last executing test programs: 3m58.046084829s ago: executing program 1 (id=199): r0 = socket$kcm(0x22, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4044000) close(0x3) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4588b23488c928d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, 0x0, 0x0) recvmsg(r11, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 3m57.635840792s ago: executing program 1 (id=204): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x23, 0x2, 0x7ff, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 3m55.813938908s ago: executing program 1 (id=217): socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x26, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x3, 0x2, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d6", 0xcd}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e09", 0xd}], 0x2}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x10) r4 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000011c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x7e, [@multicast1, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @lsrr={0x83, 0x17, 0x91, [@multicast1, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x49, 0x3, 0x9, [{@empty, 0x35}]}]}}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x98}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001280)={0x0, r2}, 0x8) 3m54.897473552s ago: executing program 1 (id=226): r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x4}, {0xe, 0x4}, {0xa}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x76, 0x0, 0x0, 0x3}, 0x28) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000540)='ns/cgroup\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r6, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m54.087077247s ago: executing program 1 (id=231): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 3m53.166234311s ago: executing program 1 (id=244): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m37.976831291s ago: executing program 32 (id=244): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m40.522455196s ago: executing program 2 (id=997): sendmsg$inet(0xffffffffffffffff, 0x0, 0x10000084) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000"], 0x48) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x4, 0x2, 0x6, 0x3, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext, 0x8, 0x6, 0xffff, 0x1, 0x9, 0x6, 0xe, 0x0, 0x200, 0x0, 0xd6}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000080), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a"], 0xfe33) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x1, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xfaf1, 0x6, 0x200, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='&', 0x1}], 0x1}, 0x14) close(r4) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f00000013c0)) 2m40.337770951s ago: executing program 2 (id=998): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x23, 0x2, 0x7ff, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 2m39.714513121s ago: executing program 2 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00007a35b6a00000000000008000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000002c0)='ib_mad_send_done_handler\x00', r1, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000600), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r4, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x10, 0x0, r5, 0x0, '\x00', r7, r6, 0x0, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit]}, &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000740)=""/207, 0x41000, 0x24, '\x00', r7, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x100007, 0x3, 0x4000000b}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r2, r0, r5, r8], 0x0, 0x10, 0xed}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000000000010000702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) 2m39.336341661s ago: executing program 2 (id=1010): r0 = syz_clone(0x8000000, &(0x7f0000000640), 0x0, &(0x7f0000000280), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x500, 0x0, 0x0}, 0x30) 2m39.10225445s ago: executing program 2 (id=1013): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x0, 0x0, 0x0, 0x7, 0x43cd, 0x6, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x400000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x50f5}, 0x1410, 0x8, 0x10000000, 0x0, 0x78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f00000013c0), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000e80)="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", &(0x7f0000000600)=""/240, 0x0, &(0x7f00000007c0)="7255898943f932a461cf955ff775303adf177553020050a05f9a313ed4e5ccdb6977ea813a31bfefbb6e8dd2d55ca9cc658de80f8f315693b05c0ef93453182e4e7e11b4e087f8ba10f8e7150900b658f12f03d2cabd2c92f3ca368bd5900a4154b4ae76", 0xff, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') r4 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x114, 0x3, 0x0, 0xfea5) ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000edffffff0600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r1) 2m37.730131871s ago: executing program 2 (id=1021): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0801000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="99", 0x1}], 0x1}, 0x4c080) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58}, 0x10) 2m26.053556808s ago: executing program 0 (id=1101): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="86ad4b1bfd65483f30624c4c3b90a35988ef9c05a217f45da2a0c171b61b7a087a67387dc29771d818c83a4882ce510d41fb094ef98b2f42c150e61f80f705eb80290a41ba9e3fcb253ab2bc1a1cff760e18e18fad6b4a1fae8ce59fb799ef61bf4ff0361e754634898c79661d9833d5181ca36cb88f804026eab2c57943ea1b035f128dcd82331a4f9044c1fc14fbde40421b30048d9d38f138275ae8a1e556271b95ad52cdacbd7b2da1f5c3cfc42c1baa0ca2", 0xb4}, {&(0x7f0000000500)="713c1ebe8f81f7901069bef2fae63805d960b2821a057a75848f46aa076a3df670b864b9ccb19d606d3594a0639af625bc0f4a040a74f328401870e05282626ffb6513de96e99c2ffaba9cab0f773822e5dc6174fad6c2ea5fe4c6645d30c6f077bdcb23a9fccb2511320064ecb9ece6f68b6b0114855dedb7888709705fccfef3c2c6c6c985f8d179c4b7bee31d481189da5d5110105a2a09035a2a0499e5eee4993b2cd9e704925b2a68a72847f14b6c", 0xb1}, {&(0x7f0000001600)="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", 0x800}, {&(0x7f0000000640)="b78951aa954e90c7e0103c93746f325a727ff349b320d6dd351d7efae801000000000000a78dc329ac2132b5b62e68979afc2484834730d94ddb8542c413f13539b15ea9d83c014d9d674b02bcde8521eca3d7e69f47e474a8f6cc14c2a4082594a082b7ed7607909f4ec4e4ebaeacb0cfd10e3dfe8e6ac485b512a1421b74b4b16f7fa184439cb46d76b417", 0x8c}, {&(0x7f00000007c0)="0833755fc3853dfc83cb61ee7ee86a105ceeb9095a5e232b0ca334b47d1f6d59e17d312f22997b96a439c098d7b8b1e25409c3b8dd698397b3ec108519b0a2072f6d1b8fe8bc8a87aa85653aa7a5eaa49739801a6af5f1ba1c897a517ecbce00c5cbeee476", 0x65}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2m25.715515026s ago: executing program 0 (id=1107): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x5, 0x0, 0x0, 0x1a, 0x0, &(0x7f00000009c0)="1217f8234cce1a7d022c351337aaf74f4cfc57ace2882e060803", 0x1, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f00000014c0)=""/224, 0x0, 0xe0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r7}, 0x10) close(r4) close(r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000001080)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC], 0x31) write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x3, 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(r1) 2m24.91717268s ago: executing program 0 (id=1115): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000055009154090893b31b71a54a07"], 0xfe33) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) r8 = socket$kcm(0x1e, 0x4, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r5, &(0x7f00000004c0)="3d79dc5ab5c6b6eb200fa78be0a4c723f0445a7960a10a89b36b90444d55cd7c1dbf28e04d450aa1a13174592fa5c6187ac8edc363beacd23160fb84c8e7eee8048bbf0e4b66ad7c10d3c51a5e7eef455ed8b42f1dfc0cd8127a89beea3bb00d3caf6d5f28e2f63de26b03", &(0x7f0000000540)=""/134, 0x4}, 0x20) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r11) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r11, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="1f00"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x81, 0x0}, 0x8) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRESDEC=r10], 0x0, 0xf56, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000756c6c2554bac040242d5629b2a47b00006800002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007b463c88241c7083b27e410fbfc63859ac1c0bc1a21fcef983689a111086b60b800d41c85e7a8b9bcc2f13ecd90029b988b6179d6b6b73203794e50db75bb434653b07ef621322f91045d2e8338039f7c1e42ab02e103ecb7f4a268716372000000"], &(0x7f0000000140)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x24, '\x00', r12, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[r14, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000340)=[{0x0, 0x5, 0x0, 0xa}, {0x0, 0xffffffff, 0xc, 0x4}, {0x1, 0x5, 0x3, 0x3}, {0xffffffff, 0x1, 0xe}, {0x3, 0x4, 0x10, 0x9}, {0x3, 0x3, 0xa, 0xc}, {0x1, 0x5, 0x7, 0xb}], 0x10, 0x81}, 0x94) 2m24.633694342s ago: executing program 0 (id=1120): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004a00)}, 0x100) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='(())') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) 2m24.403488391s ago: executing program 0 (id=1133): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="86ad4b1bfd65483f30624c4c3b90a35988ef9c05a217f45da2a0c171b61b7a087a67387dc29771d818c83a4882ce510d41fb094ef98b2f42c150e61f80f705eb80290a41ba9e3fcb253ab2bc1a1cff760e18e18fad6b4a1fae8ce59fb799ef61bf4ff0361e754634898c79661d9833d5181ca36cb88f804026eab2c57943ea1b035f128dcd82331a4f9044c1fc14fbde40421b30048d9d38f138275ae8a1e556271b95ad52cdacbd7b2da1f5c3cfc42c1baa0ca2", 0xb4}, {&(0x7f0000000500)="713c1ebe8f81f7901069bef2fae63805d960b2821a057a75848f46aa076a3df670b864b9ccb19d606d3594a0639af625bc0f4a040a74f328401870e05282626ffb6513de96e99c2ffaba9cab0f773822e5dc6174fad6c2ea5fe4c6645d30c6f077bdcb23a9fccb2511320064ecb9ece6f68b6b0114855dedb7888709705fccfef3c2c6c6c985f8d179c4b7bee31d481189da5d5110105a2a09035a2a0499e5eee4993b2cd9e704925b2a68a72847f14b6c", 0xb1}, {&(0x7f0000001600)="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", 0xc00}, {&(0x7f0000000640)="b78951aa954e90c7e0103c93746f325a727ff349b320d6dd351d7efae801000000000000a78dc329ac2132b5b62e68979afc2484834730d94ddb8542c413f13539b15ea9d83c014d9d674b02bcde8521eca3d7e69f47e474a8f6cc14c2a4082594a082b7ed7607909f4ec4e4ebaeacb0cfd10e3dfe8e6ac485b512a1421b74b4b16f7fa184439cb46d76b417", 0x8c}, {&(0x7f00000007c0)="0833755fc3853dfc83cb61ee7ee86a105ceeb9095a5e232b0ca334b47d1f6d59e17d312f22997b96a439c098d7b8b1e25409c3b8dd698397b3ec108519b0a2072f6d1b8fe8bc8a87aa85653aa7a5eaa49739801a6af5f1ba1c897a517ecbce00c5cbeee476", 0x65}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2m24.185168638s ago: executing program 0 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000060000eaff1e0000f9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x8, 0xf, 0x2a040, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000000200)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, 0x0}, 0x24040011) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m22.540236121s ago: executing program 33 (id=1021): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x207}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0801000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000c80)="99", 0x1}], 0x1}, 0x4c080) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58}, 0x10) 2m8.779110415s ago: executing program 34 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000060000eaff1e0000f9000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x8, 0xf, 0x2a040, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0xe, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000000200)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x80, 0x0}, 0x24040011) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.865869116s ago: executing program 7 (id=2395): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/cgroup\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001000000000000000000000008500000041000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x700, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 11.425555722s ago: executing program 7 (id=2404): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000140)={'lo\x00', @random="0200ff7fffff"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000020000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1, 0x0, 0x0, 0xf0ff}, 0x4000010) 11.145107794s ago: executing program 7 (id=2410): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e12080006000000040104001600400001400300", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800eb054e81f783db4cb9040a1d080006007c09e89f82a10a0015000600142603600e1208001e00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b364cb014ef20dfea76f6816277ce06bbace8017cbec4c2ee5a7cef409291a8130b71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000000000", 0xd8}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 10.880616186s ago: executing program 7 (id=2412): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1008, 0x0, 0x4, 0x4, 0x9, 0xd37, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='&'], 0x10) r6 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5411, &(0x7f0000000100)) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000)=r7, 0x8) 10.57765004s ago: executing program 7 (id=2417): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x23, 0x2, 0x7ff, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 9.618586377s ago: executing program 7 (id=2423): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x2d, 0x101, 0x6}, 0x28) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x15, &(0x7f0000000ac0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x9}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @ptr={0xe}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @fwd={0xd}, @float={0x1, 0x0, 0x0, 0x10, 0x1e}, @float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30]}}, 0x0, 0x63, 0x0, 0x0, 0x10000}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x8) syz_clone(0x40a20000, &(0x7f0000000500)="4e7eb6bc731eb94022dcb2a25ce21d71fbcf380e69706ddbc0b587417610981d3183d6fbeb934b54ab4bda3f2f160a36873fdb698c25b93d93c940bbdf8a32d712bf43f3a3915add875f18721ec1dd43ffbd8b517a8c058a4addcd", 0x5b, &(0x7f0000000040), &(0x7f0000000440), &(0x7f0000000580)="fa0cbb50390ed72cb9fbbd88ad80880ea88379738cb5f8151c8f01e1633e2cd596e817a72bb83d904d24d817f919d6cace00faceea3b1e4427c49dcdee9ec919090ff0c9e4f118d5fb046f5da98fa1938a4872aecece8b3b4715066ca94af2f957b5bf3aeb8a26991080b3") r4 = socket$kcm(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x4008000) close(r4) 4.817632893s ago: executing program 5 (id=2454): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000ec40000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.172667855s ago: executing program 5 (id=2459): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_clone(0x3001100, 0x0, 0x20200, 0x0, 0x0, 0x0) syz_clone(0x26008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.86081264s ago: executing program 3 (id=2461): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000140)="cd94070ca486f651ef86961106339cbb", 0x0, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x50) 2.746593949s ago: executing program 4 (id=2462): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socketpair(0x8, 0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x23, 0x2, 0x7ff, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 2.698904933s ago: executing program 3 (id=2463): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xa5, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x20000800) close(0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e000000114000e1208000f0100810401a80016ea1f000840032e5f54c9201114000000000000000000000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101005ee4001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) 2.205060273s ago: executing program 6 (id=2465): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000001400050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x20000040) 2.144759868s ago: executing program 4 (id=2466): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="86ad4b1bfd65483f30624c4c3b90a35988ef9c05a217f45da2a0c171b61b7a087a67387dc29771d818c83a4882ce510d41fb094ef98b2f42c150e61f80f705eb80290a41ba9e3fcb253ab2bc1a1cff760e18e18fad6b4a1fae8ce59fb799ef61bf4ff0361e754634898c79661d9833d5181ca36cb88f804026eab2c57943ea1b035f128dcd82331a4f9044c1fc14fbde40421b30048d9d38f138275ae8a1e556271b95ad52cdacbd7b2da1f5c3cfc42c1baa", 0xb2}, {&(0x7f0000000500)="713c1ebe8f81f7901069bef2fae63805d960b2821a057a75848f46aa076a3df670b864b9ccb19d606d3594a0639af625bc0f4a040a74f328401870e05282626ffb6513de96e99c2ffaba9cab0f773822e5dc6174fad6c2ea5fe4c6645d30c6f077bdcb23a9fccb2511320064ecb9ece6f68b6b0114855dedb7888709705fccfef3c2c6c6c985f8d179c4b7bee31d481189da5d5110105a2a09035a2a0499e5eee4993b2cd9e704925b2a68a72847f14b6c", 0xb1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000640)="b78951aa954e90c7e0103c93746f325a727ff349b320d6dd351d7efae801000000000000a78dc329ac2132b5b62e68979afc2484834730d94ddb8542c413f13539b15ea9d83c014d9d674b02bcde8521eca3d7e69f47e474a8f6cc14c2a4082594a082b7ed7607909f4ec4e4ebaeacb0cfd10e3dfe8e6ac485b512a1421b74b4b16f7fa184439cb46d76b417", 0x8c}, {&(0x7f00000007c0)="0833755fc3853dfc83cb61ee7ee86a105ceeb9095a5e232b0ca334b47d1f6d59e17d312f22997b96a439c098d7b8b1e25409c3b8dd698397b3ec108519b0a2072f6d1b8fe8bc8a87aa85653aa7a5eaa49739801a6af5f1ba1c897a517ecbce00c5cbeee476", 0x65}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.049371805s ago: executing program 3 (id=2467): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000f30000000000000000e1489e1800000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r7, &(0x7f0000000580)="42ffad283ee5b1cc4cdb91ca5ab43cb49647d5472bec0c2e5318b5836cc8b51cfd0fe00b5f5b7e5b6f472b62dfd0bcdebe1c81bc91b6a32e36a7c04361b9f7836a0f03921eb0bc8619dda5ba7e6e7289512e5bfccf1e270f001a580f72dff24454aecfb0f9591dfb143b7feb4fa851f229", &(0x7f0000000440)=""/37}, 0x20) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x60, 0x3, 0x6, 0x81, 0x0, 0x3a, 0x46000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x589, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x4, 0x4, 0x7, 0xc97, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x4}, r5, 0x4, r1, 0x3) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000430500001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) 1.955534642s ago: executing program 5 (id=2468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000017691051000000000004000000000000009500000000000400"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0xd, 0xc, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095", @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000d1dffb09c19e3ff447cbf91de5c9d79aedff00f8ff000f000000000000530013e2bd12028c52e641000000ee15", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x43, &(0x7f0000000000)=r5, 0x4) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, 0xffffffffffffffff) sendmsg$tipc(r7, &(0x7f0000001b00)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x3}}, 0x10, &(0x7f0000001a80)=[{&(0x7f00000003c0)="5977d84ef50b0b1a023e82d2fe1a531ecab307542a11da3b975270b1d9c91b1ea05f6fb48552b422e1a977fd8913ec2fefb83cc7", 0x34}, {&(0x7f0000001c00)="7614eaa250f4ad0edc207b81b11f44ed7cca3b8f009e3d19cf77cb050000809ee7fb7db4edd7d00f6c0a9328689b4f3500c8be705603321d9866ba56b6828338a72582e2666aefa452a8bab0b3981be46575ad02ad8ec5f9187d8b7af48d082a301ef817481c4f602930d61f187f58e1bf490c55fbe0a37f0c2d6822fb9acf71dd0681669b71d99f0da355a214d431ca6e4deb125f47dea1a3c1b5cc31c13cb4aa07f69d3c6e75996969fa99be8dbe4070789cbe0a6ac3e766abba56f077903a24d97911fb", 0xc5}, {&(0x7f0000000800)="acee2138901bcdb918011c1d6f6a09d19331abffcf8c8f281b43e988243cfcd5f73a2c5965cee7cd1d7f92747106f25d247a9f7c9d374315f63ff10693124efc8fc00acb29a7ac239d8397819b786d625f62a73dde2777185836f54cf88b431f8e9bbff375693a8fcf8cc6ee83654d8d558e010550b06f78b8b181d73e137308825efda6add70acfec3a95e01cfbd9848965c0a271adf2b265b484b192ebdd671b", 0xa1}, {&(0x7f0000000600)="1ea7d133c70dd0", 0x7}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000008c0)="79b6491a11eb74cc7c985ef8c508dd967625215ca97e7c3049d25a20ffc9aa6763ba2c4d99fa9b3ea3e952eae885874f4c0c06c648203c07fbcfa854e39075f11a31e6e4516b74e058e844e14a1fb17e81db3539528a1a437823194f7b5bf133b4863617785e2f34bd6024f92338f6346fabc659f9cf930ce530c5ad55790ce6bf07d085d4b683a5", 0x88}, {&(0x7f0000001a00)="41830bb996b8342a0fe1759c11dcf76ea0be7b8aed5732ef050b635f118cce7c9838a6e4b4f67bb857b2d17cf99fb6abff6cfbf5ff89b57af4577edf3bdafccb8e8154d5141427fd13", 0x49}], 0x7, &(0x7f0000000980), 0x0, 0x4000800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000e0000000000000000000000000000000070000fa60629b175f622a09d87fa2ab906d74bc3409053b17b9ef51f10d582c077cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r6], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r11}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r12}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) 1.825875673s ago: executing program 6 (id=2469): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000ec40000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.684755934s ago: executing program 6 (id=2470): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0) 1.431897985s ago: executing program 6 (id=2471): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800eb054e81f783db4cb9040a1d080006007c09e89f82a10a0015000600142603600e1208001e00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b364cb014ef20dfea76f6816277ce06bbace8017cbec4c2ee5a7cef409291a8130b71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000000000", 0xd8}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 1.416632126s ago: executing program 4 (id=2472): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000093a1400000000000a37bf489ba2862cc0000000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001400)=@bpf_ext={0x1c, 0x1e, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffe01}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x55}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000001140)='syzkaller\x00', 0x5, 0x2f, &(0x7f00000012c0)=""/47, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0x1, 0x10001, 0x7}, 0x10, 0x12bbf, 0xffffffffffffffff, 0x1, &(0x7f0000001380)=[0x1, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000013c0)=[{0x2, 0x3, 0x7, 0x3}], 0x10, 0x2}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x80, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000014c0)={0x0, r3}, 0x10) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003092e201f2ffffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x2000000}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.065177934s ago: executing program 6 (id=2473): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x82, &(0x7f0000000000), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{0x0}], 0x1}, 0xc000) sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d4938037e786a6d0bdd700000000000000000051fd1f33597225", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f0000000140)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ddffffff0000000000000010000000000000"], 0x50) 1.064885454s ago: executing program 3 (id=2474): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x5, 0x0, 0x0, 0xd, 0x0, &(0x7f00000009c0)="1217f8234cce1a7d022c351337", 0x1, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f00000014c0)=""/224, 0x0, 0xe0, 0x1}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r7}, 0x10) close(r4) close(r8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000001080)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC], 0x31) r12 = openat$cgroup_int(r9, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f00000002c0)=0x3, 0x12) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(r1) 941.217804ms ago: executing program 5 (id=2475): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 875.547939ms ago: executing program 4 (id=2476): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="76d741053efeb7b9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x18, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair(0x23, 0x2, 0x7ff, &(0x7f0000000440)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 669.427686ms ago: executing program 5 (id=2477): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004a00)=[{0x0}, {0x0}], 0x2}, 0x100) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='(())') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) 357.998681ms ago: executing program 6 (id=2478): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x800000000076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}], 0x1}, 0x10000) r5 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6d17, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x7}]}, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x1d, &(0x7f0000000280)=""/29, 0x40f00, 0x0, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x8, 0x5}, {0x0, 0x3, 0xb, 0xc}, {0x1, 0x2, 0x6, 0x3}, {0x1, 0x2, 0x6}, {0x1, 0x2, 0xd, 0xb}, {0x2, 0x5, 0x6, 0x9}, {0x5, 0x4, 0x9, 0x2}], 0x10, 0xffff1259}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020692500000000002020207b1a120000000000bfa100000000000007010000f8ffffffb702000008000000b7e487cd2a26e532a8076e658fbd98020000fdffffff850000000600000095000000000000007b9e4da7bb"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000034c0)={&(0x7f0000003340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x7}]}}, &(0x7f00000033c0)=""/214, 0x26, 0xd6, 0x1}, 0x20) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f00000000c0), 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r5], 0xfe33) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) 355.577611ms ago: executing program 3 (id=2479): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="8000000600000708729e04f91dbb070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004a00)=[{0x0}, {0x0}], 0x2}, 0x100) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='(())') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) 257.154489ms ago: executing program 4 (id=2480): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000ec40000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 205.594903ms ago: executing program 5 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000880)=""/195, 0x41100}, 0x94) socketpair(0x8, 0xa, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x4, 0x5, 0x4, 0x0, 0x4d, 0x10010, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x10002a, 0x7, 0xffffffa1, 0x3, 0x42, 0x8, 0x8000, 0x0, 0x80000001, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x209) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x0) 64.909435ms ago: executing program 3 (id=2482): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="86ad4b1bfd65483f30624c4c3b90a35988ef9c05a217f45da2a0c171b61b7a087a67387dc29771d818c83a4882ce510d41fb094ef98b2f42c150e61f80f705eb80290a41ba9e3fcb253ab2bc1a1cff760e18e18fad6b4a1fae8ce59fb799ef61bf4ff0361e754634898c79661d9833d5181ca36cb88f804026eab2c57943ea1b035f128dcd82331a4f9044c1fc14fbde40421b30048d9d38f138275ae8a1e556271b95ad52cdacbd7b2da1f5c3cfc42c1baa", 0xb2}, {&(0x7f0000000500)="713c1ebe8f81f7901069bef2fae63805d960b2821a057a75848f46aa076a3df670b864b9ccb19d606d3594a0639af625bc0f4a040a74f328401870e05282626ffb6513de96e99c2ffaba9cab0f773822e5dc6174fad6c2ea5fe4c6645d30c6f077bdcb23a9fccb2511320064ecb9ece6f68b6b0114855dedb7888709705fccfef3c2c6c6c985f8d179c4b7bee31d481189da5d5110105a2a09035a2a0499e5eee4993b2cd9e704925b2a68a72847f14b6c", 0xb1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000640)="b78951aa954e90c7e0103c93746f325a727ff349b320d6dd351d7efae801000000000000a78dc329ac2132b5b62e68979afc2484834730d94ddb8542c413f13539b15ea9d83c014d9d674b02bcde8521eca3d7e69f47e474a8f6cc14c2a4082594a082b7ed7607909f4ec4e4ebaeacb0cfd10e3dfe8e6ac485b512a1421b74b4b16f7fa184439cb46d76b417", 0x8c}, {&(0x7f00000007c0)="0833755fc3853dfc83cb61ee7ee86a105ceeb9095a5e232b0ca334b47d1f6d59e17d312f22997b96a439c098d7b8b1e25409c3b8dd698397b3ec108519b0a2072f6d1b8fe8bc8a87aa85653aa7a5eaa49739801a6af5f1ba1c897a517ecbce00c5cbeee476", 0x65}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 4 (id=2483): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001800eb054e81f783db4cb9040a1d080006007c09e89f82a10a0015000600142603600e1208001e00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b364cb014ef20dfea76f6816277ce06bbace8017cbec4c2ee5a7cef409291a8130b71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300000000000000", 0xd8}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) kernel console output (not intermixed with test programs): 'syz.5.808': attribute type 39 has an invalid length. [ 142.249950][ T6867] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.812'. [ 142.467993][ T6878] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 142.488900][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.497853][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.653098][ T6889] netlink: 'syz.0.818': attribute type 39 has an invalid length. [ 142.849995][ T6895] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 142.862288][ T6895] netlink: 2 bytes leftover after parsing attributes in process `syz.2.820'. [ 143.022083][ T6900] netlink: 'syz.3.821': attribute type 7 has an invalid length. [ 143.087779][ T6900] netlink: 168 bytes leftover after parsing attributes in process `syz.3.821'. [ 143.217946][ T6912] netlink: 'syz.2.824': attribute type 39 has an invalid length. [ 143.240214][ T6910] netlink: 140 bytes leftover after parsing attributes in process `syz.4.825'. [ 143.489762][ T6921] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.520597][ T6919] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.827'. [ 143.769975][ T6939] netlink: 'syz.4.832': attribute type 39 has an invalid length. [ 144.093300][ T6948] netlink: 'syz.5.837': attribute type 39 has an invalid length. [ 144.122934][ T6949] device pim6reg1 entered promiscuous mode [ 144.240989][ T6957] FAULT_INJECTION: forcing a failure. [ 144.240989][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 144.318527][ T6957] CPU: 1 PID: 6957 Comm: syz.5.839 Not tainted 5.15.189-syzkaller #0 [ 144.326745][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.337824][ T6957] Call Trace: [ 144.341326][ T6957] [ 144.344920][ T6957] dump_stack_lvl+0x168/0x230 [ 144.350416][ T6957] ? show_regs_print_info+0x20/0x20 [ 144.356277][ T6957] ? load_image+0x3b0/0x3b0 [ 144.361785][ T6957] ? __might_sleep+0xf0/0xf0 [ 144.366864][ T6957] ? __lock_acquire+0x7c60/0x7c60 [ 144.372195][ T6957] should_fail+0x38c/0x4c0 [ 144.377129][ T6957] should_failslab+0x5/0x20 [ 144.382260][ T6957] slab_pre_alloc_hook+0x51/0xc0 [ 144.387299][ T6957] __kmalloc_node_track_caller+0x68/0x3a0 [ 144.393336][ T6957] ? netlink_dump+0x1d3/0xcd0 [ 144.399651][ T6957] ? kmem_cache_alloc_node+0x162/0x2d0 [ 144.406111][ T6957] ? __alloc_skb+0xf4/0x750 [ 144.410768][ T6957] ? netlink_dump+0x1d3/0xcd0 [ 144.415810][ T6957] __alloc_skb+0x22c/0x750 [ 144.420400][ T6957] netlink_dump+0x1d3/0xcd0 [ 144.425098][ T6957] ? mutex_lock_io_nested+0x60/0x60 [ 144.430524][ T6957] ? netlink_lookup+0x1d0/0x1d0 [ 144.435871][ T6957] __netlink_dump_start+0x523/0x700 [ 144.441192][ T6957] rtnetlink_rcv_msg+0xb97/0xe60 [ 144.446427][ T6957] ? br_vlan_rtnl_init+0x60/0x60 [ 144.451639][ T6957] ? rtnetlink_bind+0x80/0x80 [ 144.456363][ T6957] ? __local_bh_enable_ip+0x12a/0x1b0 [ 144.462135][ T6957] ? lockdep_hardirqs_on+0x94/0x140 [ 144.467623][ T6957] ? __local_bh_enable_ip+0x12a/0x1b0 [ 144.473458][ T6957] ? _local_bh_enable+0xa0/0xa0 [ 144.478465][ T6957] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 144.483776][ T6957] ? perf_trace_lock+0xdf/0x370 [ 144.488632][ T6957] ? memcpy+0x3c/0x60 [ 144.492737][ T6957] ? br_vlan_rtnl_init+0x60/0x60 [ 144.498259][ T6957] ? __skb_clone+0x480/0x790 [ 144.503429][ T6957] netlink_rcv_skb+0x1e0/0x430 [ 144.508398][ T6957] ? rtnetlink_bind+0x80/0x80 [ 144.513441][ T6957] ? netlink_ack+0xb60/0xb60 [ 144.518082][ T6957] netlink_unicast+0x774/0x920 [ 144.522852][ T6957] netlink_sendmsg+0x8ab/0xbc0 [ 144.527620][ T6957] ? netlink_getsockopt+0x560/0x560 [ 144.532910][ T6957] ? aa_sock_msg_perm+0x94/0x150 [ 144.538350][ T6957] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 144.543754][ T6957] ? security_socket_sendmsg+0x7c/0xa0 [ 144.549686][ T6957] ? netlink_getsockopt+0x560/0x560 [ 144.554977][ T6957] ____sys_sendmsg+0x5a2/0x8c0 [ 144.560072][ T6957] ? memset+0x1e/0x40 [ 144.564077][ T6957] ? __sys_sendmsg_sock+0x30/0x30 [ 144.569460][ T6957] ? import_iovec+0x6f/0xa0 [ 144.574009][ T6957] ___sys_sendmsg+0x1f0/0x260 [ 144.578776][ T6957] ? __sys_sendmsg+0x250/0x250 [ 144.583550][ T6957] ? trace_event_raw_event_lock+0x250/0x250 [ 144.589811][ T6957] ? vfs_write+0x84d/0xd00 [ 144.594362][ T6957] ? __fdget+0x18b/0x210 [ 144.598872][ T6957] __se_sys_sendmsg+0x190/0x250 [ 144.603915][ T6957] ? __x64_sys_sendmsg+0x80/0x80 [ 144.609149][ T6957] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 144.615219][ T6957] ? lockdep_hardirqs_on+0x94/0x140 [ 144.620590][ T6957] do_syscall_64+0x4c/0xa0 [ 144.625093][ T6957] ? clear_bhb_loop+0x30/0x80 [ 144.629763][ T6957] ? clear_bhb_loop+0x30/0x80 [ 144.634430][ T6957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 144.640548][ T6957] RIP: 0033:0x7fae4dc32be9 [ 144.645069][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.665212][ T6957] RSP: 002b:00007fae4be79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.673721][ T6957] RAX: ffffffffffffffda RBX: 00007fae4de5a090 RCX: 00007fae4dc32be9 [ 144.682093][ T6957] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000005 [ 144.690434][ T6957] RBP: 00007fae4be79090 R08: 0000000000000000 R09: 0000000000000000 [ 144.698696][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.706844][ T6957] R13: 00007fae4de5a128 R14: 00007fae4de5a090 R15: 00007fff5ae538a8 [ 144.714851][ T6957] [ 144.841517][ T6966] device veth0_vlan left promiscuous mode [ 144.887970][ T6966] device veth0_vlan entered promiscuous mode [ 144.938925][ T6966] team0: Device veth0_vlan failed to register rx_handler [ 145.523540][ T6989] bridge0: port 1(team0) entered blocking state [ 145.590097][ T6989] bridge0: port 1(team0) entered disabled state [ 145.660691][ T6989] device team0 entered promiscuous mode [ 145.676686][ T6989] device team_slave_0 entered promiscuous mode [ 145.685759][ T6989] device team_slave_1 entered promiscuous mode [ 145.902380][ T7012] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.857'. [ 145.935501][ T7013] can: request_module (can-proto-0) failed. [ 146.018539][ T7021] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 146.061585][ T7022] validate_nla: 3 callbacks suppressed [ 146.061602][ T7022] netlink: 'syz.4.860': attribute type 10 has an invalid length. [ 146.078037][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.860'. [ 146.125997][ T7022] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 146.148073][ T4941] wlan1: Trigger new scan to find an IBSS to join [ 147.619319][ T7083] netlink: 140 bytes leftover after parsing attributes in process `syz.5.883'. [ 147.863705][ T7101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'. [ 148.342767][ T7127] netlink: 'syz.4.895': attribute type 21 has an invalid length. [ 148.371603][ T7127] netlink: 'syz.4.895': attribute type 2 has an invalid length. [ 148.395902][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.4.895'. [ 148.473561][ T7132] netlink: 'syz.0.899': attribute type 2 has an invalid length. [ 148.482532][ T7132] netlink: 156 bytes leftover after parsing attributes in process `syz.0.899'. [ 148.567934][ T7138] netlink: 'syz.5.901': attribute type 13 has an invalid length. [ 148.577427][ T7138] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.901'. [ 149.161659][ T824] wlan1: Trigger new scan to find an IBSS to join [ 149.386902][ T7167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.395061][ T7167] IPv6: NLM_F_CREATE should be set when creating new route [ 149.402835][ T7167] IPv6: NLM_F_CREATE should be set when creating new route [ 149.417763][ T7172] netlink: 'syz.3.913': attribute type 10 has an invalid length. [ 149.430574][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.913'. [ 149.706905][ T7185] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 149.749082][ T7185] device veth0_vlan left promiscuous mode [ 149.791969][ T7185] device veth0_vlan entered promiscuous mode [ 149.861055][ T7185] team0: Device veth0_vlan failed to register rx_handler [ 149.977089][ T7192] netlink: 'syz.3.918': attribute type 39 has an invalid length. [ 150.178034][ T7195] netlink: 'syz.5.919': attribute type 39 has an invalid length. [ 150.274305][ T7207] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.425990][ T7211] netlink: 'syz.3.923': attribute type 3 has an invalid length. [ 150.458124][ T7211] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.923'. [ 151.228053][ T7221] netlink: set zone limit has 8 unknown bytes [ 151.440683][ T7230] FAULT_INJECTION: forcing a failure. [ 151.440683][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 151.455567][ T7230] CPU: 0 PID: 7230 Comm: syz.0.931 Not tainted 5.15.189-syzkaller #0 [ 151.463842][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.474251][ T7230] Call Trace: [ 151.477598][ T7230] [ 151.480634][ T7230] dump_stack_lvl+0x168/0x230 [ 151.485340][ T7230] ? show_regs_print_info+0x20/0x20 [ 151.490826][ T7230] ? load_image+0x3b0/0x3b0 [ 151.495450][ T7230] ? __lock_acquire+0x7c60/0x7c60 [ 151.500606][ T7230] ? perf_tp_event+0xa3b/0xb50 [ 151.505842][ T7230] ? verify_lock_unused+0x140/0x140 [ 151.511164][ T7230] should_fail+0x38c/0x4c0 [ 151.515800][ T7230] should_failslab+0x5/0x20 [ 151.520322][ T7230] slab_pre_alloc_hook+0x51/0xc0 [ 151.525291][ T7230] __kmalloc+0x6b/0x330 [ 151.529620][ T7230] ? bpf_prog_test_run_flow_dissector+0x25d/0x5e0 [ 151.536720][ T7230] bpf_prog_test_run_flow_dissector+0x25d/0x5e0 [ 151.543636][ T7230] ? __lock_acquire+0x7c60/0x7c60 [ 151.548872][ T7230] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 151.554631][ T7230] ? __fget_files+0x40f/0x480 [ 151.559526][ T7230] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 151.565430][ T7230] bpf_prog_test_run+0x31e/0x390 [ 151.570577][ T7230] __sys_bpf+0x535/0x670 [ 151.575039][ T7230] ? bpf_link_show_fdinfo+0x340/0x340 [ 151.580551][ T7230] ? rcu_nmi_exit+0x6f/0xf0 [ 151.585533][ T7230] ? vtime_user_exit+0x2dc/0x400 [ 151.590824][ T7230] __x64_sys_bpf+0x78/0x90 [ 151.595285][ T7230] do_syscall_64+0x4c/0xa0 [ 151.600006][ T7230] ? clear_bhb_loop+0x30/0x80 [ 151.604988][ T7230] ? clear_bhb_loop+0x30/0x80 [ 151.609704][ T7230] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.615846][ T7230] RIP: 0033:0x7fd493233be9 [ 151.620272][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.640254][ T7234] validate_nla: 1 callbacks suppressed [ 151.640293][ T7234] netlink: 'syz.5.932': attribute type 39 has an invalid length. [ 151.640680][ T7230] RSP: 002b:00007fd49149b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.640705][ T7230] RAX: ffffffffffffffda RBX: 00007fd49345afa0 RCX: 00007fd493233be9 [ 151.640718][ T7230] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 151.640729][ T7230] RBP: 00007fd49149b090 R08: 0000000000000000 R09: 0000000000000000 [ 151.689463][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.698151][ T7230] R13: 00007fd49345b038 R14: 00007fd49345afa0 R15: 00007ffdecd6c6e8 [ 151.706434][ T7230] [ 152.124476][ T522] wlan1: Creating new IBSS network, BSSID 02:78:c5:cc:0e:d8 [ 152.230328][ T7258] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 152.261868][ T7258] netlink: 168 bytes leftover after parsing attributes in process `syz.3.940'. [ 152.414395][ T7263] netlink: 'syz.4.943': attribute type 3 has an invalid length. [ 152.448220][ T7263] netlink: 'syz.4.943': attribute type 7 has an invalid length. [ 152.471281][ T7268] netlink: 'syz.0.944': attribute type 39 has an invalid length. [ 152.543528][ T7263] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.943'. [ 152.727944][ T7274] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.946'. [ 152.858631][ T7281] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.949'. [ 153.312997][ T7299] netlink: 'syz.5.956': attribute type 39 has an invalid length. [ 153.810027][ T7319] netlink: 'syz.0.960': attribute type 39 has an invalid length. [ 153.952703][ T7316] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 154.025408][ T7316] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.963'. [ 154.177289][ T7335] netlink: 'syz.5.968': attribute type 10 has an invalid length. [ 154.229718][ T7333] netlink: 'syz.2.969': attribute type 39 has an invalid length. [ 154.255119][ T824] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.262288][ T4951] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.517810][ T7346] device syzkaller0 entered promiscuous mode [ 154.575945][ T7348] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.973'. [ 154.637434][ T7348] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.973'. [ 155.514095][ T7389] netlink: 148 bytes leftover after parsing attributes in process `syz.3.985'. [ 156.663872][ T7427] validate_nla: 5 callbacks suppressed [ 156.663892][ T7427] netlink: 'syz.2.998': attribute type 39 has an invalid length. [ 156.896980][ T522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.030529][ T7442] netlink: 'syz.5.999': attribute type 39 has an invalid length. [ 157.068129][ T7439] netlink: 'syz.4.1001': attribute type 39 has an invalid length. [ 157.228636][ T7449] netlink: 'syz.2.1004': attribute type 3 has an invalid length. [ 157.297004][ T7449] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 157.312725][ T7447] team0: Port device team_slave_0 removed [ 157.332762][ T7447] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 157.364102][ T7449] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1004'. [ 157.869489][ T7469] netlink: 'syz.4.1012': attribute type 3 has an invalid length. [ 157.911967][ T7469] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1012'. [ 158.370951][ T7479] netlink: 'syz.4.1015': attribute type 39 has an invalid length. [ 158.605634][ T7490] netlink: 'syz.5.1018': attribute type 39 has an invalid length. [ 158.659867][ T7489] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1019'. [ 159.184710][ T7494] FAULT_INJECTION: forcing a failure. [ 159.184710][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.278845][ T7494] CPU: 1 PID: 7494 Comm: syz.0.1020 Not tainted 5.15.189-syzkaller #0 [ 159.287392][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.298085][ T7494] Call Trace: [ 159.301370][ T7494] [ 159.304385][ T7494] dump_stack_lvl+0x168/0x230 [ 159.309240][ T7494] ? show_regs_print_info+0x20/0x20 [ 159.314464][ T7494] ? load_image+0x3b0/0x3b0 [ 159.319107][ T7494] ? __lock_acquire+0x7c60/0x7c60 [ 159.324295][ T7494] should_fail+0x38c/0x4c0 [ 159.328728][ T7494] _copy_to_user+0x2e/0x130 [ 159.333237][ T7494] simple_read_from_buffer+0xe3/0x150 [ 159.338899][ T7494] proc_fail_nth_read+0x19a/0x210 [ 159.344247][ T7494] ? proc_fault_inject_write+0x2f0/0x2f0 [ 159.349924][ T7494] ? fsnotify_perm+0x254/0x560 [ 159.354739][ T7494] ? proc_fault_inject_write+0x2f0/0x2f0 [ 159.360843][ T7494] vfs_read+0x2f6/0xcf0 [ 159.365389][ T7494] ? kernel_read+0x1e0/0x1e0 [ 159.370184][ T7494] ? __fget_files+0x40f/0x480 [ 159.375139][ T7494] ? mutex_lock_nested+0x17/0x20 [ 159.380473][ T7494] ? __fdget_pos+0x2bf/0x370 [ 159.385367][ T7494] ? ksys_read+0x71/0x250 [ 159.389918][ T7494] ksys_read+0x14d/0x250 [ 159.395096][ T7494] ? vfs_write+0xd00/0xd00 [ 159.399887][ T7494] ? lockdep_hardirqs_on+0x94/0x140 [ 159.405629][ T7494] do_syscall_64+0x4c/0xa0 [ 159.410247][ T7494] ? clear_bhb_loop+0x30/0x80 [ 159.415183][ T7494] ? clear_bhb_loop+0x30/0x80 [ 159.419912][ T7494] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 159.425954][ T7494] RIP: 0033:0x7fd4932325fc [ 159.430374][ T7494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.450618][ T7494] RSP: 002b:00007fd49149b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.459139][ T7494] RAX: ffffffffffffffda RBX: 00007fd49345afa0 RCX: 00007fd4932325fc [ 159.467209][ T7494] RDX: 000000000000000f RSI: 00007fd49149b0a0 RDI: 0000000000000006 [ 159.475400][ T7494] RBP: 00007fd49149b090 R08: 0000000000000000 R09: 0000000000000000 [ 159.483670][ T7494] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 159.491888][ T7494] R13: 00007fd49345b038 R14: 00007fd49345afa0 R15: 00007ffdecd6c6e8 [ 159.500120][ T7494] [ 162.618300][ T7524] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1031'. [ 162.786357][ T7531] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1033'. [ 162.879518][ T7536] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1035'. [ 162.934615][ T7533] netlink: 'syz.5.1034': attribute type 3 has an invalid length. [ 163.024490][ T7533] netlink: 'syz.5.1034': attribute type 1 has an invalid length. [ 163.101451][ T7533] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1034'. [ 163.413460][ T7546] netlink: 'syz.4.1038': attribute type 39 has an invalid length. [ 163.892222][ T7557] netlink: 'syz.0.1039': attribute type 39 has an invalid length. [ 164.764075][ T7575] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1048'. [ 165.321618][ T7581] netlink: 'syz.3.1051': attribute type 3 has an invalid length. [ 165.329790][ T7581] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 165.368352][ T7581] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1051'. [ 165.731618][ T7597] netlink: 'syz.3.1056': attribute type 15 has an invalid length. [ 165.761520][ T7597] netlink: 'syz.3.1056': attribute type 7 has an invalid length. [ 165.813568][ T7597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1056'. [ 166.175822][ T7607] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1060'. [ 166.438240][ T7614] netlink: 'syz.3.1061': attribute type 39 has an invalid length. [ 167.544510][ T7641] TCP: TCP_TX_DELAY enabled [ 167.714395][ T7645] netlink: 'syz.0.1073': attribute type 10 has an invalid length. [ 167.772554][ T7645] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1073'. [ 167.961742][ T7654] validate_nla: 3 callbacks suppressed [ 167.961764][ T7654] netlink: 'syz.3.1077': attribute type 29 has an invalid length. [ 168.155187][ T7657] netlink: 'syz.5.1079': attribute type 39 has an invalid length. [ 168.880435][ T7673] netlink: 'syz.3.1082': attribute type 39 has an invalid length. [ 169.330067][ T7691] netlink: 'syz.5.1091': attribute type 3 has an invalid length. [ 169.362966][ T7688] netlink: 'syz.3.1089': attribute type 39 has an invalid length. [ 169.433872][ T7692] netlink: 'syz.5.1091': attribute type 21 has an invalid length. [ 169.486534][ T7691] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1091'. [ 169.520058][ T7693] netlink: 'syz.4.1090': attribute type 39 has an invalid length. [ 170.947816][ T7722] netlink: 'syz.4.1102': attribute type 39 has an invalid length. [ 171.011402][ T7727] netlink: 'syz.5.1104': attribute type 27 has an invalid length. [ 171.149340][ T4937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.165400][ T7732] netlink: 'syz.3.1105': attribute type 39 has an invalid length. [ 171.369288][ T7739] FAULT_INJECTION: forcing a failure. [ 171.369288][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 171.398710][ T7739] CPU: 0 PID: 7739 Comm: syz.5.1109 Not tainted 5.15.189-syzkaller #0 [ 171.407712][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.418906][ T7739] Call Trace: [ 171.422566][ T7739] [ 171.425929][ T7739] dump_stack_lvl+0x168/0x230 [ 171.430739][ T7739] ? show_regs_print_info+0x20/0x20 [ 171.436102][ T7739] ? load_image+0x3b0/0x3b0 [ 171.441457][ T7739] ? __might_sleep+0xf0/0xf0 [ 171.446567][ T7739] ? __lock_acquire+0x7c60/0x7c60 [ 171.452180][ T7739] should_fail+0x38c/0x4c0 [ 171.456998][ T7739] should_failslab+0x5/0x20 [ 171.461611][ T7739] slab_pre_alloc_hook+0x51/0xc0 [ 171.467306][ T7739] ? __kernfs_new_node+0xd6/0x680 [ 171.473198][ T7739] kmem_cache_alloc+0x3d/0x290 [ 171.478348][ T7739] __kernfs_new_node+0xd6/0x680 [ 171.483979][ T7739] ? kernfs_add_one+0x55d/0x6c0 [ 171.489064][ T7739] ? kernfs_new_node+0x250/0x250 [ 171.494299][ T7739] ? sysfs_do_create_link_sd+0x75/0x110 [ 171.499890][ T7739] ? __lock_acquire+0x7c60/0x7c60 [ 171.505169][ T7739] kernfs_new_node+0x148/0x250 [ 171.510342][ T7739] kernfs_create_link+0xa3/0x200 [ 171.515682][ T7739] sysfs_do_create_link_sd+0x83/0x110 [ 171.521178][ T7739] device_add+0x61d/0xfb0 [ 171.525662][ T7739] netdev_register_kobject+0x176/0x310 [ 171.531249][ T7739] register_netdevice+0x1019/0x16b0 [ 171.536720][ T7739] ? netif_stacked_transfer_operstate+0x200/0x200 [ 171.543163][ T7739] ? vscnprintf+0x80/0x80 [ 171.547503][ T7739] ? radix_tree_lookup+0x263/0x280 [ 171.552638][ T7739] ppp_dev_configure+0x80c/0xa80 [ 171.558068][ T7739] ppp_ioctl+0x65f/0x1960 [ 171.562672][ T7739] ? ppp_poll+0x250/0x250 [ 171.567220][ T7739] ? bpf_lsm_file_ioctl+0x5/0x10 [ 171.572385][ T7739] ? security_file_ioctl+0x7c/0xa0 [ 171.577861][ T7739] ? ppp_poll+0x250/0x250 [ 171.582763][ T7739] __se_sys_ioctl+0xfa/0x170 [ 171.587851][ T7739] do_syscall_64+0x4c/0xa0 [ 171.592291][ T7739] ? clear_bhb_loop+0x30/0x80 [ 171.596999][ T7739] ? clear_bhb_loop+0x30/0x80 [ 171.601690][ T7739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.607698][ T7739] RIP: 0033:0x7fae4dc32be9 [ 171.612289][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.635075][ T7739] RSP: 002b:00007fae4be9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.644545][ T7739] RAX: ffffffffffffffda RBX: 00007fae4de59fa0 RCX: 00007fae4dc32be9 [ 171.653532][ T7739] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000005 [ 171.662294][ T7739] RBP: 00007fae4be9a090 R08: 0000000000000000 R09: 0000000000000000 [ 171.670859][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.679425][ T7739] R13: 00007fae4de5a038 R14: 00007fae4de59fa0 R15: 00007fff5ae538a8 [ 171.688584][ T7739] [ 171.928200][ T7753] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1115'. [ 171.971116][ T7753] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1115'. [ 172.733426][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1125'. [ 172.758549][ T7787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.083852][ T7828] validate_nla: 4 callbacks suppressed [ 175.083874][ T7828] netlink: 'syz.4.1141': attribute type 39 has an invalid length. [ 175.638851][ T7833] netlink: 'syz.3.1142': attribute type 39 has an invalid length. [ 176.121987][ T4243] Bluetooth: hci2: command 0x0406 tx timeout [ 176.129607][ T4243] Bluetooth: hci4: command 0x0406 tx timeout [ 176.162276][ T4243] Bluetooth: hci3: command 0x0406 tx timeout [ 176.518069][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 177.023304][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.121542][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.129918][ T7827] device bridge_slave_0 entered promiscuous mode [ 177.163269][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 177.235058][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.321764][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.382662][ T7827] device bridge_slave_1 entered promiscuous mode [ 177.593820][ T7880] netlink: 'syz.4.1155': attribute type 39 has an invalid length. [ 177.619172][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.685888][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.146019][ T7827] team0: Port device team_slave_0 added [ 178.262276][ T7827] team0: Port device team_slave_1 added [ 178.564078][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.631787][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.909490][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.995692][ T7895] netlink: 'syz.4.1160': attribute type 39 has an invalid length. [ 179.010672][ T7903] netlink: 'syz.3.1163': attribute type 49 has an invalid length. [ 179.033362][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.040438][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.231728][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.243391][ T4210] Bluetooth: hci0: command 0x041b tx timeout [ 179.273768][ T7907] FAULT_INJECTION: forcing a failure. [ 179.273768][ T7907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.307269][ T7902] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1163'. [ 179.330741][ T7903] netlink: 'syz.3.1163': attribute type 49 has an invalid length. [ 179.344381][ T7907] CPU: 0 PID: 7907 Comm: syz.4.1164 Not tainted 5.15.189-syzkaller #0 [ 179.352932][ T7907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.363463][ T7907] Call Trace: [ 179.367248][ T7907] [ 179.370674][ T7907] dump_stack_lvl+0x168/0x230 [ 179.375574][ T7907] ? show_regs_print_info+0x20/0x20 [ 179.380994][ T7907] ? load_image+0x3b0/0x3b0 [ 179.385773][ T7907] ? __lock_acquire+0x7c60/0x7c60 [ 179.391229][ T7907] ? __might_sleep+0xf0/0xf0 [ 179.396307][ T7907] should_fail+0x38c/0x4c0 [ 179.400858][ T7907] _copy_from_user+0x2e/0x170 [ 179.405948][ T7907] generic_map_update_batch+0x484/0x7c0 [ 179.411723][ T7907] ? rcu_read_unlock+0x90/0x90 [ 179.416662][ T7907] ? __fdget+0x18b/0x210 [ 179.421019][ T7907] ? rcu_read_unlock+0x90/0x90 [ 179.425894][ T7907] bpf_map_do_batch+0x466/0x600 [ 179.430768][ T7907] __sys_bpf+0x601/0x670 [ 179.435060][ T7907] ? bpf_link_show_fdinfo+0x340/0x340 [ 179.440567][ T7907] ? vtime_user_exit+0x2dc/0x400 [ 179.445755][ T7907] __x64_sys_bpf+0x78/0x90 [ 179.450465][ T7907] do_syscall_64+0x4c/0xa0 [ 179.454985][ T7907] ? clear_bhb_loop+0x30/0x80 [ 179.459773][ T7907] ? clear_bhb_loop+0x30/0x80 [ 179.464578][ T7907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.470490][ T7907] RIP: 0033:0x7ff6bf584be9 [ 179.474934][ T7907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.494891][ T7907] RSP: 002b:00007ff6bd7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.503511][ T7907] RAX: ffffffffffffffda RBX: 00007ff6bf7abfa0 RCX: 00007ff6bf584be9 [ 179.511681][ T7907] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 179.520270][ T7907] RBP: 00007ff6bd7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 179.528576][ T7907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.536919][ T7907] R13: 00007ff6bf7ac038 R14: 00007ff6bf7abfa0 R15: 00007ffdae1a1e78 [ 179.545800][ T7907] [ 179.760357][ T7827] device hsr_slave_0 entered promiscuous mode [ 179.795672][ T7827] device hsr_slave_1 entered promiscuous mode [ 180.151609][ T4951] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 180.483247][ T7921] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1170'. [ 180.515090][ T7919] netlink: 'syz.5.1167': attribute type 39 has an invalid length. [ 180.634921][ T7827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.755973][ T7827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.831940][ T7827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.916192][ T7827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.214453][ T7928] netlink: 'syz.5.1173': attribute type 10 has an invalid length. [ 181.239002][ T7928] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1173'. [ 181.329037][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 181.587073][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.722760][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.745474][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.809802][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.903970][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.914423][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.924908][ T4937] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.932188][ T4937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.977305][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.999090][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.019595][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.029311][ T4937] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.036846][ T4937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.080563][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.126833][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 182.156979][ T7953] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1178'. [ 182.178560][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 182.237582][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 182.288452][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 182.344629][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 182.382331][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 182.438324][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.468029][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 182.516969][ T7827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.561960][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.588922][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.618355][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.225550][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.255669][ T4937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.283941][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.415420][ T4210] Bluetooth: hci0: command 0x0419 tx timeout [ 184.177248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.210399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.581320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.609364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.647437][ T7827] device veth0_vlan entered promiscuous mode [ 184.741822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.764756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.818808][ T7827] device veth1_vlan entered promiscuous mode [ 185.283107][ T8003] netlink: 'syz.5.1189': attribute type 10 has an invalid length. [ 185.306661][ T8003] netlink: 'syz.5.1189': attribute type 16 has an invalid length. [ 185.320845][ T8003] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1189'. [ 185.343413][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.366929][ T4937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 185.393888][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 185.417710][ T8006] netlink: 'syz.3.1188': attribute type 39 has an invalid length. [ 185.473727][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.502350][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.559629][ T7827] device veth0_macvtap entered promiscuous mode [ 185.630442][ T7827] device veth1_macvtap entered promiscuous mode [ 185.755950][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.807522][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.846517][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.899476][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.939726][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.964333][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.982010][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.004567][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.022696][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.040073][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.078559][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.124194][ T8012] netlink: 'syz.4.1191': attribute type 21 has an invalid length. [ 186.173353][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1191'. [ 186.203814][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.229551][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.244403][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.262520][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.288249][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.307749][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.325655][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.348764][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.362612][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.380674][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.408002][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.441878][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.478063][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.495552][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.538797][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.580356][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.614422][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.700174][ T7827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.741023][ T7827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.819699][ T7827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.859725][ T7827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.274909][ T8034] netlink: 'syz.4.1198': attribute type 10 has an invalid length. [ 187.498726][ T8034] team0: Device hsr_slave_0 failed to register rx_handler [ 187.938050][ T4937] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 188.239839][ T8032] netlink: 'syz.5.1197': attribute type 39 has an invalid length. [ 188.309168][ T4941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.394427][ T4941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.464784][ T4937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.486160][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.511499][ T4937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.653118][ T8047] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1202'. [ 188.701671][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.802524][ T8046] FAULT_INJECTION: forcing a failure. [ 188.802524][ T8046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.881366][ T8046] CPU: 1 PID: 8046 Comm: syz.4.1203 Not tainted 5.15.189-syzkaller #0 [ 188.890124][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.900966][ T8046] Call Trace: [ 188.904376][ T8046] [ 188.907339][ T8046] dump_stack_lvl+0x168/0x230 [ 188.912053][ T8046] ? show_regs_print_info+0x20/0x20 [ 188.917458][ T8046] ? load_image+0x3b0/0x3b0 [ 188.921970][ T8046] ? __lock_acquire+0x7c60/0x7c60 [ 188.927011][ T8046] should_fail+0x38c/0x4c0 [ 188.931544][ T8046] _copy_to_user+0x2e/0x130 [ 188.936229][ T8046] simple_read_from_buffer+0xe3/0x150 [ 188.941646][ T8046] proc_fail_nth_read+0x19a/0x210 [ 188.947247][ T8046] ? proc_fault_inject_write+0x2f0/0x2f0 [ 188.952898][ T8046] ? fsnotify_perm+0x254/0x560 [ 188.957754][ T8046] ? proc_fault_inject_write+0x2f0/0x2f0 [ 188.963693][ T8046] vfs_read+0x2f6/0xcf0 [ 188.968080][ T8046] ? kernel_read+0x1e0/0x1e0 [ 188.972669][ T8046] ? __fget_files+0x40f/0x480 [ 188.977340][ T8046] ? mutex_lock_nested+0x17/0x20 [ 188.982267][ T8046] ? __fdget_pos+0x2bf/0x370 [ 188.986925][ T8046] ? ksys_read+0x71/0x250 [ 188.991367][ T8046] ksys_read+0x14d/0x250 [ 188.995603][ T8046] ? vfs_write+0xd00/0xd00 [ 189.000281][ T8046] ? lockdep_hardirqs_on+0x94/0x140 [ 189.005660][ T8046] do_syscall_64+0x4c/0xa0 [ 189.010064][ T8046] ? clear_bhb_loop+0x30/0x80 [ 189.014729][ T8046] ? clear_bhb_loop+0x30/0x80 [ 189.019392][ T8046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.025455][ T8046] RIP: 0033:0x7ff6bf5835fc [ 189.029865][ T8046] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.050109][ T8046] RSP: 002b:00007ff6bd7ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.058531][ T8046] RAX: ffffffffffffffda RBX: 00007ff6bf7abfa0 RCX: 00007ff6bf5835fc [ 189.066593][ T8046] RDX: 000000000000000f RSI: 00007ff6bd7ec0a0 RDI: 0000000000000004 [ 189.074831][ T8046] RBP: 00007ff6bd7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 189.082980][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.091226][ T8046] R13: 00007ff6bf7ac038 R14: 00007ff6bf7abfa0 R15: 00007ffdae1a1e78 [ 189.099385][ T8046] [ 190.019733][ T8068] bridge0: port 3(team0) entered blocking state [ 190.101360][ T8068] bridge0: port 3(team0) entered disabled state [ 190.145316][ T8068] device team0 entered promiscuous mode [ 190.150939][ T8068] device team_slave_0 entered promiscuous mode [ 190.251522][ T8068] device team_slave_1 entered promiscuous mode [ 190.368220][ T8068] bridge0: port 3(team0) entered blocking state [ 190.374948][ T8068] bridge0: port 3(team0) entered forwarding state [ 190.462234][ T8067] netlink: 'syz.6.1136': attribute type 39 has an invalid length. [ 190.973418][ T8080] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 191.082794][ T8080] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1209'. [ 191.402314][ T4243] Bluetooth: hci1: command 0x0409 tx timeout [ 191.533723][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 191.718852][ T8089] netlink: 'syz.6.1212': attribute type 10 has an invalid length. [ 191.772185][ T8089] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1212'. [ 191.784780][ T8089] device bond0 entered promiscuous mode [ 191.790880][ T8089] device bond_slave_0 entered promiscuous mode [ 191.804914][ T8089] device bond_slave_1 entered promiscuous mode [ 191.834960][ T8089] bridge0: port 4(bond0) entered blocking state [ 191.856637][ T8089] bridge0: port 4(bond0) entered disabled state [ 191.974719][ T8089] bridge0: port 4(bond0) entered blocking state [ 191.981541][ T8089] bridge0: port 4(bond0) entered forwarding state [ 192.018673][ T8096] netlink: 'syz.4.1213': attribute type 10 has an invalid length. [ 192.027935][ T8096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1213'. [ 192.038739][ T8096] device vlan1 entered promiscuous mode [ 192.059768][ T8096] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 192.425642][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.450568][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.507293][ T8053] device bridge_slave_0 entered promiscuous mode [ 192.641134][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.673106][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.732290][ T8053] device bridge_slave_1 entered promiscuous mode [ 192.897331][ T8120] netlink: 'syz.6.1219': attribute type 39 has an invalid length. [ 193.121899][ T8124] netlink: 'syz.5.1221': attribute type 39 has an invalid length. [ 193.144909][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.284060][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.315353][ T8131] netlink: 'syz.4.1222': attribute type 39 has an invalid length. [ 193.481621][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 193.538718][ T8053] team0: Port device team_slave_0 added [ 193.586258][ T8053] team0: Port device team_slave_1 added [ 193.904490][ T8150] netlink: 'syz.3.1228': attribute type 27 has an invalid length. [ 193.913879][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.920852][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.984555][ T8150] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1228'. [ 194.111449][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.219169][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.266057][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.453711][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.536899][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543677][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.820893][ T8165] netlink: 'syz.5.1232': attribute type 3 has an invalid length. [ 194.843502][ T8053] device hsr_slave_0 entered promiscuous mode [ 194.866471][ T8165] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1232'. [ 194.889258][ T8053] device hsr_slave_1 entered promiscuous mode [ 194.965606][ T8053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.002090][ T8053] Cannot create hsr debugfs directory [ 195.029887][ T8169] netlink: 'syz.3.1234': attribute type 39 has an invalid length. [ 195.231847][ T8181] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1237'. [ 195.478164][ T8182] netlink: 'syz.5.1236': attribute type 39 has an invalid length. [ 195.563665][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 195.781719][ T8189] device syzkaller0 entered promiscuous mode [ 196.104898][ T4937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.241334][ T4937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.348027][ T8210] netlink: 'syz.6.1246': attribute type 3 has an invalid length. [ 196.367079][ T4937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.381407][ T8210] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1246'. [ 196.840014][ T8053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.906674][ T8053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.992151][ T8053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.056260][ T8053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.088119][ T8227] netlink: 'syz.4.1251': attribute type 39 has an invalid length. [ 197.641640][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 197.751108][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.831012][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.862923][ T522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.902052][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.012061][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.056615][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.079964][ T4941] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.087214][ T4941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.107929][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.120314][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.140105][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.147349][ T4941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.228600][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.247687][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.269143][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.285064][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.307879][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.417343][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.479085][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.499171][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.534644][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.571006][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.606747][ T8053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.661531][ T8053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.285013][ T8284] netlink: 'syz.5.1264': attribute type 39 has an invalid length. [ 199.300229][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.310324][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.516007][ T8303] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1274'. [ 199.682183][ T8315] sctp: [Deprecated]: syz.5.1275 (pid 8315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.682183][ T8315] Use struct sctp_sack_info instead [ 199.837356][ T4937] device hsr_slave_0 left promiscuous mode [ 199.892084][ T4937] device hsr_slave_1 left promiscuous mode [ 199.974050][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.992780][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.032395][ T4937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.040216][ T4937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.066636][ T4937] device bridge_slave_1 left promiscuous mode [ 200.081432][ T4937] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.132039][ T4937] device bridge_slave_0 left promiscuous mode [ 200.138387][ T4937] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.281835][ T4937] device veth0_macvtap left promiscuous mode [ 200.288161][ T4937] device veth1_vlan left promiscuous mode [ 200.601734][ T8316] delete_channel: no stack [ 200.894419][ T4937] device team_slave_1 left promiscuous mode [ 200.917840][ T4937] team0 (unregistering): Port device team_slave_1 removed [ 200.958083][ T4937] device team_slave_0 left promiscuous mode [ 200.974518][ T4937] team0 (unregistering): Port device team_slave_0 removed [ 200.997480][ T4937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.027137][ T4937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.107279][ T4937] bond0 (unregistering): (slave team0): Releasing backup interface [ 201.117615][ T4937] device team0 left promiscuous mode [ 201.149363][ T4937] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 201.159233][ T4937] device bridge0 left promiscuous mode [ 201.165941][ T4937] bond0 (unregistering): Released all slaves [ 201.277008][ T8337] netlink: 'syz.3.1282': attribute type 39 has an invalid length. [ 201.317250][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.331667][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.349686][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.514665][ T8349] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1286'. [ 202.157864][ T4953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.376772][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.418377][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.548922][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.564668][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.627141][ T8053] device veth0_vlan entered promiscuous mode [ 202.667327][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.684697][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.738270][ T8053] device veth1_vlan entered promiscuous mode [ 202.784077][ T8378] netlink: 'syz.6.1295': attribute type 39 has an invalid length. [ 202.887352][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.909471][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.922602][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.933734][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.973840][ T8053] device veth0_macvtap entered promiscuous mode [ 202.996842][ T8053] device veth1_macvtap entered promiscuous mode [ 203.085408][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.195569][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.231246][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.272731][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.291253][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.311327][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.331293][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.351265][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.381495][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.395269][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.437910][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.461004][ T8387] netlink: 'syz.4.1299': attribute type 39 has an invalid length. [ 203.529222][ T8393] netlink: 'syz.6.1298': attribute type 21 has an invalid length. [ 203.578403][ T8393] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1298'. [ 203.619191][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1298'. [ 203.658738][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.681369][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.690208][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.701077][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.725448][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.740365][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.759100][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.770303][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.789273][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.809348][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.820025][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.842212][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.861340][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.880557][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.903315][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.981250][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.002509][ T4941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.020703][ T8053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.041328][ T8053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.051130][ T8053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.081303][ T8053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.320421][ T4951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.350505][ T8409] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1304'. [ 204.359331][ T4951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.466753][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.471028][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.536840][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.583635][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.634483][ T8408] netlink: 'syz.3.1304': attribute type 10 has an invalid length. [ 204.653190][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1307'. [ 204.710701][ T8408] team0: Device ipvlan1 failed to register rx_handler [ 205.379009][ T8433] netlink: 'syz.7.1200': attribute type 39 has an invalid length. [ 205.565363][ T8436] netlink: 'syz.3.1312': attribute type 39 has an invalid length. [ 206.103214][ T8455] bridge0: port 3(team0) entered blocking state [ 206.112972][ T8455] bridge0: port 3(team0) entered disabled state [ 206.131548][ T8455] device team0 entered promiscuous mode [ 206.137468][ T8455] device team_slave_0 entered promiscuous mode [ 206.152282][ T8455] device team_slave_1 entered promiscuous mode [ 206.176387][ T8455] bridge0: port 3(team0) entered blocking state [ 206.182940][ T8455] bridge0: port 3(team0) entered forwarding state [ 206.408932][ T8470] ref_ctr_offset mismatch. inode: 0x1c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 206.732395][ T8480] netlink: 'syz.5.1327': attribute type 39 has an invalid length. [ 206.990974][ T8486] netlink: 'syz.7.1339': attribute type 39 has an invalid length. [ 207.002193][ T8488] netlink: 'syz.5.1328': attribute type 39 has an invalid length. [ 207.198985][ T8500] netlink: 'syz.3.1334': attribute type 29 has an invalid length. [ 208.024161][ T8516] validate_nla: 4 callbacks suppressed [ 208.024198][ T8516] netlink: 'syz.5.1340': attribute type 39 has an invalid length. [ 208.048176][ T8524] netlink: 'syz.6.1341': attribute type 39 has an invalid length. [ 208.288206][ T8532] netlink: 'syz.6.1347': attribute type 29 has an invalid length. [ 208.361462][ T8530] netlink: 'syz.5.1345': attribute type 39 has an invalid length. [ 208.375601][ T8532] netlink: 'syz.6.1347': attribute type 29 has an invalid length. [ 208.411779][ T8534] netlink: 'syz.6.1347': attribute type 29 has an invalid length. [ 209.092930][ T8558] netlink: 'syz.4.1354': attribute type 39 has an invalid length. [ 209.250874][ T8567] netlink: 'syz.3.1356': attribute type 39 has an invalid length. [ 209.600426][ T8575] netlink: 'syz.5.1360': attribute type 39 has an invalid length. [ 210.387765][ T8608] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.1373'. [ 210.678141][ T8606] netlink: 'syz.5.1372': attribute type 39 has an invalid length. [ 210.982225][ T8626] bridge0: port 4(macsec0) entered blocking state [ 211.007120][ T8626] bridge0: port 4(macsec0) entered disabled state [ 211.043181][ T8626] device macsec0 entered promiscuous mode [ 211.072179][ T8626] bridge0: port 4(macsec0) entered blocking state [ 211.079138][ T8626] bridge0: port 4(macsec0) entered forwarding state [ 211.377416][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 211.828244][ T8648] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1384'. [ 213.086997][ T8682] FAULT_INJECTION: forcing a failure. [ 213.086997][ T8682] name failslab, interval 1, probability 0, space 0, times 0 [ 213.103898][ T8682] CPU: 1 PID: 8682 Comm: syz.6.1396 Not tainted 5.15.189-syzkaller #0 [ 213.112699][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.123401][ T8682] Call Trace: [ 213.127209][ T8682] [ 213.130433][ T8682] dump_stack_lvl+0x168/0x230 [ 213.135132][ T8682] ? show_regs_print_info+0x20/0x20 [ 213.140357][ T8682] ? load_image+0x3b0/0x3b0 [ 213.144951][ T8682] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 213.151064][ T8682] should_fail+0x38c/0x4c0 [ 213.155600][ T8682] should_failslab+0x5/0x20 [ 213.160112][ T8682] slab_pre_alloc_hook+0x51/0xc0 [ 213.165224][ T8682] ? skb_clone+0x1bd/0x350 [ 213.169667][ T8682] kmem_cache_alloc+0x3d/0x290 [ 213.174534][ T8682] skb_clone+0x1bd/0x350 [ 213.178801][ T8682] __netlink_deliver_tap+0x3cd/0x7c0 [ 213.184108][ T8682] netlink_deliver_tap+0x16c/0x180 [ 213.189400][ T8682] netlink_unicast+0x74f/0x920 [ 213.194255][ T8682] netlink_sendmsg+0x8ab/0xbc0 [ 213.199168][ T8682] ? netlink_getsockopt+0x560/0x560 [ 213.204553][ T8682] ? aa_sock_msg_perm+0x94/0x150 [ 213.209850][ T8682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 213.215820][ T8682] ? security_socket_sendmsg+0x7c/0xa0 [ 213.221538][ T8682] ? netlink_getsockopt+0x560/0x560 [ 213.226799][ T8682] ____sys_sendmsg+0x5a2/0x8c0 [ 213.232046][ T8682] ? memset+0x1e/0x40 [ 213.236606][ T8682] ? __sys_sendmsg_sock+0x30/0x30 [ 213.241628][ T8682] ? import_iovec+0x6f/0xa0 [ 213.246210][ T8682] ___sys_sendmsg+0x1f0/0x260 [ 213.250998][ T8682] ? __sys_sendmsg+0x250/0x250 [ 213.255968][ T8682] ? trace_event_raw_event_lock+0x250/0x250 [ 213.262160][ T8682] ? vfs_write+0x84d/0xd00 [ 213.266634][ T8682] ? __fdget+0x18b/0x210 [ 213.270973][ T8682] __se_sys_sendmsg+0x190/0x250 [ 213.275916][ T8682] ? __x64_sys_sendmsg+0x80/0x80 [ 213.281283][ T8682] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 213.287471][ T8682] ? lockdep_hardirqs_on+0x94/0x140 [ 213.292891][ T8682] do_syscall_64+0x4c/0xa0 [ 213.297710][ T8682] ? clear_bhb_loop+0x30/0x80 [ 213.302592][ T8682] ? clear_bhb_loop+0x30/0x80 [ 213.307545][ T8682] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 213.313631][ T8682] RIP: 0033:0x7f752669cbe9 [ 213.318069][ T8682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.338022][ T8682] RSP: 002b:00007f7524904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.346523][ T8682] RAX: ffffffffffffffda RBX: 00007f75268c3fa0 RCX: 00007f752669cbe9 [ 213.354875][ T8682] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 213.363649][ T8682] RBP: 00007f7524904090 R08: 0000000000000000 R09: 0000000000000000 [ 213.372879][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.381322][ T8682] R13: 00007f75268c4038 R14: 00007f75268c3fa0 R15: 00007ffdb3204308 [ 213.390091][ T8682] [ 213.894577][ T8699] FAULT_INJECTION: forcing a failure. [ 213.894577][ T8699] name failslab, interval 1, probability 0, space 0, times 0 [ 213.973972][ T8699] CPU: 1 PID: 8699 Comm: syz.6.1400 Not tainted 5.15.189-syzkaller #0 [ 213.982572][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.993043][ T8699] Call Trace: [ 213.996455][ T8699] [ 213.999389][ T8699] dump_stack_lvl+0x168/0x230 [ 214.004177][ T8699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.010435][ T8699] ? show_regs_print_info+0x20/0x20 [ 214.015664][ T8699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.022052][ T8699] should_fail+0x38c/0x4c0 [ 214.026606][ T8699] should_failslab+0x5/0x20 [ 214.031143][ T8699] slab_pre_alloc_hook+0x51/0xc0 [ 214.036219][ T8699] __kmalloc_node_track_caller+0x68/0x3a0 [ 214.042039][ T8699] ? pfkey_sendmsg+0x186/0xff0 [ 214.047215][ T8699] ? pfkey_sendmsg+0x186/0xff0 [ 214.052148][ T8699] ? pfkey_sendmsg+0x186/0xff0 [ 214.057394][ T8699] __alloc_skb+0x22c/0x750 [ 214.062018][ T8699] pfkey_sendmsg+0x186/0xff0 [ 214.066728][ T8699] ? lock_chain_count+0x20/0x20 [ 214.071765][ T8699] ? __might_sleep+0xf0/0xf0 [ 214.076625][ T8699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.082879][ T8699] ? pfkey_release+0x310/0x310 [ 214.087743][ T8699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.094117][ T8699] ? aa_sk_perm+0x7b4/0x8f0 [ 214.098882][ T8699] ? aa_af_perm+0x2b0/0x2b0 [ 214.103415][ T8699] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 214.109949][ T8699] ? aa_sock_msg_perm+0x94/0x150 [ 214.114913][ T8699] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.120466][ T8699] ? security_socket_sendmsg+0x7c/0xa0 [ 214.126475][ T8699] ? pfkey_release+0x310/0x310 [ 214.131259][ T8699] ____sys_sendmsg+0x5a2/0x8c0 [ 214.136039][ T8699] ? memset+0x1e/0x40 [ 214.140111][ T8699] ? __sys_sendmsg_sock+0x30/0x30 [ 214.145501][ T8699] ? import_iovec+0x6f/0xa0 [ 214.150048][ T8699] ___sys_sendmsg+0x1f0/0x260 [ 214.154759][ T8699] ? __sys_sendmsg+0x250/0x250 [ 214.159577][ T8699] ? __fdget+0x18b/0x210 [ 214.163939][ T8699] __se_sys_sendmsg+0x190/0x250 [ 214.168809][ T8699] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 214.174974][ T8699] ? __x64_sys_sendmsg+0x80/0x80 [ 214.180059][ T8699] ? syscall_enter_from_user_mode+0x2a/0x70 [ 214.186242][ T8699] do_syscall_64+0x4c/0xa0 [ 214.190768][ T8699] ? clear_bhb_loop+0x30/0x80 [ 214.195888][ T8699] ? clear_bhb_loop+0x30/0x80 [ 214.200660][ T8699] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.206656][ T8699] RIP: 0033:0x7f752669cbe9 [ 214.211182][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.231151][ T8699] RSP: 002b:00007f7524904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.239708][ T8699] RAX: ffffffffffffffda RBX: 00007f75268c3fa0 RCX: 00007f752669cbe9 [ 214.248338][ T8699] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000009 [ 214.256576][ T8699] RBP: 00007f7524904090 R08: 0000000000000000 R09: 0000000000000000 [ 214.264843][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.272971][ T8699] R13: 00007f75268c4038 R14: 00007f75268c3fa0 R15: 00007ffdb3204308 [ 214.281079][ T8699] [ 214.736233][ T8704] validate_nla: 4 callbacks suppressed [ 214.736253][ T8704] netlink: 'syz.3.1402': attribute type 39 has an invalid length. [ 215.474782][ T8712] device syzkaller0 entered promiscuous mode [ 215.703737][ T8735] netlink: 'syz.7.1416': attribute type 10 has an invalid length. [ 215.748888][ T8735] bridge0: port 3(team0) entered disabled state [ 215.774260][ T8735] device team0 left promiscuous mode [ 215.785485][ T8735] device team_slave_0 left promiscuous mode [ 215.793939][ T8735] device team_slave_1 left promiscuous mode [ 215.804277][ T8735] bridge0: port 3(team0) entered disabled state [ 215.831894][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.855982][ T8735] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.114108][ T8742] netlink: 'syz.5.1417': attribute type 39 has an invalid length. [ 216.596050][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.794226][ T8778] FAULT_INJECTION: forcing a failure. [ 216.794226][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 216.871407][ T8778] CPU: 0 PID: 8778 Comm: syz.5.1430 Not tainted 5.15.189-syzkaller #0 [ 216.879964][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.890716][ T8778] Call Trace: [ 216.894086][ T8778] [ 216.897217][ T8778] dump_stack_lvl+0x168/0x230 [ 216.902203][ T8778] ? show_regs_print_info+0x20/0x20 [ 216.907440][ T8778] ? load_image+0x3b0/0x3b0 [ 216.911986][ T8778] ? __lock_acquire+0x7c60/0x7c60 [ 216.917149][ T8778] should_fail+0x38c/0x4c0 [ 216.921693][ T8778] should_failslab+0x5/0x20 [ 216.926326][ T8778] slab_pre_alloc_hook+0x51/0xc0 [ 216.931379][ T8778] __kmalloc+0x6b/0x330 [ 216.935640][ T8778] ? bpf_ctx_init+0xbd/0x1a0 [ 216.940360][ T8778] bpf_ctx_init+0xbd/0x1a0 [ 216.944912][ T8778] bpf_prog_test_run_flow_dissector+0x2ec/0x5e0 [ 216.951280][ T8778] ? __lock_acquire+0x7c60/0x7c60 [ 216.956370][ T8778] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 216.962031][ T8778] ? __fget_files+0x40f/0x480 [ 216.966776][ T8778] ? xdp_convert_buff_to_md+0x1e0/0x1e0 [ 216.972592][ T8778] bpf_prog_test_run+0x31e/0x390 [ 216.977757][ T8778] __sys_bpf+0x535/0x670 [ 216.982031][ T8778] ? bpf_link_show_fdinfo+0x340/0x340 [ 216.987619][ T8778] ? vtime_user_exit+0x2dc/0x400 [ 216.992692][ T8778] __x64_sys_bpf+0x78/0x90 [ 216.997220][ T8778] do_syscall_64+0x4c/0xa0 [ 217.001657][ T8778] ? clear_bhb_loop+0x30/0x80 [ 217.006453][ T8778] ? clear_bhb_loop+0x30/0x80 [ 217.011211][ T8778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.017221][ T8778] RIP: 0033:0x7fae4dc32be9 [ 217.021968][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.041987][ T8778] RSP: 002b:00007fae4be9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.050680][ T8778] RAX: ffffffffffffffda RBX: 00007fae4de59fa0 RCX: 00007fae4dc32be9 [ 217.058665][ T8778] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 217.066775][ T8778] RBP: 00007fae4be9a090 R08: 0000000000000000 R09: 0000000000000000 [ 217.075217][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.083192][ T8778] R13: 00007fae4de5a038 R14: 00007fae4de59fa0 R15: 00007fff5ae538a8 [ 217.091358][ T8778] [ 217.149098][ T8780] netlink: 'syz.4.1431': attribute type 39 has an invalid length. [ 217.319835][ T8790] netlink: 192436 bytes leftover after parsing attributes in process `syz.7.1434'. [ 217.356649][ T8792] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1435'. [ 217.370258][ T8790] openvswitch: netlink: Duplicate key (type 0). [ 217.370390][ T8794] netlink: 'syz.4.1436': attribute type 3 has an invalid length. [ 217.370408][ T8794] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1436'. [ 217.505489][ T8799] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1437'. [ 217.567039][ T8801] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.1439'. [ 217.590782][ T8801] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.1439'. [ 217.823329][ T8811] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 218.118633][ T8831] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1450'. [ 218.294120][ T8839] netlink: 'syz.3.1454': attribute type 9 has an invalid length. [ 218.333967][ T8839] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1454'. [ 218.553885][ T8847] netlink: 'syz.5.1457': attribute type 21 has an invalid length. [ 218.573481][ T8847] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1457'. [ 218.654335][ T8847] netlink: 'syz.5.1457': attribute type 4 has an invalid length. [ 218.721504][ T8847] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1457'. [ 218.721547][ T8857] netlink: 'syz.4.1461': attribute type 3 has an invalid length. [ 218.974504][ T8871] FAULT_INJECTION: forcing a failure. [ 218.974504][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.071443][ T8871] CPU: 1 PID: 8871 Comm: syz.5.1464 Not tainted 5.15.189-syzkaller #0 [ 219.080102][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.090590][ T8871] Call Trace: [ 219.093892][ T8871] [ 219.097016][ T8871] dump_stack_lvl+0x168/0x230 [ 219.102375][ T8871] ? show_regs_print_info+0x20/0x20 [ 219.107616][ T8871] ? load_image+0x3b0/0x3b0 [ 219.112153][ T8871] ? __lock_acquire+0x7c60/0x7c60 [ 219.117301][ T8871] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 219.122870][ T8871] should_fail+0x38c/0x4c0 [ 219.127314][ T8871] _copy_from_user+0x2e/0x170 [ 219.132101][ T8871] __copy_msghdr_from_user+0xaf/0x5e0 [ 219.137827][ T8871] ? verify_lock_unused+0x140/0x140 [ 219.143157][ T8871] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 219.148541][ T8871] ___sys_sendmsg+0x156/0x260 [ 219.153314][ T8871] ? __sys_sendmsg+0x250/0x250 [ 219.158092][ T8871] ? vfs_write+0x84d/0xd00 [ 219.162651][ T8871] ? __fdget+0x18b/0x210 [ 219.166898][ T8871] __se_sys_sendmsg+0x190/0x250 [ 219.171840][ T8871] ? __x64_sys_sendmsg+0x80/0x80 [ 219.176858][ T8871] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 219.182848][ T8871] ? lockdep_hardirqs_on+0x94/0x140 [ 219.188227][ T8871] do_syscall_64+0x4c/0xa0 [ 219.192879][ T8871] ? clear_bhb_loop+0x30/0x80 [ 219.197950][ T8871] ? clear_bhb_loop+0x30/0x80 [ 219.202625][ T8871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.208700][ T8871] RIP: 0033:0x7fae4dc32be9 [ 219.213417][ T8871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.233389][ T8871] RSP: 002b:00007fae4be9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.242316][ T8871] RAX: ffffffffffffffda RBX: 00007fae4de59fa0 RCX: 00007fae4dc32be9 [ 219.250330][ T8871] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 219.258323][ T8871] RBP: 00007fae4be9a090 R08: 0000000000000000 R09: 0000000000000000 [ 219.266307][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.274273][ T8871] R13: 00007fae4de5a038 R14: 00007fae4de59fa0 R15: 00007fff5ae538a8 [ 219.282714][ T8871] [ 219.622996][ T8891] netlink: 'syz.4.1474': attribute type 21 has an invalid length. [ 219.694865][ T8894] FAULT_INJECTION: forcing a failure. [ 219.694865][ T8894] name failslab, interval 1, probability 0, space 0, times 0 [ 219.761350][ T8894] CPU: 0 PID: 8894 Comm: syz.6.1476 Not tainted 5.15.189-syzkaller #0 [ 219.770090][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.780440][ T8894] Call Trace: [ 219.783863][ T8894] [ 219.786807][ T8894] dump_stack_lvl+0x168/0x230 [ 219.791598][ T8894] ? show_regs_print_info+0x20/0x20 [ 219.796823][ T8894] ? load_image+0x3b0/0x3b0 [ 219.801342][ T8894] ? __might_sleep+0xf0/0xf0 [ 219.805959][ T8894] ? __lock_acquire+0x7c60/0x7c60 [ 219.811082][ T8894] should_fail+0x38c/0x4c0 [ 219.815519][ T8894] should_failslab+0x5/0x20 [ 219.820031][ T8894] slab_pre_alloc_hook+0x51/0xc0 [ 219.825084][ T8894] __kmalloc_node_track_caller+0x68/0x3a0 [ 219.830812][ T8894] ? netlink_dump+0x1d3/0xcd0 [ 219.835505][ T8894] ? kmem_cache_alloc_node+0x162/0x2d0 [ 219.840982][ T8894] ? __alloc_skb+0xf4/0x750 [ 219.845613][ T8894] ? netlink_dump+0x1d3/0xcd0 [ 219.850426][ T8894] __alloc_skb+0x22c/0x750 [ 219.855047][ T8894] netlink_dump+0x1d3/0xcd0 [ 219.859659][ T8894] ? mutex_lock_io_nested+0x60/0x60 [ 219.865032][ T8894] ? netlink_lookup+0x1d0/0x1d0 [ 219.870070][ T8894] __netlink_dump_start+0x523/0x700 [ 219.875390][ T8894] rtnetlink_rcv_msg+0xb97/0xe60 [ 219.880507][ T8894] ? neigh_get+0xca0/0xca0 [ 219.884918][ T8894] ? rtnetlink_bind+0x80/0x80 [ 219.889624][ T8894] ? __local_bh_enable_ip+0x12a/0x1b0 [ 219.895168][ T8894] ? lockdep_hardirqs_on+0x94/0x140 [ 219.900370][ T8894] ? __local_bh_enable_ip+0x12a/0x1b0 [ 219.905830][ T8894] ? _local_bh_enable+0xa0/0xa0 [ 219.910700][ T8894] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 219.916018][ T8894] ? dev_queue_xmit+0x20/0x20 [ 219.920696][ T8894] ? memcpy+0x3c/0x60 [ 219.924764][ T8894] ? __copy_skb_header+0x417/0x5a0 [ 219.930056][ T8894] ? neigh_get+0xca0/0xca0 [ 219.934646][ T8894] ? __skb_clone+0x480/0x790 [ 219.939388][ T8894] netlink_rcv_skb+0x1e0/0x430 [ 219.944259][ T8894] ? rtnetlink_bind+0x80/0x80 [ 219.948938][ T8894] ? netlink_ack+0xb60/0xb60 [ 219.953814][ T8894] netlink_unicast+0x774/0x920 [ 219.958588][ T8894] netlink_sendmsg+0x8ab/0xbc0 [ 219.963530][ T8894] ? netlink_getsockopt+0x560/0x560 [ 219.968820][ T8894] ? aa_sock_msg_perm+0x94/0x150 [ 219.974151][ T8894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.979489][ T8894] ? security_socket_sendmsg+0x7c/0xa0 [ 219.984956][ T8894] ? netlink_getsockopt+0x560/0x560 [ 219.990345][ T8894] ____sys_sendmsg+0x5a2/0x8c0 [ 219.995317][ T8894] ? memset+0x1e/0x40 [ 219.999305][ T8894] ? __sys_sendmsg_sock+0x30/0x30 [ 220.004346][ T8894] ? import_iovec+0x6f/0xa0 [ 220.008988][ T8894] ___sys_sendmsg+0x1f0/0x260 [ 220.013830][ T8894] ? __sys_sendmsg+0x250/0x250 [ 220.018641][ T8894] ? vfs_write+0x84d/0xd00 [ 220.023354][ T8894] ? __fdget+0x18b/0x210 [ 220.027802][ T8894] __se_sys_sendmsg+0x190/0x250 [ 220.032776][ T8894] ? __x64_sys_sendmsg+0x80/0x80 [ 220.037902][ T8894] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 220.044015][ T8894] ? lockdep_hardirqs_on+0x94/0x140 [ 220.049338][ T8894] do_syscall_64+0x4c/0xa0 [ 220.053852][ T8894] ? clear_bhb_loop+0x30/0x80 [ 220.058616][ T8894] ? clear_bhb_loop+0x30/0x80 [ 220.063290][ T8894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.069641][ T8894] RIP: 0033:0x7f752669cbe9 [ 220.074273][ T8894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.094360][ T8894] RSP: 002b:00007f7524904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.103141][ T8894] RAX: ffffffffffffffda RBX: 00007f75268c3fa0 RCX: 00007f752669cbe9 [ 220.111119][ T8894] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 220.119537][ T8894] RBP: 00007f7524904090 R08: 0000000000000000 R09: 0000000000000000 [ 220.127682][ T8894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.135964][ T8894] R13: 00007f75268c4038 R14: 00007f75268c3fa0 R15: 00007ffdb3204308 [ 220.143975][ T8894] [ 220.163024][ T8898] netlink: 'syz.4.1474': attribute type 3 has an invalid length. [ 220.868244][ T8886] device syzkaller0 entered promiscuous mode [ 220.905949][ T8923] netlink: 'syz.6.1484': attribute type 10 has an invalid length. [ 220.978338][ T8923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 221.594496][ T8957] sctp: [Deprecated]: syz.4.1499 (pid 8957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.594496][ T8957] Use struct sctp_sack_info instead [ 221.705113][ T8957] netlink: 'syz.4.1499': attribute type 2 has an invalid length. [ 221.713475][ T8957] netlink: 'syz.4.1499': attribute type 8 has an invalid length. [ 222.225565][ T4243] Bluetooth: hci5: command 0x0406 tx timeout [ 223.218936][ T8995] netlink: 'syz.7.1509': attribute type 10 has an invalid length. [ 223.261104][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.304311][ T8995] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.381495][ T8998] netlink: 'syz.7.1509': attribute type 10 has an invalid length. [ 223.389640][ T8998] __nla_validate_parse: 3 callbacks suppressed [ 223.389657][ T8998] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1509'. [ 223.494005][ T8998] device batadv0 entered promiscuous mode [ 223.517254][ T8998] bond0: (slave batadv0): Releasing backup interface [ 223.550664][ T8998] bridge0: port 3(batadv0) entered blocking state [ 223.583584][ T8998] bridge0: port 3(batadv0) entered disabled state [ 223.728996][ T9004] netlink: 'syz.5.1511': attribute type 10 has an invalid length. [ 224.042858][ T9004] team0: Device hsr_slave_0 failed to register rx_handler [ 224.103780][ T4937] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 224.113895][ T4937] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 224.467650][ T9017] netlink: 'syz.6.1515': attribute type 10 has an invalid length. [ 224.501297][ T9017] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1515'. [ 224.640597][ T9030] sctp: [Deprecated]: syz.3.1521 (pid 9030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.640597][ T9030] Use struct sctp_sack_info instead [ 224.675252][ T9034] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1522'. [ 224.784024][ T9030] netlink: 'syz.3.1521': attribute type 2 has an invalid length. [ 224.924246][ T9030] netlink: 'syz.3.1521': attribute type 8 has an invalid length. [ 224.937034][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1521'. [ 225.272401][ T9047] syz.3.1526[9047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.275007][ T9047] syz.3.1526[9047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.892458][ T9067] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1534'. [ 227.176882][ T9107] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 227.214133][ T9107] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1548'. [ 227.355377][ T9112] netlink: 'syz.6.1549': attribute type 39 has an invalid length. [ 227.853570][ T9137] netlink: 'syz.4.1560': attribute type 27 has an invalid length. [ 227.915713][ T9137] netlink: 'syz.4.1560': attribute type 3 has an invalid length. [ 227.951478][ T9137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1560'. [ 228.327483][ T9147] netlink: 'syz.6.1563': attribute type 27 has an invalid length. [ 228.368702][ T9147] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.1563'. [ 228.594750][ T9151] device syzkaller0 entered promiscuous mode [ 228.903149][ T9152] device syzkaller0 entered promiscuous mode [ 229.603957][ T9190] device syzkaller0 entered promiscuous mode [ 229.664503][ T9198] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 229.714402][ T9198] team0: Port device dummy0 added [ 229.765543][ T9201] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 229.797415][ T9201] team0: Port device dummy0 removed [ 229.813120][ T9201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 229.830344][ T9188] netlink: 'syz.6.1578': attribute type 39 has an invalid length. [ 229.885744][ T9195] device syzkaller0 entered promiscuous mode [ 229.910920][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 230.047478][ T9209] netlink: 'syz.7.1584': attribute type 21 has an invalid length. [ 230.067549][ T9209] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1584'. [ 230.116828][ T9209] netlink: 'syz.7.1584': attribute type 4 has an invalid length. [ 230.150024][ T9209] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1584'. [ 230.209907][ T9215] FAULT_INJECTION: forcing a failure. [ 230.209907][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 230.210008][ T9214] netlink: 16166 bytes leftover after parsing attributes in process `syz.7.1584'. [ 230.262793][ T9215] CPU: 0 PID: 9215 Comm: syz.6.1587 Not tainted 5.15.189-syzkaller #0 [ 230.271272][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.281396][ T9215] Call Trace: [ 230.284737][ T9215] [ 230.287727][ T9215] dump_stack_lvl+0x168/0x230 [ 230.292995][ T9215] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 230.298883][ T9215] ? show_regs_print_info+0x20/0x20 [ 230.304305][ T9215] ? load_image+0x3b0/0x3b0 [ 230.308963][ T9215] should_fail+0x38c/0x4c0 [ 230.313531][ T9215] should_failslab+0x5/0x20 [ 230.318133][ T9215] slab_pre_alloc_hook+0x51/0xc0 [ 230.323168][ T9215] ? skb_clone+0x1bd/0x350 [ 230.327710][ T9215] kmem_cache_alloc+0x3d/0x290 [ 230.332597][ T9215] skb_clone+0x1bd/0x350 [ 230.337018][ T9215] __netlink_deliver_tap+0x3cd/0x7c0 [ 230.342399][ T9215] netlink_deliver_tap+0x16c/0x180 [ 230.347732][ T9215] netlink_dump+0x805/0xcd0 [ 230.352317][ T9215] ? netlink_lookup+0x1d0/0x1d0 [ 230.357711][ T9215] __netlink_dump_start+0x523/0x700 [ 230.362986][ T9215] rtnetlink_rcv_msg+0xb97/0xe60 [ 230.367973][ T9215] ? br_vlan_rtnl_init+0x60/0x60 [ 230.372937][ T9215] ? rtnetlink_bind+0x80/0x80 [ 230.377625][ T9215] ? migrate_enable+0x13e/0x200 [ 230.382503][ T9215] ? trace_call_bpf+0x509/0x5a0 [ 230.387378][ T9215] ? __local_bh_enable_ip+0x12a/0x1b0 [ 230.392802][ T9215] ? _local_bh_enable+0xa0/0xa0 [ 230.397791][ T9215] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 230.403802][ T9215] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 230.409041][ T9215] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 230.414882][ T9215] ? perf_trace_lock+0x2ec/0x370 [ 230.419907][ T9215] ? br_vlan_rtnl_init+0x60/0x60 [ 230.425089][ T9215] ? __skb_clone+0x480/0x790 [ 230.429749][ T9215] netlink_rcv_skb+0x1e0/0x430 [ 230.434575][ T9215] ? rtnetlink_bind+0x80/0x80 [ 230.439341][ T9215] ? netlink_ack+0xb60/0xb60 [ 230.444121][ T9215] netlink_unicast+0x774/0x920 [ 230.449049][ T9215] netlink_sendmsg+0x8ab/0xbc0 [ 230.453865][ T9215] ? netlink_getsockopt+0x560/0x560 [ 230.459354][ T9215] ? aa_sock_msg_perm+0x94/0x150 [ 230.464639][ T9215] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 230.469949][ T9215] ? security_socket_sendmsg+0x7c/0xa0 [ 230.475795][ T9215] ? netlink_getsockopt+0x560/0x560 [ 230.481234][ T9215] ____sys_sendmsg+0x5a2/0x8c0 [ 230.486067][ T9215] ? memset+0x1e/0x40 [ 230.490359][ T9215] ? __sys_sendmsg_sock+0x30/0x30 [ 230.495641][ T9215] ? import_iovec+0x6f/0xa0 [ 230.500593][ T9215] ___sys_sendmsg+0x1f0/0x260 [ 230.505434][ T9215] ? __sys_sendmsg+0x250/0x250 [ 230.510354][ T9215] ? trace_event_raw_event_lock+0x250/0x250 [ 230.516534][ T9215] ? vfs_write+0x84d/0xd00 [ 230.521128][ T9215] ? __fdget+0x18b/0x210 [ 230.525743][ T9215] __se_sys_sendmsg+0x190/0x250 [ 230.531047][ T9215] ? __x64_sys_sendmsg+0x80/0x80 [ 230.536118][ T9215] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 230.542451][ T9215] ? lockdep_hardirqs_on+0x94/0x140 [ 230.547964][ T9215] do_syscall_64+0x4c/0xa0 [ 230.552911][ T9215] ? clear_bhb_loop+0x30/0x80 [ 230.557603][ T9215] ? clear_bhb_loop+0x30/0x80 [ 230.562392][ T9215] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.568425][ T9215] RIP: 0033:0x7f752669cbe9 [ 230.572889][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.592706][ T9215] RSP: 002b:00007f7524904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.601172][ T9215] RAX: ffffffffffffffda RBX: 00007f75268c3fa0 RCX: 00007f752669cbe9 [ 230.609383][ T9215] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 230.617600][ T9215] RBP: 00007f7524904090 R08: 0000000000000000 R09: 0000000000000000 [ 230.626068][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.634095][ T9215] R13: 00007f75268c4038 R14: 00007f75268c3fa0 R15: 00007ffdb3204308 [ 230.642457][ T9215] [ 231.490606][ T9237] device syzkaller0 entered promiscuous mode [ 231.796093][ T9254] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1603'. [ 232.776856][ T9294] device syzkaller0 entered promiscuous mode [ 232.828900][ T9296] validate_nla: 4 callbacks suppressed [ 232.828923][ T9296] netlink: 'syz.5.1615': attribute type 39 has an invalid length. [ 232.905124][ T9293] delete_channel: no stack [ 233.050709][ T9310] netlink: 'syz.4.1623': attribute type 10 has an invalid length. [ 233.075563][ T9310] team0: Device ipvlan1 failed to register rx_handler [ 233.300938][ T9313] netlink: 'syz.3.1621': attribute type 39 has an invalid length. [ 233.495415][ T522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.862898][ T9342] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1634'. [ 233.889607][ T9338] netlink: 'syz.6.1632': attribute type 10 has an invalid length. [ 234.673381][ T9338] device geneve1 entered promiscuous mode [ 234.680450][ T9338] team0: Port device geneve1 added [ 234.693057][ T9341] netlink: 'syz.7.1633': attribute type 39 has an invalid length. [ 234.714676][ T9353] netlink: 'syz.5.1637': attribute type 21 has an invalid length. [ 234.732082][ T9353] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1637'. [ 234.774421][ T9353] netlink: 'syz.5.1637': attribute type 4 has an invalid length. [ 234.861411][ T9353] netlink: 'syz.5.1637': attribute type 3 has an invalid length. [ 234.873602][ T9353] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1637'. [ 234.883783][ T9355] netlink: 'syz.5.1637': attribute type 21 has an invalid length. [ 234.908798][ T9355] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.1637'. [ 234.988249][ T9348] device syzkaller0 entered promiscuous mode [ 235.169669][ T9372] netlink: 'syz.3.1644': attribute type 13 has an invalid length. [ 235.211934][ T9372] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1644'. [ 235.509044][ T9382] device syzkaller0 entered promiscuous mode [ 235.781129][ T9389] team0: Port device dummy0 added [ 235.936377][ T9389] team0: Port device dummy0 removed [ 235.959179][ T9389] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 236.924291][ T9426] FAULT_INJECTION: forcing a failure. [ 236.924291][ T9426] name failslab, interval 1, probability 0, space 0, times 0 [ 236.986348][ T9426] CPU: 1 PID: 9426 Comm: syz.4.1663 Not tainted 5.15.189-syzkaller #0 [ 236.994561][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.004954][ T9426] Call Trace: [ 237.008358][ T9426] [ 237.011238][ T9428] device syzkaller0 entered promiscuous mode [ 237.011307][ T9426] dump_stack_lvl+0x168/0x230 [ 237.022425][ T9426] ? show_regs_print_info+0x20/0x20 [ 237.027847][ T9426] ? load_image+0x3b0/0x3b0 [ 237.032748][ T9426] should_fail+0x38c/0x4c0 [ 237.037681][ T9426] should_failslab+0x5/0x20 [ 237.042305][ T9426] slab_pre_alloc_hook+0x51/0xc0 [ 237.047357][ T9426] ? __build_skb+0x26/0x2e0 [ 237.052003][ T9426] kmem_cache_alloc+0x3d/0x290 [ 237.056925][ T9426] __build_skb+0x26/0x2e0 [ 237.061299][ T9426] build_skb+0x1e/0x170 [ 237.065617][ T9426] bpf_prog_test_run_skb+0x260/0x1180 [ 237.071239][ T9426] ? lockdep_hardirqs_on+0x94/0x140 [ 237.076655][ T9426] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 237.082944][ T9426] ? cpu_online+0x60/0x60 [ 237.087401][ T9426] bpf_prog_test_run+0x31e/0x390 [ 237.092600][ T9426] __sys_bpf+0x535/0x670 [ 237.096899][ T9426] ? bpf_link_show_fdinfo+0x340/0x340 [ 237.102325][ T9426] ? vtime_user_exit+0x2dc/0x400 [ 237.107436][ T9426] __x64_sys_bpf+0x78/0x90 [ 237.111972][ T9426] do_syscall_64+0x4c/0xa0 [ 237.116423][ T9426] ? clear_bhb_loop+0x30/0x80 [ 237.121132][ T9426] ? clear_bhb_loop+0x30/0x80 [ 237.125928][ T9426] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.131989][ T9426] RIP: 0033:0x7ff6bf584be9 [ 237.136451][ T9426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.157013][ T9426] RSP: 002b:00007ff6bd7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.165642][ T9426] RAX: ffffffffffffffda RBX: 00007ff6bf7abfa0 RCX: 00007ff6bf584be9 [ 237.173731][ T9426] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 237.181986][ T9426] RBP: 00007ff6bd7ec090 R08: 0000000000000000 R09: 0000000000000000 [ 237.190172][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.198260][ T9426] R13: 00007ff6bf7ac038 R14: 00007ff6bf7abfa0 R15: 00007ffdae1a1e78 [ 237.206365][ T9426] [ 237.755723][ T9448] device syzkaller0 entered promiscuous mode [ 238.400775][ T9466] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1679'. [ 238.548968][ T9472] device syzkaller0 entered promiscuous mode [ 238.618383][ T9478] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1685'. [ 238.793754][ T9483] validate_nla: 7 callbacks suppressed [ 238.793789][ T9483] netlink: 'syz.4.1687': attribute type 39 has an invalid length. [ 239.374241][ T9506] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1697'. [ 239.476407][ T9512] device syzkaller0 entered promiscuous mode [ 239.655640][ T9516] netlink: 'syz.4.1700': attribute type 39 has an invalid length. [ 239.690051][ T9518] netlink: 'syz.5.1701': attribute type 21 has an invalid length. [ 240.087713][ T9538] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1710'. [ 240.168998][ T9542] netlink: 'syz.7.1712': attribute type 6 has an invalid length. [ 240.545853][ T9565] netlink: 'syz.4.1718': attribute type 39 has an invalid length. [ 240.909015][ T9576] netlink: set zone limit has 8 unknown bytes [ 240.986341][ T9578] netlink: 'syz.3.1724': attribute type 21 has an invalid length. [ 241.053484][ T9578] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1724'. [ 241.104244][ T9578] netlink: 'syz.3.1724': attribute type 4 has an invalid length. [ 241.131526][ T9578] netlink: 'syz.3.1724': attribute type 3 has an invalid length. [ 241.139518][ T9578] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1724'. [ 241.822194][ T9618] netlink: 'syz.6.1740': attribute type 21 has an invalid length. [ 241.863787][ T9618] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1740'. [ 241.921585][ T9618] netlink: 'syz.6.1740': attribute type 4 has an invalid length. [ 241.952527][ T9618] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1740'. [ 242.102056][ T9629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.185786][ T9629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.238170][ T9629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.352006][ T9642] netlink: 16255 bytes leftover after parsing attributes in process `syz.7.1748'. [ 245.020969][ T9659] validate_nla: 3 callbacks suppressed [ 245.020996][ T9659] netlink: 'syz.4.1755': attribute type 21 has an invalid length. [ 245.193260][ T9659] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1755'. [ 245.229241][ T9668] netlink: 'syz.7.1754': attribute type 3 has an invalid length. [ 245.286193][ T9668] netlink: 'syz.7.1754': attribute type 7 has an invalid length. [ 245.294928][ T9659] netlink: 'syz.4.1755': attribute type 4 has an invalid length. [ 245.331841][ T9659] netlink: 'syz.4.1755': attribute type 3 has an invalid length. [ 245.340508][ T9668] netlink: 198692 bytes leftover after parsing attributes in process `syz.7.1754'. [ 245.381881][ T9659] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1755'. [ 245.643386][ T9686] netlink: 'syz.6.1760': attribute type 39 has an invalid length. [ 245.847742][ T9689] netlink: 'syz.7.1764': attribute type 39 has an invalid length. [ 246.122107][ T9705] netlink: 'syz.4.1770': attribute type 3 has an invalid length. [ 246.175663][ T9705] netlink: 'syz.4.1770': attribute type 7 has an invalid length. [ 246.196942][ T9705] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.1770'. [ 246.235443][ T9711] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 246.287169][ T9714] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1773'. [ 246.325583][ T9714] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1773'. [ 246.352510][ T9711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1772'. [ 246.403270][ T9714] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1773'. [ 246.665450][ T9727] FAULT_INJECTION: forcing a failure. [ 246.665450][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.729251][ T9727] CPU: 0 PID: 9727 Comm: syz.7.1779 Not tainted 5.15.189-syzkaller #0 [ 246.737655][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.748410][ T9727] Call Trace: [ 246.751828][ T9727] [ 246.754761][ T9727] dump_stack_lvl+0x168/0x230 [ 246.759597][ T9727] ? show_regs_print_info+0x20/0x20 [ 246.764897][ T9727] ? load_image+0x3b0/0x3b0 [ 246.769484][ T9727] ? __lock_acquire+0x7c60/0x7c60 [ 246.774716][ T9727] ? vfs_write+0x84d/0xd00 [ 246.779212][ T9727] should_fail+0x38c/0x4c0 [ 246.783629][ T9727] _copy_from_user+0x2e/0x170 [ 246.788491][ T9727] __sys_bpf+0x21b/0x670 [ 246.792739][ T9727] ? bpf_link_show_fdinfo+0x340/0x340 [ 246.798136][ T9727] __x64_sys_bpf+0x78/0x90 [ 246.802558][ T9727] do_syscall_64+0x4c/0xa0 [ 246.807265][ T9727] ? clear_bhb_loop+0x30/0x80 [ 246.812031][ T9727] ? clear_bhb_loop+0x30/0x80 [ 246.816923][ T9727] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.823000][ T9727] RIP: 0033:0x7f366eae5be9 [ 246.827545][ T9727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.847274][ T9727] RSP: 002b:00007f366cd4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.855793][ T9727] RAX: ffffffffffffffda RBX: 00007f366ed0cfa0 RCX: 00007f366eae5be9 [ 246.863953][ T9727] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 246.872373][ T9727] RBP: 00007f366cd4d090 R08: 0000000000000000 R09: 0000000000000000 [ 246.880525][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.888769][ T9727] R13: 00007f366ed0d038 R14: 00007f366ed0cfa0 R15: 00007ffd447ef198 [ 246.897022][ T9727] [ 247.288763][ T9743] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1785'. [ 247.526976][ T9755] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.1787'. [ 247.611821][ T9760] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1791'. [ 247.635326][ T4941] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 248.390463][ T9791] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1804'. [ 248.582108][ T9799] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1807'. [ 249.567527][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.575289][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.715222][ T9870] validate_nla: 14 callbacks suppressed [ 250.715244][ T9870] netlink: 'syz.6.1834': attribute type 2 has an invalid length. [ 251.363526][ T9898] netlink: 'syz.5.1845': attribute type 39 has an invalid length. [ 251.557388][ T9911] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 251.564636][ T9911] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.876836][ T9927] __nla_validate_parse: 2 callbacks suppressed [ 251.876857][ T9927] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1855'. [ 252.200488][ T9939] netlink: 'syz.6.1863': attribute type 39 has an invalid length. [ 252.258281][ T9943] netlink: 'syz.7.1864': attribute type 15 has an invalid length. [ 252.267159][ T9943] netlink: 'syz.7.1864': attribute type 7 has an invalid length. [ 252.283113][ T9943] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1864'. [ 252.702032][ T9957] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.1868'. [ 252.750682][ T9957] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.800821][ T9960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1869'. [ 252.814988][ T9960] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1869'. [ 252.825109][ T9960] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1869'. [ 252.858609][ T9960] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1869'. [ 253.174882][ T9977] netlink: 'syz.7.1876': attribute type 21 has an invalid length. [ 253.300438][ T9975] netlink: 'syz.6.1875': attribute type 39 has an invalid length. [ 253.404588][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 253.441472][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 253.460324][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1880'. [ 253.618644][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.648226][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.725636][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.772289][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.921070][T10007] netlink: 'syz.7.1886': attribute type 39 has an invalid length. [ 253.934119][T10004] netlink: 'syz.3.1884': attribute type 21 has an invalid length. [ 254.787758][T10044] netlink: 'syz.5.1900': attribute type 39 has an invalid length. [ 255.781568][T10067] netlink: 'syz.5.1909': attribute type 3 has an invalid length. [ 255.975775][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982284][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.159409][T10079] delete_channel: no stack [ 256.175693][T10079] delete_channel: no stack [ 256.372622][T10092] netlink: 'syz.7.1917': attribute type 39 has an invalid length. [ 256.484884][T10098] netlink: 'syz.4.1920': attribute type 39 has an invalid length. [ 256.782975][T10110] device veth1_macvtap left promiscuous mode [ 256.835998][T10110] bridge0: port 4(macsec0) entered disabled state [ 256.848926][T10114] device wlan1 entered promiscuous mode [ 256.891614][T10113] __nla_validate_parse: 6 callbacks suppressed [ 256.891636][T10113] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1926'. [ 257.225474][T10130] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1934'. [ 257.466914][T10135] netlink: 'syz.3.1935': attribute type 39 has an invalid length. [ 257.880033][T10151] netlink: 'syz.4.1940': attribute type 39 has an invalid length. [ 258.029429][T10155] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1942'. [ 258.257756][T10158] A link change request failed with some changes committed already. Interface .6`Ҙ may have been left with an inconsistent configuration, please check. [ 258.456250][T10170] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1948'. [ 258.530953][T10170] netlink: zone id is out of range [ 258.583699][T10170] netlink: zone id is out of range [ 258.598294][T10170] netlink: del zone limit has 8 unknown bytes [ 258.741022][T10172] netlink: 'syz.3.1949': attribute type 39 has an invalid length. [ 258.805941][T10189] netlink: 'syz.7.1953': attribute type 39 has an invalid length. [ 258.918430][T10191] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1956'. [ 259.648364][T10217] netlink: 'syz.6.1966': attribute type 39 has an invalid length. [ 259.870522][T10228] netlink: 'syz.4.1967': attribute type 39 has an invalid length. [ 261.024204][T10264] netlink: 'syz.3.1980': attribute type 39 has an invalid length. [ 261.355918][T10278] netlink: 'syz.7.1986': attribute type 39 has an invalid length. [ 261.432975][T10281] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1987'. [ 261.518859][T10284] netlink: 'syz.6.1989': attribute type 9 has an invalid length. [ 261.539254][T10284] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1989'. [ 261.610101][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1990'. [ 262.233161][T10306] netlink: 'syz.7.1995': attribute type 39 has an invalid length. [ 262.315445][T10310] netlink: 'syz.6.1997': attribute type 39 has an invalid length. [ 262.362948][T10313] FAULT_INJECTION: forcing a failure. [ 262.362948][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.391437][T10313] CPU: 0 PID: 10313 Comm: syz.7.1999 Not tainted 5.15.189-syzkaller #0 [ 262.400008][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.410354][T10313] Call Trace: [ 262.413660][T10313] [ 262.416610][T10313] dump_stack_lvl+0x168/0x230 [ 262.421332][T10313] ? show_regs_print_info+0x20/0x20 [ 262.426654][T10313] ? load_image+0x3b0/0x3b0 [ 262.431348][T10313] ? __lock_acquire+0x7c60/0x7c60 [ 262.437167][T10313] ? __might_sleep+0xf0/0xf0 [ 262.441866][T10313] should_fail+0x38c/0x4c0 [ 262.446397][T10313] _copy_from_user+0x2e/0x170 [ 262.451148][T10313] generic_map_update_batch+0x4d4/0x7c0 [ 262.456817][T10313] ? rcu_read_unlock+0x90/0x90 [ 262.461665][T10313] ? __fdget+0x18b/0x210 [ 262.466044][T10313] ? rcu_read_unlock+0x90/0x90 [ 262.471091][T10313] bpf_map_do_batch+0x466/0x600 [ 262.476153][T10313] __sys_bpf+0x601/0x670 [ 262.480409][T10313] ? bpf_link_show_fdinfo+0x340/0x340 [ 262.485784][T10313] ? vtime_user_exit+0x2dc/0x400 [ 262.490817][T10313] __x64_sys_bpf+0x78/0x90 [ 262.495362][T10313] do_syscall_64+0x4c/0xa0 [ 262.499828][T10313] ? clear_bhb_loop+0x30/0x80 [ 262.504869][T10313] ? clear_bhb_loop+0x30/0x80 [ 262.509588][T10313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.515978][T10313] RIP: 0033:0x7f366eae5be9 [ 262.520658][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.540714][T10313] RSP: 002b:00007f366cd2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.549382][T10313] RAX: ffffffffffffffda RBX: 00007f366ed0d090 RCX: 00007f366eae5be9 [ 262.557535][T10313] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 000000000000001a [ 262.566031][T10313] RBP: 00007f366cd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.574183][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.582474][T10313] R13: 00007f366ed0d128 R14: 00007f366ed0d090 R15: 00007ffd447ef198 [ 262.590631][T10313] [ 263.365268][T10331] delete_channel: no stack [ 263.370724][T10331] delete_channel: no stack [ 263.423565][T10338] netlink: 'syz.5.2006': attribute type 39 has an invalid length. [ 263.531915][T10337] device pim6reg1 entered promiscuous mode [ 264.225073][T10365] netlink: 'syz.3.2018': attribute type 39 has an invalid length. [ 264.910070][T10388] netlink: 'syz.4.2025': attribute type 39 has an invalid length. [ 265.447189][T10404] netlink: 'syz.6.2032': attribute type 39 has an invalid length. [ 265.811532][T10418] netlink: 'syz.5.2038': attribute type 10 has an invalid length. [ 266.026368][T10418] team0: Device veth1_vlan failed to register rx_handler [ 266.710091][T10447] FAULT_INJECTION: forcing a failure. [ 266.710091][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.749617][T10447] CPU: 1 PID: 10447 Comm: syz.3.2047 Not tainted 5.15.189-syzkaller #0 [ 266.758185][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.762034][T10448] netlink: 'syz.5.2046': attribute type 39 has an invalid length. [ 266.768348][T10447] Call Trace: [ 266.768369][T10447] [ 266.768377][T10447] dump_stack_lvl+0x168/0x230 [ 266.768408][T10447] ? show_regs_print_info+0x20/0x20 [ 266.768425][T10447] ? load_image+0x3b0/0x3b0 [ 266.768445][T10447] ? __lock_acquire+0x7c60/0x7c60 [ 266.802893][T10447] ? unix_ioctl+0x250/0x650 [ 266.807658][T10447] should_fail+0x38c/0x4c0 [ 266.812101][T10447] _copy_from_user+0x2e/0x170 [ 266.816801][T10447] sock_do_ioctl+0x178/0x2f0 [ 266.821418][T10447] ? sock_show_fdinfo+0xb0/0xb0 [ 266.826304][T10447] sock_ioctl+0x4ed/0x6e0 [ 266.830657][T10447] ? sock_poll+0x3f0/0x3f0 [ 266.835102][T10447] ? bpf_lsm_file_ioctl+0x5/0x10 [ 266.840307][T10447] ? security_file_ioctl+0x7c/0xa0 [ 266.845434][T10447] ? sock_poll+0x3f0/0x3f0 [ 266.849879][T10447] __se_sys_ioctl+0xfa/0x170 [ 266.854576][T10447] do_syscall_64+0x4c/0xa0 [ 266.858999][T10447] ? clear_bhb_loop+0x30/0x80 [ 266.864029][T10447] ? clear_bhb_loop+0x30/0x80 [ 266.868803][T10447] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.874771][T10447] RIP: 0033:0x7f01b5f11be9 [ 266.879209][T10447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.899004][T10447] RSP: 002b:00007f01b4179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.907609][T10447] RAX: ffffffffffffffda RBX: 00007f01b6138fa0 RCX: 00007f01b5f11be9 [ 266.916115][T10447] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 266.924086][T10447] RBP: 00007f01b4179090 R08: 0000000000000000 R09: 0000000000000000 [ 266.932146][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.940314][T10447] R13: 00007f01b6139038 R14: 00007f01b6138fa0 R15: 00007ffea3820dc8 [ 266.948396][T10447] [ 267.124192][T10463] netlink: 'syz.4.2053': attribute type 39 has an invalid length. [ 267.244162][T10465] delete_channel: no stack [ 267.668471][T10471] netlink: 'syz.6.2055': attribute type 10 has an invalid length. [ 267.764354][T10485] netlink: 'syz.7.2061': attribute type 4 has an invalid length. [ 267.802871][T10485] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2061'. [ 267.867676][T10471] team0: Device veth1_vlan failed to register rx_handler [ 268.295867][T10487] netlink: 'syz.4.2062': attribute type 39 has an invalid length. [ 268.633768][T10508] netlink: 'syz.5.2068': attribute type 39 has an invalid length. [ 268.930029][T10525] device syzkaller0 entered promiscuous mode [ 269.146791][T10534] device syzkaller0 entered promiscuous mode [ 269.168269][T10537] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 269.186223][T10537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 269.200627][T10541] netlink: 'syz.6.2080': attribute type 39 has an invalid length. [ 269.201752][T10537] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 269.254513][T10531] netlink: 'syz.4.2078': attribute type 10 has an invalid length. [ 269.469737][T10531] team0: Device veth1_vlan failed to register rx_handler [ 270.080163][T10563] netlink: 'syz.5.2087': attribute type 39 has an invalid length. [ 270.365641][T10573] netlink: 'syz.6.2091': attribute type 39 has an invalid length. [ 270.812241][T10590] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.2097'. [ 270.846875][T10592] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2098'. [ 270.854830][T10587] device syzkaller0 entered promiscuous mode [ 270.902670][T10586] device pim6reg1 entered promiscuous mode [ 271.666662][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2104'. [ 272.286852][T10630] validate_nla: 6 callbacks suppressed [ 272.286916][T10630] netlink: 'syz.7.2110': attribute type 3 has an invalid length. [ 272.313341][T10628] netlink: 'syz.3.2109': attribute type 39 has an invalid length. [ 272.340179][T10630] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2110'. [ 272.386899][T10632] device syzkaller0 entered promiscuous mode [ 272.632444][T10638] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2112'. [ 273.101835][T10658] netlink: 'syz.7.2118': attribute type 39 has an invalid length. [ 273.327428][T10664] netlink: 'syz.7.2121': attribute type 39 has an invalid length. [ 273.453410][T10668] netlink: 'syz.6.2122': attribute type 1 has an invalid length. [ 273.624068][T10668] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.2122'. [ 273.964477][T10674] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2134'. [ 274.071294][T10678] netlink: 'syz.6.2124': attribute type 3 has an invalid length. [ 274.132759][T10678] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2124'. [ 274.693677][T10687] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2128'. [ 275.276316][T10698] netlink: 'syz.5.2132': attribute type 39 has an invalid length. [ 275.796148][T10707] device syzkaller0 entered promiscuous mode [ 276.578230][T10723] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2142'. [ 277.600975][T10742] netlink: 'syz.5.2148': attribute type 39 has an invalid length. [ 278.014731][T10751] netlink: 'syz.7.2153': attribute type 29 has an invalid length. [ 278.689744][T10751] netlink: 'syz.7.2153': attribute type 29 has an invalid length. [ 278.760098][ T522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.794834][T10752] netlink: 'syz.7.2153': attribute type 29 has an invalid length. [ 279.033589][T10756] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2155'. [ 280.213104][T10778] device syzkaller0 entered promiscuous mode [ 280.813058][T10790] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2168'. [ 281.215665][T10797] netlink: 'syz.5.2169': attribute type 39 has an invalid length. [ 281.630834][T10807] netlink: 'syz.7.2172': attribute type 39 has an invalid length. [ 281.959012][T10816] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2180'. [ 282.602636][T10832] ref_ctr_offset mismatch. inode: 0x956 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 282.837516][T10836] netlink: 'syz.4.2188': attribute type 29 has an invalid length. [ 282.935562][T10836] netlink: 'syz.4.2188': attribute type 29 has an invalid length. [ 283.538529][T10846] netlink: 'syz.4.2192': attribute type 39 has an invalid length. [ 283.604605][T10850] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2193'. [ 284.030237][T10868] netlink: 'syz.7.2201': attribute type 29 has an invalid length. [ 284.182195][T10868] netlink: 'syz.7.2201': attribute type 29 has an invalid length. [ 284.197469][T10871] netlink: 'syz.7.2201': attribute type 29 has an invalid length. [ 285.084535][T10895] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.119450][T10895] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2209'. [ 285.346876][T10902] netlink: 'syz.3.2208': attribute type 39 has an invalid length. [ 287.065173][T10942] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2226'. [ 287.203047][T10945] netlink: 'syz.4.2224': attribute type 39 has an invalid length. [ 288.088700][T10969] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2232'. [ 288.588643][T10987] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.2237'. [ 288.833039][T10989] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.2237'. [ 289.913158][T10991] netlink: 'syz.3.2239': attribute type 39 has an invalid length. [ 290.797767][T11024] netlink: 'syz.6.2251': attribute type 30 has an invalid length. [ 290.977334][T11030] netlink: 'syz.3.2252': attribute type 39 has an invalid length. [ 291.542410][T11033] delete_channel: no stack [ 292.520663][T11049] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2257'. [ 292.635657][T11053] netlink: 'syz.5.2266': attribute type 39 has an invalid length. [ 292.755875][T11060] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2258'. [ 292.755899][T11058] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2258'. [ 293.305532][T11076] syz.4.2263[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.305678][T11076] syz.4.2263[11076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.103493][T11092] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2271'. [ 294.714178][T11113] netlink: 'syz.6.2277': attribute type 21 has an invalid length. [ 294.759200][T11113] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2277'. [ 295.612341][T11134] netlink: 'syz.3.2281': attribute type 12 has an invalid length. [ 295.620406][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2281'. [ 296.097029][T11145] netlink: 'syz.4.2285': attribute type 2 has an invalid length. [ 296.686518][T11163] syz.3.2290[11163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.686659][T11163] syz.3.2290[11163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.732425][T11165] netlink: 'syz.5.2292': attribute type 3 has an invalid length. [ 296.775409][T11165] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2292'. [ 297.256396][T11173] netlink: 'syz.5.2295': attribute type 39 has an invalid length. [ 297.344465][T11177] netlink: 'syz.4.2297': attribute type 3 has an invalid length. [ 297.467602][T11177] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2297'. [ 297.748934][T11185] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2301'. [ 298.218593][T11202] syz.6.2307[11202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.218731][T11202] syz.6.2307[11202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 298.504965][T11209] netlink: 'syz.7.2308': attribute type 39 has an invalid length. [ 298.867563][T11223] sctp: [Deprecated]: syz.6.2311 (pid 11223) Use of int in maxseg socket option. [ 298.867563][T11223] Use struct sctp_assoc_value instead [ 298.946289][T11227] netlink: 'syz.6.2311': attribute type 10 has an invalid length. [ 298.974536][T11227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 299.001600][ T4243] Bluetooth: hci0: command 0x0406 tx timeout [ 299.030209][T11230] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2314'. [ 300.055810][T11272] netlink: 'syz.7.2323': attribute type 39 has an invalid length. [ 300.168186][T11275] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2329'. [ 300.640827][T11296] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2338'. [ 301.059372][T11312] netlink: 'syz.4.2344': attribute type 21 has an invalid length. [ 301.108966][T11312] netlink: 'syz.4.2344': attribute type 1 has an invalid length. [ 301.148046][T11312] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2344'. [ 301.197087][T11309] netlink: 'syz.7.2343': attribute type 39 has an invalid length. [ 301.462179][T11325] netlink: 64923 bytes leftover after parsing attributes in process `syz.5.2351'. [ 301.917263][T11346] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2359'. [ 302.256920][T11354] netlink: 'syz.3.2360': attribute type 21 has an invalid length. [ 302.280880][T11354] netlink: 'syz.3.2360': attribute type 1 has an invalid length. [ 302.309383][T11354] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2360'. [ 302.347590][T11350] netlink: 'syz.5.2361': attribute type 39 has an invalid length. [ 302.494544][T11357] netlink: 'syz.4.2363': attribute type 39 has an invalid length. [ 302.931867][T11378] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 302.954731][T11379] netlink: 'syz.7.2368': attribute type 1 has an invalid length. [ 302.962832][T11378] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2369'. [ 303.027175][T11379] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2368'. [ 303.072061][T11379] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2368'. [ 303.386757][T11387] device syzkaller0 entered promiscuous mode [ 303.642274][T11397] netlink: 'syz.4.2374': attribute type 39 has an invalid length. [ 304.186920][T11413] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.332611][T11420] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2383'. [ 304.637596][T11437] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 305.068292][T11453] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2397'. [ 305.096365][T11456] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2398'. [ 305.153694][T11450] device pim6reg1 entered promiscuous mode [ 305.718877][T11487] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2410'. [ 305.781765][T11488] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.2409'. [ 306.386774][T11511] validate_nla: 8 callbacks suppressed [ 306.386799][T11511] netlink: 'syz.7.2417': attribute type 39 has an invalid length. [ 307.031398][T11518] netlink: 'syz.5.2419': attribute type 21 has an invalid length. [ 307.039374][T11518] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2419'. [ 307.144551][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.195390][T11519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.230092][T11519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.291537][T11519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.374765][T11527] netlink: 'syz.3.2420': attribute type 10 has an invalid length. [ 307.541064][T11527] device veth0_vlan left promiscuous mode [ 307.575186][T11527] device veth0_vlan entered promiscuous mode [ 307.613646][T11527] team0: Device veth0_vlan failed to register rx_handler [ 307.808732][T11524] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2422'. [ 308.276569][T11541] netlink: 'syz.4.2426': attribute type 39 has an invalid length. [ 308.868995][T11564] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.2434'. [ 309.010795][T11567] netlink: 'syz.3.2433': attribute type 39 has an invalid length. [ 309.188139][T11572] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2436'. [ 309.416285][T11583] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2441'. [ 309.780081][ T4953] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.920158][T11586] device syzkaller0 entered promiscuous mode [ 309.934726][T11593] netlink: 'syz.6.2442': attribute type 39 has an invalid length. [ 310.917810][T11603] mac80211_hwsim hwsim14 O3c: renamed from wlan1 [ 311.474137][T11611] netlink: 'syz.3.2449': attribute type 3 has an invalid length. [ 311.530089][T11612] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2450'. [ 311.558312][T11611] netlink: 'syz.3.2449': attribute type 8 has an invalid length. [ 311.596174][T11613] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2449'. [ 311.766412][T11611] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.2449'. [ 312.214629][T11628] FAULT_INJECTION: forcing a failure. [ 312.214629][T11628] name failslab, interval 1, probability 0, space 0, times 0 [ 312.371345][T11628] CPU: 1 PID: 11628 Comm: syz.3.2455 Not tainted 5.15.189-syzkaller #0 [ 312.379967][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.390228][T11628] Call Trace: [ 312.393625][T11628] [ 312.396573][T11628] dump_stack_lvl+0x168/0x230 [ 312.401425][T11628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.407694][T11628] ? show_regs_print_info+0x20/0x20 [ 312.413181][T11628] ? load_image+0x3b0/0x3b0 [ 312.417897][T11628] should_fail+0x38c/0x4c0 [ 312.422568][T11628] should_failslab+0x5/0x20 [ 312.427101][T11628] slab_pre_alloc_hook+0x51/0xc0 [ 312.432700][T11628] ? skb_clone+0x1bd/0x350 [ 312.437234][T11628] kmem_cache_alloc+0x3d/0x290 [ 312.442370][T11628] skb_clone+0x1bd/0x350 [ 312.446634][T11628] bpf_clone_redirect+0xa9/0x390 [ 312.451592][T11628] ? lock_chain_count+0x20/0x20 [ 312.456701][T11628] bpf_prog_6893982b85ceadf7+0x56/0xa88 [ 312.462473][T11628] ? __kprobes_text_end+0xe5970/0xe5970 [ 312.468039][T11628] ? lockdep_hardirqs_on+0x94/0x140 [ 312.473440][T11628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.479842][T11628] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 312.486119][T11628] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 312.492477][T11628] ? lock_chain_count+0x20/0x20 [ 312.497522][T11628] ? rcu_is_watching+0x11/0xa0 [ 312.502529][T11628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.508756][T11628] ? lockdep_hardirqs_on+0x94/0x140 [ 312.514086][T11628] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.520291][T11628] ? bpf_prog_6893982b85ceadf7+0x5/0xa88 [ 312.526145][T11628] bpf_test_run+0x292/0x7d0 [ 312.530922][T11628] ? convert___skb_to_skb+0x4c0/0x4c0 [ 312.536416][T11628] ? bpf_prog_test_run_skb+0x97e/0x1180 [ 312.542316][T11628] bpf_prog_test_run_skb+0x9cc/0x1180 [ 312.547740][T11628] ? cpu_online+0x60/0x60 [ 312.552287][T11628] bpf_prog_test_run+0x31e/0x390 [ 312.557358][T11628] __sys_bpf+0x535/0x670 [ 312.561719][T11628] ? bpf_link_show_fdinfo+0x340/0x340 [ 312.567361][T11628] ? vtime_user_exit+0x2dc/0x400 [ 312.572709][T11628] __x64_sys_bpf+0x78/0x90 [ 312.577330][T11628] do_syscall_64+0x4c/0xa0 [ 312.582031][T11628] ? clear_bhb_loop+0x30/0x80 [ 312.586997][T11628] ? clear_bhb_loop+0x30/0x80 [ 312.591693][T11628] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.597609][T11628] RIP: 0033:0x7f01b5f11be9 [ 312.602047][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.622028][T11628] RSP: 002b:00007f01b4179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.630649][T11628] RAX: ffffffffffffffda RBX: 00007f01b6138fa0 RCX: 00007f01b5f11be9 [ 312.638845][T11628] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 312.646846][T11628] RBP: 00007f01b4179090 R08: 0000000000000000 R09: 0000000000000000 [ 312.655139][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.663264][T11628] R13: 00007f01b6139038 R14: 00007f01b6138fa0 R15: 00007ffea3820dc8 [ 312.671733][T11628] [ 313.768449][T11647] netlink: 'syz.4.2457': attribute type 39 has an invalid length. [ 314.284773][T11656] netlink: 'syz.4.2462': attribute type 39 has an invalid length. [ 314.349028][T11659] netlink: 'syz.3.2463': attribute type 2 has an invalid length. [ 314.361418][ T4319] Bluetooth: hci1: command 0x0406 tx timeout [ 314.384099][T11659] netlink: 'syz.3.2463': attribute type 8 has an invalid length. [ 314.428012][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2463'. [ 314.887720][T11668] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 314.958912][T11668] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2467'. [ 315.062806][T11668] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2467'. [ 315.523087][T11681] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2471'. [ 315.691531][T11685] netlink: 'syz.4.2472': attribute type 39 has an invalid length. [ 316.367152][T11699] netlink: 'syz.4.2476': attribute type 39 has an invalid length. [ 316.660201][T11705] netlink: 'syz.6.2478': attribute type 3 has an invalid length. [ 316.761668][ T27] INFO: task syz.2.1021:7495 blocked for more than 143 seconds. [ 316.769484][ T27] Not tainted 5.15.189-syzkaller #0 [ 316.812106][T11705] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2478'. [ 316.822029][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.831054][ T27] task:syz.2.1021 state:D stack:25384 pid: 7495 ppid: 4183 flags:0x00004006 [ 316.890979][T11714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.909350][ T27] Call Trace: [ 316.916753][ T27] [ 316.926184][ T27] __schedule+0x11b8/0x43b0 [ 316.940106][T11714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.961548][ T27] ? __mutex_trylock_common+0x14f/0x250 [ 316.980005][ T27] ? perf_event_release_kernel+0x1ff/0x8c0 [ 316.994755][ T27] ? __lock_acquire+0x7c60/0x7c60 [ 317.029687][ T27] ? release_firmware_map_entry+0x190/0x190 [ 317.046129][ T27] schedule+0x11b/0x1e0 [ 317.062231][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 317.081098][ T27] ? perf_mmap+0x13e0/0x13e0 [ 317.103763][ T27] _free_event+0x34/0xe60 [ 317.125866][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.146118][ T27] ? perf_mmap+0x13e0/0x13e0 [ 317.159257][ T27] ? perf_mmap+0x13e0/0x13e0 [ 317.167704][ T27] perf_event_release_kernel+0x832/0x8c0 [ 317.177351][ T27] ? __might_sleep+0xf0/0xf0 [ 317.185717][ T27] ? calc_timer_values+0x410/0x410 [ 317.191609][ T27] ? perf_mmap+0x13e0/0x13e0 [ 317.196604][ T27] perf_release+0x37/0x40 [ 317.207395][ T27] __fput+0x234/0x930 [ 317.212624][ T27] task_work_run+0x125/0x1a0 [ 317.217800][ T27] do_exit+0x61e/0x20a0 [ 317.228561][ T27] ? put_task_struct+0x80/0x80 [ 317.234384][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 317.241063][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 317.256329][ T27] do_group_exit+0x12e/0x300 [ 317.267701][ T27] get_signal+0x6ca/0x12c0 [ 317.276470][ T27] arch_do_signal_or_restart+0xc1/0x1300 [ 317.286703][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 317.295804][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 317.305587][ T27] ? get_sigframe_size+0x10/0x10 [ 317.310986][ T27] ? rcu_is_watching+0x11/0xa0 [ 317.319974][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 317.329012][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 317.338329][ T27] irqentry_exit_to_user_mode+0x5/0x30 [ 317.347396][ T27] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 317.357942][ T27] RIP: 0033:0x7f425d1b9dd7 [ 317.368215][ T27] RSP: 002b:00007f425b483c80 EFLAGS: 00000202 [ 317.380645][ T27] RAX: 000000000000000f RBX: 00007f425b484d30 RCX: 00007f425d214ba7 [ 317.392318][ T27] RDX: 00007f425b483c80 RSI: 00007f425b483db0 RDI: 0000000000000021 [ 317.400594][ T27] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 317.424341][ T27] R10: 00000000ffffffff R11: 0000000000000206 R12: 0000000000000073 [ 317.437273][ T27] R13: 00007f425b484eb0 R14: 9999999999999999 R15: 0000000000000000 [ 317.447778][ T27] [ 317.465284][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.469186][T11714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.472084][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.495948][T11714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.553855][ T27] [ 317.553855][ T27] Showing all locks held in the system: [ 317.642070][ T27] 1 lock held by khungtaskd/27: [ 317.687838][ T27] #0: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 317.728165][ T27] 2 locks held by getty/3944: [ 317.733458][ T27] #0: ffff88814c70a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 317.749493][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 317.760622][ T27] 3 locks held by kworker/1:4/4236: [ 317.773226][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 317.787258][ T27] #1: ffffc90002fffd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 317.804853][ T27] #2: ffffffff8c120cf0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4b0 [ 317.818052][ T27] 2 locks held by kworker/0:8/4319: [ 317.829312][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 317.845841][ T27] #1: ffffc900033afd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 317.858246][ T27] 3 locks held by kworker/1:9/11529: [ 317.872295][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 317.887664][ T27] #1: ffffc9000301fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 317.906992][ T27] #2: ffffffff8c120cf0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4b0 [ 317.917854][ T27] 4 locks held by syz.7.2423/11534: [ 317.929923][ T27] 2 locks held by syz.6.2478/11705: [ 317.938149][ T27] #0: ffffffff8d292b10 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 317.952911][ T27] #1: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x28/0x540 [ 317.966481][ T27] 2 locks held by syz.6.2478/11714: [ 317.976277][ T27] #0: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x974/0xe60 [ 317.989249][ T27] #1: ffffffff8c120de8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x347/0x6b0 [ 318.006606][ T27] 1 lock held by syz.3.2482/11715: [ 318.012461][ T27] #0: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x463/0xe50 [ 318.027324][ T27] 1 lock held by syz.4.2483/11718: [ 318.033784][ T27] #0: ffffffff8d235f48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x974/0xe60 [ 318.102967][ T27] [ 318.117548][ T27] ============================================= [ 318.117548][ T27] [ 318.175565][ T27] NMI backtrace for cpu 0 [ 318.180123][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 318.188286][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.198382][ T27] Call Trace: [ 318.201754][ T27] [ 318.204769][ T27] dump_stack_lvl+0x168/0x230 [ 318.209580][ T27] ? show_regs_print_info+0x20/0x20 [ 318.214808][ T27] ? load_image+0x3b0/0x3b0 [ 318.219355][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 318.224768][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 318.229927][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 318.234958][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 318.241292][ T27] ? _printk+0xcc/0x110 [ 318.245564][ T27] ? load_image+0x3b0/0x3b0 [ 318.250174][ T27] ? load_image+0x3b0/0x3b0 [ 318.254792][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 318.261224][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 318.267209][ T27] watchdog+0xe0f/0xe50 [ 318.271498][ T27] kthread+0x436/0x520 [ 318.275680][ T27] ? hungtask_pm_notify+0x40/0x40 [ 318.280794][ T27] ? kthread_blkcg+0xd0/0xd0 [ 318.285479][ T27] ret_from_fork+0x1f/0x30 [ 318.290088][ T27] [ 318.294018][ T27] Sending NMI from CPU 0 to CPUs 1: [ 318.299253][ C1] NMI backtrace for cpu 1 [ 318.299265][ C1] CPU: 1 PID: 11534 Comm: syz.7.2423 Not tainted 5.15.189-syzkaller #0 [ 318.299280][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.299289][ C1] RIP: 0010:__lock_acquire+0x133e/0x7c60 [ 318.299322][ C1] Code: b6 04 00 84 c0 0f 85 e3 5a 00 00 83 3d 8a d1 af 14 00 0f 84 e0 04 00 00 31 db 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 00 00 <74> 12 48 89 df e8 68 19 60 00 49 b8 00 00 00 00 00 fc ff df 48 83 [ 318.299334][ C1] RSP: 0018:ffffc90000dd0620 EFLAGS: 00000046 [ 318.299348][ C1] RAX: 1ffffffff1f28470 RBX: ffffffff8f942380 RCX: ffffffff815c0d89 [ 318.299360][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffb70c8 [ 318.299369][ C1] RBP: ffffc90000dd0870 R08: dffffc0000000000 R09: fffffbfff1ff6e1a [ 318.299380][ C1] R10: fffffbfff1ff6e1a R11: 1ffffffff1ff6e19 R12: 00000000b8c2303e [ 318.299390][ C1] R13: ffff88807de8bb80 R14: 00000000a99205dd R15: ffff88807de8c6e0 [ 318.299400][ C1] FS: 00007f366cd4d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 318.299413][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.299422][ C1] CR2: 0000001b32522ff8 CR3: 0000000065429000 CR4: 00000000003506e0 [ 318.299435][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.299443][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 318.299451][ C1] Call Trace: [ 318.299458][ C1] [ 318.299496][ C1] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 318.299516][ C1] ? verify_lock_unused+0x140/0x140 [ 318.299534][ C1] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 318.299557][ C1] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 318.299575][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 318.299609][ C1] lock_acquire+0x197/0x3f0 [ 318.299625][ C1] ? ktime_get+0x7b/0x270 [ 318.299645][ C1] ? perf_callchain+0x190/0x190 [ 318.299667][ C1] ? read_lock_is_recursive+0x10/0x10 [ 318.299686][ C1] ? perf_event_output_forward+0x222/0x280 [ 318.299704][ C1] ? perf_get_page_size+0x420/0x420 [ 318.299717][ C1] ? ktime_get+0x7b/0x270 [ 318.299735][ C1] seqcount_lockdep_reader_access+0xc6/0x1c0 [ 318.299751][ C1] ? ktime_get+0x7b/0x270 [ 318.299766][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 318.299789][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 318.299812][ C1] ktime_get+0x7b/0x270 [ 318.299832][ C1] perf_swevent_hrtimer+0x461/0x530 [ 318.299857][ C1] ? cpu_clock_event_read+0x50/0x50 [ 318.299906][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 318.299926][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 318.299945][ C1] ? _raw_spin_unlock+0x40/0x40 [ 318.299958][ C1] ? debug_object_deactivate+0x63/0x340 [ 318.299990][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 318.300016][ C1] ? cpu_clock_event_read+0x50/0x50 [ 318.300045][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 318.300062][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 318.300086][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 318.300132][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 318.300152][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 318.300168][ C1] [ 318.300172][ C1] [ 318.300178][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 318.300192][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x32/0x80 [ 318.300208][ C1] Code: 34 a8 8a 7e 65 8b 15 35 a8 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 34 16 00 00 00 74 52 8b 91 10 16 00 00 <83> fa 03 75 47 48 8b 91 18 16 00 00 44 8b 89 14 16 00 00 49 c1 e1 [ 318.300219][ C1] RSP: 0018:ffffc90002d6f140 EFLAGS: 00000246 [ 318.300230][ C1] RAX: ffffffff817b2823 RBX: ffff88807de8bb80 RCX: ffff88807de8bb80 [ 318.300241][ C1] RDX: 0000000000000002 RSI: 0000000080000001 RDI: 0000000000000000 [ 318.300250][ C1] RBP: 0000000080000001 R08: dffffc0000000000 R09: ffffed100fbd1771 [ 318.300260][ C1] R10: ffffed100fbd1771 R11: 1ffff1100fbd1770 R12: 0000000080000001 [ 318.300269][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 318.300287][ C1] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 318.300311][ C1] tracing_gen_ctx_irq_test+0xb3/0x130 [ 318.300337][ C1] perf_trace_buf_update+0x9c/0x220 [ 318.300350][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 318.300368][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 318.300384][ C1] ? perf_tp_event+0x467/0xb50 [ 318.300406][ C1] perf_tp_event+0x14b/0xb50 [ 318.300427][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 318.300444][ C1] ? finish_lock_switch+0x134/0x280 [ 318.300500][ C1] ? rcu_is_watching+0x11/0xa0 [ 318.300518][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 318.300536][ C1] ? mark_lock+0x94/0x320 [ 318.300556][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 318.300577][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 318.300599][ C1] perf_trace_lock+0x2ec/0x370 [ 318.300625][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 318.300658][ C1] lock_release+0x823/0x870 [ 318.300677][ C1] ? rcu_lock_release+0x5/0x20 [ 318.300695][ C1] ? read_lock_is_recursive+0x10/0x10 [ 318.300713][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 318.300745][ C1] inet_twsk_purge+0x77d/0x810 [ 318.300776][ C1] ? __inet_twsk_schedule+0x130/0x130 [ 318.300792][ C1] ? iput+0x706/0x8a0 [ 318.300812][ C1] ? dccp_v4_exit_net+0x80/0x80 [ 318.300833][ C1] setup_net+0x822/0x9f0 [ 318.300853][ C1] ? copy_net_ns+0x5b0/0x5b0 [ 318.300874][ C1] ? down_read_killable+0x1ce/0x340 [ 318.300895][ C1] copy_net_ns+0x348/0x5b0 [ 318.300917][ C1] create_new_namespaces+0x3d3/0x6f0 [ 318.300952][ C1] copy_namespaces+0x37d/0x3e0 [ 318.300972][ C1] copy_process+0x180f/0x3e00 [ 318.301015][ C1] ? futex_wake+0x49f/0x530 [ 318.301039][ C1] ? __pidfd_prepare+0x140/0x140 [ 318.301060][ C1] ? perf_trace_lock+0x2ec/0x370 [ 318.301082][ C1] kernel_clone+0x219/0x930 [ 318.301096][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 318.301113][ C1] ? trace_event_raw_event_lock+0x250/0x250 [ 318.301129][ C1] ? create_io_thread+0x130/0x130 [ 318.301159][ C1] ? __context_tracking_exit+0x4c/0x80 [ 318.301179][ C1] __x64_sys_clone+0x170/0x1c0 [ 318.301195][ C1] ? __ia32_sys_vfork+0xf0/0xf0 [ 318.301225][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 318.301242][ C1] do_syscall_64+0x4c/0xa0 [ 318.301257][ C1] ? clear_bhb_loop+0x30/0x80 [ 318.301267][ C1] ? clear_bhb_loop+0x30/0x80 [ 318.301280][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.301295][ C1] RIP: 0033:0x7f366eae5be9 [ 318.301311][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.301328][ C1] RSP: 002b:00007f366cd4cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 318.301342][ C1] RAX: ffffffffffffffda RBX: 00007f366ed0cfa0 RCX: 00007f366eae5be9 [ 318.301351][ C1] RDX: 0000200000000040 RSI: 0000200000000550 RDI: 0000000040a20000 [ 318.301361][ C1] RBP: 00007f366eb68e19 R08: 0000200000000580 R09: 0000200000000580 [ 318.301370][ C1] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 318.301378][ C1] R13: 00007f366ed0d038 R14: 00007f366ed0cfa0 R15: 00007ffd447ef198 [ 318.301407][ C1] [ 318.364985][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 319.010777][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.189-syzkaller #0 [ 319.018781][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.029038][ T27] Call Trace: [ 319.032424][ T27] [ 319.035362][ T27] dump_stack_lvl+0x168/0x230 [ 319.040191][ T27] ? show_regs_print_info+0x20/0x20 [ 319.045399][ T27] ? load_image+0x3b0/0x3b0 [ 319.050004][ T27] panic+0x2c9/0x7f0 [ 319.053910][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 319.059642][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 319.064146][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 319.069728][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 319.076082][ T27] watchdog+0xe4e/0xe50 [ 319.080275][ T27] kthread+0x436/0x520 [ 319.084365][ T27] ? hungtask_pm_notify+0x40/0x40 [ 319.089407][ T27] ? kthread_blkcg+0xd0/0xd0 [ 319.094194][ T27] ret_from_fork+0x1f/0x30 [ 319.098736][ T27] [ 319.120335][ T27] Kernel Offset: disabled [ 319.124833][ T27] Rebooting in 86400 seconds..