last executing test programs: 44m58.39200357s ago: executing program 4 (id=1660): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x804) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xc2bb, 0x0, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair(0x2c, 0x1, 0x6, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES32=r1], &(0x7f0000000c00)='GPL\x00', 0xfffffc01}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x29, 0x3, "ec"}], 0x18}, 0x4004080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x50) 44m58.018168454s ago: executing program 4 (id=1663): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a118001500060014", 0x23}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c8030000000f238466cc00007a000000ad6e911b51818463b40006000001", 0x3b}, {&(0x7f0000000840)="ed8784284de73661192f60b7077d7bae50fa61b94f1efa97f91e58eb0fd4bb4bed039af2f8d1abfafcb26d3ce8da5fb7e27a82b24db7213101798823a810bf3e3811a2017f8b01d030f9587d1dfa8cf99e9f14490f859e0ae5db277b6cc4c9b219ce1c8cca0125ba84d71a82ee682f0906ee66a1805135eb7984c9c87cd11daa43f59800006ab1792bb48f31e09a3b6cf1d3c16523a43ae7144f", 0x9a}], 0x2}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d00000000000000000000000a"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)=""/16, 0x10}}, 0x10) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x6000000) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex=r8, 0xffffffffffffffff, 0x13, 0x8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1e, &(0x7f00000006c0)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x653}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x39, 0x4, 0x1, 0x5, 0x200}], &(0x7f0000000980)='GPL\x00', 0x8, 0xc9, &(0x7f00000009c0)=""/201, 0x40f00, 0x8, '\x00', r8, 0x25, r7, 0x8, &(0x7f0000000ac0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x7, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r9, r7, r7], 0x0, 0x10, 0x6}, 0x94) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) recvmsg$kcm(r10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x2, 0xe9a49e1b3271eadd}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xde, &(0x7f00000001c0)=""/222, 0x41000, 0x9, '\x00', 0x0, @fallback=0x31, r3, 0x8, &(0x7f00000002c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x7, 0x6, 0xd}, 0x10, r4, r6, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, r7, r12], &(0x7f00000005c0)=[{0x3, 0x4, 0xc, 0x8}, {0x1, 0x2, 0x8, 0x8}], 0x10, 0xfffffffa}, 0x94) 44m57.5447154s ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)}], 0x1}, 0xfc) sendmsg$inet(r3, 0x0, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 44m56.713342029s ago: executing program 4 (id=1670): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 44m56.179930535s ago: executing program 4 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x18, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2000) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x5, 0x4, 0x3, 0xa, 0x0, 0x62, 0x90020, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x300, 0x2, 0x0, 0x6, 0x3, 0x6, 0x7, 0x0, 0x8, 0x0, 0x9c}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xc5, 0x4, 0x3, 0x7, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x201, 0x1, @perf_bp={0x0, 0x13}, 0x540, 0x6, 0x9, 0x9, 0x3, 0x5, 0x9, 0x0, 0x7e, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000001d80)=""/4100, 0x1004}], 0x3}, 0x102) r4 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000000)={r1}) 44m55.375905375s ago: executing program 4 (id=1679): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x7}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000002000139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f00000001c0)="02d2eb5256352f9e37d393f9abf3d88e91894522b165d5cc0d452f2802d0fa5f85f8769eebc8dedfa1e82069ac84e7ed49c4edfe57889980e2a3a5ad6be4d3f1da18408ecd697e29c98427d841edd32d4203b6ad9ae1adb0707b1bdd", &(0x7f0000000240)=""/88, &(0x7f0000000580)="7207fb75534d8e390334ce12173ef6c0119fc2291e1b1ebc563a6311ac1f96864272c16f517a3c6072d7e925b219689aa32f60379fe2d64ee90cca10b26a544725881142d7e9305a01969fac7b922235f89ae44ac8611197b6e06288608911b89d78e7f8f83834aaf577a38807", &(0x7f0000000680)="b5876a011aad9001ddc39a9dc4c40b7f86c9c6183ecff15c634dc538681366b5509fb685c806a89818257f90f181bc640f73ed9c24f8be", 0x101}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000540), 0x0}, 0x20) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x7}, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000002000139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f00000001c0)="02d2eb5256352f9e37d393f9abf3d88e91894522b165d5cc0d452f2802d0fa5f85f8769eebc8dedfa1e82069ac84e7ed49c4edfe57889980e2a3a5ad6be4d3f1da18408ecd697e29c98427d841edd32d4203b6ad9ae1adb0707b1bdd", &(0x7f0000000240)=""/88, &(0x7f0000000580)="7207fb75534d8e390334ce12173ef6c0119fc2291e1b1ebc563a6311ac1f96864272c16f517a3c6072d7e925b219689aa32f60379fe2d64ee90cca10b26a544725881142d7e9305a01969fac7b922235f89ae44ac8611197b6e06288608911b89d78e7f8f83834aaf577a38807", &(0x7f0000000680)="b5876a011aad9001ddc39a9dc4c40b7f86c9c6183ecff15c634dc538681366b5509fb685c806a89818257f90f181bc640f73ed9c24f8be", 0x101}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000540), 0x0}, 0x20) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 44m39.882369425s ago: executing program 32 (id=1679): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x7}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000002000139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f00000001c0)="02d2eb5256352f9e37d393f9abf3d88e91894522b165d5cc0d452f2802d0fa5f85f8769eebc8dedfa1e82069ac84e7ed49c4edfe57889980e2a3a5ad6be4d3f1da18408ecd697e29c98427d841edd32d4203b6ad9ae1adb0707b1bdd", &(0x7f0000000240)=""/88, &(0x7f0000000580)="7207fb75534d8e390334ce12173ef6c0119fc2291e1b1ebc563a6311ac1f96864272c16f517a3c6072d7e925b219689aa32f60379fe2d64ee90cca10b26a544725881142d7e9305a01969fac7b922235f89ae44ac8611197b6e06288608911b89d78e7f8f83834aaf577a38807", &(0x7f0000000680)="b5876a011aad9001ddc39a9dc4c40b7f86c9c6183ecff15c634dc538681366b5509fb685c806a89818257f90f181bc640f73ed9c24f8be", 0x101}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000540), 0x0}, 0x20) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x7}, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000002000139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000700)={&(0x7f00000001c0)="02d2eb5256352f9e37d393f9abf3d88e91894522b165d5cc0d452f2802d0fa5f85f8769eebc8dedfa1e82069ac84e7ed49c4edfe57889980e2a3a5ad6be4d3f1da18408ecd697e29c98427d841edd32d4203b6ad9ae1adb0707b1bdd", &(0x7f0000000240)=""/88, &(0x7f0000000580)="7207fb75534d8e390334ce12173ef6c0119fc2291e1b1ebc563a6311ac1f96864272c16f517a3c6072d7e925b219689aa32f60379fe2d64ee90cca10b26a544725881142d7e9305a01969fac7b922235f89ae44ac8611197b6e06288608911b89d78e7f8f83834aaf577a38807", &(0x7f0000000680)="b5876a011aad9001ddc39a9dc4c40b7f86c9c6183ecff15c634dc538681366b5509fb685c806a89818257f90f181bc640f73ed9c24f8be", 0x101}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000540)='(pu&00\t||') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0x1}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000540), 0x0}, 0x20) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 33m21.026303389s ago: executing program 2 (id=5117): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 33m20.513433475s ago: executing program 2 (id=5120): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @generic={0x4e, 0xb, 0x5, 0xfe01, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x1000, 0xc3, &(0x7f0000000380)=""/195, 0x41000, 0xd, '\x00', r5, 0x25, r6, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x10, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r4, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x2, 0x5, 0x2, 0x7}, {0x5, 0x3, 0x2, 0xa}, {0x8, 0x1, 0xe, 0x5}, {0x2, 0x4, 0xf, 0x2}, {0x0, 0x4, 0x7, 0xb}, {0x5, 0x2, 0x8, 0xa}, {0x3, 0x1, 0x7, 0xb}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000c40)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrw'], 0xa) r8 = syz_clone(0x1000, &(0x7f0000000840)="fa0e795ec20017a237828fb28775cc2346b43baf49018c0d7feb09b65c49739f02bfd6c9e4d301806962a0d3e590acded76200488d013b1c572c4d0cb224bff7658ec322c6d52de617afee1607386778e3372c6143ca50130e4f250aa7764a57cd15a5449db3e0c61925857c2b6434dfe15ea2e592689b3171cb1d5588433f1fd06eda8b59639199cb5a", 0x8a, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="499182bbc469ff37e0af63fd506f7759f3deced2930901fbc1472154c676e8e6074c0798742442aeb1e363ec2c33d842c72e5703caefb7b92a875a0da9f851b23d4497f4fd5528c0c4fe3ed63f373752f0ebbf042291b7eec29edd7a8a5059d9f7f5b51286e7bfd7fc9812374935b67a063c12261a7b91b65bc967ad2c899d2fc7c836276eb5649ad9f33e20644ed6ba8951065206ce8448cd907b4b485a47b7107a4c0b6bf89f497fa84ffd31f822fb41525e1a29a98230b5c26e5dce") perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x8a, 0x8, 0x8, 0xfd, 0x0, 0x3, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x613, 0x0, @perf_config_ext={0x7f, 0x1}, 0x100414, 0x127, 0x3, 0x1, 0x5, 0x6, 0x8, 0x0, 0x2, 0x0, 0xfff}, r8, 0xffffffffffffffff, r3, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 33m19.597937256s ago: executing program 2 (id=5126): r0 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1ff, 0x63, &(0x7f0000000640)=""/99, 0x41100, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x4, 0xea62, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x4, 0x0, 0xb}, {0x0, 0x2, 0x2, 0x2}, {0x2, 0x4, 0xc, 0xb}, {0x3, 0x4, 0xf, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r1, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=""/1, 0x2, 0x0, 0x0, 0x38, &(0x7f0000000740), &(0x7f00000007c0)="da09ed0cd7b966a0d1daf9f10ca787ff602b8bfdab71c478b91ea0c575a6c0d9570d517d3f12817a5c25282d0396768cf9c96ab3887e530c", 0x1, 0x0, 0x4d22}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6065e220003000000002500020f0f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000500), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x1}) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r10}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, &(0x7f0000000000)=r8, 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r11 = socket$kcm(0x1e, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x101d0) 33m18.4094041s ago: executing program 2 (id=5128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x0, 0xfd24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r5, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xd0a0) recvmsg(r7, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) 33m17.228003574s ago: executing program 2 (id=5133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socket$kcm(0x10, 0x2, 0x4) ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f0000000000)) 33m16.910250937s ago: executing program 2 (id=5135): close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd290000840000000501"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x2e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2615, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x1, 0x6, 0x1, 0x9, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x3a, &(0x7f00000001c0)=""/58, 0x41000, 0x8, '\x00', r5, @fallback=0x37, r7, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xf, 0x9}, 0x10, r8, r2, 0x7, &(0x7f00000008c0)=[r0], &(0x7f0000000900)=[{0x4, 0x4, 0xf, 0x4}, {0x5, 0x3, 0xe, 0x81f59f179bab4ef2}, {0x5, 0x3, 0x4, 0x5}, {0x0, 0x3, 0xc, 0x5}, {0x3, 0x4, 0x6, 0x8}, {0x2, 0x3, 0x8, 0x1}, {0x3, 0x2, 0x1, 0xc}], 0x10, 0x9}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 33m1.725549713s ago: executing program 33 (id=5135): close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd290000840000000501"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8d, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x2e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2615, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3f}, @alu={0x7, 0x1, 0x6, 0x1, 0x9, 0x1, 0xfffffffffffffff0}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x3a, &(0x7f00000001c0)=""/58, 0x41000, 0x8, '\x00', r5, @fallback=0x37, r7, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xf, 0x9}, 0x10, r8, r2, 0x7, &(0x7f00000008c0)=[r0], &(0x7f0000000900)=[{0x4, 0x4, 0xf, 0x4}, {0x5, 0x3, 0xe, 0x81f59f179bab4ef2}, {0x5, 0x3, 0x4, 0x5}, {0x0, 0x3, 0xc, 0x5}, {0x3, 0x4, 0x6, 0x8}, {0x2, 0x3, 0x8, 0x1}, {0x3, 0x2, 0x1, 0xc}], 0x10, 0x9}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) 5.815740705s ago: executing program 3 (id=14779): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400)="14", 0x0}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.582288088s ago: executing program 3 (id=14784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.222171912s ago: executing program 6 (id=14786): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2224}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.53636711s ago: executing program 3 (id=14788): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x8d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r6, 0x18, r7, 0x8, &(0x7f0000000a80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x5, 0x6, 0x7}, 0x10, 0x1332a, r0, 0x1, &(0x7f0000000b00)=[r4, r3, r3], &(0x7f0000000b40)=[{0x2, 0x1, 0x0, 0xb}], 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 3.486722891s ago: executing program 0 (id=14789): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4104, 0x1008}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.220825564s ago: executing program 3 (id=14792): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x20004010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x24, 0x0, 0x1, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)}, 0x40000120) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) 3.220589994s ago: executing program 5 (id=14793): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.220054284s ago: executing program 6 (id=14802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000401500000100000002000000040004008e0500000000000000b640d3e996630852326209e3997cc871bd6e4fdead514bb164a41c12318a97d2eb63ef7d688c3f64e0cea9f604f8163ae1d6b1a4aaf33800006dde65fafca873833d40a66adcb4078a8e", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 3.188078584s ago: executing program 0 (id=14794): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000a40012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003280)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c030055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09a946df3d7cb4ebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000030000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acdfafe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6e67f530996482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b299968b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e8827b1541eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da26913688e7abfb9eac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc0000000000000000b3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3f02816b4e097cfa3d46e45e7949c5b50691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a470563bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ff70c8a0121e7e8322cb8bc0f50ad33a2879c27557ead3af79d4a034b9ca025ff3d38165b28f8a3e6f91589a711d1dca971a93d50d6b44e6ea13ffa3a8cd0025cb28c7007bff4e2a299cf333dfcd858000db8f8720e1d60293e5138f8760684ee98be9b766433ece16dce5b1c2d6f671f675e1def56eb1355e40a5c188b88e3567a2c5ebae51748cf3aea239173364cfdc83ba7111dafa1b86516e357329227f1b6a810ffc1ca9fb3c522a6dab88e22c3d05ca67521adbb1358b52b54becd2534f8800a8e212b1fcdfbf6c3b741b1023ea74cc8245f3ab866987be3e00"/3989], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600000088ffffff00000765e7959b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x30800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x7f, 0x6, 0x2, 0x4200003}, 0x0, 0x5, r0, 0x1) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r6) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0), 0x4) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef) 3.003004716s ago: executing program 6 (id=14795): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400)="14", 0x0}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.997748486s ago: executing program 1 (id=14806): socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x30, 0x5, 0x0, 0x1000, 0x20100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r1, &(0x7f0000000600)="92a6f749b3cd1c6a08c3c80f78a655ef763d27250c8615e652c905bd511c626cdfb753f304244084cd5d8125c507e4c9ebfaf0eeea0bad466d7796c48c143994765d8e60f60d50dd5a7d541823e099302247baab23"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x6, 0x0, &(0x7f0000000040)="ded6e0966ec1", &(0x7f0000000380), 0x0, 0x3}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x33fe0) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e000000401500000100000002000000040004008e0500000000000000b640d3e996630852326209e3997cc871bd6e4fdead514bb164a41c12318a97d2eb63ef7d688c3f64e0cea9f604f8163ae1d6b1a4aaf33800006dde65fafca873833d40a66adcb4078a8e", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) r6 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) 2.918906387s ago: executing program 5 (id=14796): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000380)="5de8c33f529009ec6ab59c0896c33e7b216260eeec4e063ad42b3040be59c3f59fc91117e83a07e3e198c98263f0fcceaa04f4f7b8c1731c7d1d2c3d6af6fe03e14ec48a11080b804033000cfa42fe770e49c95852648afa0448a20f7a905d4a6b30fa6891ce28f15d8a557582d6232ee6c2486b3ee9bb85d60cb2e9dc5b9819a31d91bcb2bef99831b246479106c7278279ddfba42ebfb565307c99a06edbcde12a7d6a4849742f11", &(0x7f0000000580)=""/128, 0x4}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.347186434s ago: executing program 5 (id=14797): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x20004010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x24, 0x0, 0x1, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)}, 0x40000120) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) 2.307653784s ago: executing program 1 (id=14798): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.721760051s ago: executing program 5 (id=14799): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x88, 0x64, &(0x7f00000009c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4d4e, 0x5}, 0x100e64, 0xc7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x13, &(0x7f0000000800), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x1000000, @mcast1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="f4000900062b2c25fe80070000e4c80300", 0x11}, {&(0x7f0000000840)="ed8784284de73661192f60b7077d7bae50fa61b94f1efa97f91e58eb0fd4bb4bed039a", 0x23}], 0x2}, 0x0) 1.665213061s ago: executing program 0 (id=14800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2803, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x338) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x51b80, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="6674ebdedd93c58b2c81da3c49c44fe92526097302fb16707a6c7126be2a389cc02c3c9b3c3bbd77fab1a21eb3147e7a0d826665f88e4add8dafb398dc8412bfec81baf198eecffa75c59f656666893b24dceb677c89925523d0b86604e667e8e45d85368a38b9807fe14755bad03a122a44a3f5e084c50677014c054b3612eed8daa5a1435f85c137fddbd32ba6f919c2793abcc011c8c1bf17579e40dc"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.343932415s ago: executing program 1 (id=14801): socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x30, 0x5, 0x0, 0x1000, 0x20100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r0, &(0x7f0000000600)="92a6f749b3cd1c6a08c3c80f78a655ef763d27250c8615e652c905bd511c626cdfb753f304244084cd5d8125c507e4c9ebfaf0eeea0bad466d7796c48c143994765d8e60f60d50dd5a7d541823e099302247baab23"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x6, 0x0, &(0x7f0000000040)="ded6e0966ec1", &(0x7f0000000380), 0x0, 0x3}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000800), 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 1.252329496s ago: executing program 5 (id=14803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x86e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000a40012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003280)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c030055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09a946df3d7cb4ebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000030000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acdfafe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6e67f530996482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b299968b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e8827b1541eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da26913688e7abfb9eac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc0000000000000000b3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3f02816b4e097cfa3d46e45e7949c5b50691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a470563bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ff70c8a0121e7e8322cb8bc0f50ad33a2879c27557ead3af79d4a034b9ca025ff3d38165b28f8a3e6f91589a711d1dca971a93d50d6b44e6ea13ffa3a8cd0025cb28c7007bff4e2a299cf333dfcd858000db8f8720e1d60293e5138f8760684ee98be9b766433ece16dce5b1c2d6f671f675e1def56eb1355e40a5c188b88e3567a2c5ebae51748cf3aea239173364cfdc83ba7111dafa1b86516e357329227f1b6a810ffc1ca9fb3c522a6dab88e22c3d05ca67521adbb1358b52b54becd2534f8800a8e212b1fcdfbf6c3b741b1023ea74cc8245f3ab866987be3e00"/3989], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600000088ffffff00000765e7959b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x30800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x7f, 0x6, 0x2, 0x4200003}, 0x0, 0x5, r0, 0x1) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) close(r6) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0), 0x4) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781"], 0xfdef) 1.251594586s ago: executing program 6 (id=14804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, 0x0}, 0x8d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x202, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r2, 0x58, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xd2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r6, 0x18, r7, 0x8, &(0x7f0000000a80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x5, 0x6, 0x7}, 0x10, 0x1332a, r0, 0x1, &(0x7f0000000b00)=[r4, r3, r3], &(0x7f0000000b40)=[{0x2, 0x1, 0x0, 0xb}], 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 1.229162067s ago: executing program 3 (id=14805): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4104, 0x1008}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.198416417s ago: executing program 0 (id=14807): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x20004010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x24, 0x0, 0x1, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)}, 0x40000120) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) 750.433722ms ago: executing program 1 (id=14808): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 654.857653ms ago: executing program 6 (id=14809): r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x63, 0x40, 0x1, 0x0, 0x0, 0x0, 0xb4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_bp={0x0}, 0x101b00, 0x0, 0x0, 0x3, 0xffffffffffffbbfe, 0x8000, 0x10, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) 450.912695ms ago: executing program 0 (id=14810): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000380)="5de8c33f529009ec6ab59c0896c33e7b216260eeec4e063ad42b3040be59c3f59fc91117e83a07e3e198c98263f0fcceaa04f4f7b8c1731c7d1d2c3d6af6fe03e14ec48a11080b804033000cfa42fe770e49c95852648afa0448a20f7a905d4a6b30fa6891ce28f15d8a557582d6232ee6c2486b3ee9bb85d60cb2e9dc5b9819a31d91bcb2bef99831b246479106c7278279ddfba42ebfb565307c99a06edbcde12a7d6a4849742f11", &(0x7f0000000580)=""/128, 0x4}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 319.739197ms ago: executing program 1 (id=14811): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)}, 0x20004010) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x24, 0x0, 0x1, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)}, 0x40000120) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) 237.005028ms ago: executing program 3 (id=14812): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x22, 0x0, 0x3, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209f0100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0401, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x20000000000, r2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 141.355638ms ago: executing program 5 (id=14813): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 87.485859ms ago: executing program 0 (id=14814): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xd}, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(0x3) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x1c) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.69758ms ago: executing program 6 (id=14815): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000004000000040000000600000000001000a222b76c4ed25923bff9b2d35ec4a64153f4f67f031f2aa1f5c9219d407e2e5e404fb89f2a8e217dac1b3bcad7d4c471d9a5e8aa1adffc1e24658c4019a9eb3af7df24c229d46d1f751c61", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$kcm(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x38) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8100, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60}, 0x40002002) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'ip6erspan0\x00', 0x1800}) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x4, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r12}, &(0x7f0000000540), &(0x7f0000000600)=r12}, 0x20) 0s ago: executing program 1 (id=14825): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000380)="5de8c33f529009ec6ab59c0896c33e7b216260eeec4e063ad42b3040be59c3f59fc91117e83a07e3e198c98263f0fcceaa04f4f7b8c1731c7d1d2c3d6af6fe03e14ec48a11080b804033000cfa42fe770e49c95852648afa0448a20f7a905d4a6b30fa6891ce28f15d8a557582d6232ee6c2486b3ee9bb85d60cb2e9dc5b9819a31d91bcb2bef99831b246479106c7278279ddfba42ebfb565307c99a06edbcde12a7d6a4849742f11", &(0x7f0000000580)=""/128, 0x4}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 35] device veth1_vlan entered promiscuous mode [ 2895.479759][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2895.530664][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2895.549950][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2895.600725][T17635] device veth0_macvtap entered promiscuous mode [ 2895.613552][T17635] device veth1_macvtap entered promiscuous mode [ 2895.653133][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2895.676665][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2895.686561][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2895.717527][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2895.736724][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2895.756677][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2895.779325][T17635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2895.799707][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2895.808860][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2895.831825][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2895.860573][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2895.890423][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2895.917162][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2895.927489][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2895.956761][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2895.976722][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2895.996676][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2896.006565][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2896.036711][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2896.076972][T17635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2896.087949][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2896.103228][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2896.131482][T17635] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.140622][T17635] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.163353][T17635] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.193082][T17635] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2896.878953][T25384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2896.947881][T25384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2897.004095][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2898.065317][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.071867][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.205515][T17989] netlink: 'syz.3.13532': attribute type 3 has an invalid length. [ 2898.231164][T17989] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13532'. [ 2899.706798][ T6515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2899.738500][ T6515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2899.782118][T25386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2900.405355][T18019] netlink: 'syz.1.13538': attribute type 3 has an invalid length. [ 2900.465280][T18019] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13538'. [ 2900.508066][T18015] netlink: 'syz.3.13535': attribute type 3 has an invalid length. [ 2900.696013][T18015] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13535'. [ 2901.149505][T18027] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.13534'. [ 2904.646112][T18031] netlink: 'syz.6.13542': attribute type 3 has an invalid length. [ 2904.866798][T18031] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13542'. [ 2905.139627][T18047] netlink: 'syz.0.13546': attribute type 3 has an invalid length. [ 2905.155592][T18047] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13546'. [ 2906.404984][T25384] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2906.573888][T18067] FAULT_INJECTION: forcing a failure. [ 2906.573888][T18067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.661355][T18067] CPU: 1 PID: 18067 Comm: syz.3.13554 Not tainted syzkaller #0 [ 2906.668990][T18067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2906.679079][T18067] Call Trace: [ 2906.682394][T18067] [ 2906.685353][T18067] dump_stack_lvl+0x188/0x24e [ 2906.690171][T18067] ? show_regs_print_info+0x12/0x12 [ 2906.695590][T18067] ? load_image+0x400/0x400 [ 2906.700135][T18067] ? __lock_acquire+0x7d10/0x7d10 [ 2906.705206][T18067] ? lockdep_hardirqs_on+0x94/0x140 [ 2906.710446][T18067] should_fail_ex+0x399/0x4d0 [ 2906.715179][T18067] _copy_from_user+0x2c/0x170 [ 2906.719917][T18067] ___sys_sendmsg+0x1c3/0x360 [ 2906.724658][T18067] ? __sys_sendmsg+0x290/0x290 [ 2906.729499][T18067] ? ktime_get_real_ts64+0x440/0x440 [ 2906.734905][T18067] __se_sys_sendmsg+0x1bb/0x2a0 [ 2906.739863][T18067] ? __x64_sys_sendmsg+0x80/0x80 [ 2906.744893][T18067] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2906.750912][T18067] do_syscall_64+0x4c/0xa0 [ 2906.755364][T18067] ? clear_bhb_loop+0x60/0xb0 [ 2906.760077][T18067] ? clear_bhb_loop+0x60/0xb0 [ 2906.764804][T18067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2906.765174][T18066] netlink: 'syz.5.13553': attribute type 10 has an invalid length. [ 2906.770774][T18067] RIP: 0033:0x7f2b24b9cdd9 [ 2906.770802][T18067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2906.770819][T18067] RSP: 002b:00007f2b25ad4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2906.770844][T18067] RAX: ffffffffffffffda RBX: 00007f2b24e16090 RCX: 00007f2b24b9cdd9 [ 2906.819587][T18067] RDX: 0000000000008000 RSI: 0000200000001cc0 RDI: 0000000000000003 [ 2906.827599][T18067] RBP: 00007f2b25ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 2906.835613][T18067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2906.843633][T18067] R13: 00007f2b24e16128 R14: 00007f2b24e16090 R15: 00007ffeadcf9b18 [ 2906.851691][T18067] [ 2909.258191][T18066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2909.269482][T18066] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2909.280253][T18068] netlink: 'syz.5.13553': attribute type 6 has an invalid length. [ 2909.703705][T18073] netlink: 'syz.0.13555': attribute type 3 has an invalid length. [ 2909.748314][T18073] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13555'. [ 2909.779830][T18078] netlink: 'syz.1.13558': attribute type 3 has an invalid length. [ 2909.790988][T18078] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13558'. [ 2910.453302][T18088] netlink: 'syz.6.13561': attribute type 3 has an invalid length. [ 2910.529258][T18088] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13561'. [ 2913.583025][T18111] netlink: 'syz.1.13568': attribute type 29 has an invalid length. [ 2913.597449][T18111] netlink: 'syz.1.13568': attribute type 29 has an invalid length. [ 2913.612146][T18111] netlink: 'syz.1.13568': attribute type 29 has an invalid length. [ 2913.684887][T18116] netlink: 'syz.1.13568': attribute type 29 has an invalid length. [ 2913.713461][T18116] netlink: 'syz.1.13568': attribute type 29 has an invalid length. [ 2913.772586][T18118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13571'. [ 2913.793734][T18118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13571'. [ 2914.317804][T18124] netlink: 'syz.3.13573': attribute type 3 has an invalid length. [ 2914.326532][T18124] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13573'. [ 2914.837718][T18130] netlink: 'syz.0.13576': attribute type 3 has an invalid length. [ 2914.838242][T18132] device wlan1 entered promiscuous mode [ 2914.881506][T18130] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13576'. [ 2915.121433][T18136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13576'. [ 2915.974910][T18168] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13590'. [ 2916.692516][T18179] netlink: 'syz.3.13593': attribute type 3 has an invalid length. [ 2916.706307][T18179] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13593'. [ 2916.746373][T18180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13593'. [ 2917.283001][T18186] netlink: 'syz.6.13595': attribute type 3 has an invalid length. [ 2917.296807][T18186] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13595'. [ 2917.340131][T18197] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13595'. [ 2917.663398][T18209] netlink: 'syz.5.13602': attribute type 3 has an invalid length. [ 2917.873930][T18216] FAULT_INJECTION: forcing a failure. [ 2917.873930][T18216] name failslab, interval 1, probability 0, space 0, times 0 [ 2917.917554][T18216] CPU: 1 PID: 18216 Comm: syz.6.13605 Not tainted syzkaller #0 [ 2917.925276][T18216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2917.935353][T18216] Call Trace: [ 2917.938650][T18216] [ 2917.941612][T18216] dump_stack_lvl+0x188/0x24e [ 2917.946318][T18216] ? show_regs_print_info+0x12/0x12 [ 2917.951630][T18216] ? load_image+0x400/0x400 [ 2917.956151][T18216] ? __might_sleep+0xd0/0xd0 [ 2917.960757][T18216] ? __lock_acquire+0x7d10/0x7d10 [ 2917.966420][T18216] should_fail_ex+0x399/0x4d0 [ 2917.971120][T18216] should_failslab+0x5/0x20 [ 2917.975640][T18216] slab_pre_alloc_hook+0x59/0x310 [ 2917.980683][T18216] ? unwind_get_return_address+0x49/0x80 [ 2917.986335][T18216] ? kvmalloc_node+0x6c/0x180 [ 2917.991035][T18216] __kmem_cache_alloc_node+0x4f/0x260 [ 2917.996431][T18216] ? kvmalloc_node+0x6c/0x180 [ 2918.001136][T18216] __kmalloc_node+0xa0/0x240 [ 2918.005761][T18216] kvmalloc_node+0x6c/0x180 [ 2918.010298][T18216] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 2918.015961][T18216] ? verify_lock_unused+0x140/0x140 [ 2918.021183][T18216] ? kasan_set_track+0x60/0x70 [ 2918.025966][T18216] ? kasan_set_track+0x4b/0x70 [ 2918.030831][T18216] ? __kasan_kmalloc+0x8e/0xa0 [ 2918.035619][T18216] ? __kmalloc+0xb0/0x240 [ 2918.039964][T18216] ? bpf_test_init+0x9f/0x140 [ 2918.044650][T18216] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 2918.050126][T18216] ? bpf_prog_test_run+0x31e/0x390 [ 2918.055256][T18216] ? __x64_sys_bpf+0x78/0x90 [ 2918.059864][T18216] ? do_syscall_64+0x4c/0xa0 [ 2918.064476][T18216] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2918.070750][T18216] ? xdp_convert_md_to_buff+0x330/0x330 [ 2918.076333][T18216] ? __lock_acquire+0x7d10/0x7d10 [ 2918.081467][T18216] ? __virt_addr_valid+0x188/0x540 [ 2918.086612][T18216] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2918.092881][T18216] ? bpf_test_init+0x119/0x140 [ 2918.097663][T18216] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2918.103144][T18216] bpf_prog_test_run_xdp+0x736/0xf10 [ 2918.108461][T18216] ? dev_put+0x80/0x80 [ 2918.112563][T18216] ? dev_put+0x80/0x80 [ 2918.116648][T18216] bpf_prog_test_run+0x31e/0x390 [ 2918.121607][T18216] __sys_bpf+0x62b/0x780 [ 2918.125869][T18216] ? bpf_link_show_fdinfo+0x380/0x380 [ 2918.131273][T18216] ? lock_chain_count+0x20/0x20 [ 2918.136157][T18216] __x64_sys_bpf+0x78/0x90 [ 2918.140600][T18216] do_syscall_64+0x4c/0xa0 [ 2918.145123][T18216] ? clear_bhb_loop+0x60/0xb0 [ 2918.149831][T18216] ? clear_bhb_loop+0x60/0xb0 [ 2918.154531][T18216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2918.160442][T18216] RIP: 0033:0x7f187cd9cdd9 [ 2918.164902][T18216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2918.184528][T18216] RSP: 002b:00007f187dc59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2918.192957][T18216] RAX: ffffffffffffffda RBX: 00007f187d015fa0 RCX: 00007f187cd9cdd9 [ 2918.200941][T18216] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 2918.208929][T18216] RBP: 00007f187dc59090 R08: 0000000000000000 R09: 0000000000000000 [ 2918.216913][T18216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2918.224896][T18216] R13: 00007f187d016038 R14: 00007f187d015fa0 R15: 00007ffdcfce3878 [ 2918.232983][T18216] [ 2919.127154][T18226] device syzkaller0 entered promiscuous mode [ 2919.657751][T18232] netlink: 'syz.6.13608': attribute type 3 has an invalid length. [ 2919.683552][T18232] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13608'. [ 2920.064024][T18229] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13608'. [ 2922.622525][T18263] netlink: 'syz.0.13615': attribute type 3 has an invalid length. [ 2922.630974][T18263] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13615'. [ 2926.067183][T18255] netlink: 1 bytes leftover after parsing attributes in process `syz.6.13613'. [ 2926.076374][T18261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13615'. [ 2926.310579][T18266] FAULT_INJECTION: forcing a failure. [ 2926.310579][T18266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2926.352985][T18266] CPU: 1 PID: 18266 Comm: syz.1.13618 Not tainted syzkaller #0 [ 2926.360617][T18266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2926.370728][T18266] Call Trace: [ 2926.374059][T18266] [ 2926.377038][T18266] dump_stack_lvl+0x188/0x24e [ 2926.381938][T18266] ? show_regs_print_info+0x12/0x12 [ 2926.387183][T18266] ? load_image+0x400/0x400 [ 2926.391754][T18266] ? __lock_acquire+0x7d10/0x7d10 [ 2926.396847][T18266] should_fail_ex+0x399/0x4d0 [ 2926.401573][T18266] _copy_from_user+0x2c/0x170 [ 2926.406412][T18266] __sys_bpf+0x2ea/0x780 [ 2926.410719][T18266] ? bpf_link_show_fdinfo+0x380/0x380 [ 2926.416155][T18266] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2926.422427][T18266] __x64_sys_bpf+0x78/0x90 [ 2926.426977][T18266] do_syscall_64+0x4c/0xa0 [ 2926.431436][T18266] ? clear_bhb_loop+0x60/0xb0 [ 2926.436152][T18266] ? clear_bhb_loop+0x60/0xb0 [ 2926.440857][T18266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2926.446779][T18266] RIP: 0033:0x7fbf0c79cdd9 [ 2926.451222][T18266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2926.470863][T18266] RSP: 002b:00007fbf0a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2926.479410][T18266] RAX: ffffffffffffffda RBX: 00007fbf0ca15fa0 RCX: 00007fbf0c79cdd9 [ 2926.487621][T18266] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000003 [ 2926.495625][T18266] RBP: 00007fbf0a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2926.503638][T18266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2926.511634][T18266] R13: 00007fbf0ca16038 R14: 00007fbf0ca15fa0 R15: 00007fff8f7409e8 [ 2926.519640][T18266] [ 2927.032525][T18286] netlink: 'syz.1.13622': attribute type 3 has an invalid length. [ 2927.066300][T18286] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13622'. [ 2927.443271][T18287] netlink: 'syz.0.13620': attribute type 2 has an invalid length. [ 2928.912355][T18283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13622'. [ 2929.327447][T18304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2929.357393][T18299] netlink: 'syz.5.13627': attribute type 3 has an invalid length. [ 2929.398912][T18299] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13627'. [ 2929.414218][T18304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2929.433331][T18305] netlink: 'syz.3.13626': attribute type 1 has an invalid length. [ 2929.457948][T18305] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.13626'. [ 2929.500367][T18302] netlink: 'syz.6.13628': attribute type 3 has an invalid length. [ 2929.520246][T18302] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13628'. [ 2929.559561][T18296] device wg2 left promiscuous mode [ 2929.794206][T18307] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13627'. [ 2937.191266][T18343] netlink: 'syz.3.13639': attribute type 2 has an invalid length. [ 2937.253212][T18372] netlink: 'syz.0.13644': attribute type 1 has an invalid length. [ 2937.309141][T18353] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2937.470510][T18372] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.13644'. [ 2937.510182][T18353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2937.577067][T18353] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2938.165415][T18368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13645'. [ 2938.207306][T18375] netlink: 'syz.6.13646': attribute type 21 has an invalid length. [ 2938.229952][T18376] netlink: 'syz.6.13646': attribute type 21 has an invalid length. [ 2939.163825][ T6515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2939.376334][T18399] netlink: 'syz.3.13655': attribute type 3 has an invalid length. [ 2939.415136][T18399] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13655'. [ 2939.581201][T18400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13655'. [ 2941.896674][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13656'. [ 2941.943409][T18409] netlink: 'syz.6.13656': attribute type 3 has an invalid length. [ 2941.984407][T18409] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.13656'. [ 2942.292639][T18423] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13659'. [ 2942.373738][T18417] netlink: 'syz.5.13659': attribute type 3 has an invalid length. [ 2942.402449][T18417] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13659'. [ 2942.979190][T18416] netlink: 'syz.1.13657': attribute type 2 has an invalid length. [ 2943.658329][T18432] netlink: 'syz.6.13662': attribute type 1 has an invalid length. [ 2943.674276][T18432] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.13662'. [ 2945.425836][T18453] netlink: 'syz.1.13666': attribute type 2 has an invalid length. [ 2945.861416][T18445] netlink: 'syz.1.13666': attribute type 2 has an invalid length. [ 2945.919067][T18445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13666'. [ 2946.260755][T18453] device 0 entered promiscuous mode [ 2947.469668][T18488] netlink: 'syz.6.13677': attribute type 3 has an invalid length. [ 2947.538553][T18488] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13677'. [ 2947.609436][T18492] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13677'. [ 2947.934752][T18497] netlink: 'syz.5.13679': attribute type 29 has an invalid length. [ 2947.977032][T18497] netlink: 'syz.5.13679': attribute type 29 has an invalid length. [ 2948.037048][T18500] netlink: 'syz.5.13679': attribute type 29 has an invalid length. [ 2948.130536][T18497] netlink: 'syz.5.13679': attribute type 29 has an invalid length. [ 2948.162230][T18497] netlink: 'syz.5.13679': attribute type 29 has an invalid length. [ 2950.651581][T18522] FAULT_INJECTION: forcing a failure. [ 2950.651581][T18522] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.664785][T18522] CPU: 0 PID: 18522 Comm: syz.3.13688 Not tainted syzkaller #0 [ 2950.672382][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2950.678179][T18517] netlink: 'syz.5.13686': attribute type 2 has an invalid length. [ 2950.682459][T18522] Call Trace: [ 2950.682525][T18522] [ 2950.682537][T18522] dump_stack_lvl+0x188/0x24e [ 2950.682580][T18522] ? show_regs_print_info+0x12/0x12 [ 2950.682612][T18522] ? load_image+0x400/0x400 [ 2950.682637][T18522] ? mark_lock+0x94/0x320 [ 2950.715581][T18522] ? skb_network_protocol+0x525/0x780 [ 2950.721103][T18522] should_fail_ex+0x399/0x4d0 [ 2950.725837][T18522] should_failslab+0x5/0x20 [ 2950.730465][T18522] slab_pre_alloc_hook+0x59/0x310 [ 2950.735556][T18522] kmem_cache_alloc+0x56/0x2f0 [ 2950.740367][T18522] ? skb_clone+0x1e7/0x370 [ 2950.744846][T18522] skb_clone+0x1e7/0x370 [ 2950.749145][T18522] ? dev_queue_xmit_nit+0x231/0xbb0 [ 2950.754398][T18522] dev_queue_xmit_nit+0x249/0xbb0 [ 2950.759487][T18522] ? dev_queue_xmit_nit+0x29/0xbb0 [ 2950.764663][T18522] dev_hard_start_xmit+0x154/0x870 [ 2950.769843][T18522] __dev_queue_xmit+0x1aa3/0x37c0 [ 2950.774508][T18517] device 0 entered promiscuous mode [ 2950.774983][T18522] ? lock_chain_count+0x20/0x20 [ 2950.775036][T18522] ? __dev_queue_xmit+0x26b/0x37c0 [ 2950.775071][T18522] ? netdev_core_pick_tx+0x340/0x340 [ 2950.775102][T18522] ? ___neigh_create+0x1e06/0x24c0 [ 2950.801062][T18522] ? neigh_connected_output+0x3ac/0x450 [ 2950.806678][T18522] ip6_finish_output2+0xdd6/0x15d0 [ 2950.811853][T18522] ? ip6_mtu+0x79/0x3f0 [ 2950.816055][T18522] ? ip6_finish_output2+0x58f/0x15d0 [ 2950.821396][T18522] ? ip6_mtu+0x79/0x3f0 [ 2950.825686][T18522] ? nf_hook+0x390/0x390 [ 2950.829984][T18522] ? ip6_finish_output+0x577/0x820 [ 2950.835168][T18522] ? ip6_send_skb+0x10b/0x380 [ 2950.839897][T18522] ip6_send_skb+0x1d1/0x380 [ 2950.844717][T18522] rawv6_push_pending_frames+0x6e3/0x8d0 [ 2950.850413][T18522] ? raw6_getfrag+0x300/0x300 [ 2950.855149][T18522] ? rawv6_send_hdrinc+0x16c0/0x16c0 [ 2950.860496][T18522] rawv6_sendmsg+0x1293/0x1700 [ 2950.865334][T18522] ? compat_rawv6_ioctl+0x60/0x60 [ 2950.870443][T18522] ? aa_sk_perm+0x81f/0x950 [ 2950.875019][T18522] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 2950.881590][T18522] ? inet_sendmsg+0x78/0x2f0 [ 2950.886228][T18522] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2950.891565][T18522] ? security_socket_sendmsg+0x7c/0xa0 [ 2950.893329][T18517] netlink: 'syz.5.13686': attribute type 2 has an invalid length. [ 2950.897059][T18522] ? inet_send_prepare+0x260/0x260 [ 2950.897087][T18522] ____sys_sendmsg+0x5be/0x970 [ 2950.897129][T18522] ? __sys_sendmsg_sock+0x30/0x30 [ 2950.897157][T18522] ? __import_iovec+0x315/0x500 [ 2950.897192][T18522] ? import_iovec+0x6f/0xa0 [ 2950.897219][T18522] ___sys_sendmsg+0x2a2/0x360 [ 2950.897255][T18522] ? __sys_sendmsg+0x290/0x290 [ 2950.897311][T18522] ? __lock_acquire+0x7d10/0x7d10 [ 2950.925929][T18517] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13686'. [ 2950.929898][T18522] __se_sys_sendmsg+0x1bb/0x2a0 [ 2950.929939][T18522] ? ct_nmi_exit+0x145/0x1c0 [ 2950.929967][T18522] ? __x64_sys_sendmsg+0x80/0x80 [ 2950.930021][T18522] ? lockdep_hardirqs_on+0x94/0x140 [ 2950.930050][T18522] do_syscall_64+0x4c/0xa0 [ 2950.930077][T18522] ? clear_bhb_loop+0x60/0xb0 [ 2950.930102][T18522] ? clear_bhb_loop+0x60/0xb0 [ 2950.930130][T18522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2950.930155][T18522] RIP: 0033:0x7f2b24b9cdd9 [ 2950.930177][T18522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2950.930195][T18522] RSP: 002b:00007f2b25af5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2950.930223][T18522] RAX: ffffffffffffffda RBX: 00007f2b24e15fa0 RCX: 00007f2b24b9cdd9 [ 2950.930242][T18522] RDX: 0000000000000860 RSI: 0000200000000140 RDI: 0000000000000004 [ 2950.930257][T18522] RBP: 00007f2b25af5090 R08: 0000000000000000 R09: 0000000000000000 [ 2950.930271][T18522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2950.930286][T18522] R13: 00007f2b24e16038 R14: 00007f2b24e15fa0 R15: 00007ffeadcf9b18 [ 2950.930321][T18522] [ 2951.598422][T18543] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13692'. [ 2952.515281][T18555] netlink: 'syz.3.13696': attribute type 2 has an invalid length. [ 2952.527093][T18555] netlink: 'syz.3.13696': attribute type 4 has an invalid length. [ 2952.574615][T18555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13696'. [ 2952.957433][T18561] delete_channel: no stack [ 2953.166258][T18570] netlink: 'syz.3.13702': attribute type 1 has an invalid length. [ 2953.233108][T18570] netlink: 'syz.3.13702': attribute type 3 has an invalid length. [ 2953.296786][T18570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13702'. [ 2953.485149][T18576] netlink: 'syz.6.13704': attribute type 2 has an invalid length. [ 2954.639979][T18576] device 0 entered promiscuous mode [ 2954.708666][T18591] netlink: 'syz.5.13708': attribute type 3 has an invalid length. [ 2954.716679][T18591] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13708'. [ 2954.747816][T18578] netlink: 'syz.6.13704': attribute type 2 has an invalid length. [ 2954.803009][T18587] netlink: 'syz.0.13705': attribute type 3 has an invalid length. [ 2954.857236][T18578] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13704'. [ 2955.129058][T18587] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13705'. [ 2955.175268][T18582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13705'. [ 2955.912250][T18600] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13712'. [ 2956.446398][T18608] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.13714'. [ 2956.513105][T18608] bridge_slave_1: default FDB implementation only supports local addresses [ 2957.219165][T18609] À: port 1(vlan0) entered blocking state [ 2957.225209][T18609] À: port 1(vlan0) entered disabled state [ 2957.234714][T18609] device vlan0 entered promiscuous mode [ 2958.082700][T18631] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.13723'. [ 2958.144815][T18631] netlink: 'syz.3.13723': attribute type 4 has an invalid length. [ 2958.146130][T18629] netlink: 'syz.0.13720': attribute type 3 has an invalid length. [ 2958.295290][T18637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13720'. [ 2958.362280][T18629] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13720'. [ 2959.410873][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.441578][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2961.457877][T18652] netlink: 'syz.0.13727': attribute type 3 has an invalid length. [ 2961.470126][T18652] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13727'. [ 2961.506488][T18656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13727'. [ 2962.670712][T18682] netlink: 'syz.5.13737': attribute type 3 has an invalid length. [ 2962.703520][T18682] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13737'. [ 2964.599191][T18684] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13737'. [ 2964.641663][T18690] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13739'. [ 2964.714227][T18693] netlink: 'syz.0.13740': attribute type 10 has an invalid length. [ 2964.750837][T18693] bridge0: port 3(hsr0) entered disabled state [ 2964.757370][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 2964.765029][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 2965.085107][T18703] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13742'. [ 2965.085527][T18700] netlink: 'syz.5.13742': attribute type 3 has an invalid length. [ 2965.227216][T18700] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13742'. [ 2965.892604][T18719] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.13750'. [ 2965.947267][T18719] netlink: zone id is out of range [ 2965.953087][T18719] netlink: zone id is out of range [ 2965.963894][T18728] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13752'. [ 2965.964848][T18724] netlink: 'syz.5.13752': attribute type 3 has an invalid length. [ 2966.002216][T18719] netlink: zone id is out of range [ 2966.053633][T18724] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13752'. [ 2966.078618][T18719] netlink: zone id is out of range [ 2966.084293][T18719] netlink: zone id is out of range [ 2966.131969][T18719] netlink: zone id is out of range [ 2966.138248][T18726] netlink: 'syz.1.13749': attribute type 2 has an invalid length. [ 2966.147207][T18719] netlink: zone id is out of range [ 2966.147327][T18719] netlink: zone id is out of range [ 2966.183428][T18719] netlink: zone id is out of range [ 2966.207615][T18719] netlink: zone id is out of range [ 2966.383455][T18726] netlink: 'syz.1.13749': attribute type 4 has an invalid length. [ 2966.579522][T18733] FAULT_INJECTION: forcing a failure. [ 2966.579522][T18733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2966.599119][T18733] CPU: 1 PID: 18733 Comm: syz.0.13754 Not tainted syzkaller #0 [ 2966.607005][T18733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2966.617111][T18733] Call Trace: [ 2966.620429][T18733] [ 2966.623393][T18733] dump_stack_lvl+0x188/0x24e [ 2966.628130][T18733] ? show_regs_print_info+0x12/0x12 [ 2966.633656][T18733] ? load_image+0x400/0x400 [ 2966.638201][T18733] ? __lock_acquire+0x7d10/0x7d10 [ 2966.643362][T18733] should_fail_ex+0x399/0x4d0 [ 2966.648098][T18733] _copy_from_user+0x2c/0x170 [ 2966.652822][T18733] __sys_bpf+0x2ea/0x780 [ 2966.657108][T18733] ? bpf_link_show_fdinfo+0x380/0x380 [ 2966.662557][T18733] __x64_sys_bpf+0x78/0x90 [ 2966.667020][T18733] do_syscall_64+0x4c/0xa0 [ 2966.671517][T18733] ? clear_bhb_loop+0x60/0xb0 [ 2966.676246][T18733] ? clear_bhb_loop+0x60/0xb0 [ 2966.680974][T18733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2966.686931][T18733] RIP: 0033:0x7fa916f9cdd9 [ 2966.691394][T18733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2966.711697][T18733] RSP: 002b:00007fa917db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2966.720280][T18733] RAX: ffffffffffffffda RBX: 00007fa917215fa0 RCX: 00007fa916f9cdd9 [ 2966.728269][T18733] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2966.736273][T18733] RBP: 00007fa917db6090 R08: 0000000000000000 R09: 0000000000000000 [ 2966.744435][T18733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2966.752430][T18733] R13: 00007fa917216038 R14: 00007fa917215fa0 R15: 00007fffb59cfdb8 [ 2966.760432][T18733] [ 2967.057164][T18741] netlink: 'syz.5.13757': attribute type 10 has an invalid length. [ 2967.258016][T18741] team0: Port device netdevsim0 added [ 2967.978305][T18753] netlink: 'syz.1.13762': attribute type 3 has an invalid length. [ 2968.033457][T18762] __nla_validate_parse: 1 callbacks suppressed [ 2968.033479][T18762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13762'. [ 2968.097844][T18753] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13762'. [ 2968.456090][T18771] netlink: 'syz.6.13767': attribute type 3 has an invalid length. [ 2968.475270][T18772] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13767'. [ 2968.490211][T18771] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13767'. [ 2968.839123][T18775] netlink: 'syz.0.13768': attribute type 2 has an invalid length. [ 2968.915762][T18775] netlink: 'syz.0.13768': attribute type 4 has an invalid length. [ 2968.956740][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13768'. [ 2969.072401][T18780] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13769'. [ 2969.737728][T18794] netlink: 194236 bytes leftover after parsing attributes in process `syz.6.13773'. [ 2969.802018][T18788] validate_nla: 1 callbacks suppressed [ 2969.802119][T18788] netlink: 'syz.0.13774': attribute type 10 has an invalid length. [ 2970.001540][T18805] netlink: 'syz.5.13778': attribute type 4 has an invalid length. [ 2970.019753][T18788] device hsr0 left promiscuous mode [ 2970.038139][T18788] bridge0: port 3(hsr0) entered disabled state [ 2970.096725][T18805] netlink: 134728 bytes leftover after parsing attributes in process `syz.5.13778'. [ 2970.179845][T18788] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2970.558440][T18815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13780'. [ 2971.734597][T25386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2972.093780][T18838] netlink: 'syz.3.13789': attribute type 10 has an invalid length. [ 2972.209878][T18838] team0: Port device netdevsim0 added [ 2973.003515][T18858] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.13794'. [ 2973.108955][T18858] net_ratelimit: 104 callbacks suppressed [ 2973.108979][T18858] netlink: zone id is out of range [ 2973.313948][T18858] netlink: zone id is out of range [ 2973.347419][T18858] netlink: zone id is out of range [ 2973.352722][T18858] netlink: zone id is out of range [ 2973.392870][T18858] netlink: zone id is out of range [ 2973.398619][T18858] netlink: zone id is out of range [ 2973.552369][T18858] netlink: zone id is out of range [ 2973.596818][T18858] netlink: zone id is out of range [ 2973.602024][T18858] netlink: zone id is out of range [ 2973.642917][T18860] netlink: 'syz.3.13797': attribute type 21 has an invalid length. [ 2973.653956][T18860] netlink: 'syz.3.13797': attribute type 4 has an invalid length. [ 2973.675343][T18860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13797'. [ 2973.702408][T18858] netlink: zone id is out of range [ 2974.047614][T18873] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13799'. [ 2976.265969][T18894] netlink: 'syz.6.13806': attribute type 3 has an invalid length. [ 2976.286700][T18894] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13806'. [ 2976.497600][T18894] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13806'. [ 2980.421153][T18962] netlink: 134268 bytes leftover after parsing attributes in process `syz.6.13827'. [ 2981.417067][T18976] netlink: 'syz.6.13835': attribute type 29 has an invalid length. [ 2981.445955][T18976] netlink: 'syz.6.13835': attribute type 29 has an invalid length. [ 2981.467872][T18976] netlink: 'syz.6.13835': attribute type 29 has an invalid length. [ 2981.500872][T18979] netlink: 'syz.6.13835': attribute type 29 has an invalid length. [ 2981.547620][T18973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13832'. [ 2981.849134][T18987] FAULT_INJECTION: forcing a failure. [ 2981.849134][T18987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2981.901798][T18987] CPU: 0 PID: 18987 Comm: syz.0.13837 Not tainted syzkaller #0 [ 2981.909775][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2981.920048][T18987] Call Trace: [ 2981.923362][T18987] [ 2981.926326][T18987] dump_stack_lvl+0x188/0x24e [ 2981.931057][T18987] ? show_regs_print_info+0x12/0x12 [ 2981.936295][T18987] ? load_image+0x400/0x400 [ 2981.940838][T18987] ? __lock_acquire+0x7d10/0x7d10 [ 2981.945911][T18987] should_fail_ex+0x399/0x4d0 [ 2981.950632][T18987] _copy_from_user+0x2c/0x170 [ 2981.953750][T18981] netlink: 'syz.5.13834': attribute type 10 has an invalid length. [ 2981.955332][T18987] generic_map_update_batch+0x4f3/0x810 [ 2981.968803][T18987] ? lock_chain_count+0x20/0x20 [ 2981.973709][T18987] ? rcu_read_unlock+0xa0/0xa0 [ 2981.978574][T18987] ? rcu_read_unlock+0xa0/0xa0 [ 2981.983375][T18987] bpf_map_do_batch+0x466/0x600 [ 2981.988286][T18987] __sys_bpf+0x6f7/0x780 [ 2981.992578][T18987] ? bpf_link_show_fdinfo+0x380/0x380 [ 2981.998007][T18987] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2982.004234][T18987] __x64_sys_bpf+0x78/0x90 [ 2982.008707][T18987] do_syscall_64+0x4c/0xa0 [ 2982.013259][T18987] ? clear_bhb_loop+0x60/0xb0 [ 2982.018262][T18987] ? clear_bhb_loop+0x60/0xb0 [ 2982.022999][T18987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2982.029297][T18987] RIP: 0033:0x7fa916f9cdd9 [ 2982.033753][T18987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2982.053848][T18987] RSP: 002b:00007fa917db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2982.062419][T18987] RAX: ffffffffffffffda RBX: 00007fa917215fa0 RCX: 00007fa916f9cdd9 [ 2982.070457][T18987] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 2982.078585][T18987] RBP: 00007fa917db6090 R08: 0000000000000000 R09: 0000000000000000 [ 2982.086604][T18987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2982.094613][T18987] R13: 00007fa917216038 R14: 00007fa917215fa0 R15: 00007fffb59cfdb8 [ 2982.102650][T18987] [ 2982.128554][T18981] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2983.034474][T19004] netlink: 'syz.1.13843': attribute type 39 has an invalid length. [ 2983.134013][T19014] netlink: 'syz.6.13845': attribute type 10 has an invalid length. [ 2983.170234][T19014] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13845'. [ 2983.181904][T19014] batman_adv: batadv0: Adding interface: vlan1 [ 2983.289172][T19014] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2983.342397][T19014] batman_adv: batadv0: Interface activated: vlan1 [ 2983.471468][T19015] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13847'. [ 2985.438040][T19034] netlink: 'syz.0.13854': attribute type 3 has an invalid length. [ 2985.448748][T19034] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13854'. [ 2985.546093][T19043] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13857'. [ 2985.973331][T19061] syz.1.13862[19061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2985.973510][T19061] syz.1.13862[19061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2986.193289][T19062] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13863'. [ 2987.116303][T19073] netlink: 'syz.0.13867': attribute type 2 has an invalid length. [ 2987.133592][T19073] netlink: 'syz.0.13867': attribute type 8 has an invalid length. [ 2987.267415][T19073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13867'. [ 2987.603301][T19085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13870'. [ 2987.838293][T19089] tap0: tun_chr_ioctl cmd 2147767517 [ 2987.943335][T19093] netlink: 144 bytes leftover after parsing attributes in process `syz.0.13874'. [ 2988.683254][T19106] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13878'. [ 2988.760461][T19097] netlink: 'syz.3.13873': attribute type 1 has an invalid length. [ 2988.901677][T19097] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.13873'. [ 2989.226043][T19122] syz.5.13881[19122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2989.233306][T19122] syz.5.13881[19122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2990.914910][T19140] netlink: 'syz.5.13887': attribute type 3 has an invalid length. [ 2990.996759][T19140] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13887'. [ 2991.070855][T19138] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13887'. [ 2991.704566][T19155] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13892'. [ 2991.935636][T19159] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13894'. [ 2993.792575][T19185] netlink: 'syz.0.13904': attribute type 10 has an invalid length. [ 2993.925840][T19185] netlink: 'syz.0.13904': attribute type 6 has an invalid length. [ 2994.293236][T19197] syz.6.13909[19197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2994.314290][T19197] syz.6.13909[19197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2994.814518][T19206] netlink: 144 bytes leftover after parsing attributes in process `syz.1.13911'. [ 2996.557715][T19224] netlink: 'syz.0.13918': attribute type 3 has an invalid length. [ 2996.616683][T19224] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13918'. [ 2997.355957][T19239] netlink: 'syz.3.13920': attribute type 25 has an invalid length. [ 2997.374607][T19239] netlink: 'syz.3.13920': attribute type 9 has an invalid length. [ 2997.411381][T19243] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13924'. [ 2997.985028][T19261] netlink: 'syz.5.13930': attribute type 3 has an invalid length. [ 2997.996779][T19261] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.13930'. [ 2998.055456][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13930'. [ 2999.039025][T19265] netlink: 'syz.1.13933': attribute type 10 has an invalid length. [ 2999.078982][T19265] netlink: 'syz.1.13933': attribute type 6 has an invalid length. [ 2999.942810][T19291] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.13943'. [ 3000.403899][T19305] netlink: 'syz.1.13948': attribute type 3 has an invalid length. [ 3000.542832][T19305] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13948'. [ 3000.729514][T19314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13951'. [ 3001.570437][T19331] netlink: 144 bytes leftover after parsing attributes in process `syz.5.13958'. [ 3001.703708][T19335] netlink: 'syz.1.13959': attribute type 10 has an invalid length. [ 3001.770964][T19335] 8021q: adding VLAN 0 to HW filter on device team0 [ 3001.832692][T19335] bond0: (slave team0): Enslaving as an active interface with an up link [ 3002.306464][T19349] netlink: 'syz.1.13965': attribute type 3 has an invalid length. [ 3002.351532][T19349] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13965'. [ 3002.360204][T19355] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13965'. [ 3002.446702][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 3002.862763][T25386] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3003.549933][T19390] netlink: 180740 bytes leftover after parsing attributes in process `syz.1.13982'. [ 3003.651414][T19397] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13984'. [ 3003.697455][T19391] netlink: 'syz.6.13984': attribute type 3 has an invalid length. [ 3003.707214][T19391] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.13984'. [ 3005.309841][T19434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13997'. [ 3005.336087][T19439] netlink: 'syz.1.13998': attribute type 3 has an invalid length. [ 3005.373377][T19439] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13998'. [ 3005.464005][T19436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13998'. [ 3005.683161][T19447] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14002'. [ 3006.102048][T30619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3006.110560][T30619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3006.121400][T30619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3006.133214][T30619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3006.141565][T30619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3006.149005][T30619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3006.436143][T19459] chnl_net:caif_netlink_parms(): no params data found [ 3006.525993][T19459] bridge0: port 1(bridge_slave_0) entered blocking state [ 3006.556709][T19459] bridge0: port 1(bridge_slave_0) entered disabled state [ 3006.565133][T19459] device bridge_slave_0 entered promiscuous mode [ 3006.589212][T19459] bridge0: port 2(bridge_slave_1) entered blocking state [ 3006.596432][T19459] bridge0: port 2(bridge_slave_1) entered disabled state [ 3006.604590][T19459] device bridge_slave_1 entered promiscuous mode [ 3006.642679][T19459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3006.671100][T19459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3006.736330][T19459] team0: Port device team_slave_0 added [ 3006.755549][T19459] team0: Port device team_slave_1 added [ 3006.799462][T19459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3006.814029][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3006.854000][T19459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3006.875888][T19459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3006.884319][T19459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3006.918154][T19459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3007.991501][T19459] device hsr_slave_0 entered promiscuous mode [ 3008.035515][T19459] device hsr_slave_1 entered promiscuous mode [ 3008.075845][T19459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3008.120738][T19459] Cannot create hsr debugfs directory [ 3008.207751][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 3008.352967][T12861] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.478712][T12861] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.599968][T12861] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3008.765558][T19484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14011'. [ 3009.159250][T19488] netlink: 'syz.1.14014': attribute type 3 has an invalid length. [ 3009.184020][T19488] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.14014'. [ 3009.577890][T19489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14014'. [ 3009.685917][T12861] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.775804][T19491] netlink: 'syz.0.14015': attribute type 10 has an invalid length. [ 3009.804074][T19491] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14015'. [ 3010.255452][T19499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14018'. [ 3010.297143][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 3010.540857][T12861] device 0 left promiscuous mode [ 3011.118399][T19510] netlink: 'syz.1.14021': attribute type 2 has an invalid length. [ 3011.588166][T19522] netlink: 'syz.0.14023': attribute type 3 has an invalid length. [ 3011.607824][T19522] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14023'. [ 3011.769772][T19528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14023'. [ 3011.915402][T19530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14026'. [ 3012.113776][T19537] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14028'. [ 3012.202136][T19543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14030'. [ 3012.236408][T19459] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3012.322367][T19459] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3012.370176][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 3012.644581][T19459] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3012.890675][T19459] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3013.762179][T19459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3014.046081][T19459] 8021q: adding VLAN 0 to HW filter on device team0 [ 3014.067054][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3014.075612][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3014.155803][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3014.173756][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3014.217570][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 3014.224799][T13655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3014.344841][T12861] device hsr_slave_0 left promiscuous mode [ 3014.401155][T12861] device hsr_slave_1 left promiscuous mode [ 3014.415451][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3014.423584][T12861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3014.444614][T12861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3014.456574][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 3014.500670][T12861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3014.565298][T12861] batman_adv: batadv0: Interface deactivated: vlan1 [ 3014.578177][T12861] batman_adv: batadv0: Removing interface: vlan1 [ 3014.584909][T19591] netlink: 'syz.5.14042': attribute type 3 has an invalid length. [ 3014.646984][T19591] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14042'. [ 3014.675109][T12861] device veth1_macvtap left promiscuous mode [ 3014.694184][T12861] device veth0_macvtap left promiscuous mode [ 3014.711826][T12861] device veth1_vlan left promiscuous mode [ 3014.727095][T12861] device veth0_vlan left promiscuous mode [ 3015.741148][T12861] team0 (unregistering): Port device team_slave_1 removed [ 3016.318634][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3016.329956][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3016.339337][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3016.349302][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 3016.356606][T13655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3016.373476][T19588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14041'. [ 3016.383545][T19594] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14043'. [ 3016.393472][T19598] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14042'. [ 3016.427007][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3016.450510][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3016.579390][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3016.599492][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3016.643349][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3016.664519][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3016.788031][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3016.815472][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3016.917866][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3016.961253][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3017.034507][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3017.124747][T19459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3018.792518][T19642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14055'. [ 3018.903809][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3018.939218][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3018.961964][T19459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3019.348368][T19654] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14059'. [ 3020.399461][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3020.410785][ T6515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3020.483244][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3020.492320][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3020.508904][T19459] device veth0_vlan entered promiscuous mode [ 3020.516431][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3020.541878][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3020.578388][T19459] device veth1_vlan entered promiscuous mode [ 3020.700335][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3020.717567][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3020.734199][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3020.762783][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3020.807441][T19459] device veth0_macvtap entered promiscuous mode [ 3020.839128][T19693] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14075'. [ 3021.072650][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.084714][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.095001][T19459] device veth1_macvtap entered promiscuous mode [ 3021.233446][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3021.244770][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.282563][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3021.296429][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.322564][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3021.353359][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.373924][T19459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3021.382155][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3021.397766][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3021.452994][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3021.498334][T25384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3021.550195][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3021.593273][T19703] netlink: 'syz.0.14077': attribute type 3 has an invalid length. [ 3021.602279][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.615899][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3021.627249][T19703] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14077'. [ 3021.642562][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.664444][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3021.680263][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.690769][T19459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3021.702110][T19459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.714578][T19459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3021.738545][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14077'. [ 3021.791097][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3021.835410][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3021.855559][T19459] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.878803][T19459] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.900592][T19459] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3021.929957][T19459] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3022.591507][T13655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3022.623528][T13655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.652326][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3022.678314][T12861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3022.734234][T12861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.883193][T13655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3022.898775][T19728] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14088'. [ 3023.074932][T19730] netlink: 'syz.6.13999': attribute type 2 has an invalid length. [ 3023.484835][T19744] FAULT_INJECTION: forcing a failure. [ 3023.484835][T19744] name failslab, interval 1, probability 0, space 0, times 0 [ 3023.603954][T19744] CPU: 1 PID: 19744 Comm: syz.1.14095 Not tainted syzkaller #0 [ 3023.611594][T19744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3023.621700][T19744] Call Trace: [ 3023.625016][T19744] [ 3023.627989][T19744] dump_stack_lvl+0x188/0x24e [ 3023.632811][T19744] ? sctp_sendmsg+0x15b0/0x2940 [ 3023.637711][T19744] ? ___sys_sendmsg+0x2a2/0x360 [ 3023.642611][T19744] ? show_regs_print_info+0x12/0x12 [ 3023.647855][T19744] ? load_image+0x400/0x400 [ 3023.652504][T19744] should_fail_ex+0x399/0x4d0 [ 3023.657225][T19744] should_failslab+0x5/0x20 [ 3023.661765][T19744] slab_pre_alloc_hook+0x59/0x310 [ 3023.666830][T19744] ? sctp_add_bind_addr+0x89/0x350 [ 3023.671977][T19744] __kmem_cache_alloc_node+0x4f/0x260 [ 3023.677368][T19744] ? sctp_add_bind_addr+0x89/0x350 [ 3023.682497][T19744] kmalloc_trace+0x26/0xe0 [ 3023.686941][T19744] sctp_add_bind_addr+0x89/0x350 [ 3023.691955][T19744] sctp_copy_local_addr_list+0x311/0x4e0 [ 3023.697620][T19744] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3023.703356][T19744] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3023.709446][T19744] ? sctp_v6_is_any+0x60/0x70 [ 3023.714137][T19744] ? sctp_copy_one_addr+0x93/0x660 [ 3023.719272][T19744] sctp_bind_addr_copy+0xaf/0x3c0 [ 3023.724320][T19744] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3023.730664][T19744] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3023.735977][T19744] ? __sctp_connect+0xd80/0xd80 [ 3023.740835][T19744] ? __local_bh_enable_ip+0x136/0x1c0 [ 3023.746230][T19744] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3023.751792][T19744] ? security_sctp_bind_connect+0x85/0xb0 [ 3023.757532][T19744] sctp_sendmsg+0x15b0/0x2940 [ 3023.762516][T19744] ? aa_sk_perm+0x771/0x950 [ 3023.767043][T19744] ? sctp_getsockopt+0x8a0/0x8a0 [ 3023.772007][T19744] ? __might_fault+0xa6/0x120 [ 3023.776700][T19744] ? aa_af_perm+0x340/0x340 [ 3023.781214][T19744] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 3023.787657][T19744] ? inet_sendmsg+0xe5/0x2f0 [ 3023.792260][T19744] ? inet_send_prepare+0x260/0x260 [ 3023.797383][T19744] ____sys_sendmsg+0x5be/0x970 [ 3023.802177][T19744] ? __sys_sendmsg_sock+0x30/0x30 [ 3023.807215][T19744] ? __import_iovec+0x315/0x500 [ 3023.812174][T19744] ? import_iovec+0x6f/0xa0 [ 3023.816696][T19744] ___sys_sendmsg+0x2a2/0x360 [ 3023.821483][T19744] ? __sys_sendmsg+0x290/0x290 [ 3023.826285][T19744] ? __lock_acquire+0x7d10/0x7d10 [ 3023.831350][T19744] __se_sys_sendmsg+0x1bb/0x2a0 [ 3023.836223][T19744] ? __x64_sys_sendmsg+0x80/0x80 [ 3023.841198][T19744] ? lockdep_hardirqs_on+0x94/0x140 [ 3023.846411][T19744] do_syscall_64+0x4c/0xa0 [ 3023.850940][T19744] ? clear_bhb_loop+0x60/0xb0 [ 3023.855717][T19744] ? clear_bhb_loop+0x60/0xb0 [ 3023.860503][T19744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3023.866676][T19744] RIP: 0033:0x7fbf0c79cdd9 [ 3023.871110][T19744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3023.890730][T19744] RSP: 002b:00007fbf0a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3023.899159][T19744] RAX: ffffffffffffffda RBX: 00007fbf0ca15fa0 RCX: 00007fbf0c79cdd9 [ 3023.907233][T19744] RDX: 0000000000000080 RSI: 0000200000002500 RDI: 0000000000000003 [ 3023.915216][T19744] RBP: 00007fbf0a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3023.923284][T19744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3023.931437][T19744] R13: 00007fbf0ca16038 R14: 00007fbf0ca15fa0 R15: 00007fff8f7409e8 [ 3023.939433][T19744] [ 3023.971797][T19748] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14097'. [ 3024.125768][T19755] netlink: 'syz.0.14099': attribute type 3 has an invalid length. [ 3024.141854][T19755] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.14099'. [ 3024.231786][T19758] FAULT_INJECTION: forcing a failure. [ 3024.231786][T19758] name failslab, interval 1, probability 0, space 0, times 0 [ 3024.276657][T19758] CPU: 0 PID: 19758 Comm: syz.1.14100 Not tainted syzkaller #0 [ 3024.284294][T19758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3024.294439][T19758] Call Trace: [ 3024.297759][T19758] [ 3024.300819][T19758] dump_stack_lvl+0x188/0x24e [ 3024.305520][T19758] ? verify_lock_unused+0x140/0x140 [ 3024.310747][T19758] ? show_regs_print_info+0x12/0x12 [ 3024.315967][T19758] ? load_image+0x400/0x400 [ 3024.320515][T19758] ? crng_make_state+0x1d1/0xb00 [ 3024.325477][T19758] ? __sctp_connect+0x5b3/0xd80 [ 3024.330352][T19758] should_fail_ex+0x399/0x4d0 [ 3024.335050][T19758] should_failslab+0x5/0x20 [ 3024.339567][T19758] slab_pre_alloc_hook+0x59/0x310 [ 3024.344627][T19758] ? sctp_add_bind_addr+0x89/0x350 [ 3024.349760][T19758] __kmem_cache_alloc_node+0x4f/0x260 [ 3024.355151][T19758] ? sctp_add_bind_addr+0x89/0x350 [ 3024.360283][T19758] kmalloc_trace+0x26/0xe0 [ 3024.364812][T19758] sctp_add_bind_addr+0x89/0x350 [ 3024.369772][T19758] sctp_copy_local_addr_list+0x311/0x4e0 [ 3024.375432][T19758] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3024.381172][T19758] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3024.387262][T19758] ? sctp_v4_is_any+0x31/0x50 [ 3024.392048][T19758] ? sctp_copy_one_addr+0x93/0x660 [ 3024.397184][T19758] sctp_bind_addr_copy+0xaf/0x3c0 [ 3024.402244][T19758] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 3024.408588][T19758] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3024.413991][T19758] ? __sctp_connect+0xd80/0xd80 [ 3024.418861][T19758] ? sctp_endpoint_lookup_assoc+0xcd/0x260 [ 3024.424679][T19758] __sctp_connect+0x5b3/0xd80 [ 3024.429378][T19758] ? sctp_send_asconf+0x170/0x170 [ 3024.434412][T19758] ? __local_bh_enable_ip+0x136/0x1c0 [ 3024.439800][T19758] ? lockdep_hardirqs_on+0x94/0x140 [ 3024.445020][T19758] ? __local_bh_enable_ip+0x136/0x1c0 [ 3024.450405][T19758] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3024.455985][T19758] ? security_sctp_bind_connect+0x85/0xb0 [ 3024.461743][T19758] sctp_setsockopt_connectx+0x101/0x1a0 [ 3024.467331][T19758] sctp_setsockopt+0x8f4/0xf90 [ 3024.472142][T19758] ? sock_common_recvmsg+0x190/0x190 [ 3024.477566][T19758] __sys_setsockopt+0x2bf/0x3d0 [ 3024.482490][T19758] __x64_sys_setsockopt+0xb1/0xc0 [ 3024.487632][T19758] do_syscall_64+0x4c/0xa0 [ 3024.492191][T19758] ? clear_bhb_loop+0x60/0xb0 [ 3024.496923][T19758] ? clear_bhb_loop+0x60/0xb0 [ 3024.501648][T19758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3024.507576][T19758] RIP: 0033:0x7fbf0c79cdd9 [ 3024.512134][T19758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3024.531868][T19758] RSP: 002b:00007fbf0a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3024.540307][T19758] RAX: ffffffffffffffda RBX: 00007fbf0ca15fa0 RCX: 00007fbf0c79cdd9 [ 3024.548379][T19758] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 3024.556365][T19758] RBP: 00007fbf0a9f6090 R08: 00000000000000e0 R09: 0000000000000000 [ 3024.564439][T19758] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3024.572424][T19758] R13: 00007fbf0ca16038 R14: 00007fbf0ca15fa0 R15: 00007fff8f7409e8 [ 3024.580443][T19758] [ 3025.893073][T19776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14104'. [ 3025.907316][T19773] netlink: 'syz.3.14104': attribute type 3 has an invalid length. [ 3025.907530][T19773] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14104'. [ 3028.217456][T19825] netlink: 'syz.3.14125': attribute type 10 has an invalid length. [ 3028.338585][T30619] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 3028.367107][T19826] netlink: 'syz.3.14125': attribute type 6 has an invalid length. [ 3028.772174][T19835] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14130'. [ 3029.236274][T19849] sctp: [Deprecated]: syz.3.14136 (pid 19849) Use of int in max_burst socket option deprecated. [ 3029.236274][T19849] Use struct sctp_assoc_value instead [ 3031.290852][T19874] netlink: 'syz.5.14147': attribute type 10 has an invalid length. [ 3032.990509][T19877] netlink: 'syz.5.14147': attribute type 6 has an invalid length. [ 3033.007951][T19885] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14150'. [ 3033.619430][T19901] netlink: 'syz.6.14156': attribute type 3 has an invalid length. [ 3033.677236][T19901] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.14156'. [ 3033.699038][T19904] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.14157'. [ 3033.708791][T19904] net_ratelimit: 47 callbacks suppressed [ 3033.708808][T19904] openvswitch: netlink: Flow actions attr not present in new flow. [ 3034.047611][T19899] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14156'. [ 3034.551768][T19916] netlink: 'syz.1.14162': attribute type 10 has an invalid length. [ 3034.628770][T19916] netlink: 'syz.1.14162': attribute type 6 has an invalid length. [ 3034.782822][T19923] netlink: 'syz.6.14165': attribute type 10 has an invalid length. [ 3035.230191][T19923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3035.353016][T19923] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3035.463019][T19929] netlink: 'syz.6.14165': attribute type 6 has an invalid length. [ 3037.669051][T19957] FAULT_INJECTION: forcing a failure. [ 3037.669051][T19957] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.706755][T19957] CPU: 1 PID: 19957 Comm: syz.5.14174 Not tainted syzkaller #0 [ 3037.714408][T19957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3037.724529][T19957] Call Trace: [ 3037.727867][T19957] [ 3037.730852][T19957] dump_stack_lvl+0x188/0x24e [ 3037.735696][T19957] ? show_regs_print_info+0x12/0x12 [ 3037.740997][T19957] ? load_image+0x400/0x400 [ 3037.745566][T19957] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 3037.751929][T19957] should_fail_ex+0x399/0x4d0 [ 3037.756678][T19957] should_failslab+0x5/0x20 [ 3037.761330][T19957] slab_pre_alloc_hook+0x59/0x310 [ 3037.766670][T19957] ? current_time+0x196/0x2b0 [ 3037.771404][T19957] ? proc_self_get_link+0xe1/0x170 [ 3037.776638][T19957] __kmem_cache_alloc_node+0x4f/0x260 [ 3037.782171][T19957] ? proc_self_get_link+0xe1/0x170 [ 3037.787356][T19957] kmalloc_trace+0x26/0xe0 [ 3037.791935][T19957] proc_self_get_link+0xe1/0x170 [ 3037.796945][T19957] ? proc_setup_self+0x2f0/0x2f0 [ 3037.801949][T19957] pick_link+0x6f3/0xe20 [ 3037.806280][T19957] step_into+0xc49/0xf20 [ 3037.810597][T19957] ? __d_lookup_rcu+0x43a/0x4c0 [ 3037.815517][T19957] ? set_root+0x3a0/0x3a0 [ 3037.819906][T19957] ? lookup_fast+0x15b/0x4d0 [ 3037.824546][T19957] ? security_inode_permission+0xac/0xf0 [ 3037.830237][T19957] link_path_walk+0x6c1/0xe70 [ 3037.834994][T19957] ? handle_lookup_down+0x130/0x130 [ 3037.840237][T19957] ? percpu_counter_add_batch+0x13b/0x160 [ 3037.846105][T19957] path_openat+0x286/0x2ee0 [ 3037.850700][T19957] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3037.856488][T19957] ? do_filp_open+0x430/0x430 [ 3037.861229][T19957] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3037.867988][T19957] do_filp_open+0x1f1/0x430 [ 3037.872553][T19957] ? vfs_tmpfile+0x480/0x480 [ 3037.877244][T19957] ? _raw_spin_unlock+0x24/0x40 [ 3037.882141][T19957] ? alloc_fd+0x58f/0x630 [ 3037.886536][T19957] do_sys_openat2+0x150/0x4b0 [ 3037.891250][T19957] ? atomic_notifier_call_chain+0x282/0x2b0 [ 3037.897187][T19957] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3037.903078][T19957] ? do_sys_open+0xe0/0xe0 [ 3037.907545][T19957] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3037.913589][T19957] ? lock_chain_count+0x20/0x20 [ 3037.918958][T19957] __x64_sys_openat+0x135/0x160 [ 3037.923969][T19957] do_syscall_64+0x4c/0xa0 [ 3037.928445][T19957] ? clear_bhb_loop+0x60/0xb0 [ 3037.933176][T19957] ? clear_bhb_loop+0x60/0xb0 [ 3037.937910][T19957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3037.944020][T19957] RIP: 0033:0x7f9aee75d60e [ 3037.948476][T19957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3037.968130][T19957] RSP: 002b:00007f9aef56fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3037.976598][T19957] RAX: ffffffffffffffda RBX: 00007f9aef5706c0 RCX: 00007f9aee75d60e [ 3037.984604][T19957] RDX: 0000000000000002 RSI: 00007f9aef56ff90 RDI: ffffffffffffff9c [ 3037.992639][T19957] RBP: 00007f9aef570090 R08: 0000000000000000 R09: 0000000000000000 [ 3038.000650][T19957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3038.008746][T19957] R13: 00007f9aeea16038 R14: 00007f9aeea15fa0 R15: 00007ffd741c0d28 [ 3038.016900][T19957] [ 3038.366417][T19968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14178'. [ 3039.148334][T19968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3039.223423][T19968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3039.242672][T19968] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3039.253163][T19968] bond0 (unregistering): (slave team0): Releasing backup interface [ 3039.281555][T19968] bond0 (unregistering): Released all slaves [ 3039.310585][T19972] netlink: 'syz.3.14179': attribute type 10 has an invalid length. [ 3039.319598][T19971] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14181'. [ 3039.330827][T19978] netlink: 'syz.3.14179': attribute type 6 has an invalid length. [ 3041.390215][T20011] netlink: 'syz.5.14192': attribute type 1 has an invalid length. [ 3041.458589][T20011] netlink: 'syz.5.14192': attribute type 4 has an invalid length. [ 3041.533641][T20011] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.14192'. [ 3042.103361][T20024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14198'. [ 3042.238324][T20026] netlink: 'syz.3.14199': attribute type 10 has an invalid length. [ 3042.313938][T20029] netlink: 'syz.3.14199': attribute type 6 has an invalid length. [ 3044.241008][T20072] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14215'. [ 3044.486003][T20079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14218'. [ 3046.529343][T20112] netlink: 'syz.6.14232': attribute type 2 has an invalid length. [ 3046.590074][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14232'. [ 3046.810179][T20115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14233'. [ 3048.205275][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14240'. [ 3048.294935][T20133] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 3048.443092][T20140] FAULT_INJECTION: forcing a failure. [ 3048.443092][T20140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3048.476631][T20140] CPU: 0 PID: 20140 Comm: syz.6.14238 Not tainted syzkaller #0 [ 3048.484367][T20140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3048.494483][T20140] Call Trace: [ 3048.497865][T20140] [ 3048.500811][T20140] dump_stack_lvl+0x188/0x24e [ 3048.505558][T20140] ? show_regs_print_info+0x12/0x12 [ 3048.510786][T20140] ? load_image+0x400/0x400 [ 3048.515311][T20140] ? __lock_acquire+0x7d10/0x7d10 [ 3048.520359][T20140] ? __fget_files+0x28/0x4b0 [ 3048.524991][T20140] should_fail_ex+0x399/0x4d0 [ 3048.529692][T20140] _copy_from_user+0x2c/0x170 [ 3048.534387][T20140] bpf_obj_get_info_by_fd+0x45b/0x2f50 [ 3048.539868][T20140] ? __lock_acquire+0x7d10/0x7d10 [ 3048.544909][T20140] ? verify_lock_unused+0x140/0x140 [ 3048.550137][T20140] ? bpf_map_get_fd_by_id+0x310/0x310 [ 3048.555560][T20140] ? get_pid_task+0x1c/0x1e0 [ 3048.560198][T20140] ? __might_fault+0xa6/0x120 [ 3048.564896][T20140] ? __might_fault+0xc2/0x120 [ 3048.569586][T20140] ? __might_fault+0xa6/0x120 [ 3048.574277][T20140] ? bpf_lsm_bpf+0x5/0x10 [ 3048.578641][T20140] ? security_bpf+0x7a/0xa0 [ 3048.583204][T20140] __sys_bpf+0x505/0x780 [ 3048.587531][T20140] ? bpf_link_show_fdinfo+0x380/0x380 [ 3048.592951][T20140] ? lock_chain_count+0x20/0x20 [ 3048.597846][T20140] __x64_sys_bpf+0x78/0x90 [ 3048.602282][T20140] do_syscall_64+0x4c/0xa0 [ 3048.606720][T20140] ? clear_bhb_loop+0x60/0xb0 [ 3048.611442][T20140] ? clear_bhb_loop+0x60/0xb0 [ 3048.616137][T20140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3048.622048][T20140] RIP: 0033:0x7ff50839cdd9 [ 3048.626509][T20140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3048.646138][T20140] RSP: 002b:00007ff509259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3048.654569][T20140] RAX: ffffffffffffffda RBX: 00007ff508616090 RCX: 00007ff50839cdd9 [ 3048.662571][T20140] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 000000000000000f [ 3048.670581][T20140] RBP: 00007ff509259090 R08: 0000000000000000 R09: 0000000000000000 [ 3048.678618][T20140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3048.686614][T20140] R13: 00007ff508616128 R14: 00007ff508616090 R15: 00007ffd50df57a8 [ 3048.694619][T20140] [ 3049.087158][T20156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14246'. [ 3049.148891][T20152] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14247'. [ 3049.452134][T20161] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14249'. [ 3049.519283][T20161] tc_dump_action: action bad kind [ 3050.325230][T20176] FAULT_INJECTION: forcing a failure. [ 3050.325230][T20176] name failslab, interval 1, probability 0, space 0, times 0 [ 3050.348027][T20176] CPU: 1 PID: 20176 Comm: syz.0.14255 Not tainted syzkaller #0 [ 3050.355733][T20176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3050.365825][T20176] Call Trace: [ 3050.369144][T20176] [ 3050.372102][T20176] dump_stack_lvl+0x188/0x24e [ 3050.376826][T20176] ? show_regs_print_info+0x12/0x12 [ 3050.382087][T20176] ? load_image+0x400/0x400 [ 3050.386888][T20176] ? __might_sleep+0xd0/0xd0 [ 3050.391511][T20176] ? __lock_acquire+0x7d10/0x7d10 [ 3050.396585][T20176] should_fail_ex+0x399/0x4d0 [ 3050.401312][T20176] should_failslab+0x5/0x20 [ 3050.405844][T20176] slab_pre_alloc_hook+0x59/0x310 [ 3050.410903][T20176] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3050.416674][T20176] __kmem_cache_alloc_node+0x4f/0x260 [ 3050.422084][T20176] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3050.427931][T20176] __kmalloc+0xa0/0x240 [ 3050.432137][T20176] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3050.437831][T20176] ? tomoyo_path_number_perm+0x205/0x650 [ 3050.443612][T20176] tomoyo_path_number_perm+0x22f/0x650 [ 3050.449121][T20176] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3050.454621][T20176] ? ksys_write+0x1c0/0x250 [ 3050.459252][T20176] ? common_file_perm+0x171/0x1c0 [ 3050.464358][T20176] ? __fget_files+0x28/0x4b0 [ 3050.468989][T20176] ? __fget_files+0x28/0x4b0 [ 3050.473630][T20176] security_file_ioctl+0x6c/0xa0 [ 3050.478611][T20176] __se_sys_ioctl+0x48/0x170 [ 3050.483329][T20176] do_syscall_64+0x4c/0xa0 [ 3050.487791][T20176] ? clear_bhb_loop+0x60/0xb0 [ 3050.492543][T20176] ? clear_bhb_loop+0x60/0xb0 [ 3050.497349][T20176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3050.503284][T20176] RIP: 0033:0x7fa916f9cdd9 [ 3050.507737][T20176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3050.527382][T20176] RSP: 002b:00007fa917db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3050.535849][T20176] RAX: ffffffffffffffda RBX: 00007fa917215fa0 RCX: 00007fa916f9cdd9 [ 3050.543857][T20176] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000003 [ 3050.551870][T20176] RBP: 00007fa917db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3050.559877][T20176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3050.567896][T20176] R13: 00007fa917216038 R14: 00007fa917215fa0 R15: 00007fffb59cfdb8 [ 3050.575926][T20176] [ 3050.588939][T20176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3052.471699][T20209] netlink: 763 bytes leftover after parsing attributes in process `syz.0.14265'. [ 3055.135387][T20260] netlink: 'syz.0.14283': attribute type 10 has an invalid length. [ 3055.204313][T20263] netlink: 'syz.0.14283': attribute type 6 has an invalid length. [ 3055.478933][T20268] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14286'. [ 3055.599644][T20270] netlink: 'syz.5.14287': attribute type 10 has an invalid length. [ 3055.767900][T20270] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14287'. [ 3056.040001][T20270] device batadv0 entered promiscuous mode [ 3056.220632][T20270] bond0: (slave batadv0): Releasing backup interface [ 3056.283081][T20270] bridge0: port 3(batadv0) entered blocking state [ 3056.344492][T20270] bridge0: port 3(batadv0) entered disabled state [ 3056.691446][T13655] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3056.701022][T13655] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3058.014414][T20303] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14301'. [ 3058.390853][T20316] netlink: 14 bytes leftover after parsing attributes in process `syz.5.14303'. [ 3058.411857][T20313] netlink: 'syz.3.14304': attribute type 10 has an invalid length. [ 3058.442768][T20313] netlink: 'syz.3.14304': attribute type 6 has an invalid length. [ 3058.466827][T20316] openvswitch: netlink: Message has 6 unknown bytes. [ 3059.789326][T20338] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14313'. [ 3062.744890][T20359] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14319'. [ 3062.793177][T20365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14321'. [ 3062.821944][T20365] openvswitch: netlink: Message has 6 unknown bytes. [ 3063.104368][T20371] netlink: 'syz.3.14324': attribute type 3 has an invalid length. [ 3063.145389][T20372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14324'. [ 3063.191750][T20371] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14324'. [ 3063.340310][T20379] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14327'. [ 3064.371106][T20395] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.14333'. [ 3064.390667][T20395] bridge_slave_1: default FDB implementation only supports local addresses [ 3064.577110][T20401] netlink: 'syz.3.14335': attribute type 10 has an invalid length. [ 3064.620785][T20401] netlink: 'syz.3.14335': attribute type 6 has an invalid length. [ 3065.126013][T20413] FAULT_INJECTION: forcing a failure. [ 3065.126013][T20413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3065.167996][T20413] CPU: 1 PID: 20413 Comm: syz.5.14339 Not tainted syzkaller #0 [ 3065.175627][T20413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3065.185725][T20413] Call Trace: [ 3065.189042][T20413] [ 3065.192002][T20413] dump_stack_lvl+0x188/0x24e [ 3065.196752][T20413] ? show_regs_print_info+0x12/0x12 [ 3065.201996][T20413] ? load_image+0x400/0x400 [ 3065.206547][T20413] ? __lock_acquire+0x7d10/0x7d10 [ 3065.211631][T20413] should_fail_ex+0x399/0x4d0 [ 3065.216883][T20413] _copy_from_user+0x2c/0x170 [ 3065.221605][T20413] ___sys_sendmsg+0x1c3/0x360 [ 3065.226421][T20413] ? __sys_sendmsg+0x290/0x290 [ 3065.231259][T20413] ? __lock_acquire+0x7d10/0x7d10 [ 3065.236372][T20413] __se_sys_sendmsg+0x1bb/0x2a0 [ 3065.241274][T20413] ? __x64_sys_sendmsg+0x80/0x80 [ 3065.246285][T20413] ? lockdep_hardirqs_on+0x94/0x140 [ 3065.251538][T20413] do_syscall_64+0x4c/0xa0 [ 3065.256002][T20413] ? clear_bhb_loop+0x60/0xb0 [ 3065.260721][T20413] ? clear_bhb_loop+0x60/0xb0 [ 3065.265439][T20413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3065.271370][T20413] RIP: 0033:0x7f9aee79cdd9 [ 3065.275822][T20413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3065.295562][T20413] RSP: 002b:00007f9aef570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3065.304022][T20413] RAX: ffffffffffffffda RBX: 00007f9aeea15fa0 RCX: 00007f9aee79cdd9 [ 3065.312032][T20413] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 3065.320068][T20413] RBP: 00007f9aef570090 R08: 0000000000000000 R09: 0000000000000000 [ 3065.328080][T20413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3065.336093][T20413] R13: 00007f9aeea16038 R14: 00007f9aeea15fa0 R15: 00007ffd741c0d28 [ 3065.344123][T20413] [ 3066.162390][T20421] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14343'. [ 3066.233163][T20426] netlink: 'syz.3.14344': attribute type 3 has an invalid length. [ 3066.250347][T20426] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14344'. [ 3066.342619][T20423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14344'. [ 3066.389432][T20429] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14345'. [ 3067.072104][T20442] IPv6: Can't replace route, no match found [ 3067.745436][T20454] netlink: 'syz.0.14354': attribute type 10 has an invalid length. [ 3068.941920][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14356'. [ 3068.952471][T20462] netlink: 52 bytes leftover after parsing attributes in process `syz.6.14355'. [ 3069.215514][T20466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14357'. [ 3069.353653][T20477] netlink: 'syz.6.14360': attribute type 10 has an invalid length. [ 3069.380171][T20477] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14360'. [ 3069.403054][T20477] device batadv0 entered promiscuous mode [ 3069.469512][T20477] bond0: (slave batadv0): Releasing backup interface [ 3069.504353][T20477] bridge0: port 3(batadv0) entered blocking state [ 3069.546867][T20477] bridge0: port 3(batadv0) entered disabled state [ 3069.849322][T25381] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3069.858822][T25381] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3070.983529][T20509] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14371'. [ 3071.450845][T20523] netlink: 'syz.6.14376': attribute type 10 has an invalid length. [ 3071.495740][T20523] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14376'. [ 3072.404015][T20535] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14382'. [ 3072.473494][T20537] netlink: 'syz.5.14383': attribute type 10 has an invalid length. [ 3072.504174][T20537] device batadv0 left promiscuous mode [ 3072.529039][T20537] bridge0: port 3(batadv0) entered disabled state [ 3072.744354][T20537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3072.882036][T20537] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3072.902688][T20542] netlink: 'syz.5.14383': attribute type 6 has an invalid length. [ 3072.917455][T20540] netlink: 'syz.6.14385': attribute type 10 has an invalid length. [ 3072.965154][T20540] device batadv0 left promiscuous mode [ 3072.991163][T20540] bridge0: port 3(batadv0) entered disabled state [ 3073.202927][T20540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3073.662182][T20540] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3073.681576][T20546] netlink: 'syz.6.14385': attribute type 6 has an invalid length. [ 3073.703739][T20544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14386'. [ 3075.031696][T20578] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14396'. [ 3075.430667][T20590] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14401'. [ 3075.449757][T20591] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14402'. [ 3075.632292][T20594] netlink: 'syz.1.14403': attribute type 10 has an invalid length. [ 3075.651647][T20594] netlink: 'syz.1.14403': attribute type 6 has an invalid length. [ 3076.924453][T20603] netlink: 'syz.5.14404': attribute type 10 has an invalid length. [ 3077.144728][T20612] netlink: 'syz.5.14404': attribute type 6 has an invalid length. [ 3077.323783][T20623] FAULT_INJECTION: forcing a failure. [ 3077.323783][T20623] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.475425][T20623] CPU: 0 PID: 20623 Comm: syz.0.14412 Not tainted syzkaller #0 [ 3077.483107][T20623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3077.493212][T20623] Call Trace: [ 3077.496531][T20623] [ 3077.499513][T20623] dump_stack_lvl+0x188/0x24e [ 3077.502246][T20621] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14411'. [ 3077.504323][T20623] ? verify_lock_unused+0x140/0x140 [ 3077.504422][T20623] ? show_regs_print_info+0x12/0x12 [ 3077.504457][T20623] ? load_image+0x400/0x400 [ 3077.504487][T20623] ? __sctp_connect+0x5b3/0xd80 [ 3077.504520][T20623] ? trace_event_raw_event_lock+0x250/0x250 [ 3077.504561][T20623] should_fail_ex+0x399/0x4d0 [ 3077.504599][T20623] should_failslab+0x5/0x20 [ 3077.504620][T20623] slab_pre_alloc_hook+0x59/0x310 [ 3077.504651][T20623] ? sctp_add_bind_addr+0x89/0x350 [ 3077.504687][T20623] __kmem_cache_alloc_node+0x4f/0x260 [ 3077.504722][T20623] ? sctp_add_bind_addr+0x89/0x350 [ 3077.504755][T20623] kmalloc_trace+0x26/0xe0 [ 3077.504792][T20623] sctp_add_bind_addr+0x89/0x350 [ 3077.504836][T20623] sctp_copy_local_addr_list+0x311/0x4e0 [ 3077.504878][T20623] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 3077.504911][T20623] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3077.504955][T20623] ? sctp_v4_is_any+0x31/0x50 [ 3077.504984][T20623] ? sctp_copy_one_addr+0x93/0x660 [ 3077.505033][T20623] sctp_bind_addr_copy+0x185/0x3c0 [ 3077.505083][T20623] sctp_connect_new_asoc+0x2f5/0x6a0 [ 3077.505116][T20623] ? __sctp_connect+0xd80/0xd80 [ 3077.505159][T20623] ? sctp_endpoint_lookup_assoc+0xcd/0x260 [ 3077.505191][T20623] __sctp_connect+0x5b3/0xd80 [ 3077.505242][T20623] ? sctp_send_asconf+0x170/0x170 [ 3077.505263][T20623] ? __local_bh_enable_ip+0x136/0x1c0 [ 3077.505289][T20623] ? lockdep_hardirqs_on+0x94/0x140 [ 3077.505318][T20623] ? __local_bh_enable_ip+0x136/0x1c0 [ 3077.505338][T20623] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 3077.505361][T20623] ? security_sctp_bind_connect+0x85/0xb0 [ 3077.505396][T20623] sctp_setsockopt_connectx+0x101/0x1a0 [ 3077.505433][T20623] sctp_setsockopt+0x8f4/0xf90 [ 3077.505465][T20623] ? sock_common_recvmsg+0x190/0x190 [ 3077.505502][T20623] __sys_setsockopt+0x2bf/0x3d0 [ 3077.505547][T20623] __x64_sys_setsockopt+0xb1/0xc0 [ 3077.505586][T20623] do_syscall_64+0x4c/0xa0 [ 3077.505615][T20623] ? clear_bhb_loop+0x60/0xb0 [ 3077.505643][T20623] ? clear_bhb_loop+0x60/0xb0 [ 3077.505675][T20623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3077.505702][T20623] RIP: 0033:0x7fa916f9cdd9 [ 3077.505729][T20623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3077.505749][T20623] RSP: 002b:00007fa917db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3077.505778][T20623] RAX: ffffffffffffffda RBX: 00007fa917215fa0 RCX: 00007fa916f9cdd9 [ 3077.505797][T20623] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 3077.505813][T20623] RBP: 00007fa917db6090 R08: 00000000000000e0 R09: 0000000000000000 [ 3077.505830][T20623] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.505846][T20623] R13: 00007fa917216038 R14: 00007fa917215fa0 R15: 00007fffb59cfdb8 [ 3077.505902][T20623] [ 3078.611473][T20632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14416'. [ 3078.711518][T20639] netlink: 'syz.0.14418': attribute type 10 has an invalid length. [ 3078.746454][T20642] netlink: 'syz.0.14418': attribute type 6 has an invalid length. [ 3078.902236][T20641] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14419'. [ 3080.410400][T20673] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14428'. [ 3081.523501][T20675] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14440'. [ 3081.879330][T20681] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14431'. [ 3082.291350][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.298638][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.672869][T20697] netlink: 'syz.5.14437': attribute type 10 has an invalid length. [ 3082.685030][T20697] netlink: 'syz.5.14437': attribute type 6 has an invalid length. [ 3083.672196][T20718] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14445'. [ 3083.761488][T20720] netlink: 'syz.5.14455': attribute type 10 has an invalid length. [ 3083.781328][T20720] netlink: 'syz.5.14455': attribute type 6 has an invalid length. [ 3085.433614][T20733] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14449'. [ 3086.993326][T20759] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14460'. [ 3088.074181][T20766] netlink: 'syz.6.14462': attribute type 10 has an invalid length. [ 3088.825226][T20771] netlink: 'syz.6.14462': attribute type 6 has an invalid length. [ 3088.848866][T20776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14467'. [ 3088.910246][T20781] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14469'. [ 3089.108046][T20787] netlink: 'syz.3.14472': attribute type 3 has an invalid length. [ 3089.134994][T20785] netlink: 'syz.1.14471': attribute type 10 has an invalid length. [ 3089.141024][T20787] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14472'. [ 3089.160823][T20785] netlink: 'syz.1.14471': attribute type 6 has an invalid length. [ 3089.187155][T20791] netlink: 'syz.6.14473': attribute type 10 has an invalid length. [ 3089.233728][T20791] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14473'. [ 3089.255116][T20791] device batadv0 entered promiscuous mode [ 3089.327516][T20791] bond0: (slave batadv0): Releasing backup interface [ 3089.532649][T20791] bridge0: port 3(batadv0) entered blocking state [ 3089.559535][T20791] bridge0: port 3(batadv0) entered disabled state [ 3089.573065][T20787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14472'. [ 3089.645942][T25386] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3089.655489][T25386] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3090.760086][T20815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14482'. [ 3090.888865][T20822] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14494'. [ 3090.926316][T20825] netlink: 'syz.3.14484': attribute type 10 has an invalid length. [ 3090.970572][T20829] netlink: 'syz.3.14484': attribute type 6 has an invalid length. [ 3091.025163][T20828] netlink: 'syz.6.14486': attribute type 10 has an invalid length. [ 3091.060407][T20828] device batadv0 left promiscuous mode [ 3091.066558][T20828] bridge0: port 3(batadv0) entered disabled state [ 3091.313073][T20836] FAULT_INJECTION: forcing a failure. [ 3091.313073][T20836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3091.399088][T20836] CPU: 1 PID: 20836 Comm: syz.1.14488 Not tainted syzkaller #0 [ 3091.406718][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3091.416811][T20836] Call Trace: [ 3091.420129][T20836] [ 3091.423097][T20836] dump_stack_lvl+0x188/0x24e [ 3091.427842][T20836] ? show_regs_print_info+0x12/0x12 [ 3091.433126][T20836] ? load_image+0x400/0x400 [ 3091.437695][T20836] ? __lock_acquire+0x7d10/0x7d10 [ 3091.442786][T20836] should_fail_ex+0x399/0x4d0 [ 3091.447508][T20836] _copy_from_user+0x2c/0x170 [ 3091.452231][T20836] __copy_msghdr+0x3b7/0x580 [ 3091.456886][T20836] ___sys_sendmsg+0x210/0x360 [ 3091.461622][T20836] ? __sys_sendmsg+0x290/0x290 [ 3091.466467][T20836] ? __lock_acquire+0x7d10/0x7d10 [ 3091.471576][T20836] __se_sys_sendmsg+0x1bb/0x2a0 [ 3091.476505][T20836] ? __x64_sys_sendmsg+0x80/0x80 [ 3091.481519][T20836] ? lockdep_hardirqs_on+0x94/0x140 [ 3091.486777][T20836] do_syscall_64+0x4c/0xa0 [ 3091.491237][T20836] ? clear_bhb_loop+0x60/0xb0 [ 3091.495955][T20836] ? clear_bhb_loop+0x60/0xb0 [ 3091.500683][T20836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3091.506722][T20836] RIP: 0033:0x7fbf0c79cdd9 [ 3091.511270][T20836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3091.531010][T20836] RSP: 002b:00007fbf0a9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3091.539481][T20836] RAX: ffffffffffffffda RBX: 00007fbf0ca15fa0 RCX: 00007fbf0c79cdd9 [ 3091.547502][T20836] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000005 [ 3091.555529][T20836] RBP: 00007fbf0a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3091.563152][T20839] netlink: 'syz.5.14489': attribute type 3 has an invalid length. [ 3091.563520][T20836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3091.579350][T20836] R13: 00007fbf0ca16038 R14: 00007fbf0ca15fa0 R15: 00007fff8f7409e8 [ 3091.587384][T20836] [ 3091.608380][T20839] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14489'. [ 3091.631761][T20828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3091.663553][T20828] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3091.673894][T20839] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14489'. [ 3092.482574][T20862] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14498'. [ 3092.906589][T20858] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14497'. [ 3092.922351][T20862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14498'. [ 3092.944137][T20867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14499'. [ 3092.972529][T20871] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14500'. [ 3093.303074][T20876] validate_nla: 4 callbacks suppressed [ 3093.303096][T20876] netlink: 'syz.1.14504': attribute type 3 has an invalid length. [ 3093.448696][T20876] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.14504'. [ 3093.985599][T20894] netlink: 'syz.3.14508': attribute type 29 has an invalid length. [ 3094.026942][T20894] netlink: 'syz.3.14508': attribute type 29 has an invalid length. [ 3094.036058][T20886] FAULT_INJECTION: forcing a failure. [ 3094.036058][T20886] name failslab, interval 1, probability 0, space 0, times 0 [ 3094.098142][T20886] CPU: 1 PID: 20886 Comm: syz.6.14506 Not tainted syzkaller #0 [ 3094.105773][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3094.115875][T20886] Call Trace: [ 3094.119190][T20886] [ 3094.122158][T20886] dump_stack_lvl+0x188/0x24e [ 3094.126888][T20886] ? show_regs_print_info+0x12/0x12 [ 3094.132133][T20886] ? load_image+0x400/0x400 [ 3094.136693][T20886] ? __might_sleep+0xd0/0xd0 [ 3094.141325][T20886] ? __lock_acquire+0x7d10/0x7d10 [ 3094.146406][T20886] should_fail_ex+0x399/0x4d0 [ 3094.151144][T20886] should_failslab+0x5/0x20 [ 3094.155777][T20886] slab_pre_alloc_hook+0x59/0x310 [ 3094.160853][T20886] ? kvmalloc_node+0x6c/0x180 [ 3094.165580][T20886] __kmem_cache_alloc_node+0x4f/0x260 [ 3094.170998][T20886] ? kvmalloc_node+0x6c/0x180 [ 3094.175719][T20886] __kmalloc_node+0xa0/0x240 [ 3094.180351][T20886] kvmalloc_node+0x6c/0x180 [ 3094.184898][T20886] bpf_test_run_xdp_live+0x209/0x1a90 [ 3094.190317][T20886] ? 0xffffffffa00041c0 [ 3094.194510][T20886] ? text_poke_copy+0x79/0x90 [ 3094.199233][T20886] ? 0xffffffffa00041c0 [ 3094.203428][T20886] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 3094.209375][T20886] ? 0xffffffffa00041c0 [ 3094.213589][T20886] ? xdp_convert_md_to_buff+0x330/0x330 [ 3094.219231][T20886] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 3094.225533][T20886] ? bpf_test_init+0x119/0x140 [ 3094.230782][T20886] ? xdp_convert_md_to_buff+0x5b/0x330 [ 3094.236292][T20886] bpf_prog_test_run_xdp+0x736/0xf10 [ 3094.241645][T20886] ? dev_put+0x80/0x80 [ 3094.245784][T20886] ? bpf_prog_test_run+0x312/0x390 [ 3094.250962][T20886] ? dev_put+0x80/0x80 [ 3094.255078][T20886] bpf_prog_test_run+0x31e/0x390 [ 3094.260072][T20886] __sys_bpf+0x62b/0x780 [ 3094.264367][T20886] ? bpf_link_show_fdinfo+0x380/0x380 [ 3094.269975][T20886] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3094.276174][T20886] __x64_sys_bpf+0x78/0x90 [ 3094.280627][T20886] do_syscall_64+0x4c/0xa0 [ 3094.285072][T20886] ? clear_bhb_loop+0x60/0xb0 [ 3094.289780][T20886] ? clear_bhb_loop+0x60/0xb0 [ 3094.294487][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3094.300401][T20886] RIP: 0033:0x7ff50839cdd9 [ 3094.304841][T20886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3094.324479][T20886] RSP: 002b:00007ff50927a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3094.332917][T20886] RAX: ffffffffffffffda RBX: 00007ff508615fa0 RCX: 00007ff50839cdd9 [ 3094.340933][T20886] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 3094.348936][T20886] RBP: 00007ff50927a090 R08: 0000000000000000 R09: 0000000000000000 [ 3094.356934][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3094.365180][T20886] R13: 00007ff508616038 R14: 00007ff508615fa0 R15: 00007ffd50df57a8 [ 3094.373195][T20886] [ 3094.490173][T20903] netlink: 'syz.1.14511': attribute type 10 has an invalid length. [ 3094.506881][T20903] device batadv0 entered promiscuous mode [ 3094.519825][T20903] bridge0: port 3(batadv0) entered blocking state [ 3094.536638][T20903] bridge0: port 3(batadv0) entered disabled state [ 3094.883445][T20909] netlink: 'syz.0.14513': attribute type 3 has an invalid length. [ 3094.958053][T25381] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3094.963330][T20916] netlink: 'syz.3.14516': attribute type 10 has an invalid length. [ 3094.967663][T25381] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3095.079002][T20916] netlink: 'syz.3.14516': attribute type 6 has an invalid length. [ 3095.431877][T20927] netlink: 'syz.5.14520': attribute type 3 has an invalid length. [ 3095.853278][T20932] __nla_validate_parse: 8 callbacks suppressed [ 3095.853301][T20932] netlink: 14975 bytes leftover after parsing attributes in process `syz.6.14519'. [ 3096.157721][T20948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14526'. [ 3096.417518][T20955] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14529'. [ 3096.420266][T20953] netlink: 'syz.3.14528': attribute type 3 has an invalid length. [ 3096.436368][T20953] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14528'. [ 3096.587389][T20960] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14530'. [ 3097.043644][T20974] netlink: 'syz.3.14535': attribute type 3 has an invalid length. [ 3097.054813][T20974] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14535'. [ 3097.445425][T20982] device batadv0 left promiscuous mode [ 3097.465242][T20982] bridge0: port 3(batadv0) entered disabled state [ 3098.128969][T20988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14541'. [ 3098.730563][T21001] validate_nla: 2 callbacks suppressed [ 3098.730603][T21001] netlink: 'syz.3.14543': attribute type 10 has an invalid length. [ 3098.776125][T21004] netlink: 'syz.3.14543': attribute type 6 has an invalid length. [ 3098.807295][T21003] netlink: 144 bytes leftover after parsing attributes in process `syz.5.14545'. [ 3098.828583][T21006] netlink: 'syz.0.14546': attribute type 21 has an invalid length. [ 3098.845941][T21006] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14546'. [ 3098.946446][T21014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14548'. [ 3099.440900][T21023] netlink: 'syz.3.14552': attribute type 39 has an invalid length. [ 3100.880416][T21047] netlink: 'syz.5.14559': attribute type 10 has an invalid length. [ 3100.902392][T21047] netlink: 'syz.5.14559': attribute type 6 has an invalid length. [ 3100.964973][T21050] FAULT_INJECTION: forcing a failure. [ 3100.964973][T21050] name failslab, interval 1, probability 0, space 0, times 0 [ 3101.046292][T21050] CPU: 0 PID: 21050 Comm: syz.3.14560 Not tainted syzkaller #0 [ 3101.053968][T21050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3101.064065][T21050] Call Trace: [ 3101.067380][T21050] [ 3101.070350][T21050] dump_stack_lvl+0x188/0x24e [ 3101.075079][T21050] ? show_regs_print_info+0x12/0x12 [ 3101.080324][T21050] ? load_image+0x400/0x400 [ 3101.084863][T21050] ? __might_sleep+0xd0/0xd0 [ 3101.089568][T21050] ? __lock_acquire+0x7d10/0x7d10 [ 3101.094651][T21050] should_fail_ex+0x399/0x4d0 [ 3101.099549][T21050] should_failslab+0x5/0x20 [ 3101.104081][T21050] slab_pre_alloc_hook+0x59/0x310 [ 3101.109235][T21050] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3101.115084][T21050] __kmem_cache_alloc_node+0x4f/0x260 [ 3101.120507][T21050] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 3101.126261][T21050] __kmalloc+0xa0/0x240 [ 3101.130499][T21050] tomoyo_realpath_from_path+0xdf/0x5d0 [ 3101.136098][T21050] ? tomoyo_path_number_perm+0x205/0x650 [ 3101.141762][T21050] tomoyo_path_number_perm+0x22f/0x650 [ 3101.147247][T21050] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3101.152813][T21050] ? ktime_get+0x7b/0x270 [ 3101.157159][T21050] ? ktime_get+0x7b/0x270 [ 3101.161508][T21050] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 3101.167887][T21050] ? __fget_files+0x28/0x4b0 [ 3101.172510][T21050] ? __fget_files+0x28/0x4b0 [ 3101.177131][T21050] security_file_ioctl+0x6c/0xa0 [ 3101.182091][T21050] __se_sys_ioctl+0x48/0x170 [ 3101.186826][T21050] do_syscall_64+0x4c/0xa0 [ 3101.191301][T21050] ? clear_bhb_loop+0x60/0xb0 [ 3101.196017][T21050] ? clear_bhb_loop+0x60/0xb0 [ 3101.200806][T21050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3101.206724][T21050] RIP: 0033:0x7f2b24b9cdd9 [ 3101.211261][T21050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3101.230895][T21050] RSP: 002b:00007f2b25ad4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3101.239329][T21050] RAX: ffffffffffffffda RBX: 00007f2b24e16090 RCX: 00007f2b24b9cdd9 [ 3101.247554][T21050] RDX: 0000200000000380 RSI: 0000000040082404 RDI: 0000000000000005 [ 3101.255624][T21050] RBP: 00007f2b25ad4090 R08: 0000000000000000 R09: 0000000000000000 [ 3101.263612][T21050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3101.271599][T21050] R13: 00007f2b24e16128 R14: 00007f2b24e16090 R15: 00007ffeadcf9b18 [ 3101.279597][T21050] [ 3101.526943][T21050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3101.951520][T21061] netlink: 'syz.0.14563': attribute type 3 has an invalid length. [ 3102.028288][T21061] __nla_validate_parse: 1 callbacks suppressed [ 3102.028406][T21061] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14563'. [ 3102.241187][T21072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14569'. [ 3102.508062][T21078] netlink: 'syz.0.14570': attribute type 10 has an invalid length. [ 3102.533352][T21078] netlink: 'syz.0.14570': attribute type 6 has an invalid length. [ 3103.100616][T21091] netlink: 118184 bytes leftover after parsing attributes in process `syz.6.14575'. [ 3103.596106][T21096] netlink: 'syz.1.14577': attribute type 10 has an invalid length. [ 3105.705231][T21107] validate_nla: 1 callbacks suppressed [ 3105.705277][T21107] netlink: 'syz.5.14581': attribute type 3 has an invalid length. [ 3105.760836][T21107] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14581'. [ 3106.122647][T21112] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14581'. [ 3106.442196][T21125] netlink: 'syz.0.14586': attribute type 10 has an invalid length. [ 3106.463460][T21125] netlink: 'syz.0.14586': attribute type 6 has an invalid length. [ 3106.984698][T21130] netlink: 'syz.6.14587': attribute type 10 has an invalid length. [ 3107.003997][T21130] netlink: 'syz.6.14587': attribute type 6 has an invalid length. [ 3108.386884][T21154] netlink: 'syz.3.14592': attribute type 10 has an invalid length. [ 3108.413462][T21154] netlink: 'syz.3.14592': attribute type 6 has an invalid length. [ 3108.517884][T21155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14593'. [ 3109.273702][T21163] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14596'. [ 3109.461623][T21178] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14604'. [ 3109.496109][T21174] netlink: 'syz.1.14602': attribute type 10 has an invalid length. [ 3109.515339][T21182] netlink: 'syz.1.14602': attribute type 6 has an invalid length. [ 3109.668548][T21183] netlink: 'syz.6.14605': attribute type 29 has an invalid length. [ 3109.803314][T21190] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 3109.896934][T21188] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14607'. [ 3110.666588][T21205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14611'. [ 3111.449631][T21217] validate_nla: 3 callbacks suppressed [ 3111.449678][T21217] netlink: 'syz.6.14615': attribute type 10 has an invalid length. [ 3111.486419][T21217] netlink: 'syz.6.14615': attribute type 6 has an invalid length. [ 3111.653585][T21219] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14616'. [ 3113.625223][T21230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14629'. [ 3113.895529][T21238] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14621'. [ 3113.995265][T21242] netlink: 'syz.1.14622': attribute type 10 has an invalid length. [ 3114.068954][T21246] netlink: 'syz.1.14622': attribute type 6 has an invalid length. [ 3114.922155][T21262] netlink: 'syz.6.14630': attribute type 10 has an invalid length. [ 3115.003200][T21258] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14627'. [ 3115.113220][T21265] netlink: 'syz.6.14630': attribute type 6 has an invalid length. [ 3115.171773][T21267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14631'. [ 3115.531431][T21273] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14634'. [ 3115.557722][T21276] FAULT_INJECTION: forcing a failure. [ 3115.557722][T21276] name failslab, interval 1, probability 0, space 0, times 0 [ 3115.612480][T21276] CPU: 0 PID: 21276 Comm: syz.0.14635 Not tainted syzkaller #0 [ 3115.620209][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3115.630396][T21276] Call Trace: [ 3115.633728][T21276] [ 3115.636705][T21276] dump_stack_lvl+0x188/0x24e [ 3115.641529][T21276] ? show_regs_print_info+0x12/0x12 [ 3115.646782][T21276] ? load_image+0x400/0x400 [ 3115.651337][T21276] ? __might_sleep+0xd0/0xd0 [ 3115.655960][T21276] ? __lock_acquire+0x7d10/0x7d10 [ 3115.661017][T21276] ? verify_lock_unused+0x140/0x140 [ 3115.666237][T21276] should_fail_ex+0x399/0x4d0 [ 3115.670935][T21276] should_failslab+0x5/0x20 [ 3115.675459][T21276] slab_pre_alloc_hook+0x59/0x310 [ 3115.680517][T21276] ? mark_lock+0x94/0x320 [ 3115.684869][T21276] kmem_cache_alloc_node+0x5a/0x320 [ 3115.690085][T21276] ? __lock_acquire+0x12f4/0x7d10 [ 3115.695124][T21276] ? __alloc_skb+0xfc/0x7e0 [ 3115.699675][T21276] __alloc_skb+0xfc/0x7e0 [ 3115.704097][T21276] alloc_skb_with_frags+0xa7/0x710 [ 3115.709254][T21276] sock_alloc_send_pskb+0x87f/0x9a0 [ 3115.714492][T21276] ? sock_kzfree_s+0x50/0x50 [ 3115.719117][T21276] tun_get_user+0x915/0x3c70 [ 3115.723747][T21276] ? rcu_read_unlock+0xa0/0xa0 [ 3115.728629][T21276] ? tun_get+0x1c/0x2e0 [ 3115.732820][T21276] ? __lock_acquire+0x7d10/0x7d10 [ 3115.737870][T21276] ? tun_get+0x1c/0x2e0 [ 3115.742074][T21276] tun_chr_write_iter+0x112/0x1f0 [ 3115.747124][T21276] vfs_write+0x4b1/0xa30 [ 3115.751392][T21276] ? file_end_write+0x250/0x250 [ 3115.756275][T21276] ? __fget_files+0x43d/0x4b0 [ 3115.760982][T21276] ? __fdget_pos+0x1d4/0x360 [ 3115.765588][T21276] ? ksys_write+0x71/0x250 [ 3115.770048][T21276] ksys_write+0x14c/0x250 [ 3115.774402][T21276] ? __ia32_sys_read+0x80/0x80 [ 3115.779208][T21276] ? lockdep_hardirqs_on+0x94/0x140 [ 3115.784432][T21276] do_syscall_64+0x4c/0xa0 [ 3115.788870][T21276] ? clear_bhb_loop+0x60/0xb0 [ 3115.793562][T21276] ? clear_bhb_loop+0x60/0xb0 [ 3115.798370][T21276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3115.804289][T21276] RIP: 0033:0x7fa916f9cdd9 [ 3115.808722][T21276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3115.828344][T21276] RSP: 002b:00007fa917db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3115.836774][T21276] RAX: ffffffffffffffda RBX: 00007fa917215fa0 RCX: 00007fa916f9cdd9 [ 3115.844756][T21276] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 3115.852942][T21276] RBP: 00007fa917db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3115.860932][T21276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3115.869265][T21276] R13: 00007fa917216038 R14: 00007fa917215fa0 R15: 00007fffb59cfdb8 [ 3115.877303][T21276] [ 3116.638419][T21291] netlink: 'syz.3.14641': attribute type 3 has an invalid length. [ 3116.695299][T21291] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14641'. [ 3116.699904][T21300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14641'. [ 3117.475123][T21306] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14647'. [ 3117.694588][T21309] FAULT_INJECTION: forcing a failure. [ 3117.694588][T21309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3117.843627][T21309] CPU: 0 PID: 21309 Comm: syz.3.14648 Not tainted syzkaller #0 [ 3117.851285][T21309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3117.861590][T21309] Call Trace: [ 3117.864881][T21309] [ 3117.867824][T21309] dump_stack_lvl+0x188/0x24e [ 3117.872528][T21309] ? show_regs_print_info+0x12/0x12 [ 3117.877744][T21309] ? load_image+0x400/0x400 [ 3117.882263][T21309] ? __lock_acquire+0x7d10/0x7d10 [ 3117.887309][T21309] should_fail_ex+0x399/0x4d0 [ 3117.892002][T21309] _copy_to_user+0x2c/0x130 [ 3117.896531][T21309] bpf_test_finish+0x198/0x600 [ 3117.901328][T21309] ? convert_skb_to___skb+0x420/0x420 [ 3117.906811][T21309] ? bpf_test_init+0x119/0x140 [ 3117.911681][T21309] bpf_prog_test_run_xdp+0x80a/0xf10 [ 3117.917006][T21309] ? dev_put+0x80/0x80 [ 3117.921101][T21309] ? dev_put+0x80/0x80 [ 3117.925186][T21309] bpf_prog_test_run+0x31e/0x390 [ 3117.930146][T21309] __sys_bpf+0x62b/0x780 [ 3117.934409][T21309] ? bpf_link_show_fdinfo+0x380/0x380 [ 3117.939820][T21309] ? lock_chain_count+0x20/0x20 [ 3117.944698][T21309] __x64_sys_bpf+0x78/0x90 [ 3117.949131][T21309] do_syscall_64+0x4c/0xa0 [ 3117.953570][T21309] ? clear_bhb_loop+0x60/0xb0 [ 3117.958353][T21309] ? clear_bhb_loop+0x60/0xb0 [ 3117.963052][T21309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3117.968961][T21309] RIP: 0033:0x7f2b24b9cdd9 [ 3117.973392][T21309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3117.993106][T21309] RSP: 002b:00007f2b25af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3118.001541][T21309] RAX: ffffffffffffffda RBX: 00007f2b24e15fa0 RCX: 00007f2b24b9cdd9 [ 3118.009617][T21309] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 3118.017599][T21309] RBP: 00007f2b25af5090 R08: 0000000000000000 R09: 0000000000000000 [ 3118.025580][T21309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3118.033740][T21309] R13: 00007f2b24e16038 R14: 00007f2b24e15fa0 R15: 00007ffeadcf9b18 [ 3118.041829][T21309] [ 3118.171870][T21321] netlink: 'syz.1.14650': attribute type 10 has an invalid length. [ 3118.239158][T21321] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14650'. [ 3118.264654][T21321] device hsr0 entered promiscuous mode [ 3118.276290][T21321] bridge0: port 3(hsr0) entered blocking state [ 3118.312629][T21321] bridge0: port 3(hsr0) entered disabled state [ 3118.324335][T21321] bridge0: port 3(hsr0) entered blocking state [ 3118.330739][T21321] bridge0: port 3(hsr0) entered forwarding state [ 3118.615540][T21336] netlink: 'syz.0.14658': attribute type 10 has an invalid length. [ 3118.738203][T21336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14658'. [ 3118.826873][T21336] device batadv0 entered promiscuous mode [ 3118.833010][T21336] bridge0: port 3(batadv0) entered blocking state [ 3118.941947][T21336] bridge0: port 3(batadv0) entered disabled state [ 3119.235624][T21346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14659'. [ 3119.283790][T25381] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3119.293469][T25381] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3119.595641][T21350] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14662'. [ 3119.632910][T21351] netlink: 'syz.3.14661': attribute type 10 has an invalid length. [ 3119.659939][T21354] netlink: 'syz.3.14661': attribute type 6 has an invalid length. [ 3119.864000][T21357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14664'. [ 3120.769784][T21391] netlink: 'syz.5.14675': attribute type 3 has an invalid length. [ 3120.923410][T21391] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14675'. [ 3121.065531][T21385] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14675'. [ 3121.717396][T21418] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.14683'. [ 3122.530353][T21431] netlink: 'syz.5.14693': attribute type 10 has an invalid length. [ 3122.595354][T21431] netlink: 'syz.5.14693': attribute type 6 has an invalid length. [ 3122.670467][T21435] netlink: 'syz.3.14695': attribute type 10 has an invalid length. [ 3122.697874][T21435] netlink: 'syz.3.14695': attribute type 6 has an invalid length. [ 3122.863999][T21442] netlink: 'syz.0.14697': attribute type 10 has an invalid length. [ 3122.890103][T21442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14697'. [ 3123.031666][T21449] netlink: 'syz.1.14708': attribute type 3 has an invalid length. [ 3123.056696][T21449] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.14708'. [ 3123.061425][T21446] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14698'. [ 3123.373492][T21454] netlink: 'syz.6.14700': attribute type 10 has an invalid length. [ 3123.416907][T21454] device batadv0 entered promiscuous mode [ 3123.444295][T21454] bond0: (slave batadv0): Releasing backup interface [ 3123.499738][T21454] bridge0: port 3(batadv0) entered blocking state [ 3123.537220][T21454] bridge0: port 3(batadv0) entered disabled state [ 3123.914406][T12860] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3123.923871][T12860] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3124.169004][T21479] netlink: 'syz.5.14711': attribute type 10 has an invalid length. [ 3124.226855][T21479] __nla_validate_parse: 3 callbacks suppressed [ 3124.226876][T21479] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14711'. [ 3124.354500][T21479] device batadv0 entered promiscuous mode [ 3124.389467][T21479] bond0: (slave batadv0): Releasing backup interface [ 3124.475555][T21479] bridge0: port 3(batadv0) entered blocking state [ 3124.666894][T21479] bridge0: port 3(batadv0) entered disabled state [ 3124.684100][T21478] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14710'. [ 3124.833677][T12861] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3124.842980][T21486] netlink: 'syz.6.14713': attribute type 10 has an invalid length. [ 3124.843176][T21486] device batadv0 left promiscuous mode [ 3124.851186][T12861] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3124.904120][T21486] bridge0: port 3(batadv0) entered disabled state [ 3124.967545][T21486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3125.004025][T21486] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3125.055674][T21487] netlink: 'syz.0.14712': attribute type 3 has an invalid length. [ 3125.110239][T21490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14712'. [ 3125.157382][T21487] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14712'. [ 3125.317149][T21493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14715'. [ 3125.852930][T21509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14719'. [ 3126.005791][T21514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14722'. [ 3126.903521][T21524] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14725'. [ 3127.255429][T21530] team0: Device xfrm0 is of different type [ 3127.313479][T21533] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14729'. [ 3127.429255][T21537] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14729'. [ 3127.659352][T21542] validate_nla: 9 callbacks suppressed [ 3127.659377][T21542] netlink: 'syz.3.14731': attribute type 10 has an invalid length. [ 3127.676812][T21542] device batadv0 entered promiscuous mode [ 3127.697622][T21542] bond0: (slave batadv0): Releasing backup interface [ 3127.717467][T21542] bridge0: port 3(batadv0) entered blocking state [ 3127.724359][T21542] bridge0: port 3(batadv0) entered disabled state [ 3127.963972][T21549] netlink: 'syz.5.14734': attribute type 10 has an invalid length. [ 3128.161576][T12861] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3128.171059][T12861] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3129.774168][T21557] netlink: 'syz.6.14736': attribute type 10 has an invalid length. [ 3129.804633][T21559] netlink: 'syz.6.14736': attribute type 6 has an invalid length. [ 3129.867870][T21573] netlink: 'syz.3.14739': attribute type 10 has an invalid length. [ 3129.886223][T21573] __nla_validate_parse: 1 callbacks suppressed [ 3129.886244][T21573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14739'. [ 3129.972043][T21576] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14740'. [ 3130.336209][T21586] netlink: 'syz.3.14744': attribute type 10 has an invalid length. [ 3130.450820][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 3130.792209][T21588] netlink: 'syz.0.14745': attribute type 3 has an invalid length. [ 3130.827808][T21588] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14745'. [ 3131.033291][T21586] team0: Device xfrm0 is of different type [ 3131.093880][T21591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14746'. [ 3131.150348][T21592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14745'. [ 3132.182543][T21610] netlink: 'syz.0.14753': attribute type 10 has an invalid length. [ 3132.202002][T21619] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14756'. [ 3132.511373][T21626] netlink: 'syz.0.14768': attribute type 10 has an invalid length. [ 3132.533499][T21626] device batadv0 left promiscuous mode [ 3132.550471][T21626] bridge0: port 3(batadv0) entered disabled state [ 3132.883725][T21632] netlink: 'syz.0.14768': attribute type 6 has an invalid length. [ 3132.942924][T21642] netlink: 'syz.3.14762': attribute type 21 has an invalid length. [ 3133.006454][T21642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14762'. [ 3133.026259][T21642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14762'. [ 3133.103708][T21648] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14763'. [ 3133.235538][T21651] netlink: 'syz.5.14764': attribute type 3 has an invalid length. [ 3133.297893][T21651] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.14764'. [ 3133.889928][T21671] netlink: 'syz.3.14770': attribute type 10 has an invalid length. [ 3135.089272][T21682] netlink: 'syz.6.14772': attribute type 3 has an invalid length. [ 3135.154973][T21682] __nla_validate_parse: 2 callbacks suppressed [ 3135.155019][T21682] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.14772'. [ 3135.223455][T21684] netlink: 180 bytes leftover after parsing attributes in process `syz.5.14775'. [ 3135.601727][T21700] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14776'. [ 3135.713101][T21690] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14772'. [ 3135.730795][T21700] openvswitch: netlink: Message has 6 unknown bytes. [ 3135.842399][T21702] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14776'. [ 3136.145961][T21697] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3136.166856][T21697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3136.216719][T21697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3136.837869][T21710] netlink: 'syz.1.14782': attribute type 10 has an invalid length. [ 3136.891468][T21712] netlink: 'syz.1.14782': attribute type 6 has an invalid length. [ 3137.015278][T21718] netlink: 'syz.0.14785': attribute type 10 has an invalid length. [ 3137.065291][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14785'. [ 3137.149187][T21718] device batadv0 entered promiscuous mode [ 3137.222503][T21718] bridge0: port 3(batadv0) entered blocking state [ 3137.281125][T21718] bridge0: port 3(batadv0) entered disabled state [ 3137.479205][T25386] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3137.488642][T25386] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3138.091040][T21729] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14788'. [ 3138.120177][T21735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14791'. [ 3138.413171][T21743] netlink: 'syz.0.14794': attribute type 10 has an invalid length. [ 3138.479461][T21743] device batadv0 left promiscuous mode [ 3138.485831][T21743] bridge0: port 3(batadv0) entered disabled state [ 3138.601391][T21741] netlink: 'syz.3.14792': attribute type 3 has an invalid length. [ 3138.737216][T21741] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14792'. [ 3138.987521][T21746] netlink: 'syz.0.14794': attribute type 6 has an invalid length. [ 3139.049349][T21747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14792'. [ 3139.871268][T21764] netlink: 'syz.0.14800': attribute type 10 has an invalid length. [ 3139.908518][T21764] device batadv0 entered promiscuous mode [ 3139.931161][T21764] bridge0: port 3(batadv0) entered blocking state [ 3139.954489][T21764] bridge0: port 3(batadv0) entered disabled state [ 3140.157460][ T6515] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3140.166906][ T6515] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3140.360254][T21769] __nla_validate_parse: 2 callbacks suppressed [ 3140.360371][T21769] netlink: 144 bytes leftover after parsing attributes in process `syz.6.14804'. [ 3140.556981][T21777] netlink: 'syz.5.14803': attribute type 10 has an invalid length. [ 3140.579401][T21777] device batadv0 left promiscuous mode [ 3140.593170][T21777] bridge0: port 3(batadv0) entered disabled state [ 3140.612236][T21777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3140.624424][T21777] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3140.653357][T21774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14807'. [ 3140.774106][T21775] netlink: 'syz.5.14803': attribute type 6 has an invalid length. [ 3141.314062][T21788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14811'. [ 3141.350686][T21790] netlink: 180 bytes leftover after parsing attributes in process `syz.3.14812'. [ 3141.698072][T21803] ================================================================== [ 3141.706220][T21803] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 3141.714326][T21803] Write of size 72 at addr ffff888033bf4b10 by task syz.6.14815/21803 [ 3141.722516][T21803] [ 3141.724879][T21803] CPU: 1 PID: 21803 Comm: syz.6.14815 Not tainted syzkaller #0 [ 3141.732466][T21803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3141.742553][T21803] Call Trace: [ 3141.745858][T21803] [ 3141.748809][T21803] dump_stack_lvl+0x188/0x24e [ 3141.753516][T21803] ? __lock_acquire+0x7d10/0x7d10 [ 3141.758651][T21803] ? show_regs_print_info+0x12/0x12 [ 3141.763869][T21803] ? load_image+0x400/0x400 [ 3141.768391][T21803] ? __virt_addr_valid+0x465/0x540 [ 3141.773606][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3141.778734][T21803] print_report+0xa8/0x210 [ 3141.783166][T21803] kasan_report+0x10b/0x140 [ 3141.787686][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3141.792811][T21803] kasan_check_range+0x235/0x290 [ 3141.797767][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3141.802890][T21803] memcpy+0x3c/0x60 [ 3141.806708][T21803] __bpf_get_stackid+0x6c9/0x920 [ 3141.811748][T21803] bpf_get_stackid_pe+0x33f/0x400 [ 3141.816785][T21803] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 3141.822258][T21803] bpf_overflow_handler+0x522/0x7c0 [ 3141.827468][T21803] ? bpf_overflow_handler+0xd9/0x7c0 [ 3141.832796][T21803] ? perf_swevent_overflow+0x230/0x230 [ 3141.838358][T21803] ? ct_irq_exit_irqson+0x113/0x170 [ 3141.843586][T21803] ? __perf_event_account_interrupt+0x187/0x280 [ 3141.849849][T21803] __perf_event_overflow+0x448/0x610 [ 3141.855155][T21803] perf_swevent_event+0x315/0x570 [ 3141.860196][T21803] ? perf_tp_event+0xc30/0xc30 [ 3141.864982][T21803] ___perf_sw_event+0x49e/0x6e0 [ 3141.869847][T21803] ? ___perf_sw_event+0x180/0x6e0 [ 3141.875127][T21803] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 3141.881561][T21803] ? __lock_acquire+0x13cf/0x7d10 [ 3141.886695][T21803] ? ct_nmi_exit+0x145/0x1c0 [ 3141.891298][T21803] ? ct_irq_exit_irqson+0x113/0x170 [ 3141.896510][T21803] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3141.902593][T21803] ? lock_chain_count+0x20/0x20 [ 3141.907459][T21803] __perf_sw_event+0x135/0x260 [ 3141.912240][T21803] do_user_addr_fault+0xaea/0xb10 [ 3141.917280][T21803] ? trace_hardirqs_off_finish+0x86/0x180 [ 3141.923016][T21803] exc_page_fault+0x60/0x100 [ 3141.927622][T21803] asm_exc_page_fault+0x22/0x30 [ 3141.932487][T21803] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3141.939094][T21803] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3141.958736][T21803] RSP: 0018:ffffc9000c1d7be8 EFLAGS: 00050206 [ 3141.964824][T21803] RAX: ffffffff84114901 RBX: 00000000001ff003 RCX: 00000000001ff003 [ 3141.972811][T21803] RDX: 00000000001ff003 RSI: 0000000000000000 RDI: ffff888083c00000 [ 3141.980791][T21803] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000003 [ 3141.988784][T21803] R10: dffffc0000000000 R11: ffffed10107bfe00 R12: 00007fffffdffffd [ 3141.996784][T21803] R13: 0000000000000000 R14: ffff888083c00000 R15: 0000000000000000 [ 3142.004795][T21803] ? _copy_from_user+0x11/0x170 [ 3142.009683][T21803] _copy_from_user+0xf4/0x170 [ 3142.014503][T21803] generic_map_delete_batch+0x2c1/0x6f0 [ 3142.020088][T21803] ? bpf_map_inc_not_zero+0x100/0x100 [ 3142.025485][T21803] ? __fdget+0x17c/0x200 [ 3142.029752][T21803] ? bpf_map_inc_not_zero+0x100/0x100 [ 3142.035161][T21803] bpf_map_do_batch+0x466/0x600 [ 3142.040037][T21803] __sys_bpf+0x6f7/0x780 [ 3142.044308][T21803] ? bpf_link_show_fdinfo+0x380/0x380 [ 3142.049703][T21803] ? lock_chain_count+0x20/0x20 [ 3142.054574][T21803] __x64_sys_bpf+0x78/0x90 [ 3142.059004][T21803] do_syscall_64+0x4c/0xa0 [ 3142.063572][T21803] ? clear_bhb_loop+0x60/0xb0 [ 3142.068293][T21803] ? clear_bhb_loop+0x60/0xb0 [ 3142.073009][T21803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.078923][T21803] RIP: 0033:0x7ff50839cdd9 [ 3142.083368][T21803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3142.103079][T21803] RSP: 002b:00007ff509259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3142.111517][T21803] RAX: ffffffffffffffda RBX: 00007ff508616090 RCX: 00007ff50839cdd9 [ 3142.119510][T21803] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001b [ 3142.127497][T21803] RBP: 00007ff508432d69 R08: 0000000000000000 R09: 0000000000000000 [ 3142.135569][T21803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3142.143637][T21803] R13: 00007ff508616128 R14: 00007ff508616090 R15: 00007ffd50df57a8 [ 3142.151624][T21803] [ 3142.154656][T21803] [ 3142.157007][T21803] Allocated by task 21803: [ 3142.161432][T21803] kasan_set_track+0x4b/0x70 [ 3142.166058][T21803] __kasan_kmalloc+0x8e/0xa0 [ 3142.170664][T21803] __kmalloc_node+0xb0/0x240 [ 3142.175274][T21803] bpf_map_area_alloc+0x47/0xe0 [ 3142.180137][T21803] prealloc_elems_and_freelist+0x86/0x1c0 [ 3142.185867][T21803] stack_map_alloc+0x390/0x520 [ 3142.190639][T21803] map_create+0x534/0x1000 [ 3142.195065][T21803] __sys_bpf+0x38b/0x780 [ 3142.199434][T21803] __x64_sys_bpf+0x78/0x90 [ 3142.203887][T21803] do_syscall_64+0x4c/0xa0 [ 3142.208338][T21803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.214276][T21803] [ 3142.216633][T21803] The buggy address belongs to the object at ffff888033bf4b00 [ 3142.216633][T21803] which belongs to the cache kmalloc-cg-64 of size 64 [ 3142.230795][T21803] The buggy address is located 16 bytes inside of [ 3142.230795][T21803] 64-byte region [ffff888033bf4b00, ffff888033bf4b40) [ 3142.243911][T21803] [ 3142.246242][T21803] The buggy address belongs to the physical page: [ 3142.252675][T21803] page:ffffea0000cefd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888033bf4880 pfn:0x33bf4 [ 3142.264160][T21803] memcg:ffff8880269d6a01 [ 3142.268411][T21803] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 3142.275970][T21803] raw: 00fff00000000200 ffffea0000af2b00 dead000000000006 ffff888017442780 [ 3142.284564][T21803] raw: ffff888033bf4880 000000008020001c 00000001ffffffff ffff8880269d6a01 [ 3142.293153][T21803] page dumped because: kasan: bad access detected [ 3142.299573][T21803] page_owner tracks the page as allocated [ 3142.305382][T21803] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 19459, tgid 19459 (syz-executor), ts 3006330034928, free_ts 3005956752100 [ 3142.324146][T21803] post_alloc_hook+0x173/0x1a0 [ 3142.328929][T21803] get_page_from_freelist+0x1a1e/0x1ab0 [ 3142.334492][T21803] __alloc_pages+0x1ec/0x4f0 [ 3142.339185][T21803] alloc_slab_page+0x5d/0x160 [ 3142.343894][T21803] new_slab+0x87/0x2c0 [ 3142.348013][T21803] ___slab_alloc+0xbc6/0x1240 [ 3142.352921][T21803] __kmem_cache_alloc_node+0x1a0/0x260 [ 3142.358430][T21803] __kmalloc_node+0xa0/0x240 [ 3142.363045][T21803] kvmalloc_node+0x6c/0x180 [ 3142.367573][T21803] nf_hook_entries_grow+0x309/0x730 [ 3142.372808][T21803] __nf_register_net_hook+0x2c9/0x910 [ 3142.378195][T21803] nf_register_net_hook+0xae/0x190 [ 3142.383405][T21803] nf_register_net_hooks+0x40/0x1a0 [ 3142.388705][T21803] brnf_device_event+0x12e/0x1d0 [ 3142.393662][T21803] raw_notifier_call_chain+0xcb/0x160 [ 3142.399045][T21803] register_netdevice+0x163f/0x1b10 [ 3142.404288][T21803] page last free stack trace: [ 3142.408973][T21803] free_unref_page_prepare+0x8b4/0x9a0 [ 3142.414477][T21803] free_unref_page+0x2e/0x3f0 [ 3142.419288][T21803] __vunmap+0x856/0xa00 [ 3142.423463][T21803] kcov_close+0x27/0x50 [ 3142.427633][T21803] __fput+0x22c/0x920 [ 3142.431748][T21803] task_work_run+0x1d0/0x260 [ 3142.436362][T21803] do_exit+0x982/0x2480 [ 3142.440623][T21803] do_group_exit+0x217/0x2d0 [ 3142.445231][T21803] get_signal+0x1272/0x1350 [ 3142.449749][T21803] arch_do_signal_or_restart+0xc4/0x1350 [ 3142.455406][T21803] exit_to_user_mode_loop+0x70/0x110 [ 3142.460708][T21803] exit_to_user_mode_prepare+0xee/0x180 [ 3142.466286][T21803] syscall_exit_to_user_mode+0x16/0x40 [ 3142.471800][T21803] do_syscall_64+0x58/0xa0 [ 3142.476245][T21803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.482161][T21803] [ 3142.484495][T21803] Memory state around the buggy address: [ 3142.490138][T21803] ffff888033bf4a00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3142.498299][T21803] ffff888033bf4a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 3142.506370][T21803] >ffff888033bf4b00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 3142.514538][T21803] ^ [ 3142.519933][T21803] ffff888033bf4b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3142.528014][T21803] ffff888033bf4c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 3142.536091][T21803] ================================================================== [ 3142.544245][T21803] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3142.551439][T21803] CPU: 1 PID: 21803 Comm: syz.6.14815 Not tainted syzkaller #0 [ 3142.559001][T21803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3142.569093][T21803] Call Trace: [ 3142.572469][T21803] [ 3142.575507][T21803] dump_stack_lvl+0x188/0x24e [ 3142.580214][T21803] ? memcpy+0x3c/0x60 [ 3142.584203][T21803] ? show_regs_print_info+0x12/0x12 [ 3142.589416][T21803] ? load_image+0x400/0x400 [ 3142.593944][T21803] panic+0x2e5/0x730 [ 3142.598305][T21803] ? bpf_jit_dump+0xd0/0xd0 [ 3142.602845][T21803] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3142.608757][T21803] ? _raw_spin_unlock+0x40/0x40 [ 3142.613623][T21803] ? print_memory_metadata+0x314/0x400 [ 3142.619114][T21803] check_panic_on_warn+0x80/0xa0 [ 3142.624070][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3142.629191][T21803] end_report+0x66/0x110 [ 3142.633624][T21803] kasan_report+0x118/0x140 [ 3142.638143][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3142.643270][T21803] kasan_check_range+0x235/0x290 [ 3142.648220][T21803] ? __bpf_get_stackid+0x6c9/0x920 [ 3142.653347][T21803] memcpy+0x3c/0x60 [ 3142.657170][T21803] __bpf_get_stackid+0x6c9/0x920 [ 3142.662134][T21803] bpf_get_stackid_pe+0x33f/0x400 [ 3142.667169][T21803] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 3142.672639][T21803] bpf_overflow_handler+0x522/0x7c0 [ 3142.677867][T21803] ? bpf_overflow_handler+0xd9/0x7c0 [ 3142.683184][T21803] ? perf_swevent_overflow+0x230/0x230 [ 3142.688663][T21803] ? ct_irq_exit_irqson+0x113/0x170 [ 3142.693870][T21803] ? __perf_event_account_interrupt+0x187/0x280 [ 3142.700131][T21803] __perf_event_overflow+0x448/0x610 [ 3142.705432][T21803] perf_swevent_event+0x315/0x570 [ 3142.710484][T21803] ? perf_tp_event+0xc30/0xc30 [ 3142.715290][T21803] ___perf_sw_event+0x49e/0x6e0 [ 3142.720198][T21803] ? ___perf_sw_event+0x180/0x6e0 [ 3142.725334][T21803] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 3142.731858][T21803] ? __lock_acquire+0x13cf/0x7d10 [ 3142.736911][T21803] ? ct_nmi_exit+0x145/0x1c0 [ 3142.741514][T21803] ? ct_irq_exit_irqson+0x113/0x170 [ 3142.746757][T21803] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3142.752842][T21803] ? lock_chain_count+0x20/0x20 [ 3142.757891][T21803] __perf_sw_event+0x135/0x260 [ 3142.762758][T21803] do_user_addr_fault+0xaea/0xb10 [ 3142.767993][T21803] ? trace_hardirqs_off_finish+0x86/0x180 [ 3142.773732][T21803] exc_page_fault+0x60/0x100 [ 3142.778416][T21803] asm_exc_page_fault+0x22/0x30 [ 3142.783286][T21803] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 3142.790119][T21803] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 3142.809914][T21803] RSP: 0018:ffffc9000c1d7be8 EFLAGS: 00050206 [ 3142.815996][T21803] RAX: ffffffff84114901 RBX: 00000000001ff003 RCX: 00000000001ff003 [ 3142.823977][T21803] RDX: 00000000001ff003 RSI: 0000000000000000 RDI: ffff888083c00000 [ 3142.831959][T21803] RBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000003 [ 3142.839944][T21803] R10: dffffc0000000000 R11: ffffed10107bfe00 R12: 00007fffffdffffd [ 3142.847923][T21803] R13: 0000000000000000 R14: ffff888083c00000 R15: 0000000000000000 [ 3142.855908][T21803] ? _copy_from_user+0x11/0x170 [ 3142.860780][T21803] _copy_from_user+0xf4/0x170 [ 3142.865474][T21803] generic_map_delete_batch+0x2c1/0x6f0 [ 3142.871047][T21803] ? bpf_map_inc_not_zero+0x100/0x100 [ 3142.876434][T21803] ? __fdget+0x17c/0x200 [ 3142.880694][T21803] ? bpf_map_inc_not_zero+0x100/0x100 [ 3142.886117][T21803] bpf_map_do_batch+0x466/0x600 [ 3142.890983][T21803] __sys_bpf+0x6f7/0x780 [ 3142.895261][T21803] ? bpf_link_show_fdinfo+0x380/0x380 [ 3142.900654][T21803] ? lock_chain_count+0x20/0x20 [ 3142.905607][T21803] __x64_sys_bpf+0x78/0x90 [ 3142.910123][T21803] do_syscall_64+0x4c/0xa0 [ 3142.914551][T21803] ? clear_bhb_loop+0x60/0xb0 [ 3142.919255][T21803] ? clear_bhb_loop+0x60/0xb0 [ 3142.923981][T21803] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.929919][T21803] RIP: 0033:0x7ff50839cdd9 [ 3142.934353][T21803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3142.953990][T21803] RSP: 002b:00007ff509259028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3142.962508][T21803] RAX: ffffffffffffffda RBX: 00007ff508616090 RCX: 00007ff50839cdd9 [ 3142.970489][T21803] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001b [ 3142.978471][T21803] RBP: 00007ff508432d69 R08: 0000000000000000 R09: 0000000000000000 [ 3142.986538][T21803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3142.994513][T21803] R13: 00007ff508616128 R14: 00007ff508616090 R15: 00007ffd50df57a8 [ 3143.002502][T21803] [ 3143.005860][T21803] Kernel Offset: disabled [ 3143.010187][T21803] Rebooting in 86400 seconds..