_handler+0x1fc/0x510 [ 852.156315][ C1] ? bpf_overflow_handler+0xde/0x510 [ 852.156338][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 852.156374][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 852.156399][ C1] __perf_event_overflow+0x447/0x630 [ 852.156432][ C1] perf_swevent_event+0x542/0x630 [ 852.156463][ C1] ? perf_tp_event+0x1450/0x1450 [ 852.156500][ C1] perf_bp_event+0x2a7/0x380 [ 852.156531][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 852.156608][ C1] ? lock_acquire+0x2c2/0x420 [ 852.156643][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 852.156675][ C1] notifier_call_chain+0x197/0x380 [ 852.156714][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 852.156739][ C1] atomic_notifier_call_chain+0xda/0x180 [ 852.156765][ C1] notify_die+0x145/0x1a0 [ 852.156791][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 852.156827][ C1] ? rcu_is_watching+0x15/0xb0 [ 852.156855][ C1] notify_debug+0x2e/0x50 [ 852.156872][ C1] exc_debug+0xde/0x140 [ 852.156902][ C1] asm_exc_debug+0x1e/0x40 [ 852.156917][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 852.156941][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 852.156954][ C1] RSP: 0018:ffffc900053afcb8 EFLAGS: 00050202 [ 852.156969][ C1] RAX: ffffffff84294e01 RBX: 0000000000000080 RCX: 000000000000003c [ 852.156980][ C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc900053afe24 [ 852.156992][ C1] RBP: 0000000000000008 R08: ffffc900053afe5f R09: 1ffff92000a75fcb [ 852.157002][ C1] R10: dffffc0000000000 R11: fffff52000a75fcc R12: 0000200000000340 [ 852.157014][ C1] R13: 00002000000002c4 R14: ffffc900053afde0 R15: 00002000000002c0 [ 852.157040][ C1] ? rcuref_put_slowpath+0xe1/0x150 [ 852.157072][ C1] [ 852.157077][ C1] [ 852.157081][ C1] _copy_from_user+0x8b/0xe0 [ 852.157105][ C1] perf_copy_attr+0x16a/0x840 [ 852.157139][ C1] __se_sys_perf_event_open+0x11b/0x1c50 [ 852.157171][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 852.157197][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 852.157240][ C1] ? lock_chain_count+0x20/0x20 [ 852.157272][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 852.157287][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 852.157312][ C1] do_syscall_64+0x55/0xa0 [ 852.157331][ C1] ? clear_bhb_loop+0x40/0x90 [ 852.157347][ C1] ? clear_bhb_loop+0x40/0x90 [ 852.157368][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.157384][ C1] RIP: 0033:0x7f2d40b9acb9 [ 852.157400][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.157412][ C1] RSP: 002b:00007f2d41abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 852.157428][ C1] RAX: ffffffffffffffda RBX: 00007f2d40e15fa0 RCX: 00007f2d40b9acb9 [ 852.157439][ C1] RDX: fffffffffffffffc RSI: 0000000000000043 RDI: 00002000000002c0 [ 852.157448][ C1] RBP: 00007f2d40c08bf7 R08: 0000000000000001 R09: 0000000000000000 [ 852.157456][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 852.157464][ C1] R13: 00007f2d40e16038 R14: 00007f2d40e15fa0 R15: 00007ffd68bc89d8 [ 852.157501][ C1]