last executing test programs: 23m50.936770513s ago: executing program 3 (id=458): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac14"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xffffff0a, &(0x7f0000000140)=[{&(0x7f0000000200)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23m50.127401897s ago: executing program 3 (id=462): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e81cef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5c31, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xf1, 0xfe, 0x6, 0x0, 0x0, 0x0, 0x1b841, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000640), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x20000800) 23m49.587194843s ago: executing program 3 (id=466): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602010000000e000a0010000000026e00001294", 0x2e}], 0x1, 0x0, 0x0, 0x60}, 0x80840) 23m48.878063957s ago: executing program 3 (id=470): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x9, 0x5, 0x2, 0xa, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xd, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001400)={r2}, 0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x1000, 0x0, 0x4, 0x9, 0x200000000000000, 0xffff0000, 0x5, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0xa, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x1a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x4, 0x5, &(0x7f0000000f40)=@framed={{0x18, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3e}]}, &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001040)="88291242a03c3f98722780b605a7", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x15, 0x2000000000000216, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x7, 0xc, &(0x7f0000001640)=ANY=[], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xc, &(0x7f0000001880)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r7, 0x0, 0xe, 0x0, &(0x7f00000019c0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'ip6_vti0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x1e, 0xb, &(0x7f0000001140)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 23m47.807359548s ago: executing program 3 (id=477): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001740)={0xc, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001780)={r0, 0x7f, 0x10}, 0xc) 23m47.628107667s ago: executing program 3 (id=481): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1198c2, 0x0, 0x7fffffff, 0x2, 0x3ff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000050000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x20) 23m32.475240919s ago: executing program 32 (id=481): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1198c2, 0x0, 0x7fffffff, 0x2, 0x3ff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000050000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000640)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x20) 23m7.595943582s ago: executing program 4 (id=651): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xffffffc3}, 0x0) 23m6.150506872s ago: executing program 4 (id=658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 23m5.630619106s ago: executing program 4 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 23m4.508658872s ago: executing program 4 (id=669): r0 = socket$kcm(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0}, 0x18) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640), 0x97ff}], 0x2}, 0x0) 23m3.156743503s ago: executing program 4 (id=676): perf_event_open$cgroup(&(0x7f00000019c0)={0x3, 0x80, 0x6, 0x9, 0x3, 0xfc, 0x0, 0x7fffffff, 0x2140, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x8000000000000000, 0x6}, 0x0, 0xe892, 0x401, 0x6, 0xffffffffffffffff, 0x5, 0x8, 0x0, 0xffffffff, 0x0, 0x7}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = perf_event_open(&(0x7f0000001b40)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x5, 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000002540)='GPL\x00', 0x5, 0x252, &(0x7f0000002580)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) close(r3) 23m1.980714785s ago: executing program 4 (id=680): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711863000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xffffffffffffffff) 22m46.813513209s ago: executing program 33 (id=680): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711863000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0xffffffffffffffff) 20.556640869s ago: executing program 5 (id=8184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (fail_nth: 2) 20.135404213s ago: executing program 0 (id=8188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000580)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000006c0)=0x7fffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x83a}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x10, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70300"], &(0x7f0000001600)='syzkaller\x00', 0xc}, 0x94) 19.995455998s ago: executing program 2 (id=8189): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000580)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) 19.860975672s ago: executing program 5 (id=8190): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652"], 0x50) r3 = socket$kcm(0xa, 0x6, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000090) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x10000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='memory') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8001e00200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@isdn={0x22, 0x0, 0xa, 0x8, 0xc}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd4}, 0x240000c4) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000280)) 19.860384372s ago: executing program 2 (id=8191): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x29e, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3c, 0x20, 0x5, 0x0, 0x0, 0x1, 0xe802, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x810, 0xc8, 0x1000004, 0x4, 0x2, 0x5, 0xfffd, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000000a80)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000c40), &(0x7f0000000c80)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r5}, &(0x7f0000000cc0), &(0x7f0000000d00)=r0}, 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0xe40, 0xe40, &(0x7f0000000900)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_pressure(r6, &(0x7f00000006c0)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000700), 0x4) close(r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@fallback=r3, 0x35, 0x1, 0xd0d, &(0x7f0000000d80)=[0x0], 0x1, 0x0, &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) socket$kcm(0x2, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='+r'], 0x11) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000680)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x120) write$cgroup_subtree(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 19.769056892s ago: executing program 0 (id=8193): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d85c8af0401a80016000a003a40ff7f000000000000070d03003a00004dcf5c044c9dc661c1a1b36f94007134cf6ee08000a0e408e8d8e752a98516277ce06bbace8017b4ec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae34edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bff0fe1b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1, 0x0, 0x0, 0x81000000}, 0x24008054) 19.755486993s ago: executing program 6 (id=8194): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x18) 19.614252288s ago: executing program 0 (id=8195): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="08000045521c570000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x0) close(r2) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/net\x00') (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r4 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000980)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a00)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000bc0)}, 0x10049014) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r4], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x13, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r6, &(0x7f0000001080)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000c40)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@map=r2, 0x24, 0x0, 0xfff2, &(0x7f0000000d00)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010800"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r13}, &(0x7f0000000440), &(0x7f0000000480)=r10}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000680)=r14, 0x4) (async) sendmsg$inet(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000bc0)=ANY=[@ANYRES8=r9, @ANYRESHEX=r13, @ANYRES16=r10], 0xfe33) 19.516657368s ago: executing program 5 (id=8196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848100000815e0c0000000000000e0003001400000002800000121f", 0x2e}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1], 0x50) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) close(0x3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0) close(r4) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000340)={r5}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffcd5, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2002) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000280)=r7, 0x4) openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0xa, &(0x7f0000000740)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0xc, 0xa, 0x7, 0x4, 0x1}], &(0x7f00000007c0)='syzkaller\x00', 0x280, 0x65, &(0x7f0000000800)=""/101, 0x0, 0x28, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000880)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x9}, 0x10, 0x3c4c, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[r4, r2, r4, r7, r4, r7, r4], &(0x7f0000000940)=[{0x0, 0x5, 0x4, 0x6}, {0x2, 0x4, 0x8, 0xb}, {0x5, 0x4, 0x0, 0x6}], 0x10, 0xfffffffa}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x104347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x18}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.483439492s ago: executing program 6 (id=8197): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x101, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ab100000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 19.30474438s ago: executing program 0 (id=8199): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xc, 0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000001800008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.876026805s ago: executing program 1 (id=8201): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000580)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) 18.792631244s ago: executing program 2 (id=8202): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000ad0000000000000000040000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0500000005000000040000000800000000000000000000000100"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f00000001c0)="0b8b64041df68f03564ff9f389f55837ca4fea1c8e78212ce4514b98bf08d1cfa88c0acec8bb759cbfa392c415584b56ebf071fa346b61a761c0ce8b6431a325869274db52583aa858682f71e8fbe7139afcf04df646949e837e3609829c3968a34f8b09640ef6d9f44b953a7e0e9d81a588fbe59af7e0c72f658bbfa784296534d8e6a46055341088a814330780eeb38b1ce9a60b292638010432dce1b4ee63776734e5", 0x0, 0x4}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x1f4, 0x1f, 0x0, &(0x7f00000007c0)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b6", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000b00)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="c01803003a000b12d25a80648c2594f90324fc60100c03", 0x17}], 0x1}, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000001a40)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001b00)={r3, r2}) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)='\f\n\n', 0x3}], 0x1}, 0x0) 18.722815021s ago: executing program 1 (id=8203): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000580)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000006c0)=0x7fffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000cc0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x83a}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x50) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 18.63390451s ago: executing program 6 (id=8204): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000008018110000", @ANYRES32, @ANYBLOB="00000002008ee5e3bcbf045578619cff5d"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) (async) recvmsg$kcm(r0, &(0x7f0000004640)={&(0x7f00000003c0)=@isdn, 0x80, &(0x7f0000004480)=[{&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000001740)=""/151, 0x97}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000001880)=""/163, 0xa3}, {&(0x7f0000001940)=""/132, 0x84}, {&(0x7f0000001a00)=""/203, 0xcb}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/107, 0x6b}], 0xa, &(0x7f0000004540)=""/213, 0xd5}, 0x10100) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r2}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x1e, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @generic={0x1, 0x3, 0x9, 0x8, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000001c00)='GPL\x00', 0x2, 0xc5, &(0x7f0000001c40)=""/197, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x6, 0x60b, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[0x1, 0xffffffffffffffff], &(0x7f0000001e00)=[{0x5, 0x2, 0x6, 0x2}, {0x1, 0x3, 0x4, 0x2}], 0x10, 0x5}, 0x94) (async) r4 = socket$kcm(0xa, 0x3, 0x73) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002200)="d8000000200081044e81f782db44b90402000004000055a1180015000f00142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x4000040) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000004680)={r6, r5}) bpf$MAP_CREATE(0x0, &(0x7f00000046c0)=ANY=[@ANYBLOB="0100000008000000080000000800000040000000", @ANYBLOB=' \x00'/19, @ANYRES16=r6, @ANYRES32=r5, @ANYBLOB], 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003300)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffe15) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000440)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001700)='GPL\x00', 0x4, 0x1076, &(0x7f0000002300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001f00)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1, 0x14, &(0x7f0000004700)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9f95}}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x4, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r2, &(0x7f0000003340)={&(0x7f0000003380)=@l2tp6={0xa, 0x0, 0x8, @empty, 0x2, 0x1}, 0x80, 0x0}, 0x4008040) 18.554289568s ago: executing program 2 (id=8205): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0xac9a330e9bf16f29, @perf_bp={0x0, 0x2}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x202, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xa, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0x6, 0x7, 0x8, 0x3, 0xeeb}, @call={0x85, 0x0, 0x0, 0x6a}, @ldst={0x1, 0x0, 0x3, 0x6, 0xa, 0xc, 0xfffffffffffffffc}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x4, 0x4, 0x10c}, 0x10, 0x1b855, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xe, 0xf}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map=0x1, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x18, 0x0, 0xe, 0x4, 0x1}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x0, 0x0, &(0x7f0000000c80)='GPL\x00', 0x0, 0xdd, &(0x7f0000000cc0)=""/221, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0xd, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e40), &(0x7f0000000e80)=[{0x1, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x8f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r2, r0, 0x32, 0x50, 0xffffffffffffffff, @void, @value=r3, @void, @void, r1}, 0x20) 18.44069219s ago: executing program 5 (id=8206): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652"], 0x50) r3 = socket$kcm(0xa, 0x6, 0x0) close(r3) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000090) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x5, 0xb, 0x2, 0x3ff, 0x0, 0x10000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='memory') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8001e00200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000400)=@isdn={0x22, 0x0, 0xa, 0x8, 0xc}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffd4}, 0x240000c4) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000280)) 18.331214341s ago: executing program 6 (id=8207): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b7000000004f000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dca8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.305157034s ago: executing program 2 (id=8208): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000006000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0xff, 0x1000, &(0x7f0000001000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.15837049s ago: executing program 5 (id=8209): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000700000000000000f91200009500000000000000183400000400000000000000000000008520000005000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000080000006d841800ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000008487077221762a61cb69884092f7"], &(0x7f0000000300)='GPL\x00', 0x8000, 0x12, &(0x7f0000000340)=""/18, 0x40f00, 0x14, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x1, 0x4, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x5, 0x1, 0x2, 0x9}, {0x1, 0x5, 0x9, 0x4}, {0x0, 0x2, 0x1, 0x9}, {0x5, 0x3, 0x1, 0xc}], 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', r2, 0x4000, r2}, 0x18) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={0xffffffffffffffff, r1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006900102700000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 18.15799599s ago: executing program 0 (id=8210): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x200000, 0x10, &(0x7f0000001080), 0x143}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18.092788546s ago: executing program 6 (id=8211): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=""/227, 0x3e, 0xe3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b400000000000000791048000000000071002b0000000000950000000000f100db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000000900)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000740)={'bridge0\x00', @random="0b0000000010"}) 18.092494876s ago: executing program 2 (id=8212): perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x61) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000070000000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000"], 0x48) mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000600)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000006c0)=0x1, 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x18, &(0x7f0000000740)=[{&(0x7f0000000780)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18.073284248s ago: executing program 1 (id=8213): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000580)=""/210}, 0x70) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r3, r2, 0x0, 0x0, 0x0}, 0x30) 17.892223957s ago: executing program 5 (id=8214): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x2, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000020000"], &(0x7f0000000f00)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000f40)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 17.707392086s ago: executing program 6 (id=8215): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000ad0000000000000000040000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0500000005000000040000000800000000000000000000000100"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f00000001c0)="0b8b64041df68f03564ff9f389f55837ca4fea1c8e78212ce4514b98bf08d1cfa88c0acec8bb759cbfa392c415584b56ebf071fa346b61a761c0ce8b6431a325869274db52583aa858682f71e8fbe7139afcf04df646949e837e3609829c3968a34f8b09640ef6d9f44b953a7e0e9d81a588fbe59af7e0c72f658bbfa784296534d8e6a46055341088a814330780eeb38b1ce9a60b292638010432dce1b4ee63776734e5", 0x0, 0x4}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x1f4, 0x1f, 0x0, &(0x7f00000007c0)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b6", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000b00)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="c01803003a000b12d25a80648c2594f90324fc60100c03", 0x17}], 0x1}, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001b00)={r3, r2}) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)='\f\n\n', 0x3}], 0x1}, 0x0) 17.09393846s ago: executing program 0 (id=8216): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1b}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0a00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ecffffffffffff6500000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x3, 0x10, &(0x7f0000001400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202000000000000181100", @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000"], &(0x7f0000001480)='GPL\x00', 0x7, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@generic={&(0x7f0000002500)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x2d, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x12, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002780)='GPL\x00', 0x2, 0xde, &(0x7f00000027c0)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002940)="f80ec2e2badd", 0x6}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002a00)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000000300139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002a40)={&(0x7f0000002a80)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002b40)="bb", 0x1}], 0x1, &(0x7f0000002b80)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x0) getpid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r10, 0x81000600, 0x12, 0x0, &(0x7f0000000a00)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3bda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 17.013364759s ago: executing program 1 (id=8217): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000580)="98b15233b1f0c7d3f9c37e8b31", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d07}, 0x50) 16.8048284s ago: executing program 1 (id=8218): bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0xd, 0x4, &(0x7f0000001840)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000001880)='GPL\x00', 0x2, 0xfd90, &(0x7f00000018c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000019c0), 0x1f2, 0x10, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0xffff8000}, 0xfffffe51}, 0x48) 16.688526702s ago: executing program 1 (id=8219): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x4, 0x4031}, 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r1, r0}, 0xc) getpid() r2 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000900)=r3, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000940)='[-#]-\x00') perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000a80), 0x12b) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x80000, 0xa}, 0x10}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d80)=[{0xfffffffc, 0x0, 0x2, 0xb}, {0x10000002, 0x0, 0xffffffff}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000e80)=r9, 0x10) r10 = socket$kcm(0xa, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/686], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x3a, 0x10, &(0x7f0000001440), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r10, 0x84, 0x1f, &(0x7f0000001480)=r11, 0x129) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000014c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000001500)) 2.197400561s ago: executing program 34 (id=8212): perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x61) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000070000000100"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000"], 0x48) mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000600)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000680)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000006c0)=0x1, 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x18, &(0x7f0000000740)=[{&(0x7f0000000780)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.980106784s ago: executing program 35 (id=8214): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x2, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000020000"], &(0x7f0000000f00)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000f40)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 1.741115649s ago: executing program 36 (id=8215): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000ad0000000000000000040000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB="0500000005000000040000000800000000000000000000000100"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r0, &(0x7f00000001c0)="0b8b64041df68f03564ff9f389f55837ca4fea1c8e78212ce4514b98bf08d1cfa88c0acec8bb759cbfa392c415584b56ebf071fa346b61a761c0ce8b6431a325869274db52583aa858682f71e8fbe7139afcf04df646949e837e3609829c3968a34f8b09640ef6d9f44b953a7e0e9d81a588fbe59af7e0c72f658bbfa784296534d8e6a46055341088a814330780eeb38b1ce9a60b292638010432dce1b4ee63776734e5", 0x0, 0x4}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x1f4, 0x1f, 0x0, &(0x7f00000007c0)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b6", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000b00)='GPL\x00'}, 0x90) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="c01803003a000b12d25a80648c2594f90324fc60100c03", 0x17}], 0x1}, 0x0) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)='GPL\x00'}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001b00)={r3, r2}) sendmsg$kcm(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)='\f\n\n', 0x3}], 0x1}, 0x0) 187.53751ms ago: executing program 37 (id=8216): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1b}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0a00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ecffffffffffff6500000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x3, 0x10, &(0x7f0000001400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff6202000000000000181100", @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000"], &(0x7f0000001480)='GPL\x00', 0x7, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@generic={&(0x7f0000002500)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x2d, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x12, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002780)='GPL\x00', 0x2, 0xde, &(0x7f00000027c0)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002940)="f80ec2e2badd", 0x6}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002a00)="3c00000033000b12d25a80648c2594f90124fc60100c034002410000000300139215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002a40)={&(0x7f0000002a80)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002b40)="bb", 0x1}], 0x1, &(0x7f0000002b80)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40}, 0x0) getpid() perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r10, 0x81000600, 0x12, 0x0, &(0x7f0000000a00)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3bda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 38 (id=8219): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x4, 0x4031}, 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r1, r0}, 0xc) getpid() r2 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000900)=r3, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000940)='[-#]-\x00') perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000a80), 0x12b) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000b80)='\x00', 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x80000, 0xa}, 0x10}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d80)=[{0xfffffffc, 0x0, 0x2, 0xb}, {0x10000002, 0x0, 0xffffffff}], 0x10, 0x316bb6af}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000e80)=r9, 0x10) r10 = socket$kcm(0xa, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/686], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x3a, 0x10, &(0x7f0000001440), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r10, 0x84, 0x1f, &(0x7f0000001480)=r11, 0x129) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000014c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000001500)) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.6438'. [ 1312.225361][T25736] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1312.312844][T25721] page_pool_create() gave up with errno -12 [ 1312.522319][T25743] netlink: 103 bytes leftover after parsing attributes in process `syz.1.6441'. [ 1312.929425][T25759] netlink: 'syz.2.6444': attribute type 8 has an invalid length. [ 1312.970791][T25759] netlink: 'syz.2.6444': attribute type 7 has an invalid length. [ 1313.013162][T25759] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1313.096833][T25762] netlink: 'syz.2.6444': attribute type 8 has an invalid length. [ 1313.133244][T25762] netlink: 'syz.2.6444': attribute type 7 has an invalid length. [ 1313.144599][T25762] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1313.494248][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.503910][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.511529][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.524474][ T4287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.538511][T23934] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1313.549096][T23934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1313.601499][T25777] rxe_eth0 speed is unknown, defaulting to 1000 [ 1314.615546][T25777] chnl_net:caif_netlink_parms(): no params data found [ 1314.833661][T14279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.946837][T25810] netlink: 'syz.0.6464': attribute type 7 has an invalid length. [ 1314.987946][T25810] netlink: 'syz.0.6464': attribute type 30 has an invalid length. [ 1315.186683][T14279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.301142][T25819] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6458'. [ 1315.572120][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 1315.919343][T14279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.635254][T25824] netlink: 'syz.0.6460': attribute type 19 has an invalid length. [ 1316.866409][T14279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.954083][T25777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.971495][T25777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.010922][T25777] device bridge_slave_0 entered promiscuous mode [ 1317.056814][T25835] netlink: 'syz.6.6465': attribute type 7 has an invalid length. [ 1317.079939][T25835] netlink: 'syz.6.6465': attribute type 30 has an invalid length. [ 1317.126094][T25777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.150608][T25777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.176833][T25777] device bridge_slave_1 entered promiscuous mode [ 1317.287958][T25777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.383949][T25777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.575286][T25777] team0: Port device team_slave_0 added [ 1317.611389][T14279] tipc: Left network mode [ 1317.645568][T25777] team0: Port device team_slave_1 added [ 1317.652100][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 1317.672608][T25853] netlink: 'syz.6.6470': attribute type 7 has an invalid length. [ 1317.920578][T25777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1317.950629][T25777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.015312][T25858] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6471'. [ 1318.052004][T25777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.101366][T25858] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1318.179894][T25777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.197248][T25777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1318.298358][T25777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.560676][T25777] device hsr_slave_0 entered promiscuous mode [ 1318.587090][T25777] device hsr_slave_1 entered promiscuous mode [ 1318.835222][T25777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.845957][T25777] Cannot create hsr debugfs directory [ 1319.022552][T25886] validate_nla: 1 callbacks suppressed [ 1319.022569][T25886] netlink: 'syz.1.6479': attribute type 7 has an invalid length. [ 1319.096365][T25886] netlink: 'syz.1.6479': attribute type 30 has an invalid length. [ 1319.118601][T25887] netlink: 'syz.0.6478': attribute type 21 has an invalid length. [ 1319.194969][T25887] netlink: 'syz.0.6478': attribute type 1 has an invalid length. [ 1319.266585][T25887] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6478'. [ 1319.437508][T25896] netlink: 'syz.2.6481': attribute type 7 has an invalid length. [ 1319.466564][T25896] netlink: 'syz.2.6481': attribute type 30 has an invalid length. [ 1319.732252][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 1320.781360][T25918] netlink: 'syz.6.6487': attribute type 21 has an invalid length. [ 1320.809156][T25918] netlink: 164 bytes leftover after parsing attributes in process `syz.6.6487'. [ 1321.408733][T25915] rxe_eth0 speed is unknown, defaulting to 1000 [ 1321.722505][T25777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1321.821939][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 1321.834831][T16521] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1322.007954][T25777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1322.028226][T14279] device hsr_slave_0 left promiscuous mode [ 1322.047939][T14279] device hsr_slave_1 left promiscuous mode [ 1322.072803][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.080288][T14279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.112993][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.120472][T14279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.150843][T14279] batman_adv: batadv0: Interface deactivated: vlan1 [ 1322.166019][T14279] batman_adv: batadv0: Removing interface: vlan1 [ 1322.183154][T14279] bridge0: port 3(dummy0) entered disabled state [ 1322.203065][T14279] device bridge_slave_1 left promiscuous mode [ 1322.209376][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.252592][T14279] device bridge_slave_0 left promiscuous mode [ 1322.258878][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.329825][T14279] device veth0_macvtap left promiscuous mode [ 1322.336221][T14279] device veth1_vlan left promiscuous mode [ 1322.520066][T25947] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.6496'. [ 1323.175201][T14279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.225506][T14279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.500850][T14279] bond0 (unregistering): Released all slaves [ 1323.550534][T25777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1323.559959][T25939] netlink: 'syz.1.6493': attribute type 7 has an invalid length. [ 1323.568176][T25939] netlink: 'syz.1.6493': attribute type 30 has an invalid length. [ 1323.588121][T25942] netlink: 'syz.0.6492': attribute type 7 has an invalid length. [ 1323.602822][T25777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1323.914192][T25956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1324.018744][T25777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.076792][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1324.088504][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.133188][T25777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.151674][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.165292][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.178390][T14276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.185706][T14276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.243280][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1324.280383][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.320065][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.352750][T14276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.360007][T14276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.401615][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1324.461071][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1324.483923][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1324.528252][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1324.702268][ T4570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1325.089636][T25777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1325.130372][T25777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1325.224330][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.243971][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1325.291375][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.318528][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1325.339695][T25987] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1325.344600][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1325.372122][T25987] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1325.393351][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1325.429988][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1325.490234][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1325.894390][T26001] validate_nla: 3 callbacks suppressed [ 1325.894423][T26001] netlink: 'syz.0.6508': attribute type 7 has an invalid length. [ 1325.946883][T26001] netlink: 'syz.0.6508': attribute type 30 has an invalid length. [ 1325.992122][T26004] netlink: 'syz.1.6509': attribute type 58 has an invalid length. [ 1326.022116][T26004] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1326.159765][T26007] netlink: 'syz.2.6510': attribute type 10 has an invalid length. [ 1326.267894][T26007] team0: Device vxcan1 is of different type [ 1326.571747][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.610114][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.680492][T25777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.154913][T26032] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6516'. [ 1327.197109][T26032] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1328.053156][T26059] netlink: 'syz.2.6522': attribute type 7 has an invalid length. [ 1328.095904][T26059] netlink: 'syz.2.6522': attribute type 30 has an invalid length. [ 1328.434761][T26072] netlink: 'syz.1.6524': attribute type 21 has an invalid length. [ 1328.472062][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6524'. [ 1328.623516][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1328.683218][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1328.775938][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1328.785384][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1328.805679][T25777] device veth0_vlan entered promiscuous mode [ 1328.829521][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1328.838974][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1328.914769][T25777] device veth1_vlan entered promiscuous mode [ 1328.946596][T26083] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6528'. [ 1328.994021][T26083] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1329.033799][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1329.068305][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1329.088368][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1329.108993][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1329.157984][T25777] device veth0_macvtap entered promiscuous mode [ 1329.197626][T25777] device veth1_macvtap entered promiscuous mode [ 1329.365606][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.409403][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.451120][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.498087][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.549366][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.586656][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.600276][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.627718][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.649022][T25777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.699495][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1329.722400][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1329.756235][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1329.803908][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1329.850727][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.893171][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.940591][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.977962][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.040739][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.077284][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.092865][T25777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.107710][T25777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.144361][T25777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.157421][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1330.174729][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1330.190461][T26110] netlink: 'syz.6.6535': attribute type 7 has an invalid length. [ 1330.240211][T26110] netlink: 'syz.6.6535': attribute type 30 has an invalid length. [ 1330.287067][T25777] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.307784][T25777] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.327357][T25777] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.337734][T25777] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.526018][T16521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.554671][T16521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.612530][T16522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1330.662692][T16524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.670595][T16524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.734765][T16522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1331.626319][T26152] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1331.673200][T26152] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1331.962818][T26163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6545'. [ 1331.986997][T26163] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6545'. [ 1332.026113][T26167] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6545'. [ 1332.581330][T26182] netlink: 'syz.6.6549': attribute type 7 has an invalid length. [ 1332.604503][T26182] netlink: 'syz.6.6549': attribute type 30 has an invalid length. [ 1332.918244][T26195] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6553'. [ 1332.931836][T26195] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1333.303844][T26203] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6557'. [ 1333.345532][T26203] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1333.586564][T26212] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6561'. [ 1333.622327][T26212] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1334.018553][T26226] netlink: 'syz.2.6565': attribute type 7 has an invalid length. [ 1334.042835][T26226] netlink: 'syz.2.6565': attribute type 30 has an invalid length. [ 1334.665919][T26245] netlink: 'syz.0.6571': attribute type 58 has an invalid length. [ 1334.725476][T26243] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6570'. [ 1334.725995][T26245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1334.830640][T26243] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1335.534743][T26259] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6574'. [ 1335.675749][T26262] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.6573'. [ 1335.798817][T26262] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1335.812854][T26259] device hsr_slave_0 left promiscuous mode [ 1335.855391][T26259] device hsr_slave_1 left promiscuous mode [ 1336.304287][T26271] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1336.314197][T26271] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1336.524495][T26274] netlink: 'syz.1.6578': attribute type 29 has an invalid length. [ 1336.553679][T26274] netlink: 'syz.1.6578': attribute type 29 has an invalid length. [ 1336.582603][T26276] netlink: 'syz.1.6578': attribute type 29 has an invalid length. [ 1336.647707][T26274] netlink: 'syz.1.6578': attribute type 21 has an invalid length. [ 1336.673203][T26278] netlink: 'syz.5.6579': attribute type 7 has an invalid length. [ 1336.721359][T26274] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6578'. [ 1337.144634][T26286] team0: Port device netdevsim0 removed [ 1337.945828][T26303] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6589'. [ 1338.092390][T26303] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1338.106086][T26307] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6591'. [ 1338.152142][T26307] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1338.691733][T26315] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6592'. [ 1338.722912][T26315] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1339.064680][T26324] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6588'. [ 1339.087855][T26324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.150016][T26329] validate_nla: 3 callbacks suppressed [ 1339.150055][T26329] netlink: 'syz.2.6594': attribute type 7 has an invalid length. [ 1339.232316][T26329] netlink: 'syz.2.6594': attribute type 30 has an invalid length. [ 1340.281365][T26348] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.6602'. [ 1340.511346][T26348] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1341.526150][T26363] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6608'. [ 1341.615481][T26363] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1342.539423][T26379] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6610'. [ 1342.751199][T26379] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1343.668707][T26390] netlink: 'syz.2.6613': attribute type 2 has an invalid length. [ 1343.892581][T26394] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1343.941708][T26394] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1343.970147][T26390] device .*! entered promiscuous mode [ 1344.500451][T26410] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1344.575615][T26410] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1345.914592][T26439] netlink: 'syz.5.6626': attribute type 7 has an invalid length. [ 1345.952474][T26439] netlink: 'syz.5.6626': attribute type 30 has an invalid length. [ 1349.133962][T26457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6635'. [ 1349.297470][T26458] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.6633'. [ 1349.447348][T26458] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1349.814756][T26457] device hsr_slave_0 left promiscuous mode [ 1350.044301][T26472] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6636'. [ 1350.064376][T26472] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1350.134719][T26457] device hsr_slave_1 left promiscuous mode [ 1350.207548][T26468] netlink: 'syz.5.6637': attribute type 2 has an invalid length. [ 1350.279346][T26468] device .*! entered promiscuous mode [ 1350.754315][T26492] netlink: 'syz.0.6644': attribute type 7 has an invalid length. [ 1350.779559][T26492] netlink: 'syz.0.6644': attribute type 30 has an invalid length. [ 1350.849839][T26498] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6647'. [ 1351.820274][T26516] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1351.914499][T26516] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1352.124523][T26530] netlink: 'syz.6.6653': attribute type 2 has an invalid length. [ 1352.199106][T26532] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6652'. [ 1352.273242][T26532] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1352.296543][T26530] device .*! entered promiscuous mode [ 1352.738672][T26544] netlink: 'syz.1.6659': attribute type 10 has an invalid length. [ 1352.866090][T16519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1352.919953][T26549] netlink: 'syz.5.6660': attribute type 2 has an invalid length. [ 1352.958585][T26549] netlink: 199848 bytes leftover after parsing attributes in process `syz.5.6660'. [ 1353.332257][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.557623][T26566] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1353.568432][T26566] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1354.374225][T26578] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.6669'. [ 1354.401418][T26578] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1354.654285][T26585] netlink: 'syz.2.6673': attribute type 21 has an invalid length. [ 1354.693809][T26585] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6673'. [ 1354.871835][T26588] netlink: 'syz.0.6672': attribute type 2 has an invalid length. [ 1355.730112][T16519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1356.046392][T26588] device .*! entered promiscuous mode [ 1356.368712][T26595] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6677'. [ 1356.422257][T26595] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1357.283865][T26630] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.6688'. [ 1358.647390][T26637] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6689'. [ 1358.685795][T26637] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1359.136224][T26648] netlink: 'syz.5.6692': attribute type 25 has an invalid length. [ 1359.166742][T26648] netlink: 'syz.5.6692': attribute type 28 has an invalid length. [ 1359.256321][T26651] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6693'. [ 1359.277175][T26651] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1360.196918][T26669] device syzkaller0 entered promiscuous mode [ 1361.456509][T26671] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6701'. [ 1361.489011][T26671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1361.515348][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.521704][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.538149][T26678] netlink: 'syz.1.6702': attribute type 10 has an invalid length. [ 1361.877569][T26693] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6708'. [ 1361.921619][T26693] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1361.964378][T26697] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6706'. [ 1362.023012][T26697] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1362.361253][T26705] netlink: 'syz.2.6709': attribute type 25 has an invalid length. [ 1362.384260][T26705] netlink: 'syz.2.6709': attribute type 28 has an invalid length. [ 1365.029594][T26712] netlink: 'syz.2.6712': attribute type 2 has an invalid length. [ 1365.358602][T26730] netlink: 'syz.5.6718': attribute type 10 has an invalid length. [ 1365.367489][T26729] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1365.400689][T26729] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1365.410128][T26730] device veth1_macvtap left promiscuous mode [ 1366.168921][T26746] netlink: 'syz.1.6723': attribute type 25 has an invalid length. [ 1366.250586][T26746] netlink: 'syz.1.6723': attribute type 28 has an invalid length. [ 1367.036035][T26765] bridge0: port 3(syz_tun) entered blocking state [ 1367.062971][T26765] bridge0: port 3(syz_tun) entered disabled state [ 1367.112055][T26765] device syz_tun entered promiscuous mode [ 1367.137347][T26765] bridge0: port 3(syz_tun) entered blocking state [ 1367.144524][T26765] bridge0: port 3(syz_tun) entered forwarding state [ 1367.203703][T26770] tipc: Started in network mode [ 1367.239294][T26770] tipc: Node identity 9215a268, cluster identity 4711 [ 1367.265866][T26770] tipc: Node number set to 2450891368 [ 1367.671200][T26782] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1367.698840][T26782] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1368.692089][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 1370.801722][T26816] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6746'. [ 1370.834879][T26814] netlink: 'syz.2.6745': attribute type 7 has an invalid length. [ 1370.872064][T26816] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1370.881418][T26814] netlink: 'syz.2.6745': attribute type 30 has an invalid length. [ 1371.184814][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1371.195320][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.208124][ T4287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.216769][ T4287] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.224547][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1371.232846][T23934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1371.265007][T17292] team0: Port device syz_tun removed [ 1371.339636][T26827] rxe_eth0 speed is unknown, defaulting to 1000 [ 1371.392357][T26832] device veth1_to_bridge entered promiscuous mode [ 1371.481264][T14279] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.644072][T14279] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.769347][T14279] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.828344][T26837] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6751'. [ 1372.032961][T26847] device syzkaller0 entered promiscuous mode [ 1373.262160][T23934] Bluetooth: hci3: command 0x0409 tx timeout [ 1374.805727][T26836] delete_channel: no stack [ 1374.841965][T26855] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6755'. [ 1374.853197][T26858] netlink: 'syz.5.6755': attribute type 7 has an invalid length. [ 1374.913024][T14279] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.964333][T26860] netlink: 'syz.1.6756': attribute type 10 has an invalid length. [ 1375.097110][T26827] chnl_net:caif_netlink_parms(): no params data found [ 1375.267824][T26863] netlink: 'syz.2.6757': attribute type 7 has an invalid length. [ 1375.277355][T26863] netlink: 'syz.2.6757': attribute type 30 has an invalid length. [ 1375.292728][T14279] device .*! left promiscuous mode [ 1375.332792][T23934] Bluetooth: hci3: command 0x041b tx timeout [ 1375.430079][T14279] tipc: Left network mode [ 1375.449957][T26827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.492576][T26827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.543149][T26827] device bridge_slave_0 entered promiscuous mode [ 1375.709676][T26885] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6762'. [ 1375.748706][T26885] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1375.893816][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.903655][T26827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.940521][T26827] device bridge_slave_1 entered promiscuous mode [ 1376.211497][T26827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.230730][T26894] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1376.261945][T26894] netlink: 6108 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1376.289883][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6764'. [ 1376.324145][T26827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.474304][T26827] team0: Port device team_slave_0 added [ 1376.532182][T26827] team0: Port device team_slave_1 added [ 1376.630559][T26827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.658057][T26827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.725540][T26827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.793750][T26827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.808157][T26827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.901003][T26827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.412007][T23934] Bluetooth: hci3: command 0x040f tx timeout [ 1379.497294][T23934] Bluetooth: hci3: command 0x0419 tx timeout [ 1380.479979][T26827] device hsr_slave_0 entered promiscuous mode [ 1380.487316][T26827] device hsr_slave_1 entered promiscuous mode [ 1381.139479][T27004] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1381.180448][T27004] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1381.305810][T27008] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6804'. [ 1381.330108][T27008] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1383.851542][T27037] device syzkaller0 entered promiscuous mode [ 1383.992578][ T4570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1384.024593][T14279] device hsr_slave_0 left promiscuous mode [ 1384.039533][T14279] device hsr_slave_1 left promiscuous mode [ 1384.050892][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.052448][T23934] Bluetooth: hci4: command 0x0406 tx timeout [ 1384.076922][T14279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.090482][T14279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.125792][T14279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.160004][T14279] bridge0: port 3(hsr0) entered disabled state [ 1384.174477][T14279] device bridge_slave_1 left promiscuous mode [ 1384.194927][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.241439][T14279] device bridge_slave_0 left promiscuous mode [ 1384.255180][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.365777][T14279] device veth1_macvtap left promiscuous mode [ 1384.380327][T14279] device veth0_macvtap left promiscuous mode [ 1384.390614][T14279] device veth1_vlan left promiscuous mode [ 1384.410836][T14279] device veth0_vlan left promiscuous mode [ 1384.489167][T27057] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1384.508944][T27057] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1384.828580][T14279] team0 (unregistering): Port device geneve1 removed [ 1385.450394][T14279] team0 (unregistering): Port device team_slave_1 removed [ 1385.509843][T14279] team0 (unregistering): Port device team_slave_0 removed [ 1385.585216][T14279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.633631][T14279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.036252][T14279] bond0 (unregistering): Released all slaves [ 1386.860227][T16521] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1388.823897][T26827] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1388.850244][T26827] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1388.886424][T26827] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1389.060197][T27108] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6827'. [ 1389.130628][T27108] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1389.199325][T26827] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1389.487140][T27106] €Â0: renamed from pim6reg1 [ 1389.627639][T26827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.708937][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1389.730966][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.796494][T26827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.833577][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1389.868339][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.897744][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.904934][T16526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.958581][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1389.989645][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1390.015754][T27136] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6835'. [ 1390.024917][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.036875][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.044086][T16526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.075127][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1390.094895][T27136] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1390.106180][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1390.142348][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1390.172431][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1390.223476][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1390.284082][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1390.395601][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1390.469400][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1390.520420][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.646504][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1390.725483][T16521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.757219][T26827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1391.541296][T27176] netlink: 'syz.5.6842': attribute type 10 has an invalid length. [ 1391.550859][T27169] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6840'. [ 1391.896710][T27184] FAULT_INJECTION: forcing a failure. [ 1391.896710][T27184] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.910467][T27184] CPU: 0 PID: 27184 Comm: syz.5.6843 Not tainted syzkaller #0 [ 1391.917995][T27184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1391.928122][T27184] Call Trace: [ 1391.931439][T27184] [ 1391.934397][T27184] dump_stack_lvl+0x188/0x24e [ 1391.939123][T27184] ? show_regs_print_info+0x12/0x12 [ 1391.944357][T27184] ? load_image+0x410/0x410 [ 1391.948915][T27184] ? __kasan_slab_alloc+0x6b/0x80 [ 1391.953995][T27184] should_fail_ex+0x390/0x4c0 [ 1391.958735][T27184] should_failslab+0x5/0x20 [ 1391.963278][T27184] slab_pre_alloc_hook+0x59/0x300 [ 1391.968350][T27184] kmem_cache_alloc+0x56/0x2f0 [ 1391.973183][T27184] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1391.978601][T27184] radix_tree_node_alloc+0x7e/0x3a0 [ 1391.983840][T27184] idr_get_free+0x28b/0xa10 [ 1391.988380][T27184] idr_alloc_cyclic+0x286/0x610 [ 1391.993268][T27184] ? idr_alloc+0x2e0/0x2e0 [ 1391.997714][T27184] ? do_raw_spin_lock+0x128/0x2f0 [ 1392.002769][T27184] ? __radix_tree_preload+0x82/0x880 [ 1392.008082][T27184] ? btf_alloc_id+0x30/0x2d0 [ 1392.012709][T27184] btf_alloc_id+0x4f/0x2d0 [ 1392.017148][T27184] btf_new_fd+0x597/0x760 [ 1392.021505][T27184] __sys_bpf+0x612/0x780 [ 1392.025777][T27184] ? bpf_link_show_fdinfo+0x380/0x380 [ 1392.031184][T27184] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1392.037357][T27184] __x64_sys_bpf+0x78/0x90 [ 1392.041818][T27184] do_syscall_64+0x4c/0xa0 [ 1392.046274][T27184] ? clear_bhb_loop+0x60/0xb0 [ 1392.050973][T27184] ? clear_bhb_loop+0x60/0xb0 [ 1392.055664][T27184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1392.061594][T27184] RIP: 0033:0x7f743ff9f559 [ 1392.066020][T27184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.085641][T27184] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1392.094068][T27184] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1392.102082][T27184] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 1392.110074][T27184] RBP: 00007f7440db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1392.118145][T27184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.126137][T27184] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1392.134140][T27184] [ 1392.208999][T16524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1392.240054][T16524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1392.275651][T26827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.474279][T27196] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1392.576565][T27196] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1393.197431][T27225] netlink: 'syz.0.6855': attribute type 10 has an invalid length. [ 1393.423442][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1393.459053][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1393.519413][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1393.552952][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1393.578264][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1393.619301][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1393.658382][T27233] bridge0: port 3(syz_tun) entered blocking state [ 1393.692781][T27233] bridge0: port 3(syz_tun) entered disabled state [ 1393.743930][T27233] device syz_tun entered promiscuous mode [ 1393.766119][T27233] bridge0: port 3(syz_tun) entered blocking state [ 1393.773150][T27233] bridge0: port 3(syz_tun) entered forwarding state [ 1393.811530][T27240] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6860'. [ 1393.821195][T26827] device veth0_vlan entered promiscuous mode [ 1393.854177][T26827] device veth1_vlan entered promiscuous mode [ 1393.873505][T27240] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1393.943497][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1393.966231][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1393.999401][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1394.036102][T14276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1394.076411][T26827] device veth0_macvtap entered promiscuous mode [ 1394.108097][T26827] device veth1_macvtap entered promiscuous mode [ 1394.228061][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.285400][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.346546][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.371992][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.391930][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.421946][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.452627][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.470711][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.489819][T26827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.501059][T27251] €Â0: renamed from pim6reg1 [ 1394.648873][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1394.678888][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1394.711600][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1394.721727][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1394.758450][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.783382][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.798108][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.809967][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.830183][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.848014][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.858337][T26827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.891997][T26827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.913731][T26827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.936076][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1394.945086][T16526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1394.957918][T26827] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.987494][T26827] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.017340][T26827] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.045863][T26827] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.252372][T14276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.287691][T14276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.367956][T27279] netlink: 'syz.2.6869': attribute type 7 has an invalid length. [ 1395.392245][T27279] netlink: 'syz.2.6869': attribute type 30 has an invalid length. [ 1395.417826][T16524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1395.463807][T16524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.502916][T16524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.543289][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1395.732901][T27291] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6873'. [ 1395.779862][T27291] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1395.952569][T27302] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6883'. [ 1396.052556][T27301] netlink: 'syz.6.6740': attribute type 25 has an invalid length. [ 1396.144582][T27302] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1396.162436][T27301] netlink: 'syz.6.6740': attribute type 28 has an invalid length. [ 1397.076894][T27315] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6874'. [ 1397.223545][T27315] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1398.948086][T27361] netlink: 'syz.1.6890': attribute type 7 has an invalid length. [ 1398.976279][T27364] netlink: 130181 bytes leftover after parsing attributes in process `syz.5.6891'. [ 1398.992040][T27361] netlink: 'syz.1.6890': attribute type 30 has an invalid length. [ 1399.055360][T27367] netlink: 130181 bytes leftover after parsing attributes in process `syz.5.6891'. [ 1399.195575][T27364] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.6891'. [ 1399.203609][T27367] netlink: 16211 bytes leftover after parsing attributes in process `syz.5.6891'. [ 1399.231613][T27374] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1399.245545][T27374] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1399.807299][T27393] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1399.856789][T27397] netlink: 'syz.6.6901': attribute type 58 has an invalid length. [ 1399.886187][T27397] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6901'. [ 1400.073472][T27401] netlink: 'syz.5.6903': attribute type 7 has an invalid length. [ 1400.091139][T27401] netlink: 'syz.5.6903': attribute type 30 has an invalid length. [ 1400.101286][T27407] netlink: 'syz.1.6905': attribute type 10 has an invalid length. [ 1400.568549][T27423] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1402.407762][T27465] netlink: 'syz.5.6919': attribute type 7 has an invalid length. [ 1402.429628][T27466] FAULT_INJECTION: forcing a failure. [ 1402.429628][T27466] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.461838][T27465] netlink: 'syz.5.6919': attribute type 30 has an invalid length. [ 1402.477941][T27466] CPU: 0 PID: 27466 Comm: syz.6.6920 Not tainted syzkaller #0 [ 1402.485456][T27466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1402.495561][T27466] Call Trace: [ 1402.498868][T27466] [ 1402.501818][T27466] dump_stack_lvl+0x188/0x24e [ 1402.506531][T27466] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1402.512722][T27466] ? show_regs_print_info+0x12/0x12 [ 1402.517948][T27466] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1402.524156][T27466] should_fail_ex+0x390/0x4c0 [ 1402.528881][T27466] should_failslab+0x5/0x20 [ 1402.533409][T27466] slab_pre_alloc_hook+0x59/0x300 [ 1402.538468][T27466] kmem_cache_alloc_lru+0x49/0x2e0 [ 1402.543624][T27466] ? __d_alloc+0x2e/0x6e0 [ 1402.547989][T27466] __d_alloc+0x2e/0x6e0 [ 1402.552170][T27466] ? d_alloc_pseudo+0xe/0x70 [ 1402.556812][T27466] d_alloc_pseudo+0x19/0x70 [ 1402.561348][T27466] alloc_file_pseudo+0xe0/0x200 [ 1402.566229][T27466] ? alloc_empty_file_noaccount+0x80/0x80 [ 1402.571989][T27466] ? alloc_fd+0x590/0x640 [ 1402.576359][T27466] anon_inode_getfd+0xc6/0x1b0 [ 1402.581234][T27466] btf_new_fd+0x5d3/0x760 [ 1402.585605][T27466] __sys_bpf+0x612/0x780 [ 1402.589875][T27466] ? bpf_link_show_fdinfo+0x380/0x380 [ 1402.595275][T27466] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1402.601449][T27466] __x64_sys_bpf+0x78/0x90 [ 1402.605887][T27466] do_syscall_64+0x4c/0xa0 [ 1402.610309][T27466] ? clear_bhb_loop+0x60/0xb0 [ 1402.615004][T27466] ? clear_bhb_loop+0x60/0xb0 [ 1402.619714][T27466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1402.625629][T27466] RIP: 0033:0x7f3d7139f559 [ 1402.630051][T27466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.649692][T27466] RSP: 002b:00007f3d7234d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1402.658137][T27466] RAX: ffffffffffffffda RBX: 00007f3d71625fa0 RCX: 00007f3d7139f559 [ 1402.666118][T27466] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 1402.674101][T27466] RBP: 00007f3d7234d090 R08: 0000000000000000 R09: 0000000000000000 [ 1402.682081][T27466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1402.690065][T27466] R13: 00007f3d71626038 R14: 00007f3d71625fa0 R15: 00007ffce31ce1b8 [ 1402.698064][T27466] [ 1403.416851][T27502] netlink: 'syz.2.6928': attribute type 10 has an invalid length. [ 1403.455022][T27502] __nla_validate_parse: 1 callbacks suppressed [ 1403.455037][T27502] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1403.461241][T27503] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6927'. [ 1403.529123][T27502] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1403.633249][T27503] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1404.140324][T27525] netlink: 'syz.2.6934': attribute type 7 has an invalid length. [ 1404.148469][T27525] netlink: 'syz.2.6934': attribute type 30 has an invalid length. [ 1404.206617][T27530] netlink: 'syz.1.6937': attribute type 21 has an invalid length. [ 1404.232632][T27530] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6937'. [ 1404.491638][T27532] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6936'. [ 1405.537847][T27572] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6949'. [ 1405.577758][T27572] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1405.768123][T27577] netlink: 'syz.2.6951': attribute type 7 has an invalid length. [ 1405.784941][T27577] netlink: 'syz.2.6951': attribute type 30 has an invalid length. [ 1409.383598][T27617] netlink: 'syz.1.6966': attribute type 10 has an invalid length. [ 1409.414908][T27614] netlink: 'syz.0.6964': attribute type 7 has an invalid length. [ 1409.431194][T27614] netlink: 'syz.0.6964': attribute type 30 has an invalid length. [ 1409.574323][T27623] netlink: 'syz.1.6968': attribute type 2 has an invalid length. [ 1410.364093][T27639] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.6973'. [ 1410.391391][T27639] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1412.818189][T27642] device syzkaller0 entered promiscuous mode [ 1412.831688][T27657] bridge0: port 3(syz_tun) entered blocking state [ 1412.838786][T27657] bridge0: port 3(syz_tun) entered disabled state [ 1412.846428][T27657] device syz_tun entered promiscuous mode [ 1412.853204][T27657] bridge0: port 3(syz_tun) entered blocking state [ 1412.859736][T27657] bridge0: port 3(syz_tun) entered forwarding state [ 1412.935207][T27664] netlink: 'syz.6.6980': attribute type 7 has an invalid length. [ 1412.954131][T27664] netlink: 'syz.6.6980': attribute type 30 has an invalid length. [ 1413.139449][T27679] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6985'. [ 1413.181439][T27679] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1413.361452][T27684] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1413.929707][T27704] device syzkaller0 entered promiscuous mode [ 1414.917075][T16523] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1415.419875][T27732] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6999'. [ 1415.430710][T27732] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1415.845849][T27741] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7002'. [ 1416.602969][T27715] netlink: 'syz.0.6994': attribute type 7 has an invalid length. [ 1416.610761][T27715] netlink: 'syz.0.6994': attribute type 30 has an invalid length. [ 1416.626365][T27727] erspan0: mtu less than device minimum [ 1416.814299][T27747] netlink: 'syz.2.7005': attribute type 58 has an invalid length. [ 1416.847405][T27747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1417.029112][T27752] device syzkaller0 entered promiscuous mode [ 1417.738347][T27778] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1417.850400][T27781] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.7015'. [ 1417.888441][T27500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1418.071301][T27783] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1418.086610][T27783] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1419.441378][T27767] netlink: 'syz.2.7013': attribute type 7 has an invalid length. [ 1419.449243][T27767] netlink: 'syz.2.7013': attribute type 30 has an invalid length. [ 1421.042041][T27810] device syzkaller0 entered promiscuous mode [ 1421.091135][T27812] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1421.110852][T27812] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1421.399902][T27820] netlink: 'syz.6.7030': attribute type 7 has an invalid length. [ 1421.443076][T27820] netlink: 'syz.6.7030': attribute type 30 has an invalid length. [ 1421.481247][T27824] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7033'. [ 1421.500716][T27824] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1421.601749][T27825] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1422.153836][T27851] device syzkaller0 entered promiscuous mode [ 1422.319995][T27857] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 1422.349107][T27857] netlink: 'syz.2.7041': attribute type 1 has an invalid length. [ 1422.366215][T27857] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1422.657381][T27858] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7042'. [ 1422.722101][T27858] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1422.940044][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.946510][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.985468][T27885] netlink: 'syz.6.7048': attribute type 7 has an invalid length. [ 1425.993548][T27885] netlink: 'syz.6.7048': attribute type 30 has an invalid length. [ 1426.473201][T27901] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7057'. [ 1426.526041][T27901] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1426.875028][T27908] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1426.972162][T27908] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1427.594574][T27920] netlink: 'syz.1.7064': attribute type 7 has an invalid length. [ 1427.626135][T27924] netlink: 'syz.0.7063': attribute type 1 has an invalid length. [ 1427.674833][T27920] netlink: 'syz.1.7064': attribute type 30 has an invalid length. [ 1427.712079][T27924] netlink: 'syz.0.7063': attribute type 1 has an invalid length. [ 1427.811905][T27924] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1428.517961][T27934] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7069'. [ 1428.902274][T27943] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1428.936292][T27943] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1429.086257][T27951] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7075'. [ 1429.133301][T27951] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1429.345368][T27959] device syzkaller0 entered promiscuous mode [ 1429.409363][T27959] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7078'. [ 1429.741963][T27962] netlink: 'syz.5.7079': attribute type 7 has an invalid length. [ 1429.759794][T27962] netlink: 'syz.5.7079': attribute type 30 has an invalid length. [ 1431.748215][T27980] netlink: 'syz.6.7084': attribute type 10 has an invalid length. [ 1431.770878][T27980] device veth1_macvtap left promiscuous mode [ 1431.899335][T27983] netlink: 'syz.5.7083': attribute type 1 has an invalid length. [ 1431.919109][T27983] netlink: 'syz.5.7083': attribute type 1 has an invalid length. [ 1431.929586][T27983] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.7083'. [ 1432.534182][T27994] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1432.570552][T27994] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1432.804193][T27999] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1432.867466][T27996] device syzkaller0 entered promiscuous mode [ 1433.151802][T28005] netlink: 'syz.1.7091': attribute type 7 has an invalid length. [ 1433.212942][T28005] netlink: 'syz.1.7091': attribute type 30 has an invalid length. [ 1433.930602][T28042] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7104'. [ 1433.961001][T28042] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1434.191063][T28049] netlink: 'syz.2.7105': attribute type 1 has an invalid length. [ 1434.219683][T28049] netlink: 'syz.2.7105': attribute type 1 has an invalid length. [ 1434.232647][T28049] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7105'. [ 1434.689890][T28056] netlink: 'syz.1.7109': attribute type 7 has an invalid length. [ 1434.742092][T28056] netlink: 'syz.1.7109': attribute type 30 has an invalid length. [ 1434.816541][T28053] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7108'. [ 1435.058075][T28069] netlink: 'syz.0.7113': attribute type 15 has an invalid length. [ 1435.084641][T28069] netlink: 'syz.0.7113': attribute type 7 has an invalid length. [ 1435.108362][T28072] netlink: 'syz.6.7115': attribute type 21 has an invalid length. [ 1435.154104][T28076] netlink: 'syz.0.7113': attribute type 15 has an invalid length. [ 1435.534080][T28090] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7120'. [ 1435.575920][T28090] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1435.943083][T28102] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7125'. [ 1436.237372][T28112] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.7126'. [ 1438.400775][T28148] validate_nla: 9 callbacks suppressed [ 1438.400794][T28148] netlink: 'syz.5.7140': attribute type 1 has an invalid length. [ 1438.421738][T28146] device syzkaller0 entered promiscuous mode [ 1438.465801][T28148] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.7140'. [ 1438.546235][T28146] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7140'. [ 1438.785431][T28158] netlink: 'syz.6.7145': attribute type 10 has an invalid length. [ 1438.988221][T28164] netlink: 'syz.1.7144': attribute type 1 has an invalid length. [ 1439.042144][T28164] netlink: 'syz.1.7144': attribute type 1 has an invalid length. [ 1439.084201][T28164] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7144'. [ 1440.372841][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 1444.598210][T28209] netlink: 763 bytes leftover after parsing attributes in process `syz.5.7161'. [ 1444.980971][T28223] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1445.097495][T28223] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1445.852418][T28236] netlink: 'syz.1.7170': attribute type 10 has an invalid length. [ 1445.864579][T14279] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1445.997625][T28236] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1446.091956][T28246] syz.2.7173[28246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1446.092110][T28246] syz.2.7173[28246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1446.490763][T28255] netlink: 763 bytes leftover after parsing attributes in process `syz.6.7177'. [ 1447.018086][T28275] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7183'. [ 1447.075318][T28275] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1447.117879][T28278] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7186'. [ 1447.162700][T28278] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1447.947767][T28301] netlink: 'syz.6.7192': attribute type 10 has an invalid length. [ 1447.979790][T28297] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7193'. [ 1448.116204][T28301] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1448.871377][T28323] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7200'. [ 1448.899846][T28323] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1448.908893][T28320] netlink: 'syz.1.7199': attribute type 10 has an invalid length. [ 1448.932907][T14276] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1448.948955][T28320] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7199'. [ 1449.403124][T28337] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1449.416136][T28336] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1449.495024][T28337] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1450.236389][T28352] netlink: 463 bytes leftover after parsing attributes in process `syz.0.7210'. [ 1450.297131][T28359] bridge0: port 3(syz_tun) entered blocking state [ 1450.313040][T28359] bridge0: port 3(syz_tun) entered disabled state [ 1450.339477][T28359] device syz_tun entered promiscuous mode [ 1450.364892][T28359] bridge0: port 3(syz_tun) entered blocking state [ 1450.372079][T28359] bridge0: port 3(syz_tun) entered forwarding state [ 1450.468745][T28365] netlink: 'syz.1.7211': attribute type 1 has an invalid length. [ 1450.521592][T28363] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7215'. [ 1450.547646][T28365] netlink: 'syz.1.7211': attribute type 1 has an invalid length. [ 1450.581459][T28363] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1450.603629][T28365] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7211'. [ 1451.930750][T28385] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7222'. [ 1451.961163][T28385] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1452.164205][T28398] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7225'. [ 1452.369803][T28409] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7231'. [ 1452.391973][T28409] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1452.419272][T28400] device syzkaller0 entered promiscuous mode [ 1452.859176][T28426] netlink: 'syz.6.7234': attribute type 1 has an invalid length. [ 1452.888456][T28426] netlink: 'syz.6.7234': attribute type 1 has an invalid length. [ 1452.900385][T28427] netlink: 'syz.2.7235': attribute type 10 has an invalid length. [ 1452.930712][T28426] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.7234'. [ 1453.036010][T28427] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1454.604426][T28441] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7239'. [ 1454.763298][T28441] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1458.920394][T28451] erspan0: mtu less than device minimum [ 1459.408206][T28463] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7247'. [ 1459.488432][T28463] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1460.457333][T28493] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1460.559563][T28493] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1460.719908][T28503] netlink: 'syz.1.7257': attribute type 1 has an invalid length. [ 1460.807076][T28503] netlink: 'syz.1.7257': attribute type 1 has an invalid length. [ 1460.923781][T28503] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.7257'. [ 1461.924625][T28516] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7263'. [ 1461.938043][T28516] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1462.047720][T28519] netlink: 'syz.6.7264': attribute type 21 has an invalid length. [ 1462.061723][T28519] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7264'. [ 1462.270512][T28533] netlink: 'syz.6.7269': attribute type 2 has an invalid length. [ 1462.292235][T28533] netlink: 'syz.6.7269': attribute type 8 has an invalid length. [ 1462.300034][T28533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7269'. [ 1462.630547][T28543] netlink: 'syz.2.7271': attribute type 7 has an invalid length. [ 1462.663969][T28543] netlink: 'syz.2.7271': attribute type 30 has an invalid length. [ 1462.703515][T28550] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7272'. [ 1462.720055][T28550] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1463.127521][T28561] netlink: 'syz.6.7275': attribute type 1 has an invalid length. [ 1463.162024][T28561] netlink: 'syz.6.7275': attribute type 1 has an invalid length. [ 1463.169809][T28561] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.7275'. [ 1463.455469][T28568] device syzkaller0 entered promiscuous mode [ 1463.687140][T28573] netlink: 'syz.5.7281': attribute type 58 has an invalid length. [ 1463.696913][T28573] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7281'. [ 1463.991194][T28582] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7286'. [ 1464.021931][T28582] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1464.250570][T28598] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1465.427186][T28630] __nla_validate_parse: 1 callbacks suppressed [ 1465.427206][T28630] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1466.680634][T28635] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1466.753385][T28635] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1467.116628][T28655] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7307'. [ 1467.185060][T28653] validate_nla: 3 callbacks suppressed [ 1467.185166][T28653] netlink: 'syz.2.7306': attribute type 7 has an invalid length. [ 1467.209917][T28655] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1467.252252][T28653] netlink: 'syz.2.7306': attribute type 30 has an invalid length. [ 1467.747986][T28669] erspan0: mtu less than device minimum [ 1468.005193][T28671] netlink: 'syz.0.7311': attribute type 9 has an invalid length. [ 1468.024153][T28671] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7311'. [ 1468.319959][T28681] device syzkaller0 entered promiscuous mode [ 1468.619033][T28694] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7317'. [ 1468.655633][T28694] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1470.955343][T28709] netlink: 'syz.1.7322': attribute type 7 has an invalid length. [ 1470.974040][T28709] netlink: 'syz.1.7322': attribute type 30 has an invalid length. [ 1470.987986][T28711] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7321'. [ 1470.992611][T28712] netlink: 'syz.0.7323': attribute type 10 has an invalid length. [ 1471.092002][T28711] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1471.720760][T28735] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7332'. [ 1471.730510][T28735] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1472.007539][T28747] netlink: 'syz.2.7336': attribute type 10 has an invalid length. [ 1472.048753][T28747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.101740][T28747] bond0: (slave team0): Enslaving as an active interface with an up link [ 1472.560017][T28760] netlink: 'syz.1.7340': attribute type 7 has an invalid length. [ 1472.611199][T28760] netlink: 'syz.1.7340': attribute type 30 has an invalid length. [ 1473.004766][T28776] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7346'. [ 1473.014484][T28776] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1473.083714][T28777] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1473.095995][T28777] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1473.530012][T28796] netlink: 'syz.1.7352': attribute type 3 has an invalid length. [ 1473.561160][T28796] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7352'. [ 1473.717618][T28803] netlink: 'syz.2.7354': attribute type 7 has an invalid length. [ 1473.736655][T28803] netlink: 'syz.2.7354': attribute type 30 has an invalid length. [ 1474.083495][T28817] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7361'. [ 1474.112095][T28817] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1474.633872][T28837] netlink: 'syz.6.7366': attribute type 58 has an invalid length. [ 1474.652191][T28837] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7366'. [ 1474.813410][T28842] netlink: 'syz.1.7369': attribute type 7 has an invalid length. [ 1474.851096][T28842] netlink: 'syz.1.7369': attribute type 30 has an invalid length. [ 1475.155123][T28858] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1475.217692][T28858] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1475.437562][T28873] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7377'. [ 1475.474231][T28873] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1475.516394][T28880] netlink: 'syz.5.7380': attribute type 3 has an invalid length. [ 1475.570335][T28880] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7380'. [ 1475.966487][T28894] netlink: 'syz.5.7384': attribute type 10 has an invalid length. [ 1476.107406][T28900] device sit0 left promiscuous mode [ 1476.258275][T28892] device sit0 entered promiscuous mode [ 1476.553019][T28916] __nla_validate_parse: 1 callbacks suppressed [ 1476.553037][T28916] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1476.570176][T28916] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1477.483456][T28949] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.7400'. [ 1477.729219][T28958] FAULT_INJECTION: forcing a failure. [ 1477.729219][T28958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.761565][T28956] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.7404'. [ 1477.771171][T28956] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1477.786199][T28958] CPU: 1 PID: 28958 Comm: syz.1.7403 Not tainted syzkaller #0 [ 1477.793707][T28958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1477.803790][T28958] Call Trace: [ 1477.807096][T28958] [ 1477.810054][T28958] dump_stack_lvl+0x188/0x24e [ 1477.814767][T28958] ? show_regs_print_info+0x12/0x12 [ 1477.820035][T28958] ? load_image+0x410/0x410 [ 1477.824570][T28958] ? __lock_acquire+0x7ea0/0x7ea0 [ 1477.829678][T28958] should_fail_ex+0x390/0x4c0 [ 1477.834397][T28958] _copy_from_user+0x2c/0x170 [ 1477.839107][T28958] __sys_bpf+0x2ea/0x780 [ 1477.843390][T28958] ? bpf_link_show_fdinfo+0x380/0x380 [ 1477.848862][T28958] ? lock_chain_count+0x20/0x20 [ 1477.853757][T28958] __x64_sys_bpf+0x78/0x90 [ 1477.858213][T28958] do_syscall_64+0x4c/0xa0 [ 1477.862668][T28958] ? clear_bhb_loop+0x60/0xb0 [ 1477.867383][T28958] ? clear_bhb_loop+0x60/0xb0 [ 1477.872094][T28958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1477.878028][T28958] RIP: 0033:0x7f4266d9f559 [ 1477.882490][T28958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.902303][T28958] RSP: 002b:00007f4267d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1477.910761][T28958] RAX: ffffffffffffffda RBX: 00007f4267025fa0 RCX: 00007f4266d9f559 [ 1477.918773][T28958] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1477.926783][T28958] RBP: 00007f4267d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.934800][T28958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.942823][T28958] R13: 00007f4267026038 R14: 00007f4267025fa0 R15: 00007ffdc633d728 [ 1477.950841][T28958] [ 1478.260450][T28973] erspan0: mtu less than device minimum [ 1478.671278][T28979] validate_nla: 5 callbacks suppressed [ 1478.671322][T28979] netlink: 'syz.6.7412': attribute type 7 has an invalid length. [ 1478.710226][T28979] netlink: 'syz.6.7412': attribute type 30 has an invalid length. [ 1479.294571][T29000] netlink: 'syz.6.7418': attribute type 10 has an invalid length. [ 1479.636410][T29008] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7423'. [ 1479.693294][T29008] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1480.009841][T29012] netlink: 15039 bytes leftover after parsing attributes in process `syz.5.7422'. [ 1480.099958][T29027] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7425'. [ 1480.238301][T29027] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1481.436670][T29039] netlink: 'syz.0.7430': attribute type 11 has an invalid length. [ 1481.473107][T29039] netlink: 'syz.0.7430': attribute type 12 has an invalid length. [ 1481.501998][T29039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1482.027051][T29058] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7439'. [ 1482.066814][T29058] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1482.326736][T29066] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.7442'. [ 1482.426416][T29066] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1483.264771][T29088] netlink: 'syz.2.7449': attribute type 58 has an invalid length. [ 1483.311896][T29088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7449'. [ 1483.741786][T29094] netlink: 'syz.2.7451': attribute type 21 has an invalid length. [ 1483.805719][T29099] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.7453'. [ 1483.873613][T29099] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1484.306437][T29104] device sit0 entered promiscuous mode [ 1484.374992][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.381455][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.404103][T29117] netlink: 'syz.5.7459': attribute type 10 has an invalid length. [ 1485.048598][T29137] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7466'. [ 1485.842084][T29156] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7470'. [ 1485.906841][T29156] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1486.018549][T29159] FAULT_INJECTION: forcing a failure. [ 1486.018549][T29159] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.038597][T29159] CPU: 1 PID: 29159 Comm: syz.5.7473 Not tainted syzkaller #0 [ 1486.046103][T29159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1486.056182][T29159] Call Trace: [ 1486.059497][T29159] [ 1486.062456][T29159] dump_stack_lvl+0x188/0x24e [ 1486.067173][T29159] ? show_regs_print_info+0x12/0x12 [ 1486.072420][T29159] ? load_image+0x410/0x410 [ 1486.076962][T29159] ? __lock_acquire+0x7ea0/0x7ea0 [ 1486.082064][T29159] should_fail_ex+0x390/0x4c0 [ 1486.086793][T29159] should_failslab+0x5/0x20 [ 1486.091337][T29159] slab_pre_alloc_hook+0x59/0x300 [ 1486.096391][T29159] ? bpf_test_init+0x9f/0x140 [ 1486.101094][T29159] __kmem_cache_alloc_node+0x4f/0x270 [ 1486.106519][T29159] ? bpf_test_init+0x9f/0x140 [ 1486.111209][T29159] __kmalloc+0xa3/0x240 [ 1486.115379][T29159] bpf_test_init+0x9f/0x140 [ 1486.119896][T29159] bpf_prog_test_run_xdp+0x488/0xf80 [ 1486.125239][T29159] ? __lock_acquire+0x7ea0/0x7ea0 [ 1486.130290][T29159] ? dev_put+0x80/0x80 [ 1486.134382][T29159] ? dev_put+0x80/0x80 [ 1486.138463][T29159] bpf_prog_test_run+0x31c/0x390 [ 1486.143426][T29159] __sys_bpf+0x62b/0x780 [ 1486.147686][T29159] ? bpf_link_show_fdinfo+0x380/0x380 [ 1486.153111][T29159] ? lock_chain_count+0x20/0x20 [ 1486.158004][T29159] __x64_sys_bpf+0x78/0x90 [ 1486.162432][T29159] do_syscall_64+0x4c/0xa0 [ 1486.166861][T29159] ? clear_bhb_loop+0x60/0xb0 [ 1486.171553][T29159] ? clear_bhb_loop+0x60/0xb0 [ 1486.176249][T29159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.182192][T29159] RIP: 0033:0x7f743ff9f559 [ 1486.186619][T29159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.206250][T29159] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1486.214701][T29159] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1486.222682][T29159] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1486.230669][T29159] RBP: 00007f7440db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.238656][T29159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.246657][T29159] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1486.254691][T29159] [ 1486.476880][T29163] netlink: 'syz.6.7475': attribute type 10 has an invalid length. [ 1486.558228][T29163] bridge0: port 3(syz_tun) entered disabled state [ 1486.601352][T29163] bridge0: port 3(syz_tun) entered disabled state [ 1486.621723][T29163] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1486.706206][T29178] erspan0: mtu less than device minimum [ 1487.140408][T29191] netlink: 'syz.0.7486': attribute type 10 has an invalid length. [ 1487.323130][T29202] tun0: tun_chr_ioctl cmd 21731 [ 1487.423116][T29205] netlink: 'syz.1.7491': attribute type 21 has an invalid length. [ 1488.664731][T29234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7502'. [ 1488.695127][T29234] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7502'. [ 1488.817250][T29244] netlink: 'syz.0.7504': attribute type 10 has an invalid length. [ 1489.089136][T29244] device veth0_vlan left promiscuous mode [ 1489.209968][T29244] device veth0_vlan entered promiscuous mode [ 1489.279629][T29244] team0: Device veth0_vlan failed to register rx_handler [ 1490.058604][T29268] netlink: 'syz.6.7511': attribute type 21 has an invalid length. [ 1490.376472][T29280] device sit0 entered promiscuous mode [ 1491.253886][T29299] netlink: 'syz.5.7526': attribute type 58 has an invalid length. [ 1491.272104][T29299] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1491.993992][T29317] netlink: 'syz.2.7533': attribute type 5 has an invalid length. [ 1492.186554][T29325] netlink: 'syz.0.7536': attribute type 4 has an invalid length. [ 1492.256320][T29325] netlink: 'syz.0.7536': attribute type 7 has an invalid length. [ 1492.292024][T29325] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.7536'. [ 1492.721055][T29335] netlink: 'syz.2.7540': attribute type 10 has an invalid length. [ 1492.849844][T29335] team0: Port device netdevsim0 removed [ 1493.833478][T29346] netlink: 'syz.5.7544': attribute type 7 has an invalid length. [ 1493.933393][T29346] netlink: 'syz.5.7544': attribute type 30 has an invalid length. [ 1495.153997][T29391] netlink: 'syz.2.7560': attribute type 10 has an invalid length. [ 1495.175424][T29391] device veth1_macvtap left promiscuous mode [ 1495.372601][T29392] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1495.392074][T29392] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1495.509006][T29395] netlink: 'syz.6.7561': attribute type 10 has an invalid length. [ 1495.728951][T29395] device veth0_vlan left promiscuous mode [ 1495.786250][T29395] device veth0_vlan entered promiscuous mode [ 1495.864284][T29395] team0: Device veth0_vlan failed to register rx_handler [ 1496.701971][T23934] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.165352][ T4282] Bluetooth: hci4: unexpected subevent 0x0a length: 11 < 30 [ 1497.943490][T29456] netlink: 'syz.1.7581': attribute type 10 has an invalid length. [ 1498.694373][T29466] netlink: 'syz.5.7585': attribute type 10 has an invalid length. [ 1500.476763][T29515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.512369][T29515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.660297][T29515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.686696][T29515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.087689][T29548] netlink: 'syz.0.7615': attribute type 12 has an invalid length. [ 1502.115169][T29548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1502.188447][T29560] netlink: 'syz.2.7619': attribute type 10 has an invalid length. [ 1502.507303][T29569] netlink: 'syz.0.7623': attribute type 7 has an invalid length. [ 1502.549691][T29569] netlink: 'syz.0.7623': attribute type 30 has an invalid length. [ 1503.182367][T29577] device syzkaller0 entered promiscuous mode [ 1504.391637][T29610] netlink: 'syz.0.7635': attribute type 27 has an invalid length. [ 1504.410277][T29610] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1504.745931][T29615] FAULT_INJECTION: forcing a failure. [ 1504.745931][T29615] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.789298][T29615] CPU: 0 PID: 29615 Comm: syz.0.7637 Not tainted syzkaller #0 [ 1504.796922][T29615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1504.807012][T29615] Call Trace: [ 1504.810320][T29615] [ 1504.813279][T29615] dump_stack_lvl+0x188/0x24e [ 1504.817989][T29615] ? show_regs_print_info+0x12/0x12 [ 1504.823229][T29615] ? load_image+0x410/0x410 [ 1504.827790][T29615] ? __might_sleep+0xd0/0xd0 [ 1504.832420][T29615] ? __lock_acquire+0x7ea0/0x7ea0 [ 1504.837496][T29615] should_fail_ex+0x390/0x4c0 [ 1504.842213][T29615] should_failslab+0x5/0x20 [ 1504.846748][T29615] slab_pre_alloc_hook+0x59/0x300 [ 1504.851838][T29615] ? __lock_acquire+0x7ea0/0x7ea0 [ 1504.856906][T29615] ? kvmalloc_node+0x6c/0x180 [ 1504.861611][T29615] __kmem_cache_alloc_node+0x4f/0x270 [ 1504.867020][T29615] ? schedule_delayed_monitor_work+0x160/0x160 [ 1504.873217][T29615] ? kvmalloc_node+0x6c/0x180 [ 1504.877916][T29615] __kmalloc_node+0xa2/0x240 [ 1504.882542][T29615] kvmalloc_node+0x6c/0x180 [ 1504.887072][T29615] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1504.892485][T29615] ? 0xffffffffa0005040 [ 1504.896678][T29615] ? text_poke_copy+0x7b/0x90 [ 1504.901395][T29615] ? 0xffffffffa0005040 [ 1504.905603][T29615] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1504.911557][T29615] ? xdp_convert_md_to_buff+0x330/0x330 [ 1504.917178][T29615] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1504.923474][T29615] ? bpf_test_init+0x119/0x140 [ 1504.928287][T29615] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1504.933795][T29615] bpf_prog_test_run_xdp+0x757/0xf80 [ 1504.939119][T29615] ? __lock_acquire+0x7ea0/0x7ea0 [ 1504.944197][T29615] ? dev_put+0x80/0x80 [ 1504.948325][T29615] ? dev_put+0x80/0x80 [ 1504.952440][T29615] bpf_prog_test_run+0x31c/0x390 [ 1504.957436][T29615] __sys_bpf+0x62b/0x780 [ 1504.961728][T29615] ? bpf_link_show_fdinfo+0x380/0x380 [ 1504.967170][T29615] ? lock_chain_count+0x20/0x20 [ 1504.972075][T29615] __x64_sys_bpf+0x78/0x90 [ 1504.976538][T29615] do_syscall_64+0x4c/0xa0 [ 1504.980987][T29615] ? clear_bhb_loop+0x60/0xb0 [ 1504.985703][T29615] ? clear_bhb_loop+0x60/0xb0 [ 1504.990418][T29615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1504.996348][T29615] RIP: 0033:0x7f59d759f559 [ 1505.000787][T29615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.020420][T29615] RSP: 002b:00007f59d852b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1505.028852][T29615] RAX: ffffffffffffffda RBX: 00007f59d7825fa0 RCX: 00007f59d759f559 [ 1505.036835][T29615] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1505.044814][T29615] RBP: 00007f59d852b090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.052807][T29615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.060784][T29615] R13: 00007f59d7826038 R14: 00007f59d7825fa0 R15: 00007ffe16f2bc18 [ 1505.068778][T29615] [ 1506.575743][T29602] netlink: 'syz.1.7632': attribute type 21 has an invalid length. [ 1506.583690][T29602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7632'. [ 1506.620704][T29613] netlink: 'syz.5.7636': attribute type 7 has an invalid length. [ 1506.642454][T29613] netlink: 'syz.5.7636': attribute type 30 has an invalid length. [ 1506.721128][T29621] netlink: 'syz.1.7639': attribute type 10 has an invalid length. [ 1506.735346][T29621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7639'. [ 1506.751513][T29621] bridge0: port 3(syz_tun) entered disabled state [ 1506.760884][T29621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.769344][T29621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.890804][T29621] bridge0: port 3(syz_tun) entered blocking state [ 1506.898195][T29621] bridge0: port 3(syz_tun) entered forwarding state [ 1506.905683][T29633] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7641'. [ 1506.911019][T29621] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.924837][T29621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.925859][T29633] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1506.939260][T29621] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.953011][T29621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.004260][T29621] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1507.019601][T29620] netlink: 'syz.1.7639': attribute type 10 has an invalid length. [ 1507.034567][T29620] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7639'. [ 1507.049444][T29620] bridge0: port 3(syz_tun) entered disabled state [ 1507.058972][T29620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.068074][T29620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.148629][T29630] netlink: 'syz.5.7643': attribute type 10 has an invalid length. [ 1507.558479][T29649] FAULT_INJECTION: forcing a failure. [ 1507.558479][T29649] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.632913][T29649] CPU: 1 PID: 29649 Comm: syz.1.7646 Not tainted syzkaller #0 [ 1507.640446][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1507.650526][T29649] Call Trace: [ 1507.653823][T29649] [ 1507.656775][T29649] dump_stack_lvl+0x188/0x24e [ 1507.661515][T29649] ? show_regs_print_info+0x12/0x12 [ 1507.666742][T29649] ? load_image+0x410/0x410 [ 1507.671283][T29649] ? __might_sleep+0xd0/0xd0 [ 1507.675908][T29649] ? __lock_acquire+0x7ea0/0x7ea0 [ 1507.680969][T29649] should_fail_ex+0x390/0x4c0 [ 1507.685685][T29649] should_failslab+0x5/0x20 [ 1507.690215][T29649] slab_pre_alloc_hook+0x59/0x300 [ 1507.695281][T29649] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1507.701054][T29649] __kmem_cache_alloc_node+0x4f/0x270 [ 1507.706466][T29649] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1507.712217][T29649] __kmalloc+0xa3/0x240 [ 1507.716384][T29649] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1507.721949][T29649] ? tomoyo_domain+0xd2/0x120 [ 1507.726659][T29649] ? tomoyo_path_number_perm+0x205/0x650 [ 1507.732298][T29649] tomoyo_path_number_perm+0x22f/0x650 [ 1507.737764][T29649] ? __lock_acquire+0x7ea0/0x7ea0 [ 1507.742799][T29649] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1507.748270][T29649] ? hrtimer_interrupt+0x557/0x980 [ 1507.753420][T29649] ? __fget_files+0x28/0x460 [ 1507.758034][T29649] security_file_ioctl+0x6c/0xa0 [ 1507.762987][T29649] __se_sys_ioctl+0x48/0x170 [ 1507.767612][T29649] do_syscall_64+0x4c/0xa0 [ 1507.772044][T29649] ? clear_bhb_loop+0x60/0xb0 [ 1507.776737][T29649] ? clear_bhb_loop+0x60/0xb0 [ 1507.781428][T29649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1507.787339][T29649] RIP: 0033:0x7f4266d9f559 [ 1507.791788][T29649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.811419][T29649] RSP: 002b:00007f4267d23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.819860][T29649] RAX: ffffffffffffffda RBX: 00007f4267025fa0 RCX: 00007f4266d9f559 [ 1507.827839][T29649] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000005 [ 1507.835822][T29649] RBP: 00007f4267d23090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.843804][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.851785][T29649] R13: 00007f4267026038 R14: 00007f4267025fa0 R15: 00007ffdc633d728 [ 1507.859777][T29649] [ 1508.061078][T29649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1508.468187][T29674] netlink: 'syz.5.7653': attribute type 7 has an invalid length. [ 1508.483858][T29674] netlink: 'syz.5.7653': attribute type 30 has an invalid length. [ 1509.629593][T29693] erspan0: mtu less than device minimum [ 1510.620578][T29710] netlink: 'syz.6.7667': attribute type 7 has an invalid length. [ 1510.644470][T29710] netlink: 'syz.6.7667': attribute type 30 has an invalid length. [ 1511.004599][T29716] netlink: 'syz.6.7670': attribute type 27 has an invalid length. [ 1511.030604][T29716] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7670'. [ 1514.706641][T29752] netlink: 'syz.5.7680': attribute type 7 has an invalid length. [ 1514.733660][T29752] netlink: 'syz.5.7680': attribute type 30 has an invalid length. [ 1514.916260][T29765] netlink: 'syz.1.7686': attribute type 27 has an invalid length. [ 1514.948059][T29765] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1515.337491][T29767] can: request_module (can-proto-0) failed. [ 1516.258770][T29781] device syzkaller0 entered promiscuous mode [ 1516.570336][T29799] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7695'. [ 1518.868386][T29804] netlink: 'syz.5.7697': attribute type 7 has an invalid length. [ 1518.876346][T29804] netlink: 'syz.5.7697': attribute type 30 has an invalid length. [ 1518.884655][T29805] netlink: 'syz.0.7696': attribute type 7 has an invalid length. [ 1518.911860][T29805] netlink: 'syz.0.7696': attribute type 30 has an invalid length. [ 1519.090447][T29818] netlink: 'syz.1.7701': attribute type 10 has an invalid length. [ 1519.326738][T29830] netlink: 'syz.0.7707': attribute type 58 has an invalid length. [ 1519.370554][T29830] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7707'. [ 1519.739286][T29843] netlink: 'syz.5.7711': attribute type 7 has an invalid length. [ 1519.795684][T29843] netlink: 'syz.5.7711': attribute type 30 has an invalid length. [ 1520.672175][T29862] FAULT_INJECTION: forcing a failure. [ 1520.672175][T29862] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.702937][T29862] CPU: 0 PID: 29862 Comm: syz.5.7716 Not tainted syzkaller #0 [ 1520.710474][T29862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1520.720563][T29862] Call Trace: [ 1520.723864][T29862] [ 1520.726819][T29862] dump_stack_lvl+0x188/0x24e [ 1520.731548][T29862] ? show_regs_print_info+0x12/0x12 [ 1520.736781][T29862] ? load_image+0x410/0x410 [ 1520.741329][T29862] ? __might_sleep+0xd0/0xd0 [ 1520.745956][T29862] ? __lock_acquire+0x7ea0/0x7ea0 [ 1520.751037][T29862] should_fail_ex+0x390/0x4c0 [ 1520.755773][T29862] should_failslab+0x5/0x20 [ 1520.760312][T29862] slab_pre_alloc_hook+0x59/0x300 [ 1520.765388][T29862] ? kvmalloc_node+0x6c/0x180 [ 1520.770101][T29862] __kmem_cache_alloc_node+0x4f/0x270 [ 1520.775524][T29862] ? kvmalloc_node+0x6c/0x180 [ 1520.780242][T29862] __kmalloc_node+0xa2/0x240 [ 1520.784888][T29862] kvmalloc_node+0x6c/0x180 [ 1520.789433][T29862] bpf_test_run_xdp_live+0x206/0x1a90 [ 1520.794853][T29862] ? 0xffffffffa0005040 [ 1520.799044][T29862] ? text_poke_copy+0x7b/0x90 [ 1520.803768][T29862] ? 0xffffffffa0005040 [ 1520.807991][T29862] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1520.813936][T29862] ? xdp_convert_md_to_buff+0x330/0x330 [ 1520.819524][T29862] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1520.825790][T29862] ? bpf_test_init+0x119/0x140 [ 1520.830571][T29862] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1520.836053][T29862] bpf_prog_test_run_xdp+0x757/0xf80 [ 1520.841376][T29862] ? __lock_acquire+0x7ea0/0x7ea0 [ 1520.846439][T29862] ? dev_put+0x80/0x80 [ 1520.850539][T29862] ? dev_put+0x80/0x80 [ 1520.854623][T29862] bpf_prog_test_run+0x31c/0x390 [ 1520.859580][T29862] __sys_bpf+0x62b/0x780 [ 1520.863844][T29862] ? bpf_link_show_fdinfo+0x380/0x380 [ 1520.869242][T29862] ? lock_chain_count+0x20/0x20 [ 1520.874120][T29862] __x64_sys_bpf+0x78/0x90 [ 1520.878552][T29862] do_syscall_64+0x4c/0xa0 [ 1520.882984][T29862] ? clear_bhb_loop+0x60/0xb0 [ 1520.887672][T29862] ? clear_bhb_loop+0x60/0xb0 [ 1520.892366][T29862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1520.898281][T29862] RIP: 0033:0x7f743ff9f559 [ 1520.902725][T29862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.922342][T29862] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1520.930766][T29862] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1520.938749][T29862] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1520.946728][T29862] RBP: 00007f7440db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.954715][T29862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.962698][T29862] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1520.970702][T29862] [ 1521.732323][T29887] netlink: 'syz.1.7724': attribute type 10 has an invalid length. [ 1521.882397][T29891] netlink: 'syz.2.7726': attribute type 7 has an invalid length. [ 1521.890490][T29891] netlink: 'syz.2.7726': attribute type 30 has an invalid length. [ 1522.210574][T29900] FAULT_INJECTION: forcing a failure. [ 1522.210574][T29900] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.264827][T29900] CPU: 0 PID: 29900 Comm: syz.5.7731 Not tainted syzkaller #0 [ 1522.272357][T29900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1522.282432][T29900] Call Trace: [ 1522.285732][T29900] [ 1522.288684][T29900] dump_stack_lvl+0x188/0x24e [ 1522.293401][T29900] ? show_regs_print_info+0x12/0x12 [ 1522.298629][T29900] ? load_image+0x410/0x410 [ 1522.303170][T29900] ? __might_sleep+0xd0/0xd0 [ 1522.307785][T29900] ? __lock_acquire+0x7ea0/0x7ea0 [ 1522.312857][T29900] should_fail_ex+0x390/0x4c0 [ 1522.317578][T29900] should_failslab+0x5/0x20 [ 1522.322131][T29900] slab_pre_alloc_hook+0x59/0x300 [ 1522.327219][T29900] ? tomoyo_encode+0x28a/0x550 [ 1522.332023][T29900] __kmem_cache_alloc_node+0x4f/0x270 [ 1522.337437][T29900] ? tomoyo_encode+0x28a/0x550 [ 1522.342239][T29900] __kmalloc+0xa3/0x240 [ 1522.346432][T29900] tomoyo_encode+0x28a/0x550 [ 1522.351090][T29900] tomoyo_realpath_from_path+0x578/0x5c0 [ 1522.356771][T29900] ? tomoyo_domain+0xd2/0x120 [ 1522.361473][T29900] ? tomoyo_path_number_perm+0x205/0x650 [ 1522.367122][T29900] tomoyo_path_number_perm+0x22f/0x650 [ 1522.372593][T29900] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1522.378066][T29900] ? irqentry_enter+0x33/0x50 [ 1522.382783][T29900] ? __fget_files+0x28/0x460 [ 1522.387408][T29900] security_file_ioctl+0x6c/0xa0 [ 1522.392363][T29900] __se_sys_ioctl+0x48/0x170 [ 1522.396977][T29900] do_syscall_64+0x4c/0xa0 [ 1522.401399][T29900] ? clear_bhb_loop+0x60/0xb0 [ 1522.406094][T29900] ? clear_bhb_loop+0x60/0xb0 [ 1522.410786][T29900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1522.416706][T29900] RIP: 0033:0x7f743ff9f559 [ 1522.421146][T29900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.440788][T29900] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.449216][T29900] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1522.457191][T29900] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000005 [ 1522.465167][T29900] RBP: 00007f7440db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.473146][T29900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.481122][T29900] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1522.489130][T29900] [ 1522.607636][T29900] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1523.254477][T29927] erspan0: mtu less than device minimum [ 1524.128817][T29942] netlink: 'syz.2.7743': attribute type 7 has an invalid length. [ 1524.162274][T29942] netlink: 'syz.2.7743': attribute type 30 has an invalid length. [ 1525.328110][T29978] netlink: 'syz.2.7754': attribute type 7 has an invalid length. [ 1525.365772][T29978] netlink: 'syz.2.7754': attribute type 30 has an invalid length. [ 1525.391602][T29982] netlink: 'syz.5.7756': attribute type 7 has an invalid length. [ 1525.452070][T29982] netlink: 'syz.5.7756': attribute type 30 has an invalid length. [ 1528.335420][T29993] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1528.388642][T29989] rxe_eth0 speed is unknown, defaulting to 1000 [ 1528.866413][T30009] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7765'. [ 1529.100780][T30027] netlink: 'syz.6.7770': attribute type 10 has an invalid length. [ 1529.159689][T30024] netlink: 'syz.5.7771': attribute type 7 has an invalid length. [ 1529.200750][T30024] netlink: 'syz.5.7771': attribute type 30 has an invalid length. [ 1529.520228][T30046] netlink: 'syz.6.7778': attribute type 58 has an invalid length. [ 1529.555036][T30046] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7778'. [ 1529.878563][T30058] netlink: 'syz.2.7783': attribute type 29 has an invalid length. [ 1529.926142][T30058] netlink: 'syz.2.7783': attribute type 29 has an invalid length. [ 1530.448368][T30073] validate_nla: 2 callbacks suppressed [ 1530.448387][T30073] netlink: 'syz.6.7787': attribute type 7 has an invalid length. [ 1530.490760][T30073] netlink: 'syz.6.7787': attribute type 30 has an invalid length. [ 1531.770659][T30105] netlink: 'syz.2.7798': attribute type 10 has an invalid length. [ 1532.688600][T30112] rxe_eth0 speed is unknown, defaulting to 1000 [ 1532.936396][T30132] netlink: 'syz.2.7804': attribute type 7 has an invalid length. [ 1532.953882][T30132] netlink: 'syz.2.7804': attribute type 30 has an invalid length. [ 1534.091256][T30155] erspan0: mtu less than device minimum [ 1534.652718][T30171] netlink: 'syz.2.7819': attribute type 7 has an invalid length. [ 1534.691589][T30171] netlink: 'syz.2.7819': attribute type 30 has an invalid length. [ 1535.665613][T30202] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.7827'. [ 1535.967138][T30210] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1539.297333][T30251] netlink: 'syz.1.7842': attribute type 5 has an invalid length. [ 1539.315570][T30252] netlink: 'syz.5.7843': attribute type 10 has an invalid length. [ 1539.815947][T30263] netlink: 'syz.6.7846': attribute type 7 has an invalid length. [ 1539.876093][T30263] netlink: 'syz.6.7846': attribute type 30 has an invalid length. [ 1540.060676][T30271] netlink: 'syz.2.7848': attribute type 58 has an invalid length. [ 1540.077274][T30271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7848'. [ 1542.925734][T30312] netlink: 'syz.1.7860': attribute type 7 has an invalid length. [ 1542.967836][T30312] netlink: 'syz.1.7860': attribute type 30 has an invalid length. [ 1543.143475][T30318] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1545.243052][T30369] netlink: 'syz.0.7874': attribute type 7 has an invalid length. [ 1545.328003][T30369] netlink: 'syz.0.7874': attribute type 30 has an invalid length. [ 1545.836564][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.843018][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.499139][T30379] FAULT_INJECTION: forcing a failure. [ 1546.499139][T30379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1546.523396][T30379] CPU: 1 PID: 30379 Comm: syz.2.7879 Not tainted syzkaller #0 [ 1546.530921][T30379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1546.541015][T30379] Call Trace: [ 1546.544327][T30379] [ 1546.547292][T30379] dump_stack_lvl+0x188/0x24e [ 1546.552017][T30379] ? show_regs_print_info+0x12/0x12 [ 1546.557255][T30379] ? load_image+0x410/0x410 [ 1546.561794][T30379] ? __lock_acquire+0x7ea0/0x7ea0 [ 1546.566901][T30379] ? is_dynamic_key+0x260/0x260 [ 1546.571809][T30379] should_fail_ex+0x390/0x4c0 [ 1546.576531][T30379] prepare_alloc_pages+0x1e1/0x5b0 [ 1546.581695][T30379] __alloc_pages+0x130/0x4f0 [ 1546.586327][T30379] ? zone_statistics+0x170/0x170 [ 1546.591300][T30379] ? lockdep_hardirqs_on+0x94/0x140 [ 1546.596532][T30379] __folio_alloc+0xe/0x30 [ 1546.600880][T30379] vma_alloc_folio+0x499/0x900 [ 1546.605666][T30379] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 1546.611526][T30379] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 1546.617360][T30379] ? shmem_replace_folio+0xdc0/0xdc0 [ 1546.622680][T30379] ? xas_load+0x119/0x140 [ 1546.627042][T30379] ? __filemap_get_folio+0x10f/0xde0 [ 1546.632356][T30379] ? __filemap_get_folio+0xb43/0xde0 [ 1546.637664][T30379] ? __filemap_get_folio+0x10f/0xde0 [ 1546.642973][T30379] ? page_cache_prev_miss+0x380/0x380 [ 1546.648421][T30379] shmem_get_folio_gfp+0x1439/0x35e0 [ 1546.653752][T30379] shmem_fallocate+0x8c1/0xfc0 [ 1546.658557][T30379] ? shmem_mmap+0x170/0x170 [ 1546.663084][T30379] ? rcu_read_lock_any_held+0xb0/0x130 [ 1546.668565][T30379] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 1546.673883][T30379] vfs_fallocate+0x57b/0x6f0 [ 1546.678503][T30379] do_vfs_ioctl+0x19ab/0x1d40 [ 1546.683211][T30379] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1546.688869][T30379] ? tomoyo_path_number_perm+0x205/0x650 [ 1546.694526][T30379] ? __lock_acquire+0x7ea0/0x7ea0 [ 1546.699577][T30379] ? slab_free_freelist_hook+0x133/0x1b0 [ 1546.705258][T30379] ? tomoyo_path_number_perm+0x205/0x650 [ 1546.710923][T30379] ? tomoyo_path_number_perm+0x5a4/0x650 [ 1546.716592][T30379] ? tomoyo_path_number_perm+0x205/0x650 [ 1546.722247][T30379] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1546.727760][T30379] ? __fget_files+0x28/0x460 [ 1546.732380][T30379] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1546.737356][T30379] ? security_file_ioctl+0x7c/0xa0 [ 1546.742497][T30379] __se_sys_ioctl+0x83/0x170 [ 1546.747112][T30379] do_syscall_64+0x4c/0xa0 [ 1546.751550][T30379] ? clear_bhb_loop+0x60/0xb0 [ 1546.756249][T30379] ? clear_bhb_loop+0x60/0xb0 [ 1546.760951][T30379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1546.766876][T30379] RIP: 0033:0x7fd90059f559 [ 1546.771321][T30379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.790947][T30379] RSP: 002b:00007fd901547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.799412][T30379] RAX: ffffffffffffffda RBX: 00007fd900825fa0 RCX: 00007fd90059f559 [ 1546.807431][T30379] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000005 [ 1546.815517][T30379] RBP: 00007fd901547090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.823505][T30379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.831506][T30379] R13: 00007fd900826038 R14: 00007fd900825fa0 R15: 00007ffd92ad6368 [ 1546.839529][T30379] [ 1547.266000][T30394] netlink: 'syz.0.7894': attribute type 7 has an invalid length. [ 1547.306916][T30394] netlink: 'syz.0.7894': attribute type 30 has an invalid length. [ 1549.150972][T30431] netlink: 'syz.1.7897': attribute type 7 has an invalid length. [ 1549.164468][T30431] netlink: 'syz.1.7897': attribute type 30 has an invalid length. [ 1549.363875][T30436] netlink: 'syz.5.7899': attribute type 58 has an invalid length. [ 1549.413463][T30436] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7899'. [ 1549.963159][T30457] netlink: 'syz.5.7908': attribute type 10 has an invalid length. [ 1551.681330][T30494] netlink: 'syz.6.7919': attribute type 29 has an invalid length. [ 1551.711002][T30494] netlink: 'syz.6.7919': attribute type 29 has an invalid length. [ 1551.734686][T30499] netlink: 'syz.6.7919': attribute type 29 has an invalid length. [ 1551.747154][T30494] netlink: 'syz.6.7919': attribute type 29 has an invalid length. [ 1551.755842][T30494] netlink: 'syz.6.7919': attribute type 29 has an invalid length. [ 1552.068353][T30506] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7924'. [ 1552.198597][T30509] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.7923'. [ 1552.732282][T30526] erspan0: mtu less than device minimum [ 1553.045583][T30540] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.7932'. [ 1553.516941][T30554] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1554.361399][T30563] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1555.478906][T30589] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7949'. [ 1556.000915][T30605] netlink: 'syz.2.7956': attribute type 10 has an invalid length. [ 1556.667201][T30627] netlink: 'syz.1.7964': attribute type 58 has an invalid length. [ 1556.685874][T30627] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7964'. [ 1557.487612][T30644] netlink: 'syz.0.7970': attribute type 7 has an invalid length. [ 1557.506233][T30644] netlink: 'syz.0.7970': attribute type 30 has an invalid length. [ 1557.518518][T30647] netlink: 'syz.1.7968': attribute type 21 has an invalid length. [ 1557.530352][T30647] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7968'. [ 1557.954943][T30660] netlink: 'syz.1.7974': attribute type 10 has an invalid length. [ 1560.475377][T30741] erspan0: mtu less than device minimum [ 1561.881470][T30759] netlink: 'syz.2.8002': attribute type 4 has an invalid length. [ 1561.912394][T30759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8002'. [ 1563.835569][T30806] device syzkaller0 entered promiscuous mode [ 1563.873309][T28859] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1564.739880][T30823] netlink: 'syz.2.8020': attribute type 58 has an invalid length. [ 1564.800164][T30823] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1565.259996][T30836] netlink: 'syz.1.8025': attribute type 7 has an invalid length. [ 1565.283970][T30836] netlink: 'syz.1.8025': attribute type 30 has an invalid length. [ 1565.471499][T30844] netlink: 'syz.2.8028': attribute type 21 has an invalid length. [ 1565.480021][T30844] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8028'. [ 1567.351085][T30863] netlink: 'syz.1.8036': attribute type 3 has an invalid length. [ 1567.373873][T30863] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8036'. [ 1567.790437][T30874] netlink: 'syz.1.8040': attribute type 7 has an invalid length. [ 1567.832125][T30874] netlink: 'syz.1.8040': attribute type 30 has an invalid length. [ 1568.709515][T30911] erspan0: mtu less than device minimum [ 1568.856173][T30919] netlink: 'syz.2.8054': attribute type 7 has an invalid length. [ 1568.864480][T30919] netlink: 'syz.2.8054': attribute type 30 has an invalid length. [ 1570.795802][T30961] device syzkaller0 entered promiscuous mode [ 1570.834674][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1572.141085][T30982] FAULT_INJECTION: forcing a failure. [ 1572.141085][T30982] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.160173][T30985] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8079'. [ 1572.170817][T30982] CPU: 0 PID: 30982 Comm: syz.2.8078 Not tainted syzkaller #0 [ 1572.178348][T30982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1572.188429][T30982] Call Trace: [ 1572.191731][T30982] [ 1572.194687][T30982] dump_stack_lvl+0x188/0x24e [ 1572.199480][T30982] ? show_regs_print_info+0x12/0x12 [ 1572.204710][T30982] ? load_image+0x410/0x410 [ 1572.209359][T30982] ? __lock_acquire+0x7ea0/0x7ea0 [ 1572.214433][T30982] should_fail_ex+0x390/0x4c0 [ 1572.219161][T30982] should_failslab+0x5/0x20 [ 1572.223696][T30982] slab_pre_alloc_hook+0x59/0x300 [ 1572.228758][T30982] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1572.234341][T30982] __kmem_cache_alloc_node+0x4f/0x270 [ 1572.239746][T30982] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 1572.245417][T30982] __kmalloc+0xa3/0x240 [ 1572.249609][T30982] bpf_prog_test_run_skb+0x23e/0x18e0 [ 1572.255014][T30982] ? __fget_files+0x28/0x460 [ 1572.259642][T30982] ? __fget_files+0x3fc/0x460 [ 1572.264374][T30982] ? cpu_online+0xa0/0xa0 [ 1572.265726][T30985] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8079'. [ 1572.268737][T30982] bpf_prog_test_run+0x31c/0x390 [ 1572.282622][T30982] __sys_bpf+0x62b/0x780 [ 1572.286915][T30982] ? bpf_link_show_fdinfo+0x380/0x380 [ 1572.292341][T30982] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1572.298527][T30982] __x64_sys_bpf+0x78/0x90 [ 1572.302956][T30982] do_syscall_64+0x4c/0xa0 [ 1572.307382][T30982] ? clear_bhb_loop+0x60/0xb0 [ 1572.312070][T30982] ? clear_bhb_loop+0x60/0xb0 [ 1572.316762][T30982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1572.322678][T30982] RIP: 0033:0x7fd90059f559 [ 1572.327109][T30982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.346736][T30982] RSP: 002b:00007fd901547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1572.355168][T30982] RAX: ffffffffffffffda RBX: 00007fd900825fa0 RCX: 00007fd90059f559 [ 1572.363182][T30982] RDX: 0000000000000028 RSI: 0000200000000f00 RDI: 000000000000000a [ 1572.371177][T30982] RBP: 00007fd901547090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.379170][T30982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.387152][T30982] R13: 00007fd900826038 R14: 00007fd900825fa0 R15: 00007ffd92ad6368 [ 1572.395160][T30982] [ 1574.109457][T31032] FAULT_INJECTION: forcing a failure. [ 1574.109457][T31032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.128351][T31032] CPU: 0 PID: 31032 Comm: syz.2.8097 Not tainted syzkaller #0 [ 1574.135877][T31032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1574.145970][T31032] Call Trace: [ 1574.149282][T31032] [ 1574.152250][T31032] dump_stack_lvl+0x188/0x24e [ 1574.156991][T31032] ? show_regs_print_info+0x12/0x12 [ 1574.162234][T31032] ? load_image+0x410/0x410 [ 1574.166791][T31032] ? __lock_acquire+0x7ea0/0x7ea0 [ 1574.171874][T31032] should_fail_ex+0x390/0x4c0 [ 1574.176615][T31032] _copy_from_user+0x2c/0x170 [ 1574.181338][T31032] __sys_bpf+0x2ea/0x780 [ 1574.185627][T31032] ? bpf_link_show_fdinfo+0x380/0x380 [ 1574.191056][T31032] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1574.197270][T31032] __x64_sys_bpf+0x78/0x90 [ 1574.201743][T31032] do_syscall_64+0x4c/0xa0 [ 1574.206200][T31032] ? clear_bhb_loop+0x60/0xb0 [ 1574.211025][T31032] ? clear_bhb_loop+0x60/0xb0 [ 1574.215743][T31032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.221692][T31032] RIP: 0033:0x7fd90059f559 [ 1574.226137][T31032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.245771][T31032] RSP: 002b:00007fd901547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1574.254298][T31032] RAX: ffffffffffffffda RBX: 00007fd900825fa0 RCX: 00007fd90059f559 [ 1574.262288][T31032] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1574.270281][T31032] RBP: 00007fd901547090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.278271][T31032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.286264][T31032] R13: 00007fd900826038 R14: 00007fd900825fa0 R15: 00007ffd92ad6368 [ 1574.294270][T31032] [ 1574.658119][T31042] netlink: 'syz.1.8102': attribute type 10 has an invalid length. [ 1575.090964][T31059] netlink: 'syz.1.8108': attribute type 21 has an invalid length. [ 1575.135501][T31059] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8108'. [ 1575.745290][T31077] netlink: 'syz.0.8114': attribute type 7 has an invalid length. [ 1575.782393][T31077] netlink: 'syz.0.8114': attribute type 30 has an invalid length. [ 1577.096345][T31105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1577.145589][T31105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1577.526751][T31118] netlink: 'syz.2.8130': attribute type 7 has an invalid length. [ 1577.579371][T31118] netlink: 'syz.2.8130': attribute type 30 has an invalid length. [ 1577.646227][T31127] erspan0: mtu less than device minimum [ 1579.003907][T31158] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.8143'. [ 1579.057351][T31158] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1579.067555][T31171] netlink: 'syz.2.8146': attribute type 7 has an invalid length. [ 1579.105271][T31171] netlink: 'syz.2.8146': attribute type 30 has an invalid length. [ 1579.881863][T31193] netlink: 'syz.6.8154': attribute type 10 has an invalid length. [ 1579.945857][T31193] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1580.317638][T31212] netlink: 'syz.1.8160': attribute type 7 has an invalid length. [ 1580.368755][T31212] netlink: 'syz.1.8160': attribute type 30 has an invalid length. [ 1580.534595][T31218] netlink: 'syz.5.8162': attribute type 10 has an invalid length. [ 1581.193408][T31235] netlink: 'syz.5.8168': attribute type 10 has an invalid length. [ 1581.320355][T31235] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1581.379467][T31248] FAULT_INJECTION: forcing a failure. [ 1581.379467][T31248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.422833][T31248] CPU: 1 PID: 31248 Comm: syz.0.8167 Not tainted syzkaller #0 [ 1581.430351][T31248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1581.440436][T31248] Call Trace: [ 1581.443770][T31248] [ 1581.446737][T31248] dump_stack_lvl+0x188/0x24e [ 1581.451448][T31248] ? show_regs_print_info+0x12/0x12 [ 1581.456689][T31248] ? load_image+0x410/0x410 [ 1581.461249][T31248] ? __lock_acquire+0x7ea0/0x7ea0 [ 1581.466325][T31248] should_fail_ex+0x390/0x4c0 [ 1581.471058][T31248] _copy_from_user+0x2c/0x170 [ 1581.475773][T31248] bpf_prog_test_run_skb+0x263/0x18e0 [ 1581.481194][T31248] ? __fget_files+0x28/0x460 [ 1581.485835][T31248] ? __fget_files+0x3fc/0x460 [ 1581.490558][T31248] ? cpu_online+0xa0/0xa0 [ 1581.494926][T31248] bpf_prog_test_run+0x31c/0x390 [ 1581.499907][T31248] __sys_bpf+0x62b/0x780 [ 1581.504185][T31248] ? bpf_link_show_fdinfo+0x380/0x380 [ 1581.509614][T31248] ? lock_chain_count+0x20/0x20 [ 1581.514511][T31248] __x64_sys_bpf+0x78/0x90 [ 1581.518982][T31248] do_syscall_64+0x4c/0xa0 [ 1581.523462][T31248] ? clear_bhb_loop+0x60/0xb0 [ 1581.528170][T31248] ? clear_bhb_loop+0x60/0xb0 [ 1581.532906][T31248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.538949][T31248] RIP: 0033:0x7f59d759f559 [ 1581.543398][T31248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.563046][T31248] RSP: 002b:00007f59d84c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1581.571488][T31248] RAX: ffffffffffffffda RBX: 00007f59d7826270 RCX: 00007f59d759f559 [ 1581.579485][T31248] RDX: 0000000000000028 RSI: 0000200000000f00 RDI: 000000000000000a [ 1581.587489][T31248] RBP: 00007f59d84c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.595492][T31248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.603488][T31248] R13: 00007f59d7826308 R14: 00007f59d7826270 R15: 00007ffe16f2bc18 [ 1581.611509][T31248] [ 1581.979579][T31258] netlink: 'syz.5.8174': attribute type 7 has an invalid length. [ 1582.006119][T31258] netlink: 'syz.5.8174': attribute type 30 has an invalid length. [ 1582.025349][T31262] netlink: 'syz.1.8176': attribute type 1 has an invalid length. [ 1582.051926][T31262] netlink: 'syz.1.8176': attribute type 2 has an invalid length. [ 1582.069993][T31262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1582.176116][T31265] netlink: 'syz.1.8176': attribute type 21 has an invalid length. [ 1582.216977][T31265] IPv6: NLM_F_CREATE should be specified when creating new route [ 1582.228668][T31265] IPv6: Can't replace route, no match found [ 1582.258035][T31271] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1582.440533][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.502514][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.528481][T31285] FAULT_INJECTION: forcing a failure. [ 1582.528481][T31285] name failslab, interval 1, probability 0, space 0, times 0 [ 1582.547935][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.559793][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.569626][T31285] CPU: 0 PID: 31285 Comm: syz.5.8184 Not tainted syzkaller #0 [ 1582.577130][T31285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1582.587219][T31285] Call Trace: [ 1582.590561][T31285] [ 1582.593538][T31285] dump_stack_lvl+0x188/0x24e [ 1582.598263][T31285] ? show_regs_print_info+0x12/0x12 [ 1582.603500][T31285] ? load_image+0x410/0x410 [ 1582.608051][T31285] ? __lock_acquire+0x7ea0/0x7ea0 [ 1582.613135][T31285] should_fail_ex+0x390/0x4c0 [ 1582.617885][T31285] should_failslab+0x5/0x20 [ 1582.622428][T31285] slab_pre_alloc_hook+0x59/0x300 [ 1582.627502][T31285] ? bpf_test_init+0x9f/0x140 [ 1582.632216][T31285] __kmem_cache_alloc_node+0x4f/0x270 [ 1582.637639][T31285] ? bpf_test_init+0x9f/0x140 [ 1582.642355][T31285] __kmalloc+0xa3/0x240 [ 1582.646644][T31285] bpf_test_init+0x9f/0x140 [ 1582.651199][T31285] bpf_prog_test_run_xdp+0x488/0xf80 [ 1582.656601][T31285] ? __lock_acquire+0x7ea0/0x7ea0 [ 1582.661698][T31285] ? dev_put+0x80/0x80 [ 1582.665837][T31285] ? dev_put+0x80/0x80 [ 1582.669963][T31285] bpf_prog_test_run+0x31c/0x390 [ 1582.674996][T31285] __sys_bpf+0x62b/0x780 [ 1582.679291][T31285] ? bpf_link_show_fdinfo+0x380/0x380 [ 1582.684742][T31285] ? lock_chain_count+0x20/0x20 [ 1582.689653][T31285] __x64_sys_bpf+0x78/0x90 [ 1582.694112][T31285] do_syscall_64+0x4c/0xa0 [ 1582.698588][T31285] ? clear_bhb_loop+0x60/0xb0 [ 1582.703349][T31285] ? clear_bhb_loop+0x60/0xb0 [ 1582.708077][T31285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1582.714124][T31285] RIP: 0033:0x7f743ff9f559 [ 1582.718584][T31285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.738228][T31285] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1582.746691][T31285] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1582.754727][T31285] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1582.762748][T31285] RBP: 00007f7440db3090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.770768][T31285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.778785][T31285] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1582.786819][T31285] [ 1582.822263][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.842361][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.862396][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1582.912511][T31277] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.8181'. [ 1585.119841][T31360] validate_nla: 7 callbacks suppressed [ 1585.119938][T31360] netlink: 'syz.2.8212': attribute type 10 has an invalid length. [ 1602.318380][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1602.329146][ T4287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1602.339023][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1602.346908][ T4287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1602.355147][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1602.363143][ T4287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1602.372851][ T4287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1602.380096][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1602.389178][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1602.396718][ T4287] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1602.404588][ T4287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1602.412122][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1602.539855][ T4287] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1602.549107][ T4287] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1602.562509][ T4287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1602.579933][ T4287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1602.592524][ T4287] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1602.599980][ T4287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1603.769660][ T4287] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1603.785816][ T4287] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1603.793861][ T4287] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1603.804058][ T4282] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1603.812654][ T4282] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1603.820075][ T4282] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1603.936619][ T4287] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1603.955395][ T4287] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1603.963348][ T4287] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1603.971507][ T4287] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1603.979898][ T4287] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1603.988516][ T4287] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1604.451994][T31395] Bluetooth: hci5: command 0x0409 tx timeout [ 1604.458899][T31395] Bluetooth: hci6: command 0x0409 tx timeout [ 1604.692051][T31395] Bluetooth: hci7: command 0x0409 tx timeout [ 1605.892087][T31395] Bluetooth: hci8: command 0x0409 tx timeout [ 1606.052018][T31395] Bluetooth: hci9: command 0x0409 tx timeout [ 1606.531991][T31395] Bluetooth: hci6: command 0x041b tx timeout [ 1606.538168][T31395] Bluetooth: hci5: command 0x041b tx timeout [ 1606.772006][T31395] Bluetooth: hci7: command 0x041b tx timeout [ 1607.971904][T31395] Bluetooth: hci8: command 0x041b tx timeout [ 1608.131903][T31395] Bluetooth: hci9: command 0x041b tx timeout [ 1608.612045][T31395] Bluetooth: hci5: command 0x040f tx timeout [ 1608.618138][T31395] Bluetooth: hci6: command 0x040f tx timeout [ 1608.851919][T31395] Bluetooth: hci7: command 0x040f tx timeout [ 1610.051871][T31395] Bluetooth: hci8: command 0x040f tx timeout [ 1610.211937][T31395] Bluetooth: hci9: command 0x040f tx timeout [ 1610.692033][T31395] Bluetooth: hci6: command 0x0419 tx timeout [ 1610.698125][T31395] Bluetooth: hci5: command 0x0419 tx timeout [ 1610.931945][T31395] Bluetooth: hci7: command 0x0419 tx timeout [ 1612.131874][T31395] Bluetooth: hci8: command 0x0419 tx timeout [ 1612.291976][T31395] Bluetooth: hci9: command 0x0419 tx timeout [ 1612.372861][ T1676] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2673 jiffies s: 249925 root: 0x1/. [ 1612.398473][ T1676] rcu: blocking rcu_node structures (internal RCU debug): [ 1612.406962][ T1676] Sending NMI from CPU 1 to CPUs 0: [ 1612.412474][ C0] NMI backtrace for cpu 0 [ 1612.412484][ C0] CPU: 0 PID: 31367 Comm: syz.5.8214 Not tainted syzkaller #0 [ 1612.412501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1612.412511][ C0] RIP: 0010:ct_nmi_exit+0x51/0x1c0 [ 1612.412542][ C0] Code: ea b4 8a e8 91 0b 00 00 65 48 8b 05 51 60 c8 75 48 85 c0 0f 8e 19 01 00 00 e8 5b 0a 00 00 41 89 c6 83 f8 08 0f 83 2a 01 00 00 <4a> 8b 04 f5 80 d9 88 8c f7 80 c8 57 03 00 04 00 00 00 0f 84 f7 00 [ 1612.412558][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00000093 [ 1612.412573][ C0] RAX: 0000000000000000 RBX: ffff8880b8c357c0 RCX: 8fd22a8885bb2500 [ 1612.412586][ C0] RDX: 0000000000000100 RSI: ffffffff8aff71c0 RDI: ffffffff8aff7180 [ 1612.412599][ C0] RBP: ffffc900000079e8 R08: ffffffff8f22dfef R09: 1ffffffff1e45bfd [ 1612.412612][ C0] R10: dffffc0000000000 R11: fffffbfff1e45bfe R12: dffffc0000000000 [ 1612.412626][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1612.412637][ C0] FS: 00007f7440db36c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1612.412653][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1612.412665][ C0] CR2: 00007f3d7234cff8 CR3: 000000002167e000 CR4: 00000000003506f0 [ 1612.412681][ C0] DR0: 0000200000000300 DR1: 00002000000009c0 DR2: 0000200000000300 [ 1612.412693][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1612.412705][ C0] Call Trace: [ 1612.412710][ C0] [ 1612.412717][ C0] ct_irq_exit_irqson+0xaf/0x170 [ 1612.412738][ C0] ? ct_irq_enter_irqson+0x170/0x170 [ 1612.412759][ C0] ? __irq_exit_rcu+0x147/0x230 [ 1612.412775][ C0] ? irq_exit_rcu+0x20/0x20 [ 1612.412794][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 1612.412812][ C0] trace_irq_enable_rcuidle+0xd8/0x140 [ 1612.412839][ C0] trace_hardirqs_on+0x24/0x40 [ 1612.412872][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1612.412889][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1612.412908][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 68 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1612.412922][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1612.412935][ C0] RAX: 8fd22a8885bb2500 RBX: 1ffff92000000f64 RCX: 8fd22a8885bb2500 [ 1612.412947][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0 [ 1612.412959][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8c357cb R09: 1ffff11017186af9 [ 1612.412971][ C0] R10: dffffc0000000000 R11: ffffed1017186afa R12: 0000000000000246 [ 1612.412983][ C0] R13: dffffc0000000000 R14: ffff8880b8c3bb00 R15: 0000000000000001 [ 1612.413005][ C0] ? kmem_cache_free+0xe0/0x2a0 [ 1612.413026][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1612.413050][ C0] __rcu_read_unlock+0x78/0xd0 [ 1612.413066][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1612.413179][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1612.413201][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1612.413229][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1612.413248][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1612.413271][ C0] ? hw_scan_work+0xf00/0xf00 [ 1612.413293][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1612.413317][ C0] hrtimer_run_softirq+0x173/0x290 [ 1612.413346][ C0] handle_softirqs+0x291/0x910 [ 1612.413365][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1612.413388][ C0] ? do_softirq+0x210/0x210 [ 1612.413402][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1612.413423][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1612.413472][ C0] __irq_exit_rcu+0x13b/0x230 [ 1612.413488][ C0] ? irq_exit_rcu+0x20/0x20 [ 1612.413511][ C0] irq_exit_rcu+0x5/0x20 [ 1612.413525][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1612.413545][ C0] [ 1612.413550][ C0] [ 1612.413555][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1612.413572][ C0] RIP: 0010:finish_task_switch+0x267/0x8e0 [ 1612.413616][ C0] Code: e1 08 85 c0 0f 84 38 01 00 00 48 85 db 0f 85 57 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 63 89 eb 08 e8 be 2b 2f 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1612.413630][ C0] RSP: 0018:ffffc90003a26be0 EFLAGS: 00000282 [ 1612.413643][ C0] RAX: 8fd22a8885bb2500 RBX: 0000000000000000 RCX: 8fd22a8885bb2500 [ 1612.413655][ C0] RDX: dffffc0000000000 RSI: ffffffff8aac19a0 RDI: ffffffff8aff71e0 [ 1612.413667][ C0] RBP: ffffc90003a26c30 R08: ffff8880b8c357cb R09: 1ffff11017186af9 [ 1612.413679][ C0] R10: dffffc0000000000 R11: ffffed1017186afa R12: ffff888029960000 [ 1612.413692][ C0] R13: 1ffff110171876f2 R14: dffffc0000000000 R15: ffff8880b8c3b790 [ 1612.413718][ C0] __schedule+0x1087/0x4030 [ 1612.413740][ C0] ? lock_chain_count+0x20/0x20 [ 1612.413768][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1612.413789][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1612.413815][ C0] preempt_schedule_irq+0xbb/0x160 [ 1612.413834][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1612.413854][ C0] ? rcu_is_watching+0x11/0xa0 [ 1612.413881][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1612.413907][ C0] irqentry_exit+0x63/0x70 [ 1612.413926][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1612.413942][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 1612.413981][ C0] Code: 48 8b 3d a0 9b a0 0d 48 89 de 5b e9 a7 91 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d b4 28 80 7e 65 8b 15 b5 28 80 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 1612.413994][ C0] RSP: 0018:ffffc90003a26f50 EFLAGS: 00000293 [ 1612.414008][ C0] RAX: ffffffff8139eca5 RBX: 0000000045878400 RCX: ffff888029960000 [ 1612.414020][ C0] RDX: 0000000080000000 RSI: 000000000000002e RDI: 0000000000000040 [ 1612.414031][ C0] RBP: ffff888045878400 R08: ffff8880b8c357cb R09: 1ffff11017186af9 [ 1612.414044][ C0] R10: dffffc0000000000 R11: ffffed1017186afa R12: 0000000000000000 [ 1612.414055][ C0] R13: dffffc0000000000 R14: 000000000000002e R15: ffff888045878400 [ 1612.414072][ C0] ? __phys_addr+0x95/0x170 [ 1612.414100][ C0] __phys_addr+0x95/0x170 [ 1612.414124][ C0] qlink_to_cache+0x5/0xb0 [ 1612.414142][ C0] qlist_free_all+0x3a/0xe0 [ 1612.414163][ C0] kasan_quarantine_reduce+0x144/0x160 [ 1612.414184][ C0] __kasan_slab_alloc+0x1e/0x80 [ 1612.414210][ C0] slab_post_alloc_hook+0x4b/0x490 [ 1612.414231][ C0] ? slab_pre_alloc_hook+0x59/0x300 [ 1612.414252][ C0] ? do_check_common+0x4111/0xc560 [ 1612.414273][ C0] __kmem_cache_alloc_node+0x19d/0x270 [ 1612.414296][ C0] ? do_check_common+0x4111/0xc560 [ 1612.414315][ C0] __kmalloc_node_track_caller+0xa0/0x240 [ 1612.414333][ C0] ? __phys_addr+0xb6/0x170 [ 1612.414357][ C0] krealloc+0x6a/0x100 [ 1612.414380][ C0] do_check_common+0x4111/0xc560 [ 1612.414431][ C0] ? push_insn+0x670/0x670 [ 1612.414448][ C0] ? check_func_arg_reg_off+0x280/0x280 [ 1612.414465][ C0] ? print_verifier_state+0x2060/0x2060 [ 1612.414483][ C0] ? do_check_subprogs+0x313/0x360 [ 1612.414505][ C0] bpf_check+0x3f04/0x11060 [ 1612.414542][ C0] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1612.414568][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1612.414602][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1612.414627][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1612.414655][ C0] ? migrate_enable+0x148/0x220 [ 1612.414676][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1612.414699][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1612.414723][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 1612.414746][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1612.414774][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1612.414799][ C0] ? verify_lock_unused+0x140/0x140 [ 1612.414828][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1612.414859][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1612.414881][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 1612.414902][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1612.414927][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 1612.414951][ C0] ? lock_chain_count+0x20/0x20 [ 1612.414977][ C0] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1612.414999][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1612.415019][ C0] ? ktime_get_with_offset+0xff/0x320 [ 1612.415040][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1612.415073][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1612.415093][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 1612.415112][ C0] ? __might_fault+0xc2/0x120 [ 1612.415131][ C0] ? memset+0x1e/0x40 [ 1612.415147][ C0] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1612.415171][ C0] bpf_prog_load+0x100e/0x1530 [ 1612.415201][ C0] ? map_freeze+0x390/0x390 [ 1612.415224][ C0] ? __might_fault+0xa6/0x120 [ 1612.415248][ C0] ? __might_fault+0xa6/0x120 [ 1612.415265][ C0] ? __might_fault+0xc2/0x120 [ 1612.415281][ C0] ? __might_fault+0xa6/0x120 [ 1612.415299][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 1612.415317][ C0] ? security_bpf+0x7a/0xa0 [ 1612.415334][ C0] __sys_bpf+0x5b8/0x780 [ 1612.415355][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1612.415436][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 1612.415468][ C0] ? lock_chain_count+0x20/0x20 [ 1612.415496][ C0] __x64_sys_bpf+0x78/0x90 [ 1612.415519][ C0] do_syscall_64+0x4c/0xa0 [ 1612.415534][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1612.415549][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1612.415567][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1612.415592][ C0] RIP: 0033:0x7f743ff9f559 [ 1612.415607][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.415621][ C0] RSP: 002b:00007f7440db3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1612.415637][ C0] RAX: ffffffffffffffda RBX: 00007f7440225fa0 RCX: 00007f743ff9f559 [ 1612.415649][ C0] RDX: 000000000000004c RSI: 0000200000000e00 RDI: 0000000000000005 [ 1612.415660][ C0] RBP: 00007f7440036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1612.415671][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.415681][ C0] R13: 00007f7440226038 R14: 00007f7440225fa0 R15: 00007ffeca0e6ab8 [ 1612.415702][ C0]