last executing test programs: 5.436027124s ago: executing program 4 (id=2763): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 3.936656763s ago: executing program 4 (id=2771): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) 3.841996846s ago: executing program 0 (id=2773): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) (async) close(0x3) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2020) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.301122514s ago: executing program 4 (id=2774): perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8010743f, 0xf0ff1f00000000) 3.248273505s ago: executing program 1 (id=2775): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x6568, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0x41) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000500)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r8, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf4}, [@call={0x85, 0x0, 0x0, 0x14}, @ldst={0x1, 0x3, 0x0, 0x5, 0x9, 0xc, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @generic={0x8, 0x2, 0x7, 0x8, 0x2b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4c}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000700)='syzkaller\x00', 0xfffff005, 0xe3, &(0x7f0000000940)=""/227, 0x41000, 0x38, '\x00', r10, 0x18, r3, 0x8, &(0x7f0000000b00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xc, 0x3, 0x5}, 0x10, 0x1d76c, r2, 0xa, 0x0, &(0x7f0000000c40)=[{0x3, 0x1, 0x7, 0x9}, {0x4, 0x1, 0x4, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x5, 0x3, 0x4, 0x8}, {0x5, 0x1, 0x6, 0x5}, {0x3, 0x2, 0x7, 0x6}, {0x4, 0x4, 0xb, 0x9}, {0x1, 0x1, 0xe, 0x8}, {0x5, 0x5, 0x8, 0xa}, {0x4, 0x5, 0xb, 0x8}], 0x10, 0x4}, 0x94) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0xe, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) 3.128892699s ago: executing program 4 (id=2777): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000440)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x8, 0x78, 0x8, 0x0, 0x80, 0x802, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0x1b16}, 0x10002, 0xaba, 0x8, 0x6, 0x4, 0x3, 0x0, 0x0, 0x9, 0x0, 0x80000000}, 0x0, 0x8, r4, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000500)={0x0, 0x80, 0x1b, 0x6, 0x5, 0xc1, 0x0, 0x2, 0x5800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xbda9, 0x4, @perf_bp={&(0x7f0000000300), 0x7}, 0x24, 0x7, 0xa71, 0x6, 0x8000000000000001, 0xd, 0xfffe, 0x0, 0x7, 0x0, 0x2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004030000e27f00960de8c75aa74a1100", @ANYRES32, @ANYBLOB="600200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="5346f7f8", 0x4}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="0072e04dc702e76e0989", @ANYRES32=r6, @ANYRESOCT=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 3.002627743s ago: executing program 2 (id=2778): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a"], 0xfdef) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.739340461s ago: executing program 0 (id=2780): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0xabe8420435859593}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open$cgroup(&(0x7f0000000d40)={0x4, 0x80, 0x1, 0xc0, 0x9, 0x1, 0x0, 0x5, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x3}, 0xe3e6b88b8cd3202, 0xfffffffffffffffb, 0x9, 0x9, 0x1000, 0x5, 0x0, 0x0, 0x800002, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0xa, r0, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000dc0)=0x69fe) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000500000000080006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 2.005790795s ago: executing program 3 (id=2782): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x2, 0x2, 0x0, 0xc, 0x0, 0xc, 0x9200, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1f49, 0x100}, 0x80, 0x18c252ee, 0x7fffffff, 0x4, 0x0, 0xf, 0xaadc, 0x0, 0xfffffffd, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x0, 0x8, &(0x7f0000000200)='%-5lx \x00'}, 0x30) socketpair(0x1a, 0x2, 0xfffffff5, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x5, 0x4, 0xddb9, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000000b00)={&(0x7f0000000300)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="1f2ae8f0131375aa47d3811d0829787090a06ddac5e59c4b0f769f1a4a79e0f784470e314b95e940f306ae8468572c77f230ab6ed3871ecb7f597c4d9b3b7e83310094603196ef0fb35a2cdb08a7af2276fcae318494fe4b76c95b8dcf0d415208ed6325c85fed383917d34b29c9ef90eff5633fb644b631c82aed2b5bb6e4345291eb437c99246503a2b08a6549f55251b1e4b3a9f022da987aa7e77bb6357ebef1f3343b4bd785b9daa378fdc4d8a0ecda4af5c9fe7dff120a38744e5a4cf1ecaf", 0xc2}, {&(0x7f0000000480)="69bbbcdc48cff53a602e14b9b68f620e0a7ef03a139d44bf6bf225d410358f82154a67422ec3b6b91362b5840286f1a4324be718283ada4a1a733c7f53b0f06800257b2605fe2d929b15c6d5531803", 0x4f}, {&(0x7f0000000500)="fcbc4483edbf92a26fd4c082c10a68c43983a083310e398c304da0a1ef61dd75f51f40c97d7f682ee6a4b90f486a6ddf77c89fe56137c693a6538ddfaf56e27483f22ee17bf3f3588cc144509e403b87f88315a6396eb518e96cb6e79cb6e74984e0f2fe1b1939cc10c9829615741764b68b67ef0528e24dde54c8e0126028cdd545c903df83a2d4314a35acca717f", 0x8f}], 0x3, &(0x7f0000000600)=[{0xf8, 0x114, 0xb, "12408efb2df67d497edac6707afac9c78a23b931c9ed46f24232692945738f7135ff7b15581b6d9630c82561bcf3485cf0c36beef1a93f3ad51f868f7d98f0be4130568699b6ee3e4a86ce38a2b7c6098e9ced1d075777bcc1583584cfa7bbb4eb555a5545e7488e7974d20876c40845b1c4fa04025601c34fc51741a8e1de0b0f5a49b15b65fd1c3ded4fb5f6992faa9bd761cbb161c72a7b56eb68a795bfc5233fa25f49112cb5ff89b2d03b7df2c2cc8cbb57744ce9a46b64e92c2f1e1683dc86966f232ff1b24eac9d317ae73232a0273c8b8e77667246b1be4074f06a9c93e3e3"}, {0xf8, 0x114, 0x7, "2812a94f37812f72a40c8633c54a2ef867305f70cbed20ed21226d4e18cc546e277dafd04b79a5cf791f47390ec9bcd4b9b10d7dbcebe41ef448fdd67785fb1589ef29969b021dc6e380b78c8219d646709d397ecb5be696d825f56f53de7883b1d33c95c7ea312a12b3b316eb73a8829881c4868eaff7557ba5d108b244e4191bf7256fa832a2243b21a8bd8d2d8898d8d313c3a2fe0ea146166db6749a27763764f356779c7775111e107ff271513be73d62f682f089068cace19db7d53f1997febfea9e66a75d76a3c8cac65f06e83f233052c94900da620c7c47db38aaaef0297e48150a37f3"}, {0x58, 0x114, 0x3, "10a795477d550cf7cfa12c557850bc5bd87c0aab82f469ed52d44db80cbd987ff41dd32ab010ed9800dfbf878f7e96a76ce6684e02c7268fd7863784823b0bdd64f8552b6ca4ea92"}, {0x68, 0xff, 0x80000001, "d3241d2b4ab5cb4ddc27ea17f66be0cb21a567238bbecc4e8311e21db0d55dee38f6e5eabad65edf2dd295e67d24c31727a75c318ddc5beda34c5f0ce840bf78e59c6de80472dc8a58a98c2c24ebbd8bbd91d1"}, {0xa0, 0x10f, 0xf7, "f0b8e181ec8c3d0417c067f5a624adfe362e634f69974e2a130902f0ccfee3a0f7e17d496d39d23ba4e6d54ce91545f3ab8ea5051d3c9dcfd5cbf185d4f44dcd4c57db265b415e1ce08c8cfc39d892c7659cf0717b178e34efd60215e4e80961f9de1c3673258c94fc0e0f827e171e69f594211eeddb871df48ab05a4b81d92b9efdfa920364c8ecb6ad941a83f37cd7"}, {0x50, 0x10b, 0xffff, "7e8c35e1bae40b5dd90ad38a4c3dbd86c1ac55434f085f66c490c994b475eed1394f789a53702d2c9be8d6ecc5b5b47052e89ef64a0f5a643403862bcd"}, {0xa8, 0x3a, 0x4, "4056992fa75459ddc8d324dd6d2e9a435f896df11347d222c72609836f3e485ed58ab8355a1a1ab48f311527c9ddd6f03f6ab687c994a48b6d0ede2848e11666550af7adab8bc7775aaddbf673864f51207eb755c0defabc9147e718e7b04ec2aa6a2668ae9e054877f35c6f936e49dcd0dc869318f07f52b0740a3c77bb01f16d88df70d614640b66d89368868afed42afacbad94"}, {0xa0, 0x10c, 0x893d, "0634ade0ad15cbda05000976d9df9c729aa6d6126399fdb3cbc670e3175d7d613b69b37fe513d3b236c7dbdafe065f4bda09989502cb58d838b8f5b23a1249d5524cf4e3ef0d7928ab41082d0b5a70656b5c5d2056bb37a1bd719f31eb6c870967d9e50e7abb5d636e7d24a003de18a3ec19d51dcb111027f8028a59e5f92bd74919fe5fc98ea8f22a29d661d4"}], 0x4e8}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d00)={r6, &(0x7f0000000b40)="91c79e4ae3595e7a21af312606d0a413a443b1f89bf90a97afb71a26c192e06f53c4fc080fff4c0a1ea74fd3a5a9b902bea59954a249e362db7707e31551145ad51ad4f346fb0e97a300afab38a0c724983f989ce972c7e162ee07d074e5cff838a7669fb282e0f6e5b20f2a546d71542685831058f8b982d4fae31732e12665b837fb7dfe27a30febf560634fbb38ecfaa5916c383e7e9767ef75cc9153fe4e008b9a5b5aea8b16ad21354d6c59d6e28ec2303e5f02a64065c9381825a5d30c92d34726120077e0", &(0x7f0000000c40)=""/147, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000d40)={0x0, 0x80, 0x1, 0xb, 0x5, 0xb0, 0x0, 0x5, 0x84108, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x0, 0x89}, 0x4008, 0xbf, 0x7, 0xf, 0x669, 0x5, 0x6, 0x0, 0x7, 0x0, 0x80}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ec0)={0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000e80)='\xa2\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e40)={@map=r6, r7, 0x3f, 0x4038, 0x0, @void, @void, @void, @value=r8}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000f00), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000f40)={r6}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r1, 0x58, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x8, &(0x7f0000000f80)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000fc0)='syzkaller\x00', 0xffffff2c, 0xfe, &(0x7f0000001000)=""/254, 0x40f00, 0x40, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000001200)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[r12, r1, r0, r1, r0, r1], &(0x7f0000001300)=[{0x5, 0x3, 0xc}, {0x1, 0x5, 0x7, 0x3}], 0x10, 0x8}, 0x94) ioctl$TUNSETSTEERINGEBPF(r13, 0x800454e0, &(0x7f0000001400)=r7) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x401) recvmsg$kcm(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/187, 0xbb}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/194, 0xc2}, {&(0x7f0000002600)=""/148, 0x94}], 0x4, &(0x7f0000002700)=""/174, 0xae}, 0x1) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002800), 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002840)=r14, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r13) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002980)={@cgroup, 0x3, 0x1, 0xd, &(0x7f0000002880)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000028c0)=[0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002a00)={0xcae0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000029c0)={@map=r1, r13, 0x1, 0x2027, r7, @void, @void, @value=r16, @void, r15}, 0x20) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x9, &(0x7f0000002a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc4a}, [@ldst={0x2, 0x0, 0x2, 0xa, 0x6, 0x40, 0x1}, @generic={0x2, 0x5, 0x1, 0x6, 0x2}, @alu={0x7, 0x1, 0x6, 0x9, 0xa, 0x2, 0x10}, @generic={0x3, 0x5, 0x7, 0x1b35, 0x5}, @exit, @exit]}, &(0x7f0000002ac0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000002b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002b40)={0x1, 0x5, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002b80)=[r12, r12], &(0x7f0000002bc0)=[{0x5, 0x1, 0x1, 0xc}, {0x2, 0x2, 0xe, 0x4}, {0x0, 0x3, 0x10, 0x9}, {0x2, 0x4, 0xa, 0xa}, {0x1, 0x1, 0x9, 0x7}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000002d00)={r3, r17}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002d80), 0x4) 1.893052159s ago: executing program 2 (id=2783): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x1, 0x3}], "da6b47"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}, {0x0, [0xbd, 0x61]}}, &(0x7f0000000000)=""/163, 0x44, 0xa3, 0x1}, 0x28) 1.890939319s ago: executing program 0 (id=2784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @private=0x9}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="1322783ced9c437edb0e2834e976954629aa609c9eba3b29652397976ae0e4b669950928e363e31898cbd67ab85a8762f3d705591d688c5099013e6f118c8ad4ca63fc6f365be81a4785fda1b10dfbd14eadf85a8f1b66029db0560bf30ed99bf75ae840f90bf73a2be614e77d06019c86b5b496cfb85d2099df6887c36e3d72cbc74cbbd8a6a187a32631782a9b1cce6417061fb46e1bc98e61625bbbfcad593c39cc07440941c09649a30716056387236d5f87af1a5f5328bf61c4b574254bfbcaa53a98f445d82ed024cbf08022", 0xcf}, {&(0x7f0000000300)="8dfb97b9da0bdde07c7bc1288d0e0e7d9e8cf74efd673b34248fef846eef9e8aff8be9afa1279bc48a2c99edb6330257c3a20ae41a6ac2c26ec24066f89bb8787d39f088753d6ccd6ff14e30b9cd4b8e606600186d6d500edf510ec1bb9a33e7432a1b088e3d567c4f13473189640332fc455ec9fa1d95fced1710159ded8205752b041fa3df50895800c91e6c6d7daa91000c8e55e7b6aaaada7b7587a82df0392d67cedbdedc8ec30d091ac5b8ea1223ac598ddccc3c1e46ba0da812ae3d8db44845347c669bdbaa0f44e9597b25b3ac0cab91fb9214a589e4133701bc022812a0da60ef567424d43ccb16c71f284b60f16977fec7d84089", 0xf9}], 0x2, &(0x7f0000000500)=[{0xf8, 0x115, 0x3ff, "382ab683a32e3349674c8fa09d89a3fe89308836cfaa6d98d3367eb413e89311ceb27457395d885ed58cf0df13527f0b98b592e1415f831eb0d3b797e9bdbf847eef2fc06fc8539c01bcc17a121e98bd62da7dafd2e7360d343860d7ba491dbde5e6065f05dbc9c1dbca79d908e8b752c79c93c0a3d2abf42d64cd33fc4d2f698168a63ee5b00ffb4263c8489e7eee79be42775e659518dd472fba47b8ba0b4e4215ba602cf13e36191d904be773a9b2087c67917db990ef6c4114e5dd75cd7a8e5847987cdd123afdeba42e4fc3eb987d5b1d3fbaa7281d0d3c27119499436ab17c"}, {0xe8, 0x10d, 0x5, "9a1a3d890b5142ccb34dd5dde22faac79898a641c74d619baed9766fdd87c9ab82472dda5a63c5d352084539681bbbaa6a2beb0559442c368f0be339a01840c074a9313719e5b7d7de5ccbe7e685a650333c11e1cf4e2ab82c3c29295848c8fd6f188de3506f7051c4ffc2e19798769c85effe143824030bbee065d49a2c875d3ef67e414cd56b754fa466c94cc4791a01a4ac427e618a49f3a5296e963748e89dbf109e2bc1ce9fd99e298c3433eb3e850a4b5d6b0c73302bb0247844484828b508c9ea9f50d676fb5fd9826035251f88"}, {0x48, 0x10d, 0x28, "ca0b0f027371bb929e6ee485ffe28866020a470e9f4d4499477a89ac3851b91d1acb7cf94b43ed452cf27a9500e95018cfda86b0"}, {0x50, 0x1, 0x9, "bc8693d4b6edfbd5f57449ec662bb823bc46111d23d8e99e4c1e4e77bbf24614adb73d7ed174ea6c7c2ef29133f6d97a782f16e9cd0573e4fb7ef7"}, {0x110, 0x106, 0x6, "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"}, {0xf0, 0x108, 0xdd0, "be3d60160ec5b332f25529d3da441bc531b245e9d1a43f102e48cb71f8e9df996418504ad9554376092132ab980a019ebfe8c1fc8ed7c97e637f9322c96e07d29f1c220a4c3f4a334094fefeac463d290fd2c4bf9333ee5a3200d23bf47b267d36588538015ef9f01313843c1cff80b88e6d79c6f510d2b4820e191fa203f6ec100c5139eb9bc66dd009b5f1d7b7f1be212f58d76cd0b310598319fa41d190433d5ae13200178c01ef38d6d976887e4557973892c8a3ffea52f00229ef9c6bada2c29645ad240d6e1ce1e3b327f37134e48d6521a35faa58414fe7af8f"}, {0xc0, 0x29, 0x9720, "e357ef4f1159946bdd0afc8af35309eec3be374c2cc56ec5180aab69f4ac491addab1325770976611c5c1fe2d60bdcf476f229bcd6b877c6f2a10f23118518b547a0ea7b12903d93c87aef3e117c7d062e2a8f12a9cb9938bfa2a6e2461938ad1e5930bd67abeb7f6575505745fa4e9bf0112c3e86533df9fdd3b95bdce177c22c0fa9a69eb6417166d24731013e07d4b1e1efd782f4e3ab1d53629181fa7b205cea4b7abac5525a206b91f80afb5e"}, {0x18, 0x0, 0x9, "d5c8ee7bbe"}, {0x98, 0x34, 0x9, "b5c84da0faa37247c0d0e38fa3e8491379b23de0c693c4944d0a56ea613f1ac106bc886b59cfbbb0cb695cc365c8608d8fad4f55b11b8b457e2223261a71303d02c4c48614c73d869e0456b4a5cf0794ad7f4cd9f8000de6b3060db839f18c884ffd6f4cda20d2b327671c997740e2d27db8a1519fe7e5ec35f2900d9476f50f96c7f3f7af92"}], 0x5e8}, 0x800) 1.86534012s ago: executing program 4 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x19, 0x2, 0x4, 0x9, 0x80, r2, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x3, 0xa, 0x6, 0x6, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x9, 0x5, 0x3, 0x9, 0x5}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r4, r3, 0x4, r3}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e55dc3f2ddf33c9e9b986", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.797520822s ago: executing program 1 (id=2786): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006, 0x1, @perf_config_ext, 0x0, 0x10003, 0x80000000, 0x0, 0x2, 0x4, 0x9, 0x0, 0x6, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, r1, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 1.672848435s ago: executing program 3 (id=2787): perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe41, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x12211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10c042, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000700000095000000000000006100000600"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=r3, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x10000, 0x0, 0xc2ba}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r2, 0x11) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000040)=r2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.650411336s ago: executing program 1 (id=2788): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x1080d2, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x811}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x12, r1, 0x8, &(0x7f0000001700)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x10, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x12, r1, 0x8, &(0x7f0000001700)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4c}, 0x94) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}, {0x2b, 'rlimit'}, {0x2b, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}, {0x2b, 'pids'}, {0x2d, 'net_cls'}, {0x2d, 'net_cls'}]}, 0x4b) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) syz_clone(0x2000, &(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)="626a38067817f5a3904a9e6fef300d820348eb8c7dc0fac02824c6c07f17dffd527cbe1e7cb5987050b1282b2d3d92240f8f565075a8784be0") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0xe900) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b500fdff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r2}) 1.521436951s ago: executing program 0 (id=2789): r0 = syz_clone(0x8000480, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x210020000005) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) 1.441204603s ago: executing program 2 (id=2790): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2c, 0x12, 0x8, 0xd4, 0x0, 0x7, 0x12051, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x401, 0x6}, 0x105436, 0x2, 0x1, 0x5, 0x88e3, 0x4, 0xa, 0x0, 0x6, 0x0, 0x100000000}, 0xffffffffffffffff, 0x4, r1, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000002c0)) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='Y2', 0x2}], 0x1}, 0x24000810) 1.24496694s ago: executing program 2 (id=2791): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 32) close(r3) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0) (async) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006311210000200000851000000200000085000000000000009500000000eeffff9400000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) close(r7) r8 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r10, 0x85, &(0x7f0000000040)}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000500)=""/210}, 0x94) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0, r8, 0x8) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) 1.128184913s ago: executing program 3 (id=2792): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="760a0000020008006111500000000000180200000000000000000000000000009500000000000000a9733914c6636fd67e8e21974e9df583dc084e6f00acd39fb6b1fb02406b65cb08a91deb012b052057f19ca24b3e30bb734a7146b13e22e8079b239378347602206b301e4e5ddc49"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x2, 0xfb, 0x6, 0x0, 0x0, 0x34000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x120542, 0x9, 0x3, 0x2, 0x7, 0x4, 0x8, 0x0, 0x100, 0x0, 0x10001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) (async) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)="868f4aa971b5320d3b8fd227f1d716b1f3d95ad244944168c9dd15ebe173f588d58253d4d31495de45d02599b717c839b7e6066898edbf7b273dd88f0585e18cceb84684358be9738eb2655cb0b20d689e3144b13ce63d9aa3bfc06cbea6c5098fa3ec964631ab593fc7e90b244cb5db97e90bfb60fdbd5d443bbe01fb07626749d7e5e7dc07") perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x42, 0x2, 0xff, 0x0, 0x96, 0x2106, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000280), 0x8}, 0x8808, 0x8, 0x828, 0xb, 0x4, 0x1000, 0xb, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, r1, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b400003b900000000000619e89ac164934721d000000a50000009500000000000000ed37b97445d2a96d535bb569ee6ba12a2b585ee59d419e1fa7bb6a79a4f62c7c05b8ec99e8d97f6731b6bef53dd384bff6957eba8d6efdc401a4b6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x100000, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x111, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x1}, 0x50) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) (async, rerun: 32) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async, rerun: 32) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x2, 0x5, 0x84) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) 1.094338614s ago: executing program 2 (id=2793): openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x41, 0x0, 0x8f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x20040040) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0xc0, 0x9, 0x3e, 0x35, 0x0, 0x7ff, 0x20004, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x8, 0x4d64e75a}, 0x80, 0x2, 0x9, 0x8, 0x5, 0x401, 0x8001, 0x0, 0x1, 0x0, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffd8c, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x101) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000280)={0xe73ce4021b603e20, 0x80, 0x8, 0x6, 0xd, 0xb1, 0x0, 0x80000000, 0x1, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7d, 0x1, @perf_config_ext={0x8, 0x8}, 0x8c10, 0x5, 0x101, 0x4, 0x6, 0x8000, 0xfe01, 0x0, 0xffffffc7, 0x0, 0x4e}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x890c, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000734ff9878794ffbca2f1607f959b4153d68732bec0d8d23a4bc93acdb023ea097400a3ddaf42d8d0924619ef648ef1ce52fe496f023d5f5b7421f65ceecbe8dbe00d08faba4f5cc61669c365dfac8346ff29a5907251ad0c2c2f04a2ad2ba1284bcc5ebdd0936e3c6318e590d8d8e94812e1de76e750b0a3a6e24844e4732c666f09f8916efa0b3eb5b106e1d606934ae9193d9528c55d30773ebd81938311a848ae0f2631aeb00c0cbd5ec7c9de398215fa5cc49e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x25, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xc5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x1}, 0x94) 892.874811ms ago: executing program 3 (id=2794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x6f) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0x0, 0x1005}, 0x50) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000030c0)=""/4061, 0xfdd}, {&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000100)=""/36, 0x24}], 0x4}, 0x0) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500005016ff0100000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 892.489741ms ago: executing program 1 (id=2795): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0xabe8420435859593}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open$cgroup(&(0x7f0000000d40)={0x4, 0x80, 0x1, 0xc0, 0x9, 0x1, 0x0, 0x5, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x3}, 0xe3e6b88b8cd3202, 0xfffffffffffffffb, 0x9, 0x9, 0x1000, 0x5, 0x0, 0x0, 0x800002, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0xa, r0, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000dc0)=0x69fe) r4 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000bc0)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe1a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000500000000080006", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) 835.937583ms ago: executing program 4 (id=2796): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x6568, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000181200", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}, 0x41) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000500)=r8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r8, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf4}, [@call={0x85, 0x0, 0x0, 0x14}, @ldst={0x1, 0x3, 0x0, 0x5, 0x9, 0xc, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @generic={0x8, 0x2, 0x7, 0x8, 0x2b}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4c}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}]}, &(0x7f0000000700)='syzkaller\x00', 0xfffff005, 0xe3, &(0x7f0000000940)=""/227, 0x41000, 0x38, '\x00', r10, 0x18, r3, 0x8, &(0x7f0000000b00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xc, 0x3, 0x5}, 0x10, 0x1d76c, r2, 0xa, 0x0, &(0x7f0000000c40)=[{0x3, 0x1, 0x7, 0x9}, {0x4, 0x1, 0x4, 0x1}, {0x2, 0x4, 0x5, 0x9}, {0x5, 0x3, 0x4, 0x8}, {0x5, 0x1, 0x6, 0x5}, {0x3, 0x2, 0x7, 0x6}, {0x4, 0x4, 0xb, 0x9}, {0x1, 0x1, 0xe, 0x8}, {0x5, 0x5, 0x8, 0xa}, {0x4, 0x5, 0xb, 0x8}], 0x10, 0x4}, 0x94) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r5, 0xe, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0]}, 0x40) 432.155636ms ago: executing program 0 (id=2797): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006b000000760000000000000027000000000000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006b000000760000000000000027000000000000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) (async) 340.918379ms ago: executing program 1 (id=2798): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059fe", 0x6}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x1009, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x20000005}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x39, &(0x7f0000000100)=r4, 0x120) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0xf000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 300.02309ms ago: executing program 2 (id=2799): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) (async) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r5, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010011201000"}) 281.286921ms ago: executing program 0 (id=2800): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x11}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x25, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8010, 0x0, 0x0, 0x0, 0x40001}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6ee0}, 0x6001, 0x8000000000, 0x4, 0x6, 0x7, 0x3000000a, 0xfffc, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(0x3) 78.281938ms ago: executing program 3 (id=2801): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x80, 0xc2ba, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'perf_event'}, {0x2b, 'cpuset'}, {0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'net_prio'}]}, 0x42) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r0) 0s ago: executing program 3 (id=2802): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012000000", @ANYRES32=0x0, @ANYRES32], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1b, &(0x7f00000001c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) r7 = getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 241.126660][ T7027] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 241.132255][ T7027] ? security_sctp_bind_connect+0x85/0xb0 [ 241.138026][ T7027] sctp_sendmsg+0x165d/0x2a40 [ 241.142773][ T7027] ? sctp_getsockopt+0x8a0/0x8a0 [ 241.147760][ T7027] ? __lock_acquire+0x7d10/0x7d10 [ 241.152840][ T7027] ? aa_af_perm+0x340/0x340 [ 241.157447][ T7027] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 241.163909][ T7027] ? inet_sendmsg+0x78/0x2f0 [ 241.168525][ T7027] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 241.173841][ T7027] ? security_socket_sendmsg+0x7c/0xa0 [ 241.179330][ T7027] ? inet_send_prepare+0x260/0x260 [ 241.184560][ T7027] ____sys_sendmsg+0x5be/0x970 [ 241.189370][ T7027] ? __sys_sendmsg_sock+0x30/0x30 [ 241.194416][ T7027] ? __import_iovec+0x315/0x500 [ 241.199305][ T7027] ? import_iovec+0x6f/0xa0 [ 241.203837][ T7027] ___sys_sendmsg+0x2a2/0x360 [ 241.208549][ T7027] ? __sys_sendmsg+0x290/0x290 [ 241.213361][ T7027] ? __lock_acquire+0x7d10/0x7d10 [ 241.218448][ T7027] __se_sys_sendmsg+0x1bb/0x2a0 [ 241.223329][ T7027] ? __x64_sys_sendmsg+0x80/0x80 [ 241.228311][ T7027] ? lockdep_hardirqs_on+0x94/0x140 [ 241.233547][ T7027] do_syscall_64+0x4c/0xa0 [ 241.237997][ T7027] ? clear_bhb_loop+0x60/0xb0 [ 241.242706][ T7027] ? clear_bhb_loop+0x60/0xb0 [ 241.247416][ T7027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.253343][ T7027] RIP: 0033:0x7fc684f9ce59 [ 241.257783][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.277428][ T7027] RSP: 002b:00007fc685e89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.285869][ T7027] RAX: ffffffffffffffda RBX: 00007fc685216090 RCX: 00007fc684f9ce59 [ 241.293956][ T7027] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000004 [ 241.301948][ T7027] RBP: 00007fc685e89090 R08: 0000000000000000 R09: 0000000000000000 [ 241.309943][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.317939][ T7027] R13: 00007fc685216128 R14: 00007fc685216090 R15: 00007ffd99afe798 [ 241.325978][ T7027] [ 241.444421][ T7035] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.752'. [ 241.516446][ T7035] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 241.552211][ T7035] CPU: 1 PID: 7035 Comm: syz.4.752 Not tainted syzkaller #0 [ 241.559594][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.569697][ T7035] Call Trace: [ 241.573022][ T7035] [ 241.575997][ T7035] dump_stack_lvl+0x188/0x24e [ 241.580748][ T7035] ? show_regs_print_info+0x12/0x12 [ 241.586002][ T7035] ? load_image+0x400/0x400 [ 241.590586][ T7035] sysfs_warn_dup+0x8a/0xa0 [ 241.595155][ T7035] sysfs_do_create_link_sd+0xc0/0x110 [ 241.600585][ T7035] device_add+0x7f6/0x1000 [ 241.605082][ T7035] wiphy_register+0x1d9f/0x2ac0 [ 241.610012][ T7035] ? cfg80211_event_work+0x40/0x40 [ 241.615177][ T7035] ? minstrel_ht_alloc+0x894/0xa20 [ 241.620328][ T7035] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 241.626445][ T7035] ieee80211_register_hw+0x2d00/0x39f0 [ 241.631948][ T7035] ? ieee80211_register_hw+0xec1/0x39f0 [ 241.637522][ T7035] ? ieee80211_register_hw+0xec1/0x39f0 [ 241.643114][ T7035] ? ieee80211_tasklet_handler+0x20/0x20 [ 241.648786][ T7035] ? memset+0x1e/0x40 [ 241.652805][ T7035] ? __hrtimer_init+0x186/0x270 [ 241.657691][ T7035] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 241.663476][ T7035] hwsim_new_radio_nl+0xafa/0xce0 [ 241.668568][ T7035] genl_family_rcv_msg_doit+0x22a/0x330 [ 241.674157][ T7035] ? end_current_label_crit_section+0x170/0x170 [ 241.680437][ T7035] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 241.686374][ T7035] ? bpf_lsm_capable+0x5/0x10 [ 241.691082][ T7035] ? security_capable+0x85/0xb0 [ 241.695973][ T7035] genl_rcv_msg+0x604/0x790 [ 241.700530][ T7035] ? genl_bind+0x360/0x360 [ 241.704978][ T7035] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 241.711357][ T7035] netlink_rcv_skb+0x1fb/0x450 [ 241.716171][ T7035] ? genl_bind+0x360/0x360 [ 241.720620][ T7035] ? netlink_ack+0x1170/0x1170 [ 241.725424][ T7035] ? down_read+0x1a8/0x2d0 [ 241.729871][ T7035] genl_rcv+0x24/0x40 [ 241.733883][ T7035] netlink_unicast+0x74d/0x8d0 [ 241.738687][ T7035] netlink_sendmsg+0x8ad/0xbd0 [ 241.743497][ T7035] ? netlink_getsockopt+0x550/0x550 [ 241.748726][ T7035] ? aa_sock_msg_perm+0x94/0x150 [ 241.753704][ T7035] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 241.759016][ T7035] ? security_socket_sendmsg+0x7c/0xa0 [ 241.764511][ T7035] ? netlink_getsockopt+0x550/0x550 [ 241.769736][ T7035] ____sys_sendmsg+0x5be/0x970 [ 241.774551][ T7035] ? __sys_sendmsg_sock+0x30/0x30 [ 241.779600][ T7035] ? __import_iovec+0x315/0x500 [ 241.784488][ T7035] ? import_iovec+0x6f/0xa0 [ 241.789034][ T7035] ___sys_sendmsg+0x2a2/0x360 [ 241.793737][ T7035] ? try_to_wake_up+0x6ae/0x1080 [ 241.798715][ T7035] ? __sys_sendmsg+0x290/0x290 [ 241.803570][ T7035] __se_sys_sendmsg+0x1bb/0x2a0 [ 241.808451][ T7035] ? __x64_sys_sendmsg+0x80/0x80 [ 241.813428][ T7035] ? lockdep_hardirqs_on+0x94/0x140 [ 241.818661][ T7035] do_syscall_64+0x4c/0xa0 [ 241.823107][ T7035] ? clear_bhb_loop+0x60/0xb0 [ 241.827872][ T7035] ? clear_bhb_loop+0x60/0xb0 [ 241.832590][ T7035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.838531][ T7035] RIP: 0033:0x7fb429f9ce59 [ 241.843064][ T7035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.862722][ T7035] RSP: 002b:00007fb42aeb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.871173][ T7035] RAX: ffffffffffffffda RBX: 00007fb42a216180 RCX: 00007fb429f9ce59 [ 241.879188][ T7035] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 241.887190][ T7035] RBP: 00007fb42a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 241.895194][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.903188][ T7035] R13: 00007fb42a216218 R14: 00007fb42a216180 R15: 00007ffc8a3942e8 [ 241.911217][ T7035] [ 242.425612][ T7036] netlink: 'syz.1.751': attribute type 21 has an invalid length. [ 242.484062][ T7036] netlink: 128 bytes leftover after parsing attributes in process `syz.1.751'. [ 242.513859][ T7036] netlink: 'syz.1.751': attribute type 4 has an invalid length. [ 242.554515][ T7036] netlink: 'syz.1.751': attribute type 5 has an invalid length. [ 242.562259][ T7036] netlink: 3 bytes leftover after parsing attributes in process `syz.1.751'. [ 242.635755][ T7052] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 242.872220][ T7052] device geneve0 entered promiscuous mode [ 243.023876][ T7052] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 243.554944][ T7080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.764'. [ 243.672611][ T7082] netlink: 'syz.1.764': attribute type 12 has an invalid length. [ 243.763752][ T7082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.764'. [ 244.021144][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.047135][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.463982][ T7118] device wlan1 entered promiscuous mode [ 246.509528][ T7160] netlink: 10 bytes leftover after parsing attributes in process `syz.3.784'. [ 246.951723][ T7173] netlink: 'syz.1.786': attribute type 8 has an invalid length. [ 247.023214][ T7173] netlink: 156 bytes leftover after parsing attributes in process `syz.1.786'. [ 247.947943][ T7182] device wlan1 entered promiscuous mode [ 249.389613][ T7218] netlink: 'syz.1.800': attribute type 8 has an invalid length. [ 249.430584][ T7218] netlink: 156 bytes leftover after parsing attributes in process `syz.1.800'. [ 249.498842][ T7217] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 249.532544][ T7217] netlink: 'syz.2.801': attribute type 8 has an invalid length. [ 249.547771][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.801'. [ 250.049312][ T7236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.806'. [ 250.790701][ T7239] device wlan1 left promiscuous mode [ 251.585412][ T7272] netlink: 188 bytes leftover after parsing attributes in process `syz.3.817'. [ 251.640597][ T7275] netlink: 'syz.1.818': attribute type 8 has an invalid length. [ 251.667261][ T7275] netlink: 156 bytes leftover after parsing attributes in process `syz.1.818'. [ 252.367638][ T7288] netlink: 156 bytes leftover after parsing attributes in process `syz.2.824'. [ 252.614322][ T7291] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 254.815264][ T7333] netlink: 'syz.4.839': attribute type 27 has an invalid length. [ 255.028910][ T7341] netlink: 'syz.2.841': attribute type 21 has an invalid length. [ 255.085599][ T7341] netlink: 'syz.2.841': attribute type 4 has an invalid length. [ 255.149824][ T7341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.841'. [ 255.378691][ T7345] device wlan1 left promiscuous mode [ 255.756545][ T7359] netlink: 3291 bytes leftover after parsing attributes in process `syz.0.846'. [ 255.768626][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.768728][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.339078][ T7375] netlink: 'syz.0.851': attribute type 7 has an invalid length. [ 256.588195][ T7377] netlink: 'syz.3.852': attribute type 29 has an invalid length. [ 256.607182][ T7377] netlink: 'syz.3.852': attribute type 29 has an invalid length. [ 256.746505][ T7383] netlink: 'syz.3.852': attribute type 29 has an invalid length. [ 256.938697][ T7386] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.854'. [ 257.765386][ T7414] netlink: 'syz.0.860': attribute type 33 has an invalid length. [ 257.773220][ T7414] netlink: 152 bytes leftover after parsing attributes in process `syz.0.860'. [ 258.325767][ T7435] netlink: 156 bytes leftover after parsing attributes in process `syz.1.864'. [ 259.921670][ T7514] netlink: 'syz.3.871': attribute type 2 has an invalid length. [ 259.992723][ T7517] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.872'. [ 260.214641][ T7526] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.875'. [ 260.240236][ T7526] netlink: zone id is out of range [ 260.255046][ T7526] netlink: zone id is out of range [ 260.278704][ T7526] netlink: zone id is out of range [ 260.307967][ T7526] netlink: get zone limit has 8 unknown bytes [ 260.328663][ T7531] netlink: 180 bytes leftover after parsing attributes in process `syz.0.875'. [ 261.572420][ T7560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.884'. [ 262.150229][ T7580] netlink: 'syz.2.891': attribute type 10 has an invalid length. [ 262.220246][ T7580] netlink: 2 bytes leftover after parsing attributes in process `syz.2.891'. [ 262.235613][ T7580] device hsr0 entered promiscuous mode [ 262.246195][ T7580] bridge0: port 3(hsr0) entered blocking state [ 262.257208][ T7580] bridge0: port 3(hsr0) entered disabled state [ 262.270576][ T7580] bridge0: port 3(hsr0) entered blocking state [ 262.277020][ T7580] bridge0: port 3(hsr0) entered forwarding state [ 262.293196][ T7582] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.892'. [ 262.316856][ T7588] netlink: 'syz.4.893': attribute type 8 has an invalid length. [ 262.327612][ T7588] netlink: 156 bytes leftover after parsing attributes in process `syz.4.893'. [ 262.869352][ T7607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.900'. [ 262.920954][ T7607] openvswitch: netlink: Message has 6 unknown bytes. [ 263.148837][ T7613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.903'. [ 263.853952][ T7637] netlink: 'syz.1.908': attribute type 11 has an invalid length. [ 263.954600][ T7637] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.023733][ T7634] netlink: 'syz.1.908': attribute type 11 has an invalid length. [ 264.058560][ T7634] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.451400][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.790251][ T7657] netlink: 'syz.0.914': attribute type 8 has an invalid length. [ 266.813650][ T7657] netlink: 156 bytes leftover after parsing attributes in process `syz.0.914'. [ 267.053515][ T7661] netlink: 140 bytes leftover after parsing attributes in process `syz.2.916'. [ 267.692300][ T7686] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 270.632971][ T7695] netlink: 'syz.1.925': attribute type 8 has an invalid length. [ 270.693040][ T7695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.925'. [ 270.753194][ T7696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.924'. [ 270.864979][ T7706] netlink: 463 bytes leftover after parsing attributes in process `syz.4.927'. [ 270.961653][ T7708] device bridge_slave_1 left promiscuous mode [ 270.989741][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.048634][ T7708] device bridge_slave_0 left promiscuous mode [ 271.071003][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.109697][ T7713] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.930'. [ 271.186325][ T7708] bond0: (slave bridge0): Releasing backup interface [ 271.552491][ T7718] netlink: 'syz.3.932': attribute type 275 has an invalid length. [ 271.709058][ T7723] netlink: 72 bytes leftover after parsing attributes in process `syz.1.933'. [ 271.856008][ T7731] netlink: 'syz.0.934': attribute type 21 has an invalid length. [ 271.892454][ T7731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.934'. [ 272.173129][ T7726] netlink: 'syz.4.935': attribute type 33 has an invalid length. [ 272.211423][ T7726] netlink: 152 bytes leftover after parsing attributes in process `syz.4.935'. [ 272.512394][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'. [ 272.890201][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'. [ 273.204719][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 273.417604][ T7793] netlink: 'syz.0.939': attribute type 5 has an invalid length. [ 273.597386][ T7795] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.939'. [ 274.014402][ T7806] netlink: 'syz.4.941': attribute type 11 has an invalid length. [ 274.130103][ T7806] netlink: 'syz.4.941': attribute type 11 has an invalid length. [ 274.280328][ T7808] device syzkaller0 entered promiscuous mode [ 274.573601][ T7799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.300892][ T7830] netlink: 'syz.4.949': attribute type 21 has an invalid length. [ 275.900407][ T7839] IPv6: pim6reg1: Disabled Multicast RS [ 277.862122][ T7885] netlink: 'syz.4.966': attribute type 16 has an invalid length. [ 277.909633][ T7885] __nla_validate_parse: 3 callbacks suppressed [ 277.909757][ T7885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.966'. [ 281.001261][ T7886] netlink: 'syz.3.965': attribute type 21 has an invalid length. [ 281.010059][ T7886] netlink: 152 bytes leftover after parsing attributes in process `syz.3.965'. [ 281.021753][ T7895] netlink: 'syz.4.966': attribute type 10 has an invalid length. [ 281.844998][ T7931] netlink: 463 bytes leftover after parsing attributes in process `syz.2.978'. [ 282.224838][ T7933] netlink: 'syz.0.979': attribute type 3 has an invalid length. [ 282.274672][ T7933] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.979'. [ 283.864442][ T7969] netlink: 'syz.2.990': attribute type 8 has an invalid length. [ 283.873292][ T7969] netlink: 156 bytes leftover after parsing attributes in process `syz.2.990'. [ 284.937087][ T7996] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 284.954624][ T7996] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.999'. [ 284.967117][ T7996] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.999'. [ 285.720198][ T8018] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1004'. [ 286.062345][ T8026] netlink: 'syz.1.1006': attribute type 28 has an invalid length. [ 286.330722][ T8037] netlink: 'syz.2.1009': attribute type 8 has an invalid length. [ 286.343653][ T8037] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1009'. [ 286.654418][ T8051] netlink: 'syz.3.1014': attribute type 11 has an invalid length. [ 286.662592][ T8051] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1014'. [ 287.329116][ T8059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1015'. [ 287.358861][ T8059] netlink: 'syz.2.1015': attribute type 12 has an invalid length. [ 287.394842][ T8059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1015'. [ 289.772489][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.964278][ T8078] delete_channel: no stack [ 289.999137][ T8078] delete_channel: no stack [ 290.307773][ T8093] netlink: 'syz.4.1025': attribute type 8 has an invalid length. [ 290.323510][ T8093] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1025'. [ 290.442083][ T8100] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1029'. [ 290.607740][ T8105] netlink: 'syz.3.1030': attribute type 11 has an invalid length. [ 290.620045][ T8107] netlink: 'syz.2.1031': attribute type 1 has an invalid length. [ 290.629872][ T8107] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1031'. [ 290.643025][ T8105] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1030'. [ 290.781807][ T8109] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1032'. [ 291.207099][ T4276] Bluetooth: hci1: unexpected event 0x3d length: 15 > 14 [ 291.367574][ T8105] device syzkaller0 entered promiscuous mode [ 292.254577][ T8152] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 292.273060][ T8152] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1043'. [ 294.257018][ T8134] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1038'. [ 294.290561][ T8144] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 294.326810][ T8144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 294.342878][ T8144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 294.606398][ T8167] netlink: 'syz.4.1046': attribute type 8 has an invalid length. [ 294.636966][ T8167] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1046'. [ 294.991829][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 2097 [ 295.076528][ T8181] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 295.109435][ T8182] netlink: 'syz.0.1052': attribute type 10 has an invalid length. [ 295.287096][ T8182] team0: Port device macvlan1 added [ 295.433337][ T8187] netlink: 'syz.2.1054': attribute type 28 has an invalid length. [ 295.591410][ T8194] netlink: 'syz.4.1055': attribute type 11 has an invalid length. [ 295.629077][ T8194] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1055'. [ 295.688663][ T8188] netlink: 'syz.1.1053': attribute type 10 has an invalid length. [ 295.708513][ T8188] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1053'. [ 296.313738][ T8208] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1058'. [ 296.774267][ T8208] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 297.404871][ T8225] delete_channel: no stack [ 297.533383][ T8231] netlink: 'syz.4.1065': attribute type 8 has an invalid length. [ 297.560621][ T8231] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1065'. [ 297.628986][ T8229] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1066'. [ 297.645548][ T8229] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 297.708835][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.964291][ T8238] netlink: 'syz.3.1068': attribute type 21 has an invalid length. [ 297.973615][ T8238] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1068'. [ 298.190368][ T8240] netlink: 'syz.0.1069': attribute type 28 has an invalid length. [ 298.595801][ T8251] netlink: 'syz.1.1072': attribute type 11 has an invalid length. [ 298.654240][ T8251] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1072'. [ 299.045633][ T8251] device syzkaller0 entered promiscuous mode [ 299.064982][ T8261] IPv6: Can't replace route, no match found [ 303.647217][ T8284] netlink: 'syz.3.1081': attribute type 8 has an invalid length. [ 303.659272][ T8284] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1081'. [ 303.861859][ T8342] netlink: 'syz.3.1087': attribute type 12 has an invalid length. [ 303.884712][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1087'. [ 303.970049][ T8353] netlink: 'syz.1.1088': attribute type 28 has an invalid length. [ 304.242695][ T8363] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1092'. [ 304.436907][ T8373] device syzkaller0 entered promiscuous mode [ 304.512749][ T8363] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 304.831565][ T8384] netlink: 'syz.1.1097': attribute type 8 has an invalid length. [ 304.850316][ T8384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1097'. [ 307.535815][ T8397] device syzkaller0 entered promiscuous mode [ 307.542269][ T8397] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 307.550506][ T8404] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 307.558897][ T8404] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1104'. [ 307.761218][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1110'. [ 307.824829][ T8436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1110'. [ 307.902674][ T8439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1110'. [ 307.922534][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1110'. [ 308.020821][ T8447] device syzkaller0 entered promiscuous mode [ 308.175602][ T8449] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1113'. [ 308.215383][ T8456] netlink: 'syz.4.1115': attribute type 8 has an invalid length. [ 308.300923][ T8449] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 310.179397][ T8495] netlink: 'syz.1.1127': attribute type 4 has an invalid length. [ 310.191423][ T8495] __nla_validate_parse: 1 callbacks suppressed [ 310.191438][ T8495] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1127'. [ 310.506413][ T8512] netlink: 'syz.2.1132': attribute type 6 has an invalid length. [ 310.534676][ T8512] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1132'. [ 314.818601][ T8606] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 316.001976][ T8635] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1170'. [ 316.102385][ T8639] netlink: 'syz.0.1172': attribute type 3 has an invalid length. [ 316.123713][ T8639] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 316.131712][ T8639] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1172'. [ 316.796123][ T8652] netlink: 'syz.0.1174': attribute type 6 has an invalid length. [ 317.227904][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.234778][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.400672][ T8665] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1178'. [ 317.732027][ T8669] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 318.614039][ T8684] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1184'. [ 318.644743][ T8684] openvswitch: netlink: Message has 6 unknown bytes. [ 319.397798][ T8688] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1185'. [ 321.248233][ T8722] netlink: 'syz.3.1194': attribute type 14 has an invalid length. [ 321.425103][ T8722] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1194'. [ 321.525263][ T8728] netlink: 'syz.0.1198': attribute type 2 has an invalid length. [ 321.573151][ T8728] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1198'. [ 321.922690][ T8731] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1197'. [ 322.141025][ T8731] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 322.199620][ T8731] CPU: 1 PID: 8731 Comm: syz.2.1197 Not tainted syzkaller #0 [ 322.207093][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.217204][ T8731] Call Trace: [ 322.220538][ T8731] [ 322.223520][ T8731] dump_stack_lvl+0x188/0x24e [ 322.228259][ T8731] ? show_regs_print_info+0x12/0x12 [ 322.233520][ T8731] ? load_image+0x400/0x400 [ 322.238109][ T8731] sysfs_warn_dup+0x8a/0xa0 [ 322.242680][ T8731] sysfs_do_create_link_sd+0xc0/0x110 [ 322.248121][ T8731] device_add+0x7f6/0x1000 [ 322.252608][ T8731] wiphy_register+0x1d9f/0x2ac0 [ 322.257544][ T8731] ? cfg80211_event_work+0x40/0x40 [ 322.262720][ T8731] ? minstrel_ht_alloc+0x894/0xa20 [ 322.267901][ T8731] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 322.274036][ T8731] ieee80211_register_hw+0x2d00/0x39f0 [ 322.279554][ T8731] ? lockdep_hardirqs_on+0x94/0x140 [ 322.284829][ T8731] ? ieee80211_register_hw+0xec1/0x39f0 [ 322.290440][ T8731] ? ieee80211_register_hw+0xec1/0x39f0 [ 322.296227][ T8731] ? ieee80211_tasklet_handler+0x20/0x20 [ 322.301928][ T8731] ? memset+0x1e/0x40 [ 322.305962][ T8731] ? __hrtimer_init+0x186/0x270 [ 322.310879][ T8731] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 322.316682][ T8731] hwsim_new_radio_nl+0xafa/0xce0 [ 322.321789][ T8731] genl_family_rcv_msg_doit+0x22a/0x330 [ 322.327402][ T8731] ? end_current_label_crit_section+0x170/0x170 [ 322.333707][ T8731] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 322.339669][ T8731] ? bpf_lsm_capable+0x5/0x10 [ 322.344403][ T8731] ? security_capable+0x85/0xb0 [ 322.349324][ T8731] genl_rcv_msg+0x604/0x790 [ 322.353882][ T8731] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 322.360116][ T8731] ? genl_bind+0x360/0x360 [ 322.364615][ T8731] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 322.371008][ T8731] ? lock_acquire+0x225/0x4a0 [ 322.375754][ T8731] netlink_rcv_skb+0x1fb/0x450 [ 322.380584][ T8731] ? genl_bind+0x360/0x360 [ 322.385065][ T8731] ? netlink_ack+0x1170/0x1170 [ 322.389896][ T8731] ? down_read+0x1a8/0x2d0 [ 322.394375][ T8731] genl_rcv+0x24/0x40 [ 322.398413][ T8731] netlink_unicast+0x74d/0x8d0 [ 322.403251][ T8731] netlink_sendmsg+0x8ad/0xbd0 [ 322.408084][ T8731] ? netlink_getsockopt+0x550/0x550 [ 322.413345][ T8731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.418701][ T8731] ? security_socket_sendmsg+0x7c/0xa0 [ 322.424211][ T8731] ? netlink_getsockopt+0x550/0x550 [ 322.429468][ T8731] ____sys_sendmsg+0x5be/0x970 [ 322.434306][ T8731] ? __sys_sendmsg_sock+0x30/0x30 [ 322.439383][ T8731] ? __import_iovec+0x315/0x500 [ 322.444302][ T8731] ? import_iovec+0x6f/0xa0 [ 322.448858][ T8731] ___sys_sendmsg+0x2a2/0x360 [ 322.453611][ T8731] ? __sys_sendmsg+0x290/0x290 [ 322.458425][ T8731] ? irqentry_enter+0x33/0x50 [ 322.463175][ T8731] ? rcu_is_watching+0x11/0xa0 [ 322.468018][ T8731] ? __se_sys_sendmsg+0xd5/0x2a0 [ 322.473068][ T8731] __se_sys_sendmsg+0x1bb/0x2a0 [ 322.477974][ T8731] ? __x64_sys_sendmsg+0x80/0x80 [ 322.482987][ T8731] ? lockdep_hardirqs_on+0x94/0x140 [ 322.488248][ T8731] do_syscall_64+0x4c/0xa0 [ 322.492710][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 322.497448][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 322.502201][ T8731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.508159][ T8731] RIP: 0033:0x7f2f9499ce59 [ 322.512624][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.532285][ T8731] RSP: 002b:00007f2f9578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.540849][ T8731] RAX: ffffffffffffffda RBX: 00007f2f94c16090 RCX: 00007f2f9499ce59 [ 322.548967][ T8731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 322.556999][ T8731] RBP: 00007f2f94a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 322.565020][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.573043][ T8731] R13: 00007f2f94c16128 R14: 00007f2f94c16090 R15: 00007ffc09980238 [ 322.581108][ T8731] [ 323.081902][ T8760] netlink: 'syz.4.1205': attribute type 2 has an invalid length. [ 323.102139][ T8760] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1205'. [ 323.111871][ T8761] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1204'. [ 323.497825][ T8772] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 323.516962][ T8772] netlink: 'syz.2.1208': attribute type 4 has an invalid length. [ 323.544592][ T8772] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.1208'. [ 323.583504][ T8770] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 323.714684][ T8770] device 0 entered promiscuous mode [ 325.249753][ T8797] netlink: 'syz.4.1215': attribute type 14 has an invalid length. [ 325.375602][ T8797] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1215'. [ 325.662175][ T8799] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1225'. [ 325.903803][ T8799] openvswitch: netlink: Message has 6 unknown bytes. [ 327.581023][ T8809] device syzkaller0 entered promiscuous mode [ 328.334527][ T8813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1220'. [ 328.863247][ T8826] netlink: 'syz.1.1221': attribute type 3 has an invalid length. [ 328.952709][ T8826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1221'. [ 330.148942][ T8831] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1222'. [ 333.395711][ T8831] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 333.415361][ T8831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 333.460576][ T8831] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.123836][ T8852] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 334.174850][ T8852] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1229'. [ 335.075373][ T8858] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1231'. [ 335.090990][ T8859] netlink: 'syz.3.1230': attribute type 21 has an invalid length. [ 335.101100][ T8859] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1230'. [ 336.048135][ T8882] device bond_slave_1 entered promiscuous mode [ 336.868107][ T8895] netlink: 'syz.3.1241': attribute type 2 has an invalid length. [ 337.711436][ T8908] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 337.747144][ T8908] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1245'. [ 337.795043][ T8909] netlink: 'syz.3.1245': attribute type 2 has an invalid length. [ 337.814588][ T8909] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1245'. [ 338.214575][ T8920] netlink: 'syz.1.1250': attribute type 11 has an invalid length. [ 338.233323][ T8920] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1250'. [ 339.040993][ T8919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.465825][ T8944] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.1258'. [ 341.754918][ T8959] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 341.780695][ T8959] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1265'. [ 342.996659][ T8978] netlink: 'syz.4.1268': attribute type 27 has an invalid length. [ 343.036137][ T8978] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1268'. [ 343.094549][ T8985] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1269'. [ 343.788477][ T9000] netlink: 'syz.3.1275': attribute type 39 has an invalid length. [ 343.968927][ T9000] device veth0_macvtap left promiscuous mode [ 345.284355][ T9042] netlink: 'syz.2.1284': attribute type 2 has an invalid length. [ 345.353538][ T9042] device 0 entered promiscuous mode [ 346.028535][ T9067] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1292'. [ 347.052527][ T9082] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 347.064901][ T9082] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1294'. [ 348.284900][ T9092] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1297'. [ 349.211538][ T9112] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 349.495836][ T9123] netlink: 'syz.2.1312': attribute type 2 has an invalid length. [ 349.553309][ T9112] device 0 entered promiscuous mode [ 349.611869][ T9123] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1312'. [ 350.622898][ T9153] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1315'. [ 351.212255][ T9176] netlink: 'syz.3.1322': attribute type 3 has an invalid length. [ 351.294944][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1322'. [ 352.209288][ T9212] netlink: 'syz.1.1334': attribute type 29 has an invalid length. [ 352.350105][ T9212] netlink: 'syz.1.1334': attribute type 29 has an invalid length. [ 352.478871][ T9219] netlink: 'syz.1.1334': attribute type 29 has an invalid length. [ 353.602404][ T9231] FAULT_INJECTION: forcing a failure. [ 353.602404][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.660244][ T9231] CPU: 0 PID: 9231 Comm: syz.1.1338 Not tainted syzkaller #0 [ 353.667707][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.677803][ T9231] Call Trace: [ 353.681121][ T9231] [ 353.684099][ T9231] dump_stack_lvl+0x188/0x24e [ 353.688819][ T9231] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.695030][ T9231] ? show_regs_print_info+0x12/0x12 [ 353.700272][ T9231] ? load_image+0x400/0x400 [ 353.704869][ T9231] should_fail_ex+0x399/0x4d0 [ 353.709594][ T9231] _copy_from_user+0x2c/0x170 [ 353.714323][ T9231] __sys_bpf+0x2ea/0x780 [ 353.718619][ T9231] ? bpf_link_show_fdinfo+0x380/0x380 [ 353.724076][ T9231] __x64_sys_bpf+0x78/0x90 [ 353.728546][ T9231] do_syscall_64+0x4c/0xa0 [ 353.733004][ T9231] ? clear_bhb_loop+0x60/0xb0 [ 353.737740][ T9231] ? clear_bhb_loop+0x60/0xb0 [ 353.742563][ T9231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.748621][ T9231] RIP: 0033:0x7f3c75b9ce59 [ 353.753079][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.772724][ T9231] RSP: 002b:00007f3c76a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.781177][ T9231] RAX: ffffffffffffffda RBX: 00007f3c75e15fa0 RCX: 00007f3c75b9ce59 [ 353.789204][ T9231] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 353.797216][ T9231] RBP: 00007f3c76a03090 R08: 0000000000000000 R09: 0000000000000000 [ 353.805231][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.813247][ T9231] R13: 00007f3c75e16038 R14: 00007f3c75e15fa0 R15: 00007ffdeed907f8 [ 353.821283][ T9231] [ 355.123602][ T9240] netlink: 'syz.0.1342': attribute type 21 has an invalid length. [ 355.159677][ T9240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1342'. [ 355.279389][ T9246] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1344'. [ 355.309470][ T9243] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1342'. [ 356.469022][ T9267] FAULT_INJECTION: forcing a failure. [ 356.469022][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.492298][ T9267] CPU: 0 PID: 9267 Comm: syz.0.1350 Not tainted syzkaller #0 [ 356.499749][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.509852][ T9267] Call Trace: [ 356.513170][ T9267] [ 356.516134][ T9267] dump_stack_lvl+0x188/0x24e [ 356.520859][ T9267] ? show_regs_print_info+0x12/0x12 [ 356.526100][ T9267] ? load_image+0x400/0x400 [ 356.530660][ T9267] ? __lock_acquire+0x7d10/0x7d10 [ 356.535743][ T9267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 356.541961][ T9267] should_fail_ex+0x399/0x4d0 [ 356.546684][ T9267] strncpy_from_user+0x32/0x350 [ 356.551591][ T9267] bpf_prog_load+0x1f3/0x1560 [ 356.556329][ T9267] ? map_freeze+0x390/0x390 [ 356.560883][ T9267] ? __might_fault+0xa6/0x120 [ 356.565618][ T9267] ? __might_fault+0xa6/0x120 [ 356.570343][ T9267] ? __might_fault+0xc2/0x120 [ 356.575055][ T9267] ? __might_fault+0xa6/0x120 [ 356.579770][ T9267] ? bpf_lsm_bpf+0x5/0x10 [ 356.584147][ T9267] ? security_bpf+0x7a/0xa0 [ 356.588704][ T9267] __sys_bpf+0x5b8/0x780 [ 356.593025][ T9267] ? bpf_link_show_fdinfo+0x380/0x380 [ 356.598481][ T9267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 356.604712][ T9267] __x64_sys_bpf+0x78/0x90 [ 356.609185][ T9267] do_syscall_64+0x4c/0xa0 [ 356.613649][ T9267] ? clear_bhb_loop+0x60/0xb0 [ 356.618418][ T9267] ? clear_bhb_loop+0x60/0xb0 [ 356.623159][ T9267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.629120][ T9267] RIP: 0033:0x7f13e9b9ce59 [ 356.633574][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.653235][ T9267] RSP: 002b:00007f13eaac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.661696][ T9267] RAX: ffffffffffffffda RBX: 00007f13e9e15fa0 RCX: 00007f13e9b9ce59 [ 356.669719][ T9267] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 356.677728][ T9267] RBP: 00007f13eaac5090 R08: 0000000000000000 R09: 0000000000000000 [ 356.685743][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.693755][ T9267] R13: 00007f13e9e16038 R14: 00007f13e9e15fa0 R15: 00007ffea8a2e5b8 [ 356.701786][ T9267] [ 356.908337][ T9273] netlink: 'syz.4.1353': attribute type 10 has an invalid length. [ 356.941127][ T9273] device hsr0 entered promiscuous mode [ 356.975736][ T9273] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.505442][ T9289] netlink: 'syz.2.1357': attribute type 39 has an invalid length. [ 357.540071][ T9289] device veth0_macvtap left promiscuous mode [ 357.929967][ T9279] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 357.972940][ T9279] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1354'. [ 358.192943][ T9308] netlink: 'syz.0.1361': attribute type 39 has an invalid length. [ 358.414356][ T9313] netlink: 'syz.3.1362': attribute type 29 has an invalid length. [ 358.577094][ T9313] netlink: 'syz.3.1362': attribute type 29 has an invalid length. [ 358.679954][ T9321] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1363'. [ 358.722946][ T9321] openvswitch: netlink: Message has 6 unknown bytes. [ 358.919378][ T9328] FAULT_INJECTION: forcing a failure. [ 358.919378][ T9328] name failslab, interval 1, probability 0, space 0, times 0 [ 358.963236][ T9328] CPU: 1 PID: 9328 Comm: syz.4.1366 Not tainted syzkaller #0 [ 358.970696][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.980793][ T9328] Call Trace: [ 358.984146][ T9328] [ 358.987119][ T9328] dump_stack_lvl+0x188/0x24e [ 358.991848][ T9328] ? show_regs_print_info+0x12/0x12 [ 358.997089][ T9328] ? lockdep_hardirqs_on+0x94/0x140 [ 359.002342][ T9328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 359.008572][ T9328] should_fail_ex+0x399/0x4d0 [ 359.013320][ T9328] should_failslab+0x5/0x20 [ 359.017874][ T9328] slab_pre_alloc_hook+0x59/0x310 [ 359.022947][ T9328] ? __get_vm_area_node+0x122/0x330 [ 359.026086][ T9329] netlink: 'syz.3.1364': attribute type 3 has an invalid length. [ 359.028174][ T9328] __kmem_cache_alloc_node+0x4f/0x260 [ 359.028209][ T9328] ? __get_vm_area_node+0x122/0x330 [ 359.028238][ T9328] kmalloc_node_trace+0x22/0xe0 [ 359.028276][ T9328] __get_vm_area_node+0x122/0x330 [ 359.028304][ T9328] ? mark_lock+0x94/0x320 [ 359.028341][ T9328] __vmalloc_node_range+0x357/0x13b0 [ 359.028370][ T9328] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.028418][ T9328] ? perf_trace_preemptirq_template+0x268/0x320 [ 359.028460][ T9328] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 359.028496][ T9328] ? free_vm_area+0x50/0x50 [ 359.028534][ T9328] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.028567][ T9328] __vmalloc+0x76/0x80 [ 359.028594][ T9328] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.028629][ T9328] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.028670][ T9328] bpf_prog_alloc+0x1c/0x1b0 [ 359.028707][ T9328] bpf_prog_load+0x7c9/0x1560 [ 359.058557][ T9329] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1364'. [ 359.061292][ T9328] ? map_freeze+0x390/0x390 [ 359.061331][ T9328] ? __might_fault+0xa6/0x120 [ 359.061369][ T9328] ? __might_fault+0xa6/0x120 [ 359.061392][ T9328] ? __might_fault+0xc2/0x120 [ 359.061414][ T9328] ? __might_fault+0xa6/0x120 [ 359.061439][ T9328] ? bpf_lsm_bpf+0x5/0x10 [ 359.061463][ T9328] ? security_bpf+0x7a/0xa0 [ 359.061491][ T9328] __sys_bpf+0x5b8/0x780 [ 359.061525][ T9328] ? bpf_link_show_fdinfo+0x380/0x380 [ 359.061575][ T9328] ? lock_chain_count+0x20/0x20 [ 359.061604][ T9328] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 359.061647][ T9328] __x64_sys_bpf+0x78/0x90 [ 359.061678][ T9328] do_syscall_64+0x4c/0xa0 [ 359.061701][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 359.061741][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 359.061777][ T9328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.061810][ T9328] RIP: 0033:0x7fb429f9ce59 [ 359.061830][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.061850][ T9328] RSP: 002b:00007fb42aefa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.061875][ T9328] RAX: ffffffffffffffda RBX: 00007fb42a215fa0 RCX: 00007fb429f9ce59 [ 359.061892][ T9328] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 359.061908][ T9328] RBP: 00007fb42aefa090 R08: 0000000000000000 R09: 0000000000000000 [ 359.061923][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.061936][ T9328] R13: 00007fb42a216038 R14: 00007fb42a215fa0 R15: 00007ffc8a3942e8 [ 359.061971][ T9328] [ 359.322838][ T9328] syz.4.1366: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 359.351228][ T9328] CPU: 0 PID: 9328 Comm: syz.4.1366 Not tainted syzkaller #0 [ 359.358695][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.368801][ T9328] Call Trace: [ 359.372119][ T9328] [ 359.375097][ T9328] dump_stack_lvl+0x188/0x24e [ 359.379828][ T9328] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 359.386299][ T9328] ? show_regs_print_info+0x12/0x12 [ 359.391566][ T9328] ? load_image+0x400/0x400 [ 359.396137][ T9328] ? __rcu_read_unlock+0x78/0xd0 [ 359.401221][ T9328] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 359.407695][ T9328] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 359.414254][ T9328] warn_alloc+0x242/0x330 [ 359.418653][ T9328] ? zone_watermark_ok_safe+0x270/0x270 [ 359.424270][ T9328] ? __get_vm_area_node+0x318/0x330 [ 359.429528][ T9328] ? mark_lock+0x94/0x320 [ 359.433928][ T9328] __vmalloc_node_range+0x37c/0x13b0 [ 359.439281][ T9328] ? perf_trace_preemptirq_template+0x268/0x320 [ 359.445685][ T9328] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 359.451728][ T9328] ? free_vm_area+0x50/0x50 [ 359.456293][ T9328] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.461896][ T9328] __vmalloc+0x76/0x80 [ 359.466015][ T9328] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.471616][ T9328] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 359.477053][ T9328] bpf_prog_alloc+0x1c/0x1b0 [ 359.481706][ T9328] bpf_prog_load+0x7c9/0x1560 [ 359.486450][ T9328] ? map_freeze+0x390/0x390 [ 359.491009][ T9328] ? __might_fault+0xa6/0x120 [ 359.495745][ T9328] ? __might_fault+0xa6/0x120 [ 359.500464][ T9328] ? __might_fault+0xc2/0x120 [ 359.505191][ T9328] ? __might_fault+0xa6/0x120 [ 359.509917][ T9328] ? bpf_lsm_bpf+0x5/0x10 [ 359.514293][ T9328] ? security_bpf+0x7a/0xa0 [ 359.518855][ T9328] __sys_bpf+0x5b8/0x780 [ 359.523159][ T9328] ? bpf_link_show_fdinfo+0x380/0x380 [ 359.528615][ T9328] ? lock_chain_count+0x20/0x20 [ 359.533512][ T9328] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 359.539561][ T9328] __x64_sys_bpf+0x78/0x90 [ 359.544036][ T9328] do_syscall_64+0x4c/0xa0 [ 359.548497][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 359.553231][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 359.558000][ T9328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 359.563948][ T9328] RIP: 0033:0x7fb429f9ce59 [ 359.568405][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.588069][ T9328] RSP: 002b:00007fb42aefa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.596536][ T9328] RAX: ffffffffffffffda RBX: 00007fb42a215fa0 RCX: 00007fb429f9ce59 [ 359.604554][ T9328] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 359.612574][ T9328] RBP: 00007fb42aefa090 R08: 0000000000000000 R09: 0000000000000000 [ 359.620589][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.628615][ T9328] R13: 00007fb42a216038 R14: 00007fb42a215fa0 R15: 00007ffc8a3942e8 [ 359.636656][ T9328] [ 359.648257][ T9328] Mem-Info: [ 359.651889][ T9328] active_anon:34349 inactive_anon:0 isolated_anon:0 [ 359.651889][ T9328] active_file:20277 inactive_file:40062 isolated_file:0 [ 359.651889][ T9328] unevictable:768 dirty:127 writeback:0 [ 359.651889][ T9328] slab_reclaimable:21029 slab_unreclaimable:97408 [ 359.651889][ T9328] mapped:39276 shmem:17766 pagetables:697 [ 359.651889][ T9328] sec_pagetables:0 bounce:0 [ 359.651889][ T9328] kernel_misc_reclaimable:0 [ 359.651889][ T9328] free:1296524 free_pcp:7836 free_cma:0 [ 359.705040][ T9328] Node 0 active_anon:137396kB inactive_anon:0kB active_file:81108kB inactive_file:160044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153804kB dirty:508kB writeback:0kB shmem:69528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11392kB pagetables:2788kB sec_pagetables:0kB all_unreclaimable? no [ 359.754863][ T9328] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 359.798139][ T9328] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.827419][ T9328] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 359.833254][ T9328] Node 0 DMA32 free:1274528kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:137396kB inactive_anon:0kB active_file:81108kB inactive_file:160044kB unevictable:1536kB writepending:508kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:12152kB local_pcp:9416kB free_cma:0kB [ 359.908473][ T9328] lowmem_reserve[]: 0 0 1 1 1 [ 359.913340][ T9328] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.008104][ T9328] lowmem_reserve[]: 0 0 0 0 0 [ 360.013024][ T9328] Node 1 Normal free:3896208kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:10432kB free_cma:0kB [ 360.151786][ T9328] lowmem_reserve[]: 0 0 0 0 0 [ 360.190585][ T9328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 360.264589][ T9328] Node 0 DMA32: 1759*4kB (U) 538*8kB (UME) 880*16kB (UE) 549*32kB [ 360.264714][ T9344] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.1369'. [ 360.320671][ T9328] (UE) 121*64kB (UE) 147*128kB (UME) 152*256kB (UM) 48*512kB (UM) 26*1024kB (UM) 10*2048kB (UM) 267*4096kB (UM) = 1273772kB [ 360.350398][ T9328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 360.441319][ T9328] Node 1 Normal: 214*4kB (UM) 53*8kB (UME) 37*16kB (UE) 26*32kB (UME) 18*64kB (UME) 9*128kB (UM) 4*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896208kB [ 360.491628][ T9328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.522557][ T9328] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.552435][ T9328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.590415][ T9328] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 360.651464][ T9328] 73266 total pagecache pages [ 360.665795][ T9328] 0 pages in swap cache [ 360.670256][ T9328] Free swap = 124996kB [ 360.674968][ T9328] Total swap = 124996kB [ 360.700604][ T9328] 2097051 pages RAM [ 360.705434][ T9328] 0 pages HighMem/MovableOnly [ 360.710702][ T9328] 415214 pages reserved [ 360.716970][ T9328] 0 pages cma reserved [ 361.512636][ T9362] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 361.520868][ T9362] device netdevsim0 entered promiscuous mode [ 361.533390][ T9358] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1374'. [ 362.058004][ T9374] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 362.108136][ T9374] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1376'. [ 362.464627][ T9380] ÿÿÿÿÿÿÿ: port 1(team0) entered blocking state [ 362.471450][ T9380] ÿÿÿÿÿÿÿ: port 1(team0) entered disabled state [ 362.542376][ T9380] device team0 entered promiscuous mode [ 362.574678][ T9380] device team_slave_0 entered promiscuous mode [ 362.604879][ T9380] device team_slave_1 entered promiscuous mode [ 364.013244][ T9407] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 364.024969][ T9407] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 364.041572][ T9409] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 364.069048][ T9413] netlink: 'syz.2.1390': attribute type 8 has an invalid length. [ 364.108764][ T9413] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1390'. [ 364.158853][ T9412] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 364.173528][ T9407] netlink: 'syz.1.1388': attribute type 29 has an invalid length. [ 364.969404][ T9434] netlink: 'syz.3.1398': attribute type 10 has an invalid length. [ 365.008222][ T9434] device hsr0 entered promiscuous mode [ 365.028492][ T9434] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.027453][ T9455] netlink: 'syz.0.1404': attribute type 3 has an invalid length. [ 366.053365][ T9455] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1404'. [ 366.083929][ T9457] netlink: 'syz.3.1403': attribute type 21 has an invalid length. [ 367.232040][ T9480] netlink: 'syz.0.1409': attribute type 8 has an invalid length. [ 367.255751][ T9480] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1409'. [ 367.353643][ T9483] -1: renamed from syzkaller0 [ 367.477986][ T9489] bridge0: port 3(hsr0) entered disabled state [ 367.597407][ T9489] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 368.934798][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1420'. [ 369.188177][ T4276] Bluetooth: hci0: ISO packet for unknown connection handle 12 [ 369.906638][ T9536] validate_nla: 5 callbacks suppressed [ 369.906657][ T9536] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 369.961145][ T9536] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1425'. [ 370.012596][ T9536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'. [ 370.045623][ T9536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'. [ 370.086350][ T9538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'. [ 370.156984][ T9536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1425'. [ 370.382781][ T9546] netlink: 'syz.1.1427': attribute type 8 has an invalid length. [ 370.463352][ T9546] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1427'. [ 370.749080][ T9554] netlink: 'syz.0.1429': attribute type 10 has an invalid length. [ 370.767030][ T9554] device hsr0 entered promiscuous mode [ 370.777241][ T9554] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.766705][ T9580] netlink: 'syz.1.1434': attribute type 3 has an invalid length. [ 371.850662][ T9580] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1434'. [ 372.968597][ T9611] netlink: 'syz.1.1444': attribute type 8 has an invalid length. [ 373.004655][ T9611] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1444'. [ 374.102479][ T9636] netlink: 'syz.3.1455': attribute type 4 has an invalid length. [ 374.129642][ T9636] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1455'. [ 374.233741][ T9641] netlink: 'syz.1.1453': attribute type 3 has an invalid length. [ 374.378660][ T9641] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1453'. [ 374.436901][ T9646] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1458'. [ 374.624770][ T9651] netlink: 'syz.3.1460': attribute type 13 has an invalid length. [ 374.634023][ T9651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1460'. [ 374.701729][ T9651] syz_tun: refused to change device tx_queue_len [ 374.772076][ T9651] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 374.852625][ T9655] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 374.936990][ T9655] team0: Port device netdevsim0 added [ 374.962916][ T9664] netlink: 'syz.0.1463': attribute type 8 has an invalid length. [ 374.983506][ T9664] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1463'. [ 375.040028][ T9661] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1461'. [ 375.062898][ T9661] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1461'. [ 375.122926][ T9661] bond0: (slave bond_slave_0): Releasing backup interface [ 375.214297][ T9661] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 377.597806][ T9728] netlink: 'syz.3.1481': attribute type 8 has an invalid length. [ 377.647245][ T9728] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1481'. [ 378.589943][ T9784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 378.647130][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.653537][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.677691][ T9784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 378.691283][ T9784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1495'. [ 379.790401][ T9811] netlink: 'syz.4.1502': attribute type 8 has an invalid length. [ 379.840131][ T9811] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1502'. [ 380.042011][ T9816] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 380.062963][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1504'. [ 380.098110][ T9819] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 380.114819][ T9819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1504'. [ 381.807498][ T9886] netlink: 'syz.0.1534': attribute type 8 has an invalid length. [ 381.834660][ T9886] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1534'. [ 381.994972][ T9894] netlink: 'syz.1.1538': attribute type 21 has an invalid length. [ 382.003156][ T9894] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.011226][ T9894] IPv6: Can't replace route, no match found [ 382.337797][ T9910] netlink: 'syz.1.1543': attribute type 21 has an invalid length. [ 382.350649][ T9910] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1543'. [ 382.368488][ T9910] netlink: 'syz.1.1543': attribute type 5 has an invalid length. [ 382.378330][ T9910] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1543'. [ 382.531988][ T4276] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 382.754555][ T9931] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1548'. [ 382.855503][ T9931] netlink: 'syz.2.1548': attribute type 29 has an invalid length. [ 383.048223][ T9931] netlink: 'syz.2.1548': attribute type 29 has an invalid length. [ 383.072242][ T9942] netlink: 'syz.3.1552': attribute type 2 has an invalid length. [ 383.094520][ T9942] netlink: 'syz.3.1552': attribute type 8 has an invalid length. [ 383.102394][ T9942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1552'. [ 383.681445][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 383.720265][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.087420][ T9981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1561'. [ 385.178351][T10004] delete_channel: no stack [ 385.955841][T10044] validate_nla: 5 callbacks suppressed [ 385.955859][T10044] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 386.007141][T10044] team0: Port device wlan1 added [ 386.473352][T10053] netlink: 'syz.3.1583': attribute type 8 has an invalid length. [ 386.481874][T10053] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1583'. [ 386.587429][T10056] netlink: 'syz.4.1584': attribute type 3 has an invalid length. [ 386.602001][T10056] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1584'. [ 386.861840][T10058] netlink: 'syz.1.1585': attribute type 2 has an invalid length. [ 386.918329][T10058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1585'. [ 387.161900][T10064] device wlan1 entered promiscuous mode [ 387.810180][T10082] netlink: 'syz.0.1591': attribute type 4 has an invalid length. [ 388.322953][T10096] netlink: 'syz.0.1598': attribute type 3 has an invalid length. [ 388.344926][T10096] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1598'. [ 391.390851][T10111] netlink: 'syz.0.1602': attribute type 4 has an invalid length. [ 391.417997][T10111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1602'. [ 391.490985][T10111] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 394.342710][T10180] netlink: 'syz.3.1621': attribute type 1 has an invalid length. [ 394.386734][T10180] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1621'. [ 398.969089][T10233] netlink: 'syz.3.1639': attribute type 10 has an invalid length. [ 403.626390][T10288] netlink: 'syz.2.1655': attribute type 27 has an invalid length. [ 406.498023][T10356] netlink: 'syz.2.1676': attribute type 29 has an invalid length. [ 407.056792][T10356] netlink: 'syz.2.1676': attribute type 29 has an invalid length. [ 407.413450][T10366] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 407.469473][T10366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1678'. [ 407.978181][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'. [ 408.182407][T10380] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 408.240830][T10380] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 408.279595][T10379] netlink: 'syz.4.1684': attribute type 29 has an invalid length. [ 408.362641][T10383] device virt_wifi0 entered promiscuous mode [ 408.878052][T10401] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 408.902274][T10397] netlink: 'syz.4.1687': attribute type 1 has an invalid length. [ 408.914861][T10401] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 408.941700][T10397] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1687'. [ 408.944925][T10401] netlink: 'syz.1.1690': attribute type 29 has an invalid length. [ 409.134602][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1691'. [ 410.026519][T10423] delete_channel: no stack [ 410.041587][T10423] delete_channel: no stack [ 410.329826][T10431] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1698'. [ 410.425414][T10431] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 410.468871][T10430] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1698'. [ 410.536329][T10431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.626579][T10434] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1699'. [ 411.610914][T10448] validate_nla: 5 callbacks suppressed [ 411.610948][T10448] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 411.660717][T10448] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1705'. [ 411.812059][T10454] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 411.912628][T10454] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1707'. [ 414.481393][T10499] netlink: 'syz.4.1720': attribute type 13 has an invalid length. [ 414.520922][T10499] netlink: 'syz.4.1720': attribute type 58 has an invalid length. [ 414.633974][T10499] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1720'. [ 418.572718][T10562] netlink: 'syz.0.1736': attribute type 21 has an invalid length. [ 418.613549][T10562] netlink: 'syz.0.1736': attribute type 22 has an invalid length. [ 418.751320][T10562] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.1736'. [ 419.771788][T10587] netlink: 9855 bytes leftover after parsing attributes in process `syz.4.1742'. [ 421.508643][T10601] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1747'. [ 421.609687][T10607] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 421.645187][T10607] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1747'. [ 427.842327][T10711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1781'. [ 428.766231][T10728] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.1785'. [ 429.500637][T10750] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 430.160328][T10750] device 1 entered promiscuous mode [ 431.043030][T10786] device syzkaller0 entered promiscuous mode [ 432.337405][T10810] delete_channel: no stack [ 436.653832][T10868] netlink: 'syz.1.1815': attribute type 10 has an invalid length. [ 436.696959][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1815'. [ 437.410973][T10883] FAULT_INJECTION: forcing a failure. [ 437.410973][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 437.474626][T10883] CPU: 1 PID: 10883 Comm: syz.1.1821 Not tainted syzkaller #0 [ 437.482170][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.492271][T10883] Call Trace: [ 437.495593][T10883] [ 437.498561][T10883] dump_stack_lvl+0x188/0x24e [ 437.503301][T10883] ? show_regs_print_info+0x12/0x12 [ 437.508561][T10883] ? load_image+0x400/0x400 [ 437.513123][T10883] ? __might_sleep+0xd0/0xd0 [ 437.517768][T10883] ? __lock_acquire+0x7d10/0x7d10 [ 437.522861][T10883] should_fail_ex+0x399/0x4d0 [ 437.527591][T10883] should_failslab+0x5/0x20 [ 437.532133][T10883] slab_pre_alloc_hook+0x59/0x310 [ 437.537209][T10883] ? sk_prot_alloc+0xe7/0x210 [ 437.541942][T10883] __kmem_cache_alloc_node+0x4f/0x260 [ 437.547379][T10883] ? sk_prot_alloc+0xe7/0x210 [ 437.552130][T10883] __kmalloc+0xa0/0x240 [ 437.556347][T10883] sk_prot_alloc+0xe7/0x210 [ 437.560902][T10883] ? sk_alloc+0x20/0x340 [ 437.565199][T10883] sk_alloc+0x36/0x340 [ 437.569325][T10883] ? bpf_ctx_init+0x163/0x1a0 [ 437.574060][T10883] ? bpf_prog_test_run_skb+0x275/0x1890 [ 437.579674][T10883] bpf_prog_test_run_skb+0x371/0x1890 [ 437.585114][T10883] ? __fget_files+0x28/0x4b0 [ 437.589770][T10883] ? cpu_online+0xa0/0xa0 [ 437.594139][T10883] bpf_prog_test_run+0x31e/0x390 [ 437.599122][T10883] __sys_bpf+0x62b/0x780 [ 437.603405][T10883] ? bpf_link_show_fdinfo+0x380/0x380 [ 437.608834][T10883] ? lock_chain_count+0x20/0x20 [ 437.613749][T10883] __x64_sys_bpf+0x78/0x90 [ 437.618205][T10883] do_syscall_64+0x4c/0xa0 [ 437.622648][T10883] ? clear_bhb_loop+0x60/0xb0 [ 437.627364][T10883] ? clear_bhb_loop+0x60/0xb0 [ 437.632089][T10883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.638032][T10883] RIP: 0033:0x7f3c75b9ce59 [ 437.642490][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.662143][T10883] RSP: 002b:00007f3c76a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.670588][T10883] RAX: ffffffffffffffda RBX: 00007f3c75e15fa0 RCX: 00007f3c75b9ce59 [ 437.678589][T10883] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 437.686587][T10883] RBP: 00007f3c76a03090 R08: 0000000000000000 R09: 0000000000000000 [ 437.694587][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.702585][T10883] R13: 00007f3c75e16038 R14: 00007f3c75e15fa0 R15: 00007ffdeed907f8 [ 437.710604][T10883] [ 438.374673][T10905] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1826'. [ 438.424621][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.546916][T10905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.096708][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.103077][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.808965][T10955] netlink: 'syz.0.1841': attribute type 8 has an invalid length. [ 440.847687][T10955] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1841'. [ 440.881583][T10954] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.912198][T10954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1842'. [ 441.014854][T10954] netlink: 'syz.1.1842': attribute type 1 has an invalid length. [ 441.028929][T10954] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1842'. [ 443.049840][T11000] raw_sendmsg: syz.1.1854 forgot to set AF_INET. Fix it! [ 443.443134][T11028] netlink: 'syz.0.1859': attribute type 8 has an invalid length. [ 443.456419][T11023] can: request_module (can-proto-0) failed. [ 443.487461][T11028] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1859'. [ 444.695372][T11050] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1868'. [ 444.914340][ T4276] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 445.411198][T11075] netlink: 'syz.2.1871': attribute type 2 has an invalid length. [ 445.476828][T11075] netlink: 'syz.2.1871': attribute type 1 has an invalid length. [ 445.511217][T11075] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1871'. [ 445.676886][T11067] delete_channel: no stack [ 445.732691][T11081] netlink: 'syz.3.1876': attribute type 8 has an invalid length. [ 445.747506][T11081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1876'. [ 445.943692][T11084] netlink: 'syz.4.1877': attribute type 3 has an invalid length. [ 445.959656][T11084] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1877'. [ 446.278306][T11099] mac80211_hwsim hwsim10 ªªªªªª: renamed from wlan0 [ 446.329028][T11102] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1884'. [ 447.490084][T11114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1887'. [ 448.123681][T11129] netlink: 'syz.4.1893': attribute type 10 has an invalid length. [ 448.217522][T11132] netlink: 'syz.3.1894': attribute type 10 has an invalid length. [ 448.257528][T11127] can: request_module (can-proto-0) failed. [ 448.273975][T11132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1894'. [ 448.415459][T11132] bridge0: port 2(veth0_vlan) entered blocking state [ 448.448421][T11132] bridge0: port 2(veth0_vlan) entered disabled state [ 448.941278][T11132] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 449.249666][T11151] netlink: 'syz.3.1898': attribute type 21 has an invalid length. [ 449.264947][T11151] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1898'. [ 449.404642][T11166] IPv6: Can't replace route, no match found [ 449.865489][T11174] netlink: 'syz.1.1902': attribute type 19 has an invalid length. [ 449.944898][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1902'. [ 452.986141][T11265] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1927'. [ 454.260633][T11294] device wlan1 entered promiscuous mode [ 454.298339][T11290] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1932'. [ 454.375214][T11296] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1934'. [ 454.401812][T11294] netlink: 'syz.2.1935': attribute type 3 has an invalid length. [ 454.424577][T11294] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1935'. [ 454.445614][ T9756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.571328][T11302] netlink: 'syz.4.1936': attribute type 19 has an invalid length. [ 454.636021][T11302] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1936'. [ 455.373386][T11325] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1944'. [ 455.591506][T11334] netlink: 'syz.4.1948': attribute type 29 has an invalid length. [ 455.627383][T11334] netlink: 'syz.4.1948': attribute type 29 has an invalid length. [ 455.823774][T11341] netlink: 'syz.3.1950': attribute type 3 has an invalid length. [ 455.854743][T11341] netlink: 55252 bytes leftover after parsing attributes in process `syz.3.1950'. [ 456.260292][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1953'. [ 456.285041][T11354] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1955'. [ 456.607685][T11364] netlink: 'syz.2.1958': attribute type 29 has an invalid length. [ 457.125031][T11364] netlink: 'syz.2.1958': attribute type 29 has an invalid length. [ 457.427724][T11369] netlink: 'syz.0.1957': attribute type 4 has an invalid length. [ 457.442325][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1959'. [ 457.501046][T11370] Ÿë: port 1(gretap0) entered blocking state [ 457.542678][T11370] Ÿë: port 1(gretap0) entered disabled state [ 457.552604][T11370] device gretap0 entered promiscuous mode [ 457.561014][T11379] netlink: 'syz.4.1961': attribute type 10 has an invalid length. [ 457.956212][T11392] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1966'. [ 458.907821][T11410] netlink: 'syz.2.1975': attribute type 2 has an invalid length. [ 460.773707][T11453] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 460.795139][T11453] __nla_validate_parse: 2 callbacks suppressed [ 460.795231][T11453] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.1987'. [ 460.913197][T11458] netlink: 'syz.1.1990': attribute type 29 has an invalid length. [ 460.941806][T11458] netlink: 'syz.1.1990': attribute type 29 has an invalid length. [ 461.131049][T11461] Ÿë: port 1(gretap0) entered blocking state [ 461.158602][T11461] Ÿë: port 1(gretap0) entered disabled state [ 461.187399][T11461] device gretap0 entered promiscuous mode [ 461.518585][T11467] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 461.632410][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.705922][T11467] team0: Port device bond0 added [ 462.664046][T11485] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1998'. [ 462.872458][T11493] netlink: 'syz.3.1999': attribute type 46 has an invalid length. [ 462.890034][T11494] netlink: 3850 bytes leftover after parsing attributes in process `syz.2.2000'. [ 463.917390][T11518] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 463.963549][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.983445][T11521] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2011'. [ 464.038806][T11518] device bond0 entered promiscuous mode [ 464.057830][T11518] device bond_slave_1 entered promiscuous mode [ 464.074024][T11518] team0: Port device bond0 added [ 464.091201][T11525] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2013'. [ 464.153010][T11525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.570756][T11525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.870064][T11543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2017'. [ 465.399779][T11558] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2021'. [ 465.654435][T11572] netlink: 'syz.1.2026': attribute type 13 has an invalid length. [ 465.685807][T11572] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2026'. [ 465.751502][T11572] syz_tun: refused to change device tx_queue_len [ 465.793289][T11572] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 465.828971][T11579] netlink: 'syz.3.2028': attribute type 17 has an invalid length. [ 465.842543][T11579] netlink: 'syz.3.2028': attribute type 16 has an invalid length. [ 465.850979][T11579] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2028'. [ 465.861953][T11582] FAULT_INJECTION: forcing a failure. [ 465.861953][T11582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.904561][T11582] CPU: 1 PID: 11582 Comm: syz.0.2030 Not tainted syzkaller #0 [ 465.912119][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.922260][T11582] Call Trace: [ 465.925586][T11582] [ 465.928558][T11582] dump_stack_lvl+0x188/0x24e [ 465.933294][T11582] ? show_regs_print_info+0x12/0x12 [ 465.938542][T11582] ? load_image+0x400/0x400 [ 465.943099][T11582] ? __lock_acquire+0x7d10/0x7d10 [ 465.948221][T11582] should_fail_ex+0x399/0x4d0 [ 465.952955][T11582] _copy_from_user+0x2c/0x170 [ 465.957689][T11582] do_vfs_ioctl+0x9ce/0x1d40 [ 465.962342][T11582] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 465.968034][T11582] ? tomoyo_path_number_perm+0x205/0x650 [ 465.973767][T11582] ? __lock_acquire+0x7d10/0x7d10 [ 465.978844][T11582] ? slab_free_freelist_hook+0x131/0x1a0 [ 465.984525][T11582] ? tomoyo_path_number_perm+0x4fb/0x650 [ 465.990207][T11582] ? __kmem_cache_free+0xb6/0x1f0 [ 465.995288][T11582] ? tomoyo_path_number_perm+0x205/0x650 [ 466.000983][T11582] ? tomoyo_path_number_perm+0x205/0x650 [ 466.006674][T11582] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 466.012242][T11582] ? __fget_files+0x28/0x4b0 [ 466.016882][T11582] ? __fget_files+0x28/0x4b0 [ 466.021537][T11582] ? bpf_lsm_file_ioctl+0x5/0x10 [ 466.026527][T11582] ? security_file_ioctl+0x7c/0xa0 [ 466.031723][T11582] __se_sys_ioctl+0x83/0x170 [ 466.036375][T11582] do_syscall_64+0x4c/0xa0 [ 466.040835][T11582] ? clear_bhb_loop+0x60/0xb0 [ 466.045563][T11582] ? clear_bhb_loop+0x60/0xb0 [ 466.050298][T11582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.056245][T11582] RIP: 0033:0x7f13e9b9ce59 [ 466.060706][T11582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.080372][T11582] RSP: 002b:00007f13eaac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.088840][T11582] RAX: ffffffffffffffda RBX: 00007f13e9e15fa0 RCX: 00007f13e9b9ce59 [ 466.096860][T11582] RDX: 0000200000000000 RSI: 00000000401c5820 RDI: 0000000000000003 [ 466.104876][T11582] RBP: 00007f13eaac5090 R08: 0000000000000000 R09: 0000000000000000 [ 466.112892][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.120905][T11582] R13: 00007f13e9e16038 R14: 00007f13e9e15fa0 R15: 00007ffea8a2e5b8 [ 466.128941][T11582] [ 466.163062][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2029'. [ 466.835350][T11604] netlink: 'syz.3.2036': attribute type 15 has an invalid length. [ 466.861606][T11604] netlink: 'syz.3.2036': attribute type 7 has an invalid length. [ 467.400015][T11618] netlink: 'syz.4.2040': attribute type 2 has an invalid length. [ 467.471240][T11623] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2039'. [ 467.475130][T11618] netlink: 'syz.4.2040': attribute type 8 has an invalid length. [ 467.519436][T11618] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2040'. [ 467.923031][T11633] FAULT_INJECTION: forcing a failure. [ 467.923031][T11633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.952094][T11633] CPU: 1 PID: 11633 Comm: syz.2.2045 Not tainted syzkaller #0 [ 467.959630][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.969739][T11633] Call Trace: [ 467.973059][T11633] [ 467.976046][T11633] dump_stack_lvl+0x188/0x24e [ 467.980775][T11633] ? show_regs_print_info+0x12/0x12 [ 467.986012][T11633] ? load_image+0x400/0x400 [ 467.990569][T11633] ? __lock_acquire+0x7d10/0x7d10 [ 467.995641][T11633] ? snprintf+0xe5/0x140 [ 467.999932][T11633] should_fail_ex+0x399/0x4d0 [ 468.004653][T11633] _copy_to_user+0x2c/0x130 [ 468.009206][T11633] simple_read_from_buffer+0xe3/0x150 [ 468.014629][T11633] proc_fail_nth_read+0x1a6/0x220 [ 468.019700][T11633] ? proc_fault_inject_write+0x310/0x310 [ 468.025378][T11633] ? fsnotify_perm+0x248/0x550 [ 468.030192][T11633] ? proc_fault_inject_write+0x310/0x310 [ 468.035882][T11633] vfs_read+0x2de/0xa00 [ 468.040105][T11633] ? kernel_read+0x1e0/0x1e0 [ 468.044748][T11633] ? __fget_files+0x28/0x4b0 [ 468.049434][T11633] ? __fget_files+0x28/0x4b0 [ 468.054081][T11633] ? __fget_files+0x43d/0x4b0 [ 468.058818][T11633] ? __fdget_pos+0x2ae/0x360 [ 468.063457][T11633] ? ksys_read+0x71/0x250 [ 468.067844][T11633] ksys_read+0x14c/0x250 [ 468.072139][T11633] ? vfs_write+0xa30/0xa30 [ 468.076620][T11633] ? lockdep_hardirqs_on+0x94/0x140 [ 468.081879][T11633] do_syscall_64+0x4c/0xa0 [ 468.086337][T11633] ? clear_bhb_loop+0x60/0xb0 [ 468.091071][T11633] ? clear_bhb_loop+0x60/0xb0 [ 468.095809][T11633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.101760][T11633] RIP: 0033:0x7f2f9495d68e [ 468.106221][T11633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.125876][T11633] RSP: 002b:00007f2f957aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.134350][T11633] RAX: ffffffffffffffda RBX: 00007f2f957ab6c0 RCX: 00007f2f9495d68e [ 468.142370][T11633] RDX: 000000000000000f RSI: 00007f2f957ab0a0 RDI: 0000000000000004 [ 468.150389][T11633] RBP: 00007f2f957ab090 R08: 0000000000000000 R09: 0000000000000000 [ 468.158407][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.166428][T11633] R13: 00007f2f94c16038 R14: 00007f2f94c15fa0 R15: 00007ffc09980238 [ 468.174458][T11633] [ 468.213688][T11635] device team_slave_0 left promiscuous mode [ 468.283565][T11635] team0: Port device team_slave_0 removed [ 468.479860][T11640] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 468.656109][T11640] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 468.682621][T11644] netlink: 'syz.3.2048': attribute type 29 has an invalid length. [ 468.697574][T11645] netlink: 'syz.0.2049': attribute type 21 has an invalid length. [ 472.596455][T11679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2056'. [ 472.614521][T11679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2056'. [ 472.668277][T11679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2056'. [ 472.862845][T11690] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.2061'. [ 473.111807][T11703] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2065'. [ 473.127844][T11703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.894762][T11703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.150702][T11717] validate_nla: 2 callbacks suppressed [ 474.150770][T11717] netlink: 'syz.1.2068': attribute type 27 has an invalid length. [ 474.264700][T11717] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2068'. [ 474.276603][T11719] netlink: 'syz.4.2069': attribute type 3 has an invalid length. [ 474.284971][T11719] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2069'. [ 475.108488][T11757] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2080'. [ 475.137941][T11754] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 475.200579][T11754] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 475.235970][T11759] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 475.305601][T11754] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 475.366844][T11754] netlink: 'syz.2.2079': attribute type 29 has an invalid length. [ 475.569160][T11763] team0: Port device team_slave_0 removed [ 476.266489][T11790] device pim6reg1 entered promiscuous mode [ 476.985097][T11798] netlink: 'syz.1.2092': attribute type 15 has an invalid length. [ 477.021479][T11798] netlink: 'syz.1.2092': attribute type 7 has an invalid length. [ 477.087318][T11798] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2092'. [ 477.121742][T11809] netlink: 'syz.1.2092': attribute type 2 has an invalid length. [ 477.139911][T11809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2092'. [ 477.167390][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.502568][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.719198][T11820] __nla_validate_parse: 1 callbacks suppressed [ 477.719215][T11820] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2095'. [ 477.735618][T11820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 477.761176][T11820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.000204][T11831] team0: Port device team_slave_0 removed [ 478.041894][T11836] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.2103'. [ 478.461621][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2105'. [ 478.711351][T11847] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2107'. [ 478.772856][T11844] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2104'. [ 478.932659][T11844] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 478.994667][T11844] CPU: 1 PID: 11844 Comm: syz.2.2104 Not tainted syzkaller #0 [ 479.002213][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.012416][T11844] Call Trace: [ 479.015743][T11844] [ 479.018713][T11844] dump_stack_lvl+0x188/0x24e [ 479.023452][T11844] ? show_regs_print_info+0x12/0x12 [ 479.028714][T11844] ? load_image+0x400/0x400 [ 479.033314][T11844] ? sysfs_warn_dup+0x61/0xa0 [ 479.038068][T11844] sysfs_warn_dup+0x8a/0xa0 [ 479.042644][T11844] sysfs_do_create_link_sd+0xc0/0x110 [ 479.048082][T11844] device_add+0x7f6/0x1000 [ 479.052577][T11844] wiphy_register+0x1d9f/0x2ac0 [ 479.057506][T11844] ? cfg80211_event_work+0x40/0x40 [ 479.062678][T11844] ? minstrel_ht_alloc+0x894/0xa20 [ 479.067852][T11844] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 479.073988][T11844] ieee80211_register_hw+0x2d00/0x39f0 [ 479.079510][T11844] ? ieee80211_register_hw+0xec1/0x39f0 [ 479.085098][T11844] ? ieee80211_register_hw+0xec1/0x39f0 [ 479.090690][T11844] ? ieee80211_tasklet_handler+0x20/0x20 [ 479.096365][T11844] ? memset+0x1e/0x40 [ 479.100379][T11844] ? __hrtimer_init+0x186/0x270 [ 479.105275][T11844] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 479.111056][T11844] hwsim_new_radio_nl+0xafa/0xce0 [ 479.116124][T11844] genl_family_rcv_msg_doit+0x22a/0x330 [ 479.121700][T11844] ? end_current_label_crit_section+0x170/0x170 [ 479.127982][T11844] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 479.133918][T11844] ? bpf_lsm_capable+0x5/0x10 [ 479.138625][T11844] ? security_capable+0x85/0xb0 [ 479.143514][T11844] genl_rcv_msg+0x604/0x790 [ 479.148061][T11844] ? genl_bind+0x360/0x360 [ 479.152508][T11844] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 479.158892][T11844] netlink_rcv_skb+0x1fb/0x450 [ 479.163684][T11844] ? genl_bind+0x360/0x360 [ 479.168135][T11844] ? netlink_ack+0x1170/0x1170 [ 479.172939][T11844] ? down_read+0x1a8/0x2d0 [ 479.177396][T11844] genl_rcv+0x24/0x40 [ 479.181409][T11844] netlink_unicast+0x74d/0x8d0 [ 479.186208][T11844] netlink_sendmsg+0x8ad/0xbd0 [ 479.191011][T11844] ? netlink_getsockopt+0x550/0x550 [ 479.196241][T11844] ? aa_sock_msg_perm+0x94/0x150 [ 479.201213][T11844] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 479.206529][T11844] ? security_socket_sendmsg+0x7c/0xa0 [ 479.212068][T11844] ? netlink_getsockopt+0x550/0x550 [ 479.217299][T11844] ____sys_sendmsg+0x5be/0x970 [ 479.222188][T11844] ? __sys_sendmsg_sock+0x30/0x30 [ 479.227245][T11844] ? __import_iovec+0x315/0x500 [ 479.232132][T11844] ? import_iovec+0x6f/0xa0 [ 479.236665][T11844] ___sys_sendmsg+0x2a2/0x360 [ 479.241378][T11844] ? __sys_sendmsg+0x290/0x290 [ 479.246219][T11844] __se_sys_sendmsg+0x1bb/0x2a0 [ 479.251096][T11844] ? ct_nmi_exit+0x145/0x1c0 [ 479.255721][T11844] ? __x64_sys_sendmsg+0x80/0x80 [ 479.260703][T11844] ? lockdep_hardirqs_on+0x94/0x140 [ 479.265942][T11844] do_syscall_64+0x4c/0xa0 [ 479.270392][T11844] ? clear_bhb_loop+0x60/0xb0 [ 479.275110][T11844] ? clear_bhb_loop+0x60/0xb0 [ 479.279823][T11844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.285756][T11844] RIP: 0033:0x7f2f9499ce59 [ 479.290196][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.312368][T11844] RSP: 002b:00007f2f9578a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.320824][T11844] RAX: ffffffffffffffda RBX: 00007f2f94c16090 RCX: 00007f2f9499ce59 [ 479.328828][T11844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 479.336829][T11844] RBP: 00007f2f94a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 479.344822][T11844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.352861][T11844] R13: 00007f2f94c16128 R14: 00007f2f94c16090 R15: 00007ffc09980238 [ 479.360883][T11844] [ 479.580302][T11867] validate_nla: 2 callbacks suppressed [ 479.580340][T11867] netlink: 'syz.0.2114': attribute type 16 has an invalid length. [ 479.624582][T11867] netlink: 'syz.0.2114': attribute type 3 has an invalid length. [ 479.643111][T11867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2114'. [ 479.732960][T11871] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2115'. [ 479.745535][T11872] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2116'. [ 480.503703][T11898] tipc: Started in network mode [ 480.538134][T11898] tipc: Node identity 9215a268, cluster identity 4711 [ 480.577446][T11898] tipc: Node number set to 2450891368 [ 483.256101][T11973] netlink: 'syz.3.2143': attribute type 21 has an invalid length. [ 483.300906][T11976] netlink: 'syz.2.2142': attribute type 6 has an invalid length. [ 483.651963][T11993] netlink: 'syz.1.2149': attribute type 28 has an invalid length. [ 483.680595][T11993] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2149'. [ 485.000878][T12039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2162'. [ 485.192242][T12047] device sit0 entered promiscuous mode [ 485.948190][T12073] netlink: 'syz.1.2172': attribute type 11 has an invalid length. [ 485.998074][T12078] netlink: 'syz.3.2171': attribute type 8 has an invalid length. [ 486.018677][T12078] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2171'. [ 486.472883][T12089] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2176'. [ 487.207023][T12112] netlink: 'syz.2.2182': attribute type 21 has an invalid length. [ 487.242705][T12112] netlink: 'syz.2.2182': attribute type 22 has an invalid length. [ 487.336874][T12112] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2182'. [ 487.414941][T12123] netlink: 'syz.4.2186': attribute type 21 has an invalid length. [ 487.422923][T12123] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2186'. [ 487.717126][T12123] device syzkaller0 entered promiscuous mode [ 487.763603][T12125] netlink: 'syz.3.2187': attribute type 28 has an invalid length. [ 490.914061][T12146] netlink: 'syz.0.2190': attribute type 8 has an invalid length. [ 490.924473][T12146] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2190'. [ 490.934066][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2193'. [ 490.954776][T12150] netlink: 'syz.4.2193': attribute type 39 has an invalid length. [ 491.100912][T12167] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 491.134222][T12176] netlink: 'syz.0.2200': attribute type 2 has an invalid length. [ 491.183102][T12176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2200'. [ 491.377463][T12180] IPv6: Can't replace route, no match found [ 492.012265][T12205] netlink: 'syz.3.2210': attribute type 46 has an invalid length. [ 492.043511][T12208] netlink: 'syz.4.2211': attribute type 8 has an invalid length. [ 492.085995][T12208] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2211'. [ 492.341496][T12216] netlink: 'syz.0.2213': attribute type 13 has an invalid length. [ 492.623619][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2215'. [ 492.643505][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2215'. [ 492.661305][T12227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2215'. [ 493.148020][ T4276] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 493.570495][T12247] netlink: 'syz.2.2224': attribute type 29 has an invalid length. [ 493.606842][T12247] netlink: 'syz.2.2224': attribute type 29 has an invalid length. [ 494.801253][T12283] netlink: 'syz.2.2230': attribute type 8 has an invalid length. [ 494.839808][T12283] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2230'. [ 495.186500][T12291] netlink: 'syz.1.2233': attribute type 39 has an invalid length. [ 496.364899][T12306] validate_nla: 1 callbacks suppressed [ 496.364938][T12306] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 496.831786][T12323] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 496.861113][T12323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2241'. [ 497.599378][T12338] netlink: 'syz.2.2245': attribute type 8 has an invalid length. [ 497.649426][T12338] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2245'. [ 498.425426][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 11 [ 499.272881][T12369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2251'. [ 499.440932][T12374] netlink: 'syz.2.2252': attribute type 3 has an invalid length. [ 499.474707][T12374] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2252'. [ 500.562948][T12400] netlink: 'syz.1.2259': attribute type 8 has an invalid length. [ 500.604138][T12400] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2259'. [ 500.645394][T12399] netlink: 'syz.3.2258': attribute type 10 has an invalid length. [ 500.653302][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2258'. [ 500.697031][T12399] device team0 entered promiscuous mode [ 500.723268][T12399] device team_slave_1 entered promiscuous mode [ 500.753666][T12399] device bridge_slave_1 entered promiscuous mode [ 500.785564][T12399] device netdevsim0 entered promiscuous mode [ 500.816957][T12399] device wlan1 entered promiscuous mode [ 500.848098][T12399] bridge0: port 2(team0) entered blocking state [ 500.889102][T12399] bridge0: port 2(team0) entered disabled state [ 501.344755][T12412] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 501.538248][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544698][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.944118][T12434] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2268'. [ 501.984244][T12432] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2267'. [ 502.713706][T12463] netlink: 'syz.0.2276': attribute type 8 has an invalid length. [ 502.737656][T12463] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2276'. [ 502.803797][T12466] netlink: 'syz.4.2275': attribute type 10 has an invalid length. [ 503.979970][T12490] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2283'. [ 504.348873][T12508] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 504.365040][T12510] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 504.649892][T12516] netlink: 'syz.4.2291': attribute type 8 has an invalid length. [ 504.674929][T12516] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2291'. [ 506.311065][T12525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2294'. [ 506.737330][T12547] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2299'. [ 507.479342][T12574] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2303'. [ 507.875680][T12586] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2307'. [ 508.449599][T12610] netlink: 'syz.4.2316': attribute type 10 has an invalid length. [ 508.485008][T12610] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.494233][T12610] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.537162][T12610] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.563574][T12610] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.599148][T12610] device geneve0 entered promiscuous mode [ 508.659807][T12610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.671425][T12610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.688073][T12610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.697231][T12610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.740083][T12610] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 508.837969][T12615] netlink: 'syz.3.2318': attribute type 27 has an invalid length. [ 508.867350][T12615] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2318'. [ 508.914697][T12617] netlink: 'syz.1.2319': attribute type 11 has an invalid length. [ 508.948635][T12617] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2319'. [ 508.992380][T12621] netlink: 'syz.4.2320': attribute type 3 has an invalid length. [ 509.059833][T12621] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2320'. [ 509.303108][T12627] netlink: 'syz.0.2322': attribute type 9 has an invalid length. [ 509.319896][T12627] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2322'. [ 509.365286][T12629] netlink: 'syz.4.2323': attribute type 3 has an invalid length. [ 509.373085][T12629] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2323'. [ 510.203582][T12651] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2328'. [ 510.667439][T12669] netlink: 'syz.1.2334': attribute type 10 has an invalid length. [ 510.710928][T12669] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2334'. [ 510.920226][T12676] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2336'. [ 511.474028][T12700] netlink: 'syz.1.2339': attribute type 46 has an invalid length. [ 511.514727][T12701] netlink: 'syz.1.2339': attribute type 46 has an invalid length. [ 511.852534][ T4276] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 513.161759][T12738] netlink: 'syz.0.2349': attribute type 8 has an invalid length. [ 513.211008][T12738] __nla_validate_parse: 6 callbacks suppressed [ 513.211028][T12738] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2349'. [ 514.595357][T12765] netlink: 'syz.1.2358': attribute type 2 has an invalid length. [ 514.621935][T12765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2358'. [ 515.833881][T12787] netlink: 'syz.0.2364': attribute type 8 has an invalid length. [ 515.854163][T12787] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2364'. [ 519.842935][T12829] netlink: 'syz.4.2374': attribute type 3 has an invalid length. [ 519.874632][T12829] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2374'. [ 519.918120][T12829] netlink: 'syz.4.2374': attribute type 11 has an invalid length. [ 519.937543][T12829] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2374'. [ 519.949288][T12828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.078132][T12845] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2379'. [ 520.121081][T12845] netlink: 'syz.1.2379': attribute type 10 has an invalid length. [ 520.305742][T12861] netlink: 'syz.4.2381': attribute type 8 has an invalid length. [ 520.332033][T12861] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2381'. [ 520.968989][T12876] delete_channel: no stack [ 520.988004][T12876] delete_channel: no stack [ 521.418979][T12891] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2391'. [ 521.895593][T12900] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2395'. [ 521.926869][T12900] netlink: zone id is out of range [ 521.973993][T12900] netlink: zone id is out of range [ 521.994884][T12900] netlink: zone id is out of range [ 522.000292][T12900] netlink: zone id is out of range [ 522.053840][T12900] netlink: zone id is out of range [ 522.073528][T12900] netlink: zone id is out of range [ 522.096635][T12900] netlink: zone id is out of range [ 522.102103][T12900] netlink: zone id is out of range [ 522.126950][T12900] netlink: zone id is out of range [ 522.157621][T12900] netlink: zone id is out of range [ 522.220565][T12916] netlink: 'syz.1.2401': attribute type 17 has an invalid length. [ 522.243061][T12916] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2401'. [ 522.337639][T12919] netlink: 'syz.2.2400': attribute type 8 has an invalid length. [ 522.374991][T12919] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2400'. [ 522.481793][T12921] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2402'. [ 523.161771][T12935] delete_channel: no stack [ 523.189554][T12935] delete_channel: no stack [ 524.152317][T12951] netlink: 'syz.1.2411': attribute type 2 has an invalid length. [ 524.168318][T12951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2411'. [ 525.327006][T12978] netlink: 'syz.1.2418': attribute type 8 has an invalid length. [ 525.338653][T12978] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2418'. [ 526.149995][T12993] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 526.264031][T12993] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2423'. [ 529.698313][T12993] team0: Port device macvlan1 removed [ 529.730061][T13001] device veth1_macvtap left promiscuous mode [ 529.746492][T13010] device veth1_macvtap entered promiscuous mode [ 529.752845][T13010] device macsec0 entered promiscuous mode [ 529.839669][T13013] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2428'. [ 530.483623][T13037] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.2435'. [ 530.515728][T13037] net_ratelimit: 3660 callbacks suppressed [ 530.515762][T13037] netlink: zone id is out of range [ 530.548019][T13037] netlink: zone id is out of range [ 530.563747][T13037] netlink: zone id is out of range [ 530.580960][T13037] netlink: zone id is out of range [ 530.600054][T13037] netlink: zone id is out of range [ 530.609895][T13037] netlink: zone id is out of range [ 530.616260][T13037] netlink: zone id is out of range [ 530.621855][T13037] netlink: zone id is out of range [ 530.629548][T13037] netlink: zone id is out of range [ 530.638761][T13037] netlink: zone id is out of range [ 530.671212][T13043] netlink: 'syz.4.2437': attribute type 8 has an invalid length. [ 530.724758][T13043] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2437'. [ 531.668968][T13056] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2441'. [ 531.679563][ T4276] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 535.002161][ T4276] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 535.150800][T13085] netlink: 'syz.3.2449': attribute type 8 has an invalid length. [ 535.215488][T13085] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2449'. [ 536.278840][T13104] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2456'. [ 536.444957][T13107] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 536.471513][T13107] device wlan1 entered promiscuous mode [ 536.499082][T13107] team0: Port device wlan1 added [ 536.528214][T13110] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2447'. [ 536.544527][T13110] tc_dump_action: action bad kind [ 539.941485][T13139] netlink: 'syz.0.2466': attribute type 8 has an invalid length. [ 539.949471][T13139] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2466'. [ 540.273829][T13146] device sit0 entered promiscuous mode [ 540.932834][T13148] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2468'. [ 540.994516][T13149] netlink: 'syz.2.2459': attribute type 10 has an invalid length. [ 541.008371][T13149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2459'. [ 541.036348][T13149] device bond0 entered promiscuous mode [ 541.073597][T13149] device bond_slave_1 entered promiscuous mode [ 541.097962][T13149] bridge0: port 3(bond0) entered blocking state [ 541.110652][T13149] bridge0: port 3(bond0) entered disabled state [ 541.137931][T13149] bridge0: port 3(bond0) entered blocking state [ 541.144519][T13149] bridge0: port 3(bond0) entered forwarding state [ 541.429393][T13169] netlink: 'syz.1.2474': attribute type 7 has an invalid length. [ 541.845774][T13186] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.2478'. [ 541.986805][T13181] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 542.035457][T13181] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2478'. [ 542.148024][T13197] netlink: 'syz.2.2482': attribute type 8 has an invalid length. [ 542.174719][T13197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2482'. [ 543.338348][T13219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2487'. [ 546.231708][T13237] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 546.237961][T13237] pim6reg0: linktype set to 780 [ 546.751901][T13252] sctp: [Deprecated]: syz.1.2496 (pid 13252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.751901][T13252] Use struct sctp_sack_info instead [ 546.850244][T13257] netlink: 'syz.4.2497': attribute type 8 has an invalid length. [ 546.899782][T13257] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2497'. [ 547.077052][T13263] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.2498'. [ 547.120454][T13263] net_ratelimit: 3660 callbacks suppressed [ 547.120473][T13263] netlink: zone id is out of range [ 547.965146][T13274] netlink: 'syz.2.2511': attribute type 8 has an invalid length. [ 547.972970][T13274] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2511'. [ 548.109858][T13277] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 548.158150][T13277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.228432][T13272] device sit0 entered promiscuous mode [ 548.814284][T13278] netlink: 'syz.4.2501': attribute type 10 has an invalid length. [ 548.852187][T13278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2501'. [ 548.877947][T13278] device bond0 entered promiscuous mode [ 548.897590][T13278] device bond_slave_0 entered promiscuous mode [ 548.912914][T13278] device bond_slave_1 entered promiscuous mode [ 548.928375][T13278] bridge0: port 3(bond0) entered blocking state [ 548.948281][T13278] bridge0: port 3(bond0) entered disabled state [ 548.983516][T13291] netlink: 'syz.0.2506': attribute type 3 has an invalid length. [ 549.036352][T13291] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2506'. [ 549.329142][T13301] sctp: [Deprecated]: syz.4.2508 (pid 13301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.329142][T13301] Use struct sctp_sack_info instead [ 549.969649][T13311] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2512'. [ 549.992507][T13311] netlink: zone id is out of range [ 550.023204][T13311] netlink: zone id is out of range [ 550.321871][T13311] netlink: del zone limit has 4 unknown bytes [ 550.890679][T13337] netlink: 'syz.2.2518': attribute type 8 has an invalid length. [ 550.931090][T13337] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2518'. [ 551.217364][T13346] sctp: [Deprecated]: syz.0.2522 (pid 13346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.217364][T13346] Use struct sctp_sack_info instead [ 551.413872][T13353] netlink: 'syz.3.2525': attribute type 49 has an invalid length. [ 551.437689][T13351] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2524'. [ 551.503407][T13351] tc_dump_action: action bad kind [ 552.073452][T13367] Ÿë: port 1(gretap0) entered blocking state [ 552.141749][T13367] Ÿë: port 1(gretap0) entered disabled state [ 552.211899][T13367] device gretap0 entered promiscuous mode [ 552.280380][T13372] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.2540'. [ 552.391862][T13370] Ÿë: port 2(veth0_to_team) entered blocking state [ 552.416914][T13370] Ÿë: port 2(veth0_to_team) entered disabled state [ 552.435922][T13370] device veth0_to_team entered promiscuous mode [ 552.475608][T13372] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 552.494316][T13372] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2540'. [ 552.797396][T13389] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2536'. [ 553.063640][T13401] netlink: 'syz.3.2539': attribute type 8 has an invalid length. [ 553.102662][T13401] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2539'. [ 554.129488][T13421] netlink: 'syz.1.2555': attribute type 8 has an invalid length. [ 554.167495][T13421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2555'. [ 554.246035][T13422] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2545'. [ 554.265685][T13422] tc_dump_action: action bad kind [ 554.319145][T13427] netlink: 'syz.4.2548': attribute type 33 has an invalid length. [ 554.368084][T13427] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2548'. [ 554.873967][T13430] €Â0: renamed from pim6reg1 [ 555.433949][T13456] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2556'. [ 555.967735][T13484] netlink: 'syz.3.2562': attribute type 8 has an invalid length. [ 556.013845][T13484] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2562'. [ 557.027781][T13507] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 557.061729][T13507] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 557.086669][T13511] netlink: 'syz.2.2570': attribute type 29 has an invalid length. [ 557.920224][T13535] device wlan1 left promiscuous mode [ 558.314710][T13545] netlink: 'syz.3.2579': attribute type 8 has an invalid length. [ 558.345390][T13545] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2579'. [ 558.776444][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2583'. [ 559.013945][T13562] netlink: 'syz.4.2585': attribute type 16 has an invalid length. [ 559.036051][T13562] netlink: 'syz.4.2585': attribute type 3 has an invalid length. [ 559.057987][T13562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2585'. [ 559.191804][T13563] netlink: 'syz.4.2585': attribute type 16 has an invalid length. [ 559.240626][T13563] netlink: 'syz.4.2585': attribute type 3 has an invalid length. [ 559.269161][T13563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2585'. [ 559.807672][T13568] syz.3.2586 (13568) used obsolete PPPIOCDETACH ioctl [ 561.734160][T13581] netlink: 'syz.0.2589': attribute type 39 has an invalid length. [ 561.835896][T13598] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 562.725387][T13598] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 562.942902][T13615] netlink: 'syz.0.2597': attribute type 39 has an invalid length. [ 562.967153][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.973609][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.182938][T13617] netlink: 'syz.1.2596': attribute type 8 has an invalid length. [ 563.214524][T13617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2596'. [ 563.304808][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 563.404188][T13632] netlink: 'syz.3.2600': attribute type 10 has an invalid length. [ 563.708271][T13632] device veth0_vlan left promiscuous mode [ 563.744895][T13632] device veth0_vlan entered promiscuous mode [ 563.806369][T13632] team0: Device veth0_vlan failed to register rx_handler [ 564.148512][T13653] netlink: 'syz.1.2605': attribute type 10 has an invalid length. [ 564.186402][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.194418][T13653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.208362][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.216761][T13653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.242045][T13653] device bridge0 entered promiscuous mode [ 564.271480][T13653] team0: Port device bridge0 added [ 564.305865][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.527797][T13661] device wg2 entered promiscuous mode [ 564.533486][T13661] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 564.849326][T13674] netlink: 'syz.1.2610': attribute type 11 has an invalid length. [ 564.875737][T13673] netlink: 'syz.3.2611': attribute type 2 has an invalid length. [ 564.914448][T13673] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2611'. [ 565.847915][T13683] netlink: 3850 bytes leftover after parsing attributes in process `syz.1.2610'. [ 566.177305][T13704] netlink: 'syz.0.2615': attribute type 8 has an invalid length. [ 566.205595][T13704] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2615'. [ 566.268753][T13709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'. [ 566.289735][T13709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'. [ 566.312542][T13709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'. [ 566.365948][T13709] netlink: 'syz.4.2619': attribute type 21 has an invalid length. [ 566.377264][T13709] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2619'. [ 566.387946][T13709] netlink: 'syz.4.2619': attribute type 4 has an invalid length. [ 566.396527][T13709] netlink: 'syz.4.2619': attribute type 5 has an invalid length. [ 566.405584][T13709] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2619'. [ 566.417768][ T4276] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 566.432952][T13709] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2619'. [ 567.082000][T13726] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 567.265181][T13726] team0: Port device geneve1 added [ 567.374140][T13732] netlink: 'syz.1.2626': attribute type 27 has an invalid length. [ 567.863408][T13757] FAULT_INJECTION: forcing a failure. [ 567.863408][T13757] name failslab, interval 1, probability 0, space 0, times 0 [ 567.900946][T13757] CPU: 0 PID: 13757 Comm: syz.0.2633 Not tainted syzkaller #0 [ 567.908493][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.918594][T13757] Call Trace: [ 567.921914][T13757] [ 567.924888][T13757] dump_stack_lvl+0x188/0x24e [ 567.929644][T13757] ? show_regs_print_info+0x12/0x12 [ 567.934963][T13757] ? load_image+0x400/0x400 [ 567.939508][T13757] ? __might_sleep+0xd0/0xd0 [ 567.944127][T13757] ? __lock_acquire+0x7d10/0x7d10 [ 567.949204][T13757] should_fail_ex+0x399/0x4d0 [ 567.953919][T13757] should_failslab+0x5/0x20 [ 567.958447][T13757] slab_pre_alloc_hook+0x59/0x310 [ 567.963508][T13757] kmem_cache_alloc_node+0x5a/0x320 [ 567.968734][T13757] ? __alloc_skb+0xfc/0x7e0 [ 567.973261][T13757] __alloc_skb+0xfc/0x7e0 [ 567.977624][T13757] ? netlink_autobind+0xda/0x300 [ 567.982591][T13757] netlink_sendmsg+0x654/0xbd0 [ 567.987389][T13757] ? netlink_getsockopt+0x550/0x550 [ 567.992618][T13757] ? aa_sock_msg_perm+0x94/0x150 [ 567.997581][T13757] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 568.002888][T13757] ? security_socket_sendmsg+0x7c/0xa0 [ 568.008373][T13757] ? netlink_getsockopt+0x550/0x550 [ 568.013595][T13757] ____sys_sendmsg+0x5be/0x970 [ 568.018388][T13757] ? __sys_sendmsg_sock+0x30/0x30 [ 568.023438][T13757] ? __import_iovec+0x315/0x500 [ 568.028325][T13757] ? import_iovec+0x6f/0xa0 [ 568.032857][T13757] ___sys_sendmsg+0x2a2/0x360 [ 568.037567][T13757] ? __sys_sendmsg+0x290/0x290 [ 568.042367][T13757] ? __lock_acquire+0x7d10/0x7d10 [ 568.047619][T13757] __se_sys_sendmsg+0x1bb/0x2a0 [ 568.052498][T13757] ? __x64_sys_sendmsg+0x80/0x80 [ 568.057472][T13757] ? lockdep_hardirqs_on+0x94/0x140 [ 568.062700][T13757] do_syscall_64+0x4c/0xa0 [ 568.067145][T13757] ? clear_bhb_loop+0x60/0xb0 [ 568.071868][T13757] ? clear_bhb_loop+0x60/0xb0 [ 568.076581][T13757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.082503][T13757] RIP: 0033:0x7f13e9b9ce59 [ 568.086939][T13757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.106574][T13757] RSP: 002b:00007f13eaac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.115017][T13757] RAX: ffffffffffffffda RBX: 00007f13e9e15fa0 RCX: 00007f13e9b9ce59 [ 568.123017][T13757] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 568.131011][T13757] RBP: 00007f13eaac5090 R08: 0000000000000000 R09: 0000000000000000 [ 568.139003][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.146998][T13757] R13: 00007f13e9e16038 R14: 00007f13e9e15fa0 R15: 00007ffea8a2e5b8 [ 568.155014][T13757] [ 568.328978][T13766] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2634'. [ 568.577412][T13771] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 568.592600][T13771] syzkaller1: linktype set to 773 [ 568.844081][T13778] validate_nla: 1 callbacks suppressed [ 568.844121][T13778] netlink: 'syz.4.2639': attribute type 1 has an invalid length. [ 569.408439][T13794] netlink: 'syz.2.2644': attribute type 6 has an invalid length. [ 570.070397][T13800] __nla_validate_parse: 2 callbacks suppressed [ 570.070415][T13800] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2646'. [ 570.147991][T13802] netlink: 'syz.4.2646': attribute type 2 has an invalid length. [ 570.224649][T13802] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2646'. [ 570.931345][T13820] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 571.174531][T13820] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 571.190095][T13823] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 571.199983][T13826] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 571.236054][T13824] netlink: 'syz.3.2653': attribute type 8 has an invalid length. [ 571.264882][T13824] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2653'. [ 571.333151][T13823] netlink: 'syz.2.2652': attribute type 29 has an invalid length. [ 572.283622][T13835] netlink: 'syz.3.2655': attribute type 27 has an invalid length. [ 572.334419][T13835] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2655'. [ 572.413796][T13841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.427398][T13841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.476321][T13841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.536678][T13841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.129811][T13865] validate_nla: 1 callbacks suppressed [ 574.129831][T13865] netlink: 'syz.4.2664': attribute type 2 has an invalid length. [ 574.208951][T13865] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2664'. [ 574.298694][T13870] netlink: 'syz.0.2665': attribute type 8 has an invalid length. [ 574.316910][T13870] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2665'. [ 574.931871][T13888] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2669'. [ 574.959110][T13888] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 575.125240][T13894] delete_channel: no stack [ 576.154837][T13923] netlink: 'syz.1.2679': attribute type 39 has an invalid length. [ 576.283981][T13921] netlink: 'syz.2.2678': attribute type 2 has an invalid length. [ 576.432541][ T4276] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 576.780687][T13940] netlink: 'syz.1.2694': attribute type 2 has an invalid length. [ 576.873642][T13940] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2694'. [ 577.007975][T13946] netlink: 'syz.3.2685': attribute type 8 has an invalid length. [ 577.044656][T13946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2685'. [ 578.146357][T13968] bridge0: port 2(team0) entered disabled state [ 578.235112][T13968] device bridge_slave_0 left promiscuous mode [ 578.265974][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.600562][T13989] netlink: 'syz.3.2697': attribute type 8 has an invalid length. [ 579.642453][T13989] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 579.664517][T13989] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2697'. [ 579.932240][T13998] netlink: 'syz.0.2700': attribute type 10 has an invalid length. [ 579.978053][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2700'. [ 580.149815][T14000] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2700'. [ 580.664287][T14017] netlink: 'syz.3.2704': attribute type 10 has an invalid length. [ 580.916790][T14017] bond0: (slave geneve0): Releasing backup interface [ 582.022763][T14033] netlink: 'syz.3.2711': attribute type 3 has an invalid length. [ 582.057899][T14033] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2711'. [ 582.113746][T14030] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 582.179872][T14030] batman_adv: batadv0: Adding interface: netdevsim0 [ 582.212699][T14030] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.403224][T14041] delete_channel: no stack [ 582.434072][T14030] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 582.467644][T14042] netlink: 'syz.0.2713': attribute type 8 has an invalid length. [ 582.504574][T14042] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 582.548896][T14042] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2713'. [ 583.254654][T14051] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 584.108642][T14075] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2723'. [ 584.124955][T14075] openvswitch: netlink: Flow key attr not present in new flow. [ 584.594276][T14084] netlink: 'syz.4.2725': attribute type 2 has an invalid length. [ 587.446583][T14084] device .*! entered promiscuous mode [ 587.454944][T14100] netlink: 'syz.1.2730': attribute type 46 has an invalid length. [ 587.462846][T14100] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2730'. [ 587.734245][T14115] netlink: 'syz.1.2734': attribute type 3 has an invalid length. [ 587.755264][T14115] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2734'. [ 588.886444][T14150] netlink: 'syz.4.2744': attribute type 10 has an invalid length. [ 588.914477][T14150] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2744'. [ 588.923549][T14150] bridge0: port 4(hsr0) entered blocking state [ 588.956554][T14150] bridge0: port 4(hsr0) entered disabled state [ 588.991873][T14150] bridge0: port 4(hsr0) entered blocking state [ 588.998270][T14150] bridge0: port 4(hsr0) entered forwarding state [ 589.060721][T14146] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 589.083248][T14146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2742'. [ 589.198845][T14146] device sit0 entered promiscuous mode [ 589.687534][T14160] netlink: 'syz.3.2746': attribute type 21 has an invalid length. [ 590.179139][T14187] netlink: 'syz.1.2750': attribute type 29 has an invalid length. [ 591.308289][ T4276] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 593.787073][T14187] netlink: 'syz.1.2750': attribute type 29 has an invalid length. [ 595.601394][T14263] netlink: 'syz.4.2771': attribute type 10 has an invalid length. [ 595.662300][T14263] device wlan1 left promiscuous mode [ 595.998551][T14274] netlink: 'syz.2.2772': attribute type 10 has an invalid length. [ 596.020712][T14274] bridge0: port 3(bond0) entered disabled state [ 596.038628][T14274] device bond0 left promiscuous mode [ 596.044119][T14274] device bond_slave_1 left promiscuous mode [ 596.053905][T14274] bridge0: port 3(bond0) entered disabled state [ 596.239433][T14280] netlink: 'syz.2.2776': attribute type 39 has an invalid length. [ 596.441247][T14285] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2777'. [ 596.464623][T14285] openvswitch: netlink: Message has 6 unknown bytes. [ 597.831140][T14318] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 598.792029][T14347] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2794'. [ 598.811528][T14347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.842143][T14347] netlink: 'syz.3.2794': attribute type 29 has an invalid length. [ 598.866795][T14347] netlink: 'syz.3.2794': attribute type 29 has an invalid length. [ 598.922612][T14350] netlink: 'syz.3.2794': attribute type 29 has an invalid length. [ 598.977055][T14356] netlink: 'syz.0.2797': attribute type 4 has an invalid length. [ 598.985410][T14356] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2797'. [ 599.000480][T14357] netlink: 'syz.3.2794': attribute type 29 has an invalid length. [ 599.021971][T14347] netlink: 'syz.3.2794': attribute type 29 has an invalid length. [ 600.249801][T14376] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 600.257688][T14376] #PF: supervisor instruction fetch in kernel mode [ 600.264218][T14376] #PF: error_code(0x0010) - not-present page [ 600.270240][T14376] PGD 6790e067 P4D 6790e067 PUD 0 [ 600.275410][T14376] Oops: 0010 [#1] PREEMPT SMP KASAN [ 600.280640][T14376] CPU: 0 PID: 14376 Comm: syz.0.2800 Not tainted syzkaller #0 [ 600.288134][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.298227][T14376] RIP: 0010:0x0 [ 600.301737][T14376] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 600.309147][T14376] RSP: 0018:ffffc90004fcf458 EFLAGS: 00010246 [ 600.315260][T14376] RAX: 1ffffffff162da83 RBX: 1ffff920009f9e9c RCX: 0000000000000001 [ 600.323273][T14376] RDX: ffffc90004fcf500 RSI: 0000000000000001 RDI: ffff888076bba000 [ 600.331286][T14376] RBP: ffffc90004fcf570 R08: ffff888076bba03f R09: 1ffff1100ed77407 [ 600.339296][T14376] R10: dffffc0000000000 R11: ffffed100ed77408 R12: ffffe8ffffc3d080 [ 600.347306][T14376] R13: ffffffff8b16d418 R14: 0000000000000000 R15: ffff888076bba000 [ 600.355319][T14376] FS: 00007f13eaa836c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 600.364290][T14376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.370931][T14376] CR2: ffffffffffffffd6 CR3: 0000000056cc8000 CR4: 00000000003506f0 [ 600.378942][T14376] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 600.386963][T14376] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 600.395025][T14376] Call Trace: [ 600.398340][T14376] [ 600.401304][T14376] bond_xdp_xmit+0x31e/0x550 [ 600.405958][T14376] ? __rwlock_init+0x140/0x140 [ 600.410761][T14376] ? bond_xdp_xmit+0x94/0x550 [ 600.415489][T14376] ? bond_xdp+0x890/0x890 [ 600.419872][T14376] ? _raw_spin_unlock+0x24/0x40 [ 600.424768][T14376] ? page_pool_put_defragged_page+0x427/0x660 [ 600.430887][T14376] bq_xmit_all+0xd3f/0x11b0 [ 600.435442][T14376] ? get_upper_ifindexes+0x346/0x5e0 [ 600.440776][T14376] ? bpf_bprintf_prepare+0x12b1/0x14a0 [ 600.446287][T14376] ? bq_enqueue+0x2ee/0x3d0 [ 600.450839][T14376] ? __dev_flush+0x1b0/0x1b0 [ 600.455489][T14376] ? dev_map_enqueue_multi+0xecf/0x1020 [ 600.461091][T14376] ? dev_map_enqueue+0x340/0x340 [ 600.466077][T14376] ? rcu_is_watching+0x11/0xa0 [ 600.470890][T14376] ? trace_xdp_redirect+0xb3/0x2b0 [ 600.476055][T14376] __dev_flush+0xbf/0x1b0 [ 600.480433][T14376] xdp_do_flush+0xa/0x20 [ 600.484718][T14376] bpf_test_run_xdp_live+0x1545/0x1a90 [ 600.490232][T14376] ? bpf_dispatcher_xdp+0x800/0x1000 [ 600.495565][T14376] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 600.501162][T14376] ? xdp_convert_md_to_buff+0x330/0x330 [ 600.506783][T14376] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 600.513077][T14376] ? bpf_test_init+0x119/0x140 [ 600.517884][T14376] ? xdp_convert_md_to_buff+0x5b/0x330 [ 600.523402][T14376] bpf_prog_test_run_xdp+0x736/0xf10 [ 600.528747][T14376] ? dev_put+0x80/0x80 [ 600.532865][T14376] ? dev_put+0x80/0x80 [ 600.536977][T14376] bpf_prog_test_run+0x31e/0x390 [ 600.541961][T14376] __sys_bpf+0x62b/0x780 [ 600.546252][T14376] ? bpf_link_show_fdinfo+0x380/0x380 [ 600.551683][T14376] ? lock_chain_count+0x20/0x20 [ 600.556588][T14376] __x64_sys_bpf+0x78/0x90 [ 600.561053][T14376] do_syscall_64+0x4c/0xa0 [ 600.565502][T14376] ? clear_bhb_loop+0x60/0xb0 [ 600.570227][T14376] ? clear_bhb_loop+0x60/0xb0 [ 600.574952][T14376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.580887][T14376] RIP: 0033:0x7f13e9b9ce59 [ 600.585343][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.604990][T14376] RSP: 002b:00007f13eaa83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.613442][T14376] RAX: ffffffffffffffda RBX: 00007f13e9e16180 RCX: 00007f13e9b9ce59 [ 600.621453][T14376] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 600.629472][T14376] RBP: 00007f13e9c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 600.637482][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.645497][T14376] R13: 00007f13e9e16218 R14: 00007f13e9e16180 R15: 00007ffea8a2e5b8 [ 600.653527][T14376] [ 600.656590][T14376] Modules linked in: [ 600.660529][T14376] CR2: 0000000000000000 [ 600.664725][T14376] ---[ end trace 0000000000000000 ]--- [ 600.670202][T14376] RIP: 0010:0x0 [ 600.673709][T14376] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 600.681106][T14376] RSP: 0018:ffffc90004fcf458 EFLAGS: 00010246 [ 600.687220][T14376] RAX: 1ffffffff162da83 RBX: 1ffff920009f9e9c RCX: 0000000000000001 [ 600.695241][T14376] RDX: ffffc90004fcf500 RSI: 0000000000000001 RDI: ffff888076bba000 [ 600.703262][T14376] RBP: ffffc90004fcf570 R08: ffff888076bba03f R09: 1ffff1100ed77407 [ 600.711279][T14376] R10: dffffc0000000000 R11: ffffed100ed77408 R12: ffffe8ffffc3d080 [ 600.719293][T14376] R13: ffffffff8b16d418 R14: 0000000000000000 R15: ffff888076bba000 [ 600.727308][T14376] FS: 00007f13eaa836c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 600.736274][T14376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.742960][T14376] CR2: ffffffffffffffd6 CR3: 0000000056cc8000 CR4: 00000000003506f0 [ 600.750977][T14376] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 600.758982][T14376] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 600.766995][T14376] Kernel panic - not syncing: Fatal exception in interrupt [ 600.774369][T14376] Kernel Offset: disabled [ 600.778712][T14376] Rebooting in 86400 seconds..